
$ rpki-client -vvf rpki-rsync.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/4A18E5540FB9CFE07A95EDF89BAF7CE978E94258.mft
File: 4A18E5540FB9CFE07A95EDF89BAF7CE978E94258.mft (raw, json)
Hash identifier: Kd0W/D4B5T5FXDGKolxAwKjEr7Eql5P9ziQxWQMdo6g=
Subject key identifier: 58:84:33:3A:BB:CF:9C:52:EA:1C:E9:CC:AF:29:42:08:0C:A1:E8:9E
Authority key identifier: 4A:18:E5:54:0F:B9:CF:E0:7A:95:ED:F8:9B:AF:7C:E9:78:E9:42:58
Certificate issuer: /CN=4A18E5540FB9CFE07A95EDF89BAF7CE978E94258
Certificate serial: 772D9AB0700E99FD4BF98E84955B8D27B8C278C2
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A18E5540FB9CFE07A95EDF89BAF7CE978E94258.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/4A18E5540FB9CFE07A95EDF89BAF7CE978E94258.mft
Manifest number: 2B
Signing time: Tue 02 Jun 2026 19:43:55 +0000
Manifest this update: Tue 02 Jun 2026 19:38:55 +0000
Manifest next update: Wed 03 Jun 2026 23:38:55 +0000
Files and hashes: 1: 3130332e3230342e31352e302f32342d3234203d3e20313530393230.roa (hash: CHd91Km0nR+qP58cZt8MMTA3jronphrVjPNjJ4FduNs=)
2: 4A18E5540FB9CFE07A95EDF89BAF7CE978E94258.crl (hash: Kflbp3B+4QCgEYEjgwAvlOBsImiQvwzYHAAKghMeCdA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/4A18E5540FB9CFE07A95EDF89BAF7CE978E94258.crl
rsync://rpki-rsync.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/4A18E5540FB9CFE07A95EDF89BAF7CE978E94258.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A18E5540FB9CFE07A95EDF89BAF7CE978E94258.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 23:38:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:2d:9a:b0:70:0e:99:fd:4b:f9:8e:84:95:5b:8d:27:b8:c2:78:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4A18E5540FB9CFE07A95EDF89BAF7CE978E94258
Validity
Not Before: Jun 2 19:38:55 2026 GMT
Not After : Jun 3 23:38:55 2026 GMT
Subject: CN=5884333ABBCF9C52EA1CE9CCAF2942080CA1E89E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:82:31:9b:82:ec:28:47:68:a2:21:45:fc:65:
18:ca:ab:08:32:6c:28:c5:2c:96:73:6a:bb:67:3d:
3e:ab:78:7d:19:39:2b:50:5e:36:1e:7e:8c:99:78:
2f:3b:9c:a0:27:db:4d:4a:c4:67:ea:bc:83:19:00:
03:a7:5c:9e:04:b4:96:62:c3:d3:67:cb:37:e1:43:
24:a1:f2:03:3f:89:6f:3b:1d:42:b1:13:83:ae:67:
75:92:2c:e7:6e:1b:21:c5:45:de:78:81:8d:da:ca:
80:71:bd:07:86:71:af:4b:97:66:93:3e:eb:0a:3a:
15:6a:fc:b3:15:84:c1:35:a7:b1:eb:a3:b7:fd:bd:
66:10:de:90:9a:46:f7:74:23:c3:c4:03:00:b7:3b:
13:a5:a2:25:61:6e:cd:52:4d:f9:96:f4:47:3a:d7:
e6:2f:25:e7:ef:57:bd:25:44:7a:c4:73:34:23:2d:
4d:78:b3:70:40:ff:0b:73:ef:79:f0:27:7b:41:99:
df:36:87:0f:8c:f1:08:34:91:c0:a7:89:92:73:01:
32:14:3d:ea:e3:05:77:76:8e:4a:08:18:35:70:36:
bc:b1:83:27:82:37:2d:90:7d:34:8e:af:39:48:a9:
44:55:82:9e:d8:72:4a:d6:e8:95:1c:71:0d:ab:75:
95:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:84:33:3A:BB:CF:9C:52:EA:1C:E9:CC:AF:29:42:08:0C:A1:E8:9E
X509v3 Authority Key Identifier:
keyid:4A:18:E5:54:0F:B9:CF:E0:7A:95:ED:F8:9B:AF:7C:E9:78:E9:42:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/4A18E5540FB9CFE07A95EDF89BAF7CE978E94258.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A18E5540FB9CFE07A95EDF89BAF7CE978E94258.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/4A18E5540FB9CFE07A95EDF89BAF7CE978E94258.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:ce:10:56:84:56:55:7a:7c:86:fb:ed:13:01:15:c6:32:7c:
c6:90:dd:ed:e3:31:aa:8b:11:f2:38:8f:50:26:1b:d3:da:94:
fa:e1:3a:17:b1:a8:22:92:68:20:a7:62:bb:52:db:93:d2:36:
24:08:7f:57:d2:fc:15:6c:c9:03:a8:7b:b7:00:31:da:4d:3a:
38:84:eb:c1:26:35:27:28:fc:85:90:bf:22:99:32:50:6d:e8:
67:64:22:f0:4b:c2:e3:73:c7:93:4d:ca:7c:63:54:fd:8e:cd:
c8:bf:88:0d:2e:4d:ae:a6:a6:10:07:3c:56:d5:e6:f1:fa:05:
6d:c4:9c:30:35:e2:7d:bc:6c:61:25:90:78:0b:f7:8f:3e:f3:
4c:07:5b:fa:20:ef:1c:a0:64:7a:c0:07:83:4f:92:eb:79:30:
45:41:c1:97:97:05:a0:e1:35:87:48:c1:18:1c:45:d8:f8:84:
61:98:75:6a:4e:e3:c4:ac:13:f7:53:49:05:fd:4b:93:96:67:
ca:b5:0c:26:d0:d2:eb:e2:2f:c4:b2:84:4c:3a:7c:c9:7d:e9:
b0:4a:9a:0c:bf:de:8e:e2:a3:6b:aa:7e:f4:ff:88:4d:bb:46:
e2:0d:63:1b:b0:d3:39:f7:68:c7:78:a2:5c:77:c3:0f:2a:fd:
80:00:0c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:22:16 2026 by rpki-client