
$ rpki-client -vvf rpki-rsync.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/83B2DB747BED1AE01DD0B8AF08DFAE9BFF900917.mft
File: 83B2DB747BED1AE01DD0B8AF08DFAE9BFF900917.mft (raw, json)
Hash identifier: ojm9cbyg8lUnMey5TNvRh5CAS34UnvME2dBBs6OpDvk=
Subject key identifier: 12:4B:D2:E0:70:E8:29:58:C4:E0:76:FE:EB:72:58:A9:F1:33:71:41
Authority key identifier: 83:B2:DB:74:7B:ED:1A:E0:1D:D0:B8:AF:08:DF:AE:9B:FF:90:09:17
Certificate issuer: /CN=83B2DB747BED1AE01DD0B8AF08DFAE9BFF900917
Certificate serial: 4CE60B5A722B52D0567AA456EAC9C3E8F4FAF9D5
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/83B2DB747BED1AE01DD0B8AF08DFAE9BFF900917.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/83B2DB747BED1AE01DD0B8AF08DFAE9BFF900917.mft
Manifest number: 2B
Signing time: Tue 02 Jun 2026 18:17:03 +0000
Manifest this update: Tue 02 Jun 2026 18:12:03 +0000
Manifest next update: Wed 03 Jun 2026 19:56:03 +0000
Files and hashes: 1: 83B2DB747BED1AE01DD0B8AF08DFAE9BFF900917.crl (hash: QpVdSkudA4VCKC+YsN5JVexOWllQf1TlqyQ3tJk+Dcs=)
2: 3230322e34372e3136302e302f32342d3234203d3e20313532303736.roa (hash: 6EETEPKtzbYhkS8PCH/i18xxZFkGLUgPS/GSOlw9zjQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/83B2DB747BED1AE01DD0B8AF08DFAE9BFF900917.crl
rsync://rpki-rsync.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/83B2DB747BED1AE01DD0B8AF08DFAE9BFF900917.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/83B2DB747BED1AE01DD0B8AF08DFAE9BFF900917.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 10:27:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:e6:0b:5a:72:2b:52:d0:56:7a:a4:56:ea:c9:c3:e8:f4:fa:f9:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83B2DB747BED1AE01DD0B8AF08DFAE9BFF900917
Validity
Not Before: Jun 2 18:12:03 2026 GMT
Not After : Jun 3 19:56:03 2026 GMT
Subject: CN=124BD2E070E82958C4E076FEEB7258A9F1337141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:70:01:00:2f:33:6f:d4:e7:ab:21:13:90:28:
97:85:a0:c9:ab:b1:d6:73:89:1c:cf:19:7c:d5:e7:
3c:bd:51:ca:4d:03:f4:8d:a5:32:68:cf:59:b1:a0:
e4:50:88:f5:08:db:b4:1d:95:3e:95:b4:71:79:e4:
6c:aa:9e:e0:97:76:de:cf:4d:d6:54:f6:76:06:61:
ca:41:a1:38:d9:7e:30:b0:3c:36:37:1b:50:f2:25:
af:7b:77:54:86:e1:aa:40:0a:71:b5:51:ef:62:53:
b9:8f:63:29:f5:54:cd:18:41:3d:38:0a:18:39:03:
2f:95:12:44:28:45:5a:3e:77:9d:51:d2:2d:80:20:
c9:46:ed:82:f1:33:a4:2a:62:e2:88:e1:97:6e:98:
ca:12:da:42:9a:27:a1:27:7d:61:0e:db:71:5f:1e:
7f:c4:59:3d:60:aa:c0:86:c3:34:a3:36:ce:fa:62:
15:e9:46:12:08:e3:0c:ce:06:6c:ab:47:cb:64:94:
61:a2:5d:a1:68:4b:f3:43:5c:ad:5b:86:fa:48:75:
48:6d:20:56:c1:f7:ba:42:eb:34:4a:6d:ac:6b:87:
db:8e:ae:74:b3:15:b7:c4:56:9b:04:fc:f7:4d:9a:
7f:b2:1b:46:90:53:c4:1e:0b:c8:ea:35:7b:23:0c:
45:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:4B:D2:E0:70:E8:29:58:C4:E0:76:FE:EB:72:58:A9:F1:33:71:41
X509v3 Authority Key Identifier:
keyid:83:B2:DB:74:7B:ED:1A:E0:1D:D0:B8:AF:08:DF:AE:9B:FF:90:09:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/83B2DB747BED1AE01DD0B8AF08DFAE9BFF900917.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/83B2DB747BED1AE01DD0B8AF08DFAE9BFF900917.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/83B2DB747BED1AE01DD0B8AF08DFAE9BFF900917.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:75:f4:80:6b:b6:0e:58:97:21:bf:d1:47:c4:ce:77:a5:76:
40:e3:a3:18:d5:b5:ed:67:4e:fe:33:a6:bd:84:e7:0a:16:74:
a1:05:ca:de:0c:a1:58:41:5b:93:2f:1f:02:0c:37:e6:0a:48:
00:f2:9c:13:95:9d:28:2c:df:8a:0c:23:23:4e:20:c0:bc:3d:
2d:8b:27:7c:ac:9b:a6:64:b2:92:d1:43:27:e4:ec:2a:df:48:
9d:47:b7:83:0f:92:fe:92:1f:2f:00:6b:29:bd:25:ea:d7:c4:
90:47:df:71:41:ad:a2:08:2c:f8:b5:1e:a0:a0:4a:c3:0c:a2:
30:a6:10:37:97:ca:03:c6:12:98:7e:82:d1:16:4d:d2:01:ed:
4a:48:8d:43:67:86:b4:35:f4:f2:67:2a:f7:1f:a6:a2:7b:69:
3a:63:41:82:af:c6:99:b3:0a:8f:66:96:c3:91:61:b9:2a:a5:
ef:78:cf:41:28:e3:6c:ea:8e:50:55:42:14:cc:4a:94:71:64:
1f:6d:cd:4d:05:e5:01:87:ed:24:e9:c1:cd:24:ad:1b:ff:54:
0d:d3:21:50:01:42:2b:50:06:40:b1:75:63:be:3c:37:11:a7:
9f:da:2c:ab:dd:1d:4e:2d:ba:58:cb:26:62:42:74:45:96:82:
c8:e8:5d:1f
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUTOYLWnIrUtBWeqRW6snD6PT6+dUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODNCMkRCNzQ3QkVEMUFFMDFERDBCOEFGMDhERkFFOUJG
RjkwMDkxNzAeFw0yNjA2MDIxODEyMDNaFw0yNjA2MDMxOTU2MDNaMDMxMTAvBgNV
BAMTKDEyNEJEMkUwNzBFODI5NThDNEUwNzZGRUVCNzI1OEE5RjEzMzcxNDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYcAEALzNv1OerIROQKJeFoMmr
sdZziRzPGXzV5zy9UcpNA/SNpTJoz1mxoORQiPUI27QdlT6VtHF55GyqnuCXdt7P
TdZU9nYGYcpBoTjZfjCwPDY3G1DyJa97d1SG4apACnG1Ue9iU7mPYyn1VM0YQT04
Chg5Ay+VEkQoRVo+d51R0i2AIMlG7YLxM6QqYuKI4ZdumMoS2kKaJ6EnfWEO23Ff
Hn/EWT1gqsCGwzSjNs76YhXpRhII4wzOBmyrR8tklGGiXaFoS/NDXK1bhvpIdUht
IFbB97pC6zRKbaxrh9uOrnSzFbfEVpsE/PdNmn+yG0aQU8QeC8jqNXsjDEXpAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUEkvS4HDoKVjE4Hb+63JYqfEzcUEwHwYDVR0j
BBgwFoAUg7LbdHvtGuAd0LivCN+um/+QCRcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NDI4ODc2MmMtM2ZjNS00OWNjLTk0OWEtNTk0YjMzMWExM2ExLzAvODNCMkRCNzQ3
QkVEMUFFMDFERDBCOEFGMDhERkFFOUJGRjkwMDkxNy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS84M0IyREI3NDdCRUQxQUUwMUREMEI4QUYwOERGQUU5QkZGOTAw
OTE3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDI4ODc2MmMtM2ZjNS00OWNjLTk0
OWEtNTk0YjMzMWExM2ExLzAvODNCMkRCNzQ3QkVEMUFFMDFERDBCOEFGMDhERkFF
OUJGRjkwMDkxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHl19IBrtg5YlyG/0UfEzneldkDjoxjVte1n
Tv4zpr2E5woWdKEFyt4MoVhBW5MvHwIMN+YKSADynBOVnSgs34oMIyNOIMC8PS2L
J3ysm6ZkspLRQyfk7CrfSJ1Ht4MPkv6SHy8Aaym9JerXxJBH33FBraIILPi1HqCg
SsMMojCmEDeXygPGEph+gtEWTdIB7UpIjUNnhrQ19PJnKvcfpqJ7aTpjQYKvxpmz
Co9mlsORYbkqpe94z0Eo42zqjlBVQhTMSpRxZB9tzU0F5QGH7STpwc0krRv/VA3T
IVABQitQBkCxdWO+PDcRp5/aLKvdHU4tuljLJmJCdEWWgsjoXR8=
-----END CERTIFICATE-----
Generated at Wed Jun 3 03:39:57 2026 by rpki-client