
$ rpki-client -vvf rpki-rsync.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/F493B4B7B6C0932ED4590BDF81329D0EAE5EEB68.mft
File: F493B4B7B6C0932ED4590BDF81329D0EAE5EEB68.mft (raw, json)
Hash identifier: VrSPBzLgywAgrvVt/Lrlt39QMJv1D+WFq59UpOtnHBA=
Subject key identifier: D7:C9:E2:93:FC:AE:DB:19:BF:FD:1E:C8:2C:46:43:B1:5E:1F:CA:8C
Authority key identifier: F4:93:B4:B7:B6:C0:93:2E:D4:59:0B:DF:81:32:9D:0E:AE:5E:EB:68
Certificate issuer: /CN=F493B4B7B6C0932ED4590BDF81329D0EAE5EEB68
Certificate serial: 38633496BB2F6DB6BF1D62C7886D8D1B57E9C81F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F493B4B7B6C0932ED4590BDF81329D0EAE5EEB68.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/F493B4B7B6C0932ED4590BDF81329D0EAE5EEB68.mft
Manifest number: 2B
Signing time: Wed 03 Jun 2026 00:45:45 +0000
Manifest this update: Wed 03 Jun 2026 00:40:45 +0000
Manifest next update: Thu 04 Jun 2026 02:38:45 +0000
Files and hashes: 1: 3130332e3130372e31382e302f32342d3234203d3e20313337323838.roa (hash: f3wJQDXGzu3D9hBo8GBwbAPITCCR387RhleY4wa8/xI=)
2: F493B4B7B6C0932ED4590BDF81329D0EAE5EEB68.crl (hash: WCXG72vG4+dUr+v/JMTL5G7dc/2Pd7qhpFZJb4ixDTM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/F493B4B7B6C0932ED4590BDF81329D0EAE5EEB68.crl
rsync://rpki-rsync.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/F493B4B7B6C0932ED4590BDF81329D0EAE5EEB68.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F493B4B7B6C0932ED4590BDF81329D0EAE5EEB68.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 04 Jun 2026 02:38:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:63:34:96:bb:2f:6d:b6:bf:1d:62:c7:88:6d:8d:1b:57:e9:c8:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F493B4B7B6C0932ED4590BDF81329D0EAE5EEB68
Validity
Not Before: Jun 3 00:40:45 2026 GMT
Not After : Jun 4 02:38:45 2026 GMT
Subject: CN=D7C9E293FCAEDB19BFFD1EC82C4643B15E1FCA8C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4e:9f:56:52:8e:5b:77:a9:13:57:52:1e:42:
6e:55:c2:00:49:c8:b1:d8:fd:e8:65:76:9d:2c:f8:
b6:7f:a9:c5:1e:73:cb:f9:f2:4c:f5:0f:0b:da:4e:
ec:27:a6:0b:b0:ca:71:e2:fc:8c:b6:1a:0c:91:46:
b7:30:a2:4e:f2:9a:01:8c:8f:18:3c:41:2d:33:da:
ec:61:d6:a1:b3:44:d0:3e:ea:3d:a5:5a:2d:e9:a8:
9d:ec:0e:cc:69:b8:72:de:00:eb:08:6d:a8:c1:b9:
73:37:b0:4e:a1:15:eb:b5:a4:e1:af:84:fa:79:09:
6e:8b:1f:16:40:64:35:1a:c1:4b:bd:28:a8:75:30:
7d:eb:ef:d6:a4:12:7c:d0:35:fd:00:ee:a5:7a:8d:
f7:36:6e:46:c4:95:66:74:aa:28:fc:74:51:ec:05:
1a:fa:6a:c9:9e:99:37:4d:fd:93:21:97:d3:d4:92:
aa:3d:3e:8e:cf:e4:7b:33:7d:94:90:6e:9c:b9:e6:
4f:f1:18:82:d9:90:4e:ab:d2:02:b8:04:58:2d:bc:
5c:ce:96:87:b2:38:ab:a0:43:96:ce:9a:0d:d8:0c:
e2:27:d4:08:c6:8e:da:a4:d4:53:3f:c3:75:3d:4f:
f6:ab:56:f3:a8:e2:72:94:62:74:5c:e4:1e:c8:a8:
0a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:C9:E2:93:FC:AE:DB:19:BF:FD:1E:C8:2C:46:43:B1:5E:1F:CA:8C
X509v3 Authority Key Identifier:
keyid:F4:93:B4:B7:B6:C0:93:2E:D4:59:0B:DF:81:32:9D:0E:AE:5E:EB:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/F493B4B7B6C0932ED4590BDF81329D0EAE5EEB68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F493B4B7B6C0932ED4590BDF81329D0EAE5EEB68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/F493B4B7B6C0932ED4590BDF81329D0EAE5EEB68.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:3c:a9:0a:d7:a5:b7:3d:b8:1c:b8:61:2e:3a:c4:ea:0e:06:
26:be:49:4d:99:57:b3:0d:ee:5d:33:b9:65:16:9c:69:89:6a:
83:92:b5:24:9f:ac:32:fb:b5:1b:48:89:42:3c:5a:49:c8:cc:
68:13:00:79:c1:f0:70:19:3f:43:5d:b7:3a:fc:19:0d:f0:ef:
ff:d8:16:18:e7:a9:cf:37:c9:29:9d:a1:30:96:c6:ab:4c:74:
6f:ad:fc:a7:60:9d:36:3d:3f:4c:51:f6:39:f0:26:56:94:88:
60:dd:fe:c5:10:e4:ef:d9:f8:99:db:47:0f:e1:78:c7:65:1e:
6c:32:b0:2f:80:8b:7f:6b:cc:9f:87:17:b0:16:96:67:72:8e:
d6:dc:6f:5c:d3:49:4d:26:a1:8b:5a:eb:0c:5a:a9:40:7b:f2:
dd:82:ef:85:b3:38:50:0d:e7:6f:6b:84:85:13:ac:f4:50:47:
47:44:74:d0:93:02:ce:12:db:8c:5e:a7:68:d8:71:fd:58:2e:
5a:b6:a4:ea:01:83:4a:2a:42:80:56:57:6e:68:b8:18:61:68:
b7:1b:af:52:e3:cc:4a:e1:c9:de:a0:8d:cd:23:54:a2:3c:f5:
77:9f:0f:78:d2:86:c8:15:3f:51:c2:64:e4:f6:b6:d8:67:66:
fd:cb:ce:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:26:22 2026 by rpki-client