
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/4202428F6F3C953C642F298719C5C35E169724A2.mft
File: 4202428F6F3C953C642F298719C5C35E169724A2.mft (raw, json)
Hash identifier: 1iu0bMsBJWwLykcIgTWWGPuHKhwXWF763YQ5FF+4h9E=
Subject key identifier: E5:18:0B:D7:F8:4C:BF:7B:96:9D:20:36:12:C3:F4:BE:D7:7E:5C:85
Authority key identifier: 42:02:42:8F:6F:3C:95:3C:64:2F:29:87:19:C5:C3:5E:16:97:24:A2
Certificate issuer: /CN=4202428F6F3C953C642F298719C5C35E169724A2
Certificate serial: 212469EB8EE052417F9FA717115DA9B93ABEF521
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4202428F6F3C953C642F298719C5C35E169724A2.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/4202428F6F3C953C642F298719C5C35E169724A2.mft
Manifest number: F6
Signing time: Mon 02 Nov 2026 11:16:58 +0000
Manifest this update: Mon 02 Nov 2026 11:11:58 +0000
Manifest next update: Tue 03 Nov 2026 14:51:58 +0000
Files and hashes: 1: 4202428F6F3C953C642F298719C5C35E169724A2.crl (hash: Mh2/9wasf0lCYBKP/1oXlRVGrYN0qrWHozkYxtueBZI=)
2: 3135372e36362e322e302f32332d3234203d3e20313532343430.roa (hash: p7JO88fvmBW+Y+ZP8rFGldK5BvqAlDmHyGZVg3MhVAY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/4202428F6F3C953C642F298719C5C35E169724A2.crl
rsync://rpki-rsync.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/4202428F6F3C953C642F298719C5C35E169724A2.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4202428F6F3C953C642F298719C5C35E169724A2.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 11:54:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:24:69:eb:8e:e0:52:41:7f:9f:a7:17:11:5d:a9:b9:3a:be:f5:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4202428F6F3C953C642F298719C5C35E169724A2
Validity
Not Before: Nov 2 11:11:58 2026 GMT
Not After : Nov 3 14:51:58 2026 GMT
Subject: CN=E5180BD7F84CBF7B969D203612C3F4BED77E5C85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:75:41:32:ef:2e:6f:74:8a:b7:37:ab:99:8f:
fe:96:5b:f5:38:5f:be:39:31:ea:11:19:5a:53:23:
cc:ca:b0:ec:e1:8a:ff:6f:3e:3a:d5:63:ed:07:59:
67:62:27:7a:73:09:1a:18:9c:7a:96:f5:97:3c:ce:
12:eb:cb:05:89:51:86:6f:e2:7a:1d:74:43:6e:33:
9f:a8:f1:1a:b0:8e:4d:35:7c:1f:da:5a:90:65:ed:
3d:d9:92:83:58:94:87:9a:12:a6:e8:81:68:74:c6:
a2:cb:6d:aa:f2:df:4b:6d:c1:ef:d3:e5:68:79:c0:
e7:06:7a:7c:f4:65:47:10:ac:bc:11:8e:28:9c:15:
74:3f:63:18:29:c4:4c:e1:66:f6:51:71:2e:77:4e:
40:7a:5c:b2:18:f4:bc:c6:8b:ff:30:91:18:47:4d:
56:ae:95:f2:30:6d:00:0c:bf:26:0e:a4:12:de:98:
fd:23:44:a9:bc:36:e4:62:9d:b8:58:ca:9c:d4:b6:
7e:81:96:f6:ae:50:a2:3f:7f:e3:c7:58:77:58:d0:
ad:7b:90:d2:01:e3:17:2a:c2:24:81:5a:58:08:79:
05:d1:54:ee:c9:0c:e8:ff:5e:73:4b:04:89:a1:4f:
9a:97:10:70:fd:49:07:eb:9a:8a:60:54:c8:06:22:
76:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:18:0B:D7:F8:4C:BF:7B:96:9D:20:36:12:C3:F4:BE:D7:7E:5C:85
X509v3 Authority Key Identifier:
keyid:42:02:42:8F:6F:3C:95:3C:64:2F:29:87:19:C5:C3:5E:16:97:24:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/4202428F6F3C953C642F298719C5C35E169724A2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4202428F6F3C953C642F298719C5C35E169724A2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/4202428F6F3C953C642F298719C5C35E169724A2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:be:0c:ac:55:2a:23:74:f5:9e:36:3d:bc:30:26:97:4c:13:
c0:2d:3a:86:c7:d2:f0:2e:8d:f4:53:3b:ac:d7:78:9c:0f:4e:
e1:38:9b:22:15:32:94:8c:90:03:00:1a:33:e5:0a:58:9e:8d:
fa:93:6b:1c:d2:4b:2d:00:8b:89:a3:bc:b8:d8:2c:30:fc:3a:
89:a7:4c:0e:d7:91:92:c8:72:34:d4:aa:3d:da:aa:16:3c:f9:
fc:54:5f:03:19:4e:39:50:8e:e2:d1:a8:7f:ae:3a:f0:6b:6b:
f4:4d:90:35:db:9f:7d:21:3b:25:4a:bb:9b:b5:6d:ad:04:7d:
f3:67:b9:3b:08:e4:cb:5e:e8:b3:68:e8:33:e9:0f:ce:9d:75:
17:28:b2:99:82:6d:d5:21:67:c3:a1:8b:a4:02:ee:0b:82:71:
09:10:a5:ba:e5:c9:d7:53:90:7b:bd:a9:8b:69:88:fe:1b:49:
ad:9a:82:0b:03:64:15:39:ca:da:85:96:2a:1c:2b:6c:89:47:
77:fa:a5:be:d8:2d:5a:1b:32:47:9e:91:97:7a:df:8d:03:81:
a6:69:45:9a:9f:50:30:40:59:16:fb:6f:87:4d:0f:0e:04:99:
7b:06:d4:14:be:cb:4f:64:9f:16:c3:30:5a:f1:48:bc:61:d1:
78:79:69:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 20:17:37 2026 by rpki-client