
$ rpki-client -vvf rpki-rsync.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/F4B592783A4D1278733E583FF474D505E715EAEC.mft
File: F4B592783A4D1278733E583FF474D505E715EAEC.mft (raw, json)
Hash identifier: gsC5mrGUtbDSLEfQuAeD1V2lXv4fkBd6M4ANzzO93/A=
Subject key identifier: 21:ED:EF:B8:87:2A:12:FD:D2:F4:71:C6:4D:87:CD:FF:05:63:AC:48
Authority key identifier: F4:B5:92:78:3A:4D:12:78:73:3E:58:3F:F4:74:D5:05:E7:15:EA:EC
Certificate issuer: /CN=F4B592783A4D1278733E583FF474D505E715EAEC
Certificate serial: 7E8B77E2D64869ECA806E1E61A825D683EB49373
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F4B592783A4D1278733E583FF474D505E715EAEC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/F4B592783A4D1278733E583FF474D505E715EAEC.mft
Manifest number: 2B
Signing time: Tue 02 Jun 2026 20:40:02 +0000
Manifest this update: Tue 02 Jun 2026 20:35:02 +0000
Manifest next update: Wed 03 Jun 2026 22:19:02 +0000
Files and hashes: 1: 3130332e3136372e3136382e302f32342d3234203d3e20313431393835.roa (hash: xKZvI7DoYttGR54Om2vm9eFapdM+/V55V6OhpEXUV68=)
2: 3130332e3136372e3136392e302f32342d3234203d3e20313431393835.roa (hash: RTESWs20NpXZjZyB8EzKQY+C0yZE4/dxGzmQFAgjBdw=)
3: F4B592783A4D1278733E583FF474D505E715EAEC.crl (hash: R5FRMWmwRYQrnaMOjnuXWdt9hkShoFm2Ph6f5SmqqvE=)
4: 3130332e3136372e3136382e302f32332d3233203d3e20313431393835.roa (hash: SvetT4fkB5VuEIEYdhmb+OWzFFcY03lt8k6wWYfq9nA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/F4B592783A4D1278733E583FF474D505E715EAEC.crl
rsync://rpki-rsync.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/F4B592783A4D1278733E583FF474D505E715EAEC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F4B592783A4D1278733E583FF474D505E715EAEC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 10:27:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:8b:77:e2:d6:48:69:ec:a8:06:e1:e6:1a:82:5d:68:3e:b4:93:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F4B592783A4D1278733E583FF474D505E715EAEC
Validity
Not Before: Jun 2 20:35:02 2026 GMT
Not After : Jun 3 22:19:02 2026 GMT
Subject: CN=21EDEFB8872A12FDD2F471C64D87CDFF0563AC48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:7d:f0:e3:23:5b:51:74:f2:53:0e:d8:69:8b:
8c:c7:73:6c:b9:53:de:c2:eb:f2:3d:c4:d9:72:91:
c6:cf:df:d6:55:25:84:97:47:c0:ba:1c:c3:9d:d5:
7a:fc:5b:31:a5:50:03:85:8a:7d:e7:a8:5c:2d:97:
10:af:05:d3:a1:b7:13:7c:be:d7:4c:99:6d:25:cb:
d8:e7:74:6c:2d:df:97:eb:6e:94:17:a0:3e:8e:de:
e4:ec:30:7a:90:b0:b2:89:b8:a1:b2:31:8b:e1:cb:
dc:86:3e:72:b0:bd:7e:89:39:0e:fc:54:f5:3d:d8:
73:9f:f7:96:fb:a4:d6:15:f3:9f:c0:94:c8:e4:45:
64:d6:15:a2:31:f5:b4:8e:c1:39:05:7f:1f:4b:6c:
5a:2d:70:92:87:b4:46:2c:9d:6e:89:3a:2e:03:62:
69:50:84:45:72:a3:fa:34:fa:6c:21:ca:df:88:1c:
6e:11:1f:c1:ea:04:a3:12:7c:5b:c9:ce:40:cd:6f:
df:e7:40:28:79:7e:b8:5f:d1:7b:b9:77:4a:f2:6f:
c3:ad:f1:44:47:85:92:a4:ee:4f:af:a1:2b:46:a6:
fd:2c:1c:91:af:43:4b:75:87:46:f0:13:1e:21:8a:
67:1a:1a:51:76:6e:f7:ba:79:ad:0d:48:32:bf:9d:
bd:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:ED:EF:B8:87:2A:12:FD:D2:F4:71:C6:4D:87:CD:FF:05:63:AC:48
X509v3 Authority Key Identifier:
keyid:F4:B5:92:78:3A:4D:12:78:73:3E:58:3F:F4:74:D5:05:E7:15:EA:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/F4B592783A4D1278733E583FF474D505E715EAEC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F4B592783A4D1278733E583FF474D505E715EAEC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/F4B592783A4D1278733E583FF474D505E715EAEC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:c0:de:a8:63:0c:16:c8:a3:6a:7f:15:14:66:25:d4:43:25:
53:4b:c6:59:da:cc:56:b2:41:84:e4:4a:36:85:ab:05:a3:9d:
97:fe:c5:2d:06:be:e7:7c:23:ec:5f:3a:0d:d0:58:b3:85:62:
6e:18:8a:15:6c:dd:14:41:95:f1:f1:ce:02:8a:7d:e9:19:41:
45:9a:1b:3d:50:54:61:ca:07:dc:b1:3a:13:c6:ce:e2:d8:ea:
df:1b:38:f1:e6:b7:1f:53:6a:ee:bc:9d:e2:6b:b5:cb:07:e9:
18:24:96:eb:f8:7c:ee:32:bd:4c:db:cb:10:cc:b1:81:47:91:
29:ae:3e:51:bd:fa:91:e4:75:f0:40:0e:f8:39:ff:e9:f2:fc:
1f:1a:0c:38:1f:3d:ef:f3:ba:42:83:f0:9e:18:f4:45:ed:12:
a5:73:93:d2:99:f5:71:e8:ea:8a:37:87:2c:65:2f:27:cd:fc:
03:d0:e3:ae:6c:ec:d4:24:5c:0f:e9:4b:d7:73:75:6d:d2:79:
9c:e6:81:2a:01:3d:f3:64:69:81:52:c4:c2:c7:33:1c:57:57:
16:0f:72:e2:ae:8d:4a:bb:f3:d4:ab:5a:28:70:2c:48:6e:3a:
ba:8c:9c:c5:d8:9c:00:89:94:29:cc:7b:48:f4:ed:9c:c7:35:
89:61:42:14
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUfot34tZIaeyoBuHmGoJdaD60k3MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjRCNTkyNzgzQTREMTI3ODczM0U1ODNGRjQ3NEQ1MDVF
NzE1RUFFQzAeFw0yNjA2MDIyMDM1MDJaFw0yNjA2MDMyMjE5MDJaMDMxMTAvBgNV
BAMTKDIxRURFRkI4ODcyQTEyRkREMkY0NzFDNjREODdDREZGMDU2M0FDNDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVffDjI1tRdPJTDthpi4zHc2y5
U97C6/I9xNlykcbP39ZVJYSXR8C6HMOd1Xr8WzGlUAOFin3nqFwtlxCvBdOhtxN8
vtdMmW0ly9jndGwt35frbpQXoD6O3uTsMHqQsLKJuKGyMYvhy9yGPnKwvX6JOQ78
VPU92HOf95b7pNYV85/AlMjkRWTWFaIx9bSOwTkFfx9LbFotcJKHtEYsnW6JOi4D
YmlQhEVyo/o0+mwhyt+IHG4RH8HqBKMSfFvJzkDNb9/nQCh5frhf0Xu5d0ryb8Ot
8URHhZKk7k+voStGpv0sHJGvQ0t1h0bwEx4himcaGlF2bve6ea0NSDK/nb3HAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUIe3vuIcqEv3S9HHGTYfN/wVjrEgwHwYDVR0j
BBgwFoAU9LWSeDpNEnhzPlg/9HTVBecV6uwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
N2Q0YjYxMmYtZjkyNC00ZWMyLWIxZjEtYTEzMDVkMjNkNTNhLzAvRjRCNTkyNzgz
QTREMTI3ODczM0U1ODNGRjQ3NEQ1MDVFNzE1RUFFQy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9GNEI1OTI3ODNBNEQxMjc4NzMzRTU4M0ZGNDc0RDUwNUU3MTVF
QUVDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2Q0YjYxMmYtZjkyNC00ZWMyLWIx
ZjEtYTEzMDVkMjNkNTNhLzAvRjRCNTkyNzgzQTREMTI3ODczM0U1ODNGRjQ3NEQ1
MDVFNzE1RUFFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBALbA3qhjDBbIo2p/FRRmJdRDJVNLxlnazFay
QYTkSjaFqwWjnZf+xS0Gvud8I+xfOg3QWLOFYm4YihVs3RRBlfHxzgKKfekZQUWa
Gz1QVGHKB9yxOhPGzuLY6t8bOPHmtx9Tau68neJrtcsH6Rgkluv4fO4yvUzbyxDM
sYFHkSmuPlG9+pHkdfBADvg5/+ny/B8aDDgfPe/zukKD8J4Y9EXtEqVzk9KZ9XHo
6oo3hyxlLyfN/APQ465s7NQkXA/pS9dzdW3SeZzmgSoBPfNkaYFSxMLHMxxXVxYP
cuKujUq789SrWihwLEhuOrqMnMXYnACJlCnMe0j07ZzHNYlhQhQ=
-----END CERTIFICATE-----
Generated at Wed Jun 3 04:02:14 2026 by rpki-client