
$ rpki-client -vvf rpki-rsync.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/494BBF61A7ADCFAD78873BA2370358D4C942405D.mft
File: 494BBF61A7ADCFAD78873BA2370358D4C942405D.mft (raw, json)
Hash identifier: ghz4LkKyYvFSkHkQzR40XNK9A4ThUyPFd7/JQRQddNQ=
Subject key identifier: F9:44:49:5F:37:01:FA:17:58:AB:41:5A:0D:9C:AD:AE:2C:FB:55:1F
Authority key identifier: 49:4B:BF:61:A7:AD:CF:AD:78:87:3B:A2:37:03:58:D4:C9:42:40:5D
Certificate issuer: /CN=494BBF61A7ADCFAD78873BA2370358D4C942405D
Certificate serial: 063A8A31E14BAE40D859E81EFE42680A88860A4E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/494BBF61A7ADCFAD78873BA2370358D4C942405D.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/494BBF61A7ADCFAD78873BA2370358D4C942405D.mft
Manifest number: 2B
Signing time: Tue 02 Jun 2026 11:24:05 +0000
Manifest this update: Tue 02 Jun 2026 11:19:05 +0000
Manifest next update: Wed 03 Jun 2026 13:21:05 +0000
Files and hashes: 1: 494BBF61A7ADCFAD78873BA2370358D4C942405D.crl (hash: ZqnfjgBp6c1xNetqWQYbUXXzFNup5jLCmb4hS6TceZk=)
2: 3231302e37392e3133382e302f32332d3234203d3e20313532303535.roa (hash: Ckq81tABd9P/ltS1UN2BW7llZjF9ry0atyKHbIk0sEg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/494BBF61A7ADCFAD78873BA2370358D4C942405D.crl
rsync://rpki-rsync.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/494BBF61A7ADCFAD78873BA2370358D4C942405D.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/494BBF61A7ADCFAD78873BA2370358D4C942405D.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 13:21:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:3a:8a:31:e1:4b:ae:40:d8:59:e8:1e:fe:42:68:0a:88:86:0a:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=494BBF61A7ADCFAD78873BA2370358D4C942405D
Validity
Not Before: Jun 2 11:19:05 2026 GMT
Not After : Jun 3 13:21:05 2026 GMT
Subject: CN=F944495F3701FA1758AB415A0D9CADAE2CFB551F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6e:af:79:08:83:d5:c7:72:54:74:76:6a:d6:
21:b1:14:d6:62:2e:3f:66:8f:7f:80:a3:b0:72:6c:
42:b3:73:57:73:91:53:fe:47:aa:02:62:fb:0a:dd:
bf:26:f3:6b:1a:48:9b:09:00:e3:30:2b:ef:8c:b3:
fb:4e:73:e1:a4:03:0d:5c:f5:c8:fa:09:31:5d:c7:
78:60:64:43:9b:9d:93:8e:a3:81:0f:43:8e:06:ca:
84:6e:14:8b:9f:c9:23:ff:d7:35:cf:41:1b:e7:5f:
38:e3:d3:e2:25:07:ae:db:07:90:72:c1:2a:67:ad:
b1:68:f1:43:1a:58:fe:71:59:c4:10:ab:be:32:05:
20:42:32:ba:b0:cc:39:9f:62:8c:7e:fa:e1:96:fb:
f9:1c:8d:99:21:0b:63:04:e2:c3:57:b6:94:ef:0a:
a2:64:a8:5d:8c:28:a8:bd:f2:ab:4b:5c:e5:76:5b:
4e:67:40:67:27:b3:aa:d4:b5:48:ef:1a:df:02:7c:
2f:36:fd:e0:0e:de:a4:69:9c:ed:0b:6e:2b:f4:15:
e1:67:ad:af:d7:3b:33:a4:3b:bc:2e:3b:d4:95:65:
54:eb:8e:39:0e:b2:d4:10:2e:49:f5:67:b5:96:9a:
4f:2a:66:16:46:bd:c8:79:85:4e:da:60:3f:7e:be:
4f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:44:49:5F:37:01:FA:17:58:AB:41:5A:0D:9C:AD:AE:2C:FB:55:1F
X509v3 Authority Key Identifier:
keyid:49:4B:BF:61:A7:AD:CF:AD:78:87:3B:A2:37:03:58:D4:C9:42:40:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/494BBF61A7ADCFAD78873BA2370358D4C942405D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/494BBF61A7ADCFAD78873BA2370358D4C942405D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/494BBF61A7ADCFAD78873BA2370358D4C942405D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:01:7c:07:7e:02:c2:af:7d:5a:9c:e9:3c:c5:c8:bf:c2:7e:
36:27:95:8f:54:30:e1:6a:d5:88:15:60:79:f7:dc:ed:74:3c:
47:a3:75:bd:a5:07:fb:9e:ff:07:4e:13:cb:82:d4:3d:0e:e7:
2f:08:b3:ad:37:7e:72:7d:ee:95:35:65:34:11:97:e0:1a:96:
2f:04:fd:36:2e:a1:b0:b1:ee:d3:ab:dc:8f:19:08:af:85:f9:
57:74:4e:97:3d:e3:cb:fb:c3:a7:69:44:9b:48:29:b9:2b:3c:
0a:cd:f7:17:bd:66:96:06:e6:d4:f5:d5:60:35:e0:34:b6:8a:
cb:ec:6d:eb:23:99:c3:b0:0a:bd:6a:fd:b1:ef:51:49:79:8c:
56:fa:8e:dc:35:0c:60:38:d2:fb:f5:57:f0:ad:40:46:41:ca:
8a:da:cc:87:d8:9e:b7:d0:a5:b4:27:90:9a:77:68:8b:17:d8:
dd:41:e1:6c:d8:f9:1c:db:92:4c:c9:01:df:23:3b:12:32:bb:
ec:30:50:14:6d:63:f2:f3:1f:25:f4:e9:f1:4e:95:12:a4:14:
24:dd:bb:c7:2d:cf:7b:2f:27:60:c2:31:51:3d:ff:73:a8:77:
fa:32:04:d8:bc:c3:76:61:3c:be:94:2f:2d:16:f6:28:46:b6:
0a:95:f9:bb
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUBjqKMeFLrkDYWege/kJoCoiGCk4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDk0QkJGNjFBN0FEQ0ZBRDc4ODczQkEyMzcwMzU4RDRD
OTQyNDA1RDAeFw0yNjA2MDIxMTE5MDVaFw0yNjA2MDMxMzIxMDVaMDMxMTAvBgNV
BAMTKEY5NDQ0OTVGMzcwMUZBMTc1OEFCNDE1QTBEOUNBREFFMkNGQjU1MUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGbq95CIPVx3JUdHZq1iGxFNZi
Lj9mj3+Ao7BybEKzc1dzkVP+R6oCYvsK3b8m82saSJsJAOMwK++Ms/tOc+GkAw1c
9cj6CTFdx3hgZEObnZOOo4EPQ44GyoRuFIufySP/1zXPQRvnXzjj0+IlB67bB5By
wSpnrbFo8UMaWP5xWcQQq74yBSBCMrqwzDmfYox++uGW+/kcjZkhC2ME4sNXtpTv
CqJkqF2MKKi98qtLXOV2W05nQGcns6rUtUjvGt8CfC82/eAO3qRpnO0Lbiv0FeFn
ra/XOzOkO7wuO9SVZVTrjjkOstQQLkn1Z7WWmk8qZhZGvch5hU7aYD9+vk+1AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU+URJXzcB+hdYq0FaDZytriz7VR8wHwYDVR0j
BBgwFoAUSUu/Yaetz614hzuiNwNY1MlCQF0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
N2U1MzI4ZDgtODY3ZS00MjMyLWI1ZTEtNjVhYjBiYzA0ODk2LzAvNDk0QkJGNjFB
N0FEQ0ZBRDc4ODczQkEyMzcwMzU4RDRDOTQyNDA1RC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS80OTRCQkY2MUE3QURDRkFENzg4NzNCQTIzNzAzNThENEM5NDI0
MDVELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2U1MzI4ZDgtODY3ZS00MjMyLWI1
ZTEtNjVhYjBiYzA0ODk2LzAvNDk0QkJGNjFBN0FEQ0ZBRDc4ODczQkEyMzcwMzU4
RDRDOTQyNDA1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHABfAd+AsKvfVqc6TzFyL/CfjYnlY9UMOFq
1YgVYHn33O10PEejdb2lB/ue/wdOE8uC1D0O5y8Is603fnJ97pU1ZTQRl+Aali8E
/TYuobCx7tOr3I8ZCK+F+Vd0Tpc948v7w6dpRJtIKbkrPArN9xe9ZpYG5tT11WA1
4DS2isvsbesjmcOwCr1q/bHvUUl5jFb6jtw1DGA40vv1V/CtQEZByorazIfYnrfQ
pbQnkJp3aIsX2N1B4WzY+RzbkkzJAd8jOxIyu+wwUBRtY/LzHyX06fFOlRKkFCTd
u8ctz3svJ2DCMVE9/3Ood/oyBNi8w3ZhPL6ULy0W9ihGtgqV+bs=
-----END CERTIFICATE-----
Generated at Wed Jun 3 04:08:49 2026 by rpki-client