
$ rpki-client -vvf rpki-rsync.idnic.net/repo/871ada9e-e2a9-400e-8dff-9be481aba583/0/4BD77983D98742985400276FF0F5959696EA7807.mft
File: 4BD77983D98742985400276FF0F5959696EA7807.mft (raw, json)
Hash identifier: xkUuQDFUz+vOY3gn6w41r+6MloWRATf/XHpTn/NVlw8=
Subject key identifier: FC:58:25:DD:39:94:F7:8F:4D:F3:90:A1:55:D5:6C:14:27:BF:AE:A3
Authority key identifier: 4B:D7:79:83:D9:87:42:98:54:00:27:6F:F0:F5:95:96:96:EA:78:07
Certificate issuer: /CN=4BD77983D98742985400276FF0F5959696EA7807
Certificate serial: 4B20EE1EDA91BC5A221BC213CC2D2366960E186A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BD77983D98742985400276FF0F5959696EA7807.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/871ada9e-e2a9-400e-8dff-9be481aba583/0/4BD77983D98742985400276FF0F5959696EA7807.mft
Manifest number: 2B
Signing time: Tue 02 Jun 2026 15:44:05 +0000
Manifest this update: Tue 02 Jun 2026 15:39:05 +0000
Manifest next update: Wed 03 Jun 2026 19:19:05 +0000
Files and hashes: 1: 4BD77983D98742985400276FF0F5959696EA7807.crl (hash: h2BPIb4refwC8xgabxxPh3ZfWqsarBH82k9ETW0NJME=)
2: 3130332e35382e3130342e302f32322d3234203d3e20313333383334.roa (hash: 2ktJ+LGrBdyxqO+5Ni21bj0NM08xpyYMFhaaSWYusJY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/871ada9e-e2a9-400e-8dff-9be481aba583/0/4BD77983D98742985400276FF0F5959696EA7807.crl
rsync://rpki-rsync.idnic.net/repo/871ada9e-e2a9-400e-8dff-9be481aba583/0/4BD77983D98742985400276FF0F5959696EA7807.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BD77983D98742985400276FF0F5959696EA7807.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 19:19:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:20:ee:1e:da:91:bc:5a:22:1b:c2:13:cc:2d:23:66:96:0e:18:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4BD77983D98742985400276FF0F5959696EA7807
Validity
Not Before: Jun 2 15:39:05 2026 GMT
Not After : Jun 3 19:19:05 2026 GMT
Subject: CN=FC5825DD3994F78F4DF390A155D56C1427BFAEA3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4d:a7:2b:89:d4:7a:24:33:d9:da:d0:b7:be:
fe:f7:da:68:79:c4:52:68:52:71:0e:e6:47:be:5d:
d2:7f:db:73:12:1f:f0:bb:a5:8a:81:cf:6b:7e:6b:
a3:84:68:a7:9a:a7:38:cd:3f:ac:78:6d:de:87:ae:
c0:b7:f3:32:0e:b7:f4:e9:bf:1f:d3:88:68:5a:1a:
63:6c:3e:73:9f:1b:93:3f:e1:d7:03:b6:08:cd:8d:
12:3d:13:ec:08:39:94:38:4f:35:f1:4d:c3:54:49:
22:d0:7a:f3:de:b0:92:25:34:1e:3f:10:97:3e:87:
48:e9:9c:62:af:9d:08:07:16:c1:79:f6:9b:f5:7a:
c0:d3:e6:44:05:09:e9:97:e8:0c:8d:78:9b:0e:b6:
d7:13:5e:df:ab:1a:95:23:64:45:ed:bd:46:2e:f9:
12:30:98:40:45:20:8c:39:0b:c4:7c:50:fe:b3:5a:
83:cc:87:fc:b7:bc:e1:09:0a:27:06:d8:81:44:aa:
3e:4f:ae:07:ba:40:c2:b9:f4:b3:25:af:9f:14:df:
35:16:b2:cf:a3:70:d1:db:9f:73:b1:d5:94:9e:39:
8f:44:ab:0b:1c:95:6c:a2:7e:e0:9a:35:08:1b:a1:
bf:0c:ee:65:99:88:55:11:8f:6f:8e:75:09:7e:58:
96:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:58:25:DD:39:94:F7:8F:4D:F3:90:A1:55:D5:6C:14:27:BF:AE:A3
X509v3 Authority Key Identifier:
keyid:4B:D7:79:83:D9:87:42:98:54:00:27:6F:F0:F5:95:96:96:EA:78:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/871ada9e-e2a9-400e-8dff-9be481aba583/0/4BD77983D98742985400276FF0F5959696EA7807.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BD77983D98742985400276FF0F5959696EA7807.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/871ada9e-e2a9-400e-8dff-9be481aba583/0/4BD77983D98742985400276FF0F5959696EA7807.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:b0:c3:08:22:00:57:4d:a0:f4:74:62:1a:6c:11:3d:01:07:
5e:0c:47:8d:f5:94:da:6b:fc:3e:71:c8:a4:22:51:ca:b3:76:
e9:72:d5:99:55:32:bc:65:83:b4:8a:cc:f0:24:72:c7:84:f6:
66:c5:ea:a4:1f:8b:b4:cd:14:fd:76:bc:7d:23:84:13:cf:10:
a7:3e:22:f8:38:16:04:fe:78:92:2c:9d:64:67:7e:66:5c:ec:
c7:d4:52:2b:d3:67:13:2a:a0:28:f9:99:46:12:5a:62:04:39:
14:b8:d2:55:fa:36:c1:7b:39:7b:38:a9:31:50:a3:cf:1b:32:
00:f9:96:96:f5:a3:90:2b:6d:2c:42:35:74:f6:12:3e:9c:a6:
df:ad:f3:43:77:a1:08:86:d6:b6:47:bb:96:1a:14:7d:fb:5a:
57:53:23:65:49:51:14:28:e9:e9:62:aa:ae:9f:db:d6:89:09:
8d:93:4f:6a:4c:8e:1d:86:d3:55:07:08:01:4c:49:a8:ea:72:
d3:9e:b2:ad:86:5f:b9:25:56:e2:55:7f:69:72:1d:22:80:5b:
5c:2f:81:c6:8e:81:55:40:d1:3f:5c:7a:fa:c7:db:9f:1a:bb:
4d:ad:d0:db:62:bc:10:97:05:fb:23:98:fb:a5:90:70:a8:54:
97:7c:47:af
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUSyDuHtqRvFoiG8ITzC0jZpYOGGowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEJENzc5ODNEOTg3NDI5ODU0MDAyNzZGRjBGNTk1OTY5
NkVBNzgwNzAeFw0yNjA2MDIxNTM5MDVaFw0yNjA2MDMxOTE5MDVaMDMxMTAvBgNV
BAMTKEZDNTgyNUREMzk5NEY3OEY0REYzOTBBMTU1RDU2QzE0MjdCRkFFQTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmTacridR6JDPZ2tC3vv732mh5
xFJoUnEO5ke+XdJ/23MSH/C7pYqBz2t+a6OEaKeapzjNP6x4bd6HrsC38zIOt/Tp
vx/TiGhaGmNsPnOfG5M/4dcDtgjNjRI9E+wIOZQ4TzXxTcNUSSLQevPesJIlNB4/
EJc+h0jpnGKvnQgHFsF59pv1esDT5kQFCemX6AyNeJsOttcTXt+rGpUjZEXtvUYu
+RIwmEBFIIw5C8R8UP6zWoPMh/y3vOEJCicG2IFEqj5Prge6QMK59LMlr58U3zUW
ss+jcNHbn3Ox1ZSeOY9EqwsclWyifuCaNQgbob8M7mWZiFURj2+OdQl+WJabAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU/Fgl3TmU949N85ChVdVsFCe/rqMwHwYDVR0j
BBgwFoAUS9d5g9mHQphUACdv8PWVlpbqeAcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ODcxYWRhOWUtZTJhOS00MDBlLThkZmYtOWJlNDgxYWJhNTgzLzAvNEJENzc5ODNE
OTg3NDI5ODU0MDAyNzZGRjBGNTk1OTY5NkVBNzgwNy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS80QkQ3Nzk4M0Q5ODc0Mjk4NTQwMDI3NkZGMEY1OTU5Njk2RUE3
ODA3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODcxYWRhOWUtZTJhOS00MDBlLThk
ZmYtOWJlNDgxYWJhNTgzLzAvNEJENzc5ODNEOTg3NDI5ODU0MDAyNzZGRjBGNTk1
OTY5NkVBNzgwNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBANmwwwgiAFdNoPR0YhpsET0BB14MR431lNpr
/D5xyKQiUcqzduly1ZlVMrxlg7SKzPAkcseE9mbF6qQfi7TNFP12vH0jhBPPEKc+
Ivg4FgT+eJIsnWRnfmZc7MfUUivTZxMqoCj5mUYSWmIEORS40lX6NsF7OXs4qTFQ
o88bMgD5lpb1o5ArbSxCNXT2Ej6cpt+t80N3oQiG1rZHu5YaFH37WldTI2VJURQo
6eliqq6f29aJCY2TT2pMjh2G01UHCAFMSajqctOesq2GX7klVuJVf2lyHSKAW1wv
gcaOgVVA0T9cevrH258au02t0NtivBCXBfsjmPulkHCoVJd8R68=
-----END CERTIFICATE-----
Generated at Wed Jun 3 04:47:56 2026 by rpki-client