
$ rpki-client -vvf rpki-rsync.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/4BC69E91BB5BCC5B1F0D4C112F9C8839B1690554.mft
File: 4BC69E91BB5BCC5B1F0D4C112F9C8839B1690554.mft (raw, json)
Hash identifier: LbG6EbmRokKHcfqgOYKLLDqRMHWhQlkxKRaKSxjkvAs=
Subject key identifier: D6:4D:9D:69:9B:0D:AC:C6:8A:CA:D0:FE:19:AE:1F:69:EB:AB:94:FF
Authority key identifier: 4B:C6:9E:91:BB:5B:CC:5B:1F:0D:4C:11:2F:9C:88:39:B1:69:05:54
Certificate issuer: /CN=4BC69E91BB5BCC5B1F0D4C112F9C8839B1690554
Certificate serial: 08F76E009F93EF0909BAA8BAE2B11ABCE56674A1
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BC69E91BB5BCC5B1F0D4C112F9C8839B1690554.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/4BC69E91BB5BCC5B1F0D4C112F9C8839B1690554.mft
Manifest number: 2B
Signing time: Tue 02 Jun 2026 21:15:48 +0000
Manifest this update: Tue 02 Jun 2026 21:10:48 +0000
Manifest next update: Wed 03 Jun 2026 23:43:48 +0000
Files and hashes: 1: 3130332e3131382e332e302f32342d3234203d3e20313337333732.roa (hash: dIbMNlmzPRtmx/pqtJnbGmYAZfEP0PtpQbV8sPyHXmY=)
2: 4BC69E91BB5BCC5B1F0D4C112F9C8839B1690554.crl (hash: EfU9IQ+R/pMXQ/Y5XIiMr4xuzLFrUJb0deD8CjIT8Po=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/4BC69E91BB5BCC5B1F0D4C112F9C8839B1690554.crl
rsync://rpki-rsync.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/4BC69E91BB5BCC5B1F0D4C112F9C8839B1690554.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BC69E91BB5BCC5B1F0D4C112F9C8839B1690554.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 10:27:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:f7:6e:00:9f:93:ef:09:09:ba:a8:ba:e2:b1:1a:bc:e5:66:74:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4BC69E91BB5BCC5B1F0D4C112F9C8839B1690554
Validity
Not Before: Jun 2 21:10:48 2026 GMT
Not After : Jun 3 23:43:48 2026 GMT
Subject: CN=D64D9D699B0DACC68ACAD0FE19AE1F69EBAB94FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:df:d3:32:af:16:8d:ff:8d:81:91:21:01:64:
b2:42:7f:6c:81:cf:77:bf:9c:ab:ed:9e:cb:1d:62:
e5:af:3f:55:2d:41:6b:e1:7a:b6:4a:fb:77:84:d9:
3e:35:93:88:3b:da:de:aa:e3:45:98:87:a7:95:9a:
9e:55:65:e0:ae:5c:c4:6b:c8:31:df:64:2e:91:dd:
f4:6c:32:37:d0:08:a8:b4:92:61:ec:46:e6:bc:9e:
4e:29:c9:79:8c:39:dd:93:97:8a:c5:ea:fa:50:b9:
f8:5a:b7:ca:91:9c:01:77:e3:4a:c5:6f:87:30:f8:
73:33:42:0b:5c:ef:2f:45:d3:0d:84:02:74:bc:1f:
9f:79:de:97:f8:0e:47:8a:65:71:df:ca:30:85:71:
63:71:e4:cb:e5:08:01:27:46:0d:1e:26:69:32:f3:
df:11:06:05:7c:b5:75:92:dc:50:ec:68:b0:41:f9:
f1:6a:3e:34:59:d9:32:da:a8:7d:e8:02:82:09:17:
2c:94:17:33:43:ba:74:b3:6a:e3:56:02:c2:38:31:
f0:d1:8c:b7:e7:ab:bc:9c:ee:34:45:05:66:b7:4c:
3b:c4:37:94:7e:59:29:98:d6:4d:c9:69:4d:e9:13:
70:ed:be:f6:01:9b:37:17:fa:7c:e7:02:80:2b:c4:
11:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:4D:9D:69:9B:0D:AC:C6:8A:CA:D0:FE:19:AE:1F:69:EB:AB:94:FF
X509v3 Authority Key Identifier:
keyid:4B:C6:9E:91:BB:5B:CC:5B:1F:0D:4C:11:2F:9C:88:39:B1:69:05:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/4BC69E91BB5BCC5B1F0D4C112F9C8839B1690554.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BC69E91BB5BCC5B1F0D4C112F9C8839B1690554.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/4BC69E91BB5BCC5B1F0D4C112F9C8839B1690554.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e5:e8:28:db:ce:4e:ac:36:a1:f7:2d:3e:90:7d:57:ca:fc:8a:
ba:cf:e8:7c:ea:43:f9:13:64:7e:6c:52:56:e5:63:0d:dd:fe:
ae:c4:76:c0:3c:36:fd:c3:b8:b5:cd:26:e0:2a:b5:a2:76:af:
d6:c9:a2:f0:df:70:d3:4b:6a:24:e5:5d:a3:89:37:6c:70:6e:
14:d7:e3:75:a0:30:21:a5:13:58:f6:23:67:e5:9a:8f:79:03:
40:23:ac:35:92:78:08:59:ab:36:19:ac:4d:1b:65:28:35:cf:
fa:f5:14:c3:9d:51:d0:c8:3c:7d:62:e6:6c:74:f2:74:b1:e1:
50:88:6a:6d:2a:88:03:0c:5f:49:c5:0c:15:5d:14:bd:b4:3b:
ea:fc:79:09:b8:c0:98:bb:ff:49:d4:fa:43:21:fc:47:58:6a:
35:e3:34:d7:5d:ee:3b:62:0c:25:a2:66:19:76:41:e4:b2:08:
80:74:f6:88:01:7d:fd:ce:74:33:ba:c1:d5:47:e3:72:1c:fc:
e7:dc:c8:3a:ed:f0:5b:de:4c:74:9d:85:d3:85:d3:d5:71:c2:
f3:b1:5c:e8:93:00:90:87:0c:09:e0:be:f7:a2:17:de:bf:7e:
76:32:4e:c6:37:8e:5a:b4:f0:1c:07:d4:b6:77:8a:b7:52:a6:
81:47:6c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:00:54 2026 by rpki-client