
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/04D52083D82721F61634E6629E16C7C7A870B9F5.mft
File: 04D52083D82721F61634E6629E16C7C7A870B9F5.mft (raw, json)
Hash identifier: 9a76NyjLWyB88wTavNH/zAy6pVN27mIi77r0a4v+5Q8=
Subject key identifier: 88:F6:EF:98:56:BF:F2:C6:A8:45:FA:96:07:6F:A0:38:77:6A:6B:B7
Authority key identifier: 04:D5:20:83:D8:27:21:F6:16:34:E6:62:9E:16:C7:C7:A8:70:B9:F5
Certificate issuer: /CN=04D52083D82721F61634E6629E16C7C7A870B9F5
Certificate serial: 3170B0A0E52206C656B8AF4625E39F3751004FA2
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04D52083D82721F61634E6629E16C7C7A870B9F5.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/04D52083D82721F61634E6629E16C7C7A870B9F5.mft
Manifest number: 2B
Signing time: Wed 03 Jun 2026 00:55:51 +0000
Manifest this update: Wed 03 Jun 2026 00:50:51 +0000
Manifest next update: Thu 04 Jun 2026 01:12:51 +0000
Files and hashes: 1: 04D52083D82721F61634E6629E16C7C7A870B9F5.crl (hash: JQCw4wI9RgpSzrcMtzkJhuTseMBeVui71ZZNxII3cxY=)
2: 3130332e3131362e38332e302f32342d3234203d3e20313530393539.roa (hash: VKlwIPdpyMpqk0maSmWSiVv4EZTH1WpK0M+m3jBjjUU=)
3: 3130332e3131362e38322e302f32342d3234203d3e20313530393539.roa (hash: JXl9nF73Wg0ANBBDSP3R1eZt9u9/t+JbOCpzL0EVDI8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/04D52083D82721F61634E6629E16C7C7A870B9F5.crl
rsync://rpki-rsync.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/04D52083D82721F61634E6629E16C7C7A870B9F5.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04D52083D82721F61634E6629E16C7C7A870B9F5.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 04 Jun 2026 01:12:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:70:b0:a0:e5:22:06:c6:56:b8:af:46:25:e3:9f:37:51:00:4f:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04D52083D82721F61634E6629E16C7C7A870B9F5
Validity
Not Before: Jun 3 00:50:51 2026 GMT
Not After : Jun 4 01:12:51 2026 GMT
Subject: CN=88F6EF9856BFF2C6A845FA96076FA038776A6BB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:8e:f2:68:05:81:cf:19:8c:02:02:b9:e9:03:
2e:02:4e:12:6c:6e:43:cb:5f:c0:3e:43:7a:06:32:
96:ac:3b:db:b2:0f:c1:98:c8:9a:bf:ce:b2:4d:04:
81:ff:ff:1c:35:62:91:4b:dc:fd:48:38:36:77:6f:
d4:f7:43:8e:32:9e:c7:06:07:89:56:27:e4:d3:b0:
50:ae:4c:4b:6d:fa:cf:04:d5:dd:02:bd:9c:6f:35:
68:b3:85:fb:04:92:6b:d1:1a:17:71:10:37:b2:07:
c6:0a:32:1d:ee:48:5e:ef:de:14:56:82:ce:25:91:
a4:f6:6f:e9:aa:54:38:bc:52:27:a8:2b:66:03:cf:
3b:92:f9:02:62:fd:8d:cf:01:c1:0c:c1:55:5d:94:
78:16:39:13:59:7b:c8:3f:6f:88:6e:bc:4a:d5:b1:
0c:ba:16:6c:d8:02:cd:b8:73:88:02:e7:4f:1f:1f:
0f:11:99:0f:f1:d7:d0:33:26:dd:4d:77:30:5d:b7:
9a:5a:48:27:48:08:ac:fd:dc:eb:30:03:0d:fe:8e:
86:99:0f:24:77:d3:36:47:7d:1f:be:f4:9b:04:ae:
42:1a:42:3b:89:9e:73:c1:60:fc:c6:6a:2d:b2:7b:
2c:dd:72:b3:3f:bb:2a:da:ec:92:28:bb:b4:d6:7d:
b8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:F6:EF:98:56:BF:F2:C6:A8:45:FA:96:07:6F:A0:38:77:6A:6B:B7
X509v3 Authority Key Identifier:
keyid:04:D5:20:83:D8:27:21:F6:16:34:E6:62:9E:16:C7:C7:A8:70:B9:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/04D52083D82721F61634E6629E16C7C7A870B9F5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04D52083D82721F61634E6629E16C7C7A870B9F5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/04D52083D82721F61634E6629E16C7C7A870B9F5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:2d:f5:f7:8d:b0:b6:9d:37:10:db:7b:70:7b:41:da:44:43:
5f:d1:90:b8:cf:25:53:ca:77:6c:1b:1f:89:5c:06:43:0a:b9:
4b:b8:f3:a8:49:09:44:5d:62:c2:24:05:b1:d2:3e:b4:99:0c:
e7:8f:3b:0f:dc:e2:dd:ec:26:cf:5e:43:99:71:23:83:f8:3a:
25:b1:93:6f:da:8c:a0:1d:f1:e0:83:f7:19:cc:a6:89:62:04:
2c:23:18:a0:e1:92:c3:64:e9:29:61:3a:b1:6a:00:84:09:46:
55:02:23:27:a1:9d:43:87:6f:a1:4d:ec:10:dd:81:25:a4:bb:
b8:da:cc:0b:8d:07:cc:70:51:f4:5b:e7:82:cb:f5:00:45:99:
55:6d:dc:32:cd:6a:81:59:10:13:73:e3:54:33:5c:68:9c:34:
b8:0b:6b:cf:0a:97:dc:22:3d:36:82:d7:d4:17:c2:23:18:c1:
07:86:dd:79:1b:3d:ce:20:f8:68:72:67:ba:f2:ae:60:d6:9f:
de:4d:64:51:ea:08:ed:30:b0:f5:51:87:2a:a5:d1:26:57:3e:
77:c5:3d:2d:27:5b:f5:96:94:fc:1c:81:a8:77:bb:c3:59:ec:
b2:de:65:c5:f7:bc:9c:9d:2a:05:a3:7f:12:de:b4:9a:04:bd:
c0:b4:42:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:30:28 2026 by rpki-client