
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4958ACA345C7658A0DAF8E986F7577A772837161.mft
File: 4958ACA345C7658A0DAF8E986F7577A772837161.mft (raw, json)
Hash identifier: vhV1zdc4TzHdNs8Z1HQmlwcfgIcdFIxdW1/oQMvs4Ag=
Subject key identifier: 69:97:D5:BB:2D:56:04:01:C1:A1:40:EC:71:15:FE:C9:53:B3:27:C6
Authority key identifier: 49:58:AC:A3:45:C7:65:8A:0D:AF:8E:98:6F:75:77:A7:72:83:71:61
Certificate issuer: /CN=4958ACA345C7658A0DAF8E986F7577A772837161
Certificate serial: 197DE2781E9E51B3F292F434AB499F815CBB7D6A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4958ACA345C7658A0DAF8E986F7577A772837161.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4958ACA345C7658A0DAF8E986F7577A772837161.mft
Manifest number: 2B
Signing time: Tue 02 Jun 2026 14:58:15 +0000
Manifest this update: Tue 02 Jun 2026 14:53:15 +0000
Manifest next update: Wed 03 Jun 2026 18:44:15 +0000
Files and hashes: 1: 3130332e3137392e36352e302f32342d3234203d3e20313439333335.roa (hash: HGbCMrvkn9HLdb/84AEUgwBryTJVzNaclVbYnTuUOj0=)
2: 3130332e3137392e36342e302f32342d3234203d3e20313439333335.roa (hash: ERSYk3hZf9PVzWt1WH0Bk7NUbuFdmrm4ZK2jNR3DM5g=)
3: 3130332e3137392e36342e302f32332d3233203d3e20313439333335.roa (hash: KtDrnG9lvgnRMSX5R+jeLWfcRpbu+ptwzkE+z8AdY3o=)
4: 4958ACA345C7658A0DAF8E986F7577A772837161.crl (hash: /UlNGaHd20YzselRU/O14mS+5STQ6/yKoLY4uyueKCw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4958ACA345C7658A0DAF8E986F7577A772837161.crl
rsync://rpki-rsync.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4958ACA345C7658A0DAF8E986F7577A772837161.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4958ACA345C7658A0DAF8E986F7577A772837161.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 10:27:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:7d:e2:78:1e:9e:51:b3:f2:92:f4:34:ab:49:9f:81:5c:bb:7d:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4958ACA345C7658A0DAF8E986F7577A772837161
Validity
Not Before: Jun 2 14:53:15 2026 GMT
Not After : Jun 3 18:44:15 2026 GMT
Subject: CN=6997D5BB2D560401C1A140EC7115FEC953B327C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3f:8e:f5:0f:ae:1d:97:8f:28:78:15:9b:f2:
8e:2c:ac:a9:71:c7:7f:71:81:c3:08:d1:fc:1b:fb:
e1:fd:76:16:8f:05:84:62:c8:3e:08:d9:a5:7a:f7:
6f:fc:25:4a:62:27:2d:e3:93:9c:83:fe:01:98:35:
fc:75:f4:f7:a5:28:bc:cc:82:3c:09:b3:c0:52:15:
23:49:92:86:c7:77:2a:8f:d6:b2:34:8b:0d:ea:37:
58:18:52:c2:58:a3:77:5c:9b:6f:94:80:e9:6b:8a:
42:c8:5c:ed:7b:75:4f:b5:b5:b2:77:20:56:bb:42:
c9:00:31:d2:3e:86:11:dd:cd:2b:a6:87:65:4f:71:
02:63:b1:38:36:f1:28:d0:06:b7:f1:16:73:42:af:
0a:8b:95:f4:50:82:f3:1a:26:3a:fa:29:66:9d:21:
4f:b6:14:11:6d:0a:11:d9:ad:86:ec:e1:0c:67:c0:
bc:36:3d:7a:c2:b3:61:39:32:03:19:ad:bd:54:bd:
fc:97:00:f0:a4:27:0a:e5:2f:8d:af:bd:28:85:51:
57:87:4b:aa:88:13:9b:ab:f2:82:b5:e6:e2:0a:c5:
6d:d0:00:8d:9d:0a:9c:79:8a:ef:1e:f2:a2:4f:6a:
3f:c5:76:ad:e7:b2:84:53:e7:c5:d6:db:e3:77:e5:
57:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:97:D5:BB:2D:56:04:01:C1:A1:40:EC:71:15:FE:C9:53:B3:27:C6
X509v3 Authority Key Identifier:
keyid:49:58:AC:A3:45:C7:65:8A:0D:AF:8E:98:6F:75:77:A7:72:83:71:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4958ACA345C7658A0DAF8E986F7577A772837161.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4958ACA345C7658A0DAF8E986F7577A772837161.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4958ACA345C7658A0DAF8E986F7577A772837161.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:2c:86:48:2d:51:e5:a7:d6:04:76:67:53:f2:d1:17:b7:16:
09:57:57:12:a9:f1:47:f5:86:3d:ba:1e:c8:b9:fd:a9:0c:0c:
1e:3f:99:80:ef:87:55:01:cf:ad:5c:c7:4e:98:12:d9:41:0a:
74:32:ee:f6:7a:d3:4a:76:55:a0:dd:f9:42:e6:90:1a:95:56:
d8:dc:27:9d:f1:9c:10:12:53:4a:74:da:ee:5b:8e:ad:6e:a8:
b7:ea:f1:3a:63:42:35:ea:b2:ef:6e:18:2a:b8:19:c5:45:5b:
89:b2:c2:7d:25:8b:2a:b9:e4:80:b2:7d:37:05:54:c6:8c:9e:
7c:d1:23:6f:0d:fe:a0:5b:ae:6a:89:56:c3:3e:d8:49:86:4e:
3e:52:3e:7c:db:da:9f:0a:c1:97:69:1a:70:92:db:64:4f:a2:
8d:f2:09:a0:66:7d:ab:16:1b:c6:39:3e:9a:a0:54:b8:fa:9d:
f8:67:76:05:e3:11:7c:7c:55:25:77:ee:c6:49:01:d0:aa:17:
d7:1d:fd:42:07:82:f2:9b:f7:0e:8b:6f:42:63:14:16:08:83:
b7:ed:59:70:77:7d:99:7c:6a:90:30:42:e1:cb:9d:01:81:80:
c1:c8:29:07:79:87:5c:e8:bf:c6:db:33:38:a4:90:0e:55:dd:
a9:d7:f6:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:39:06 2026 by rpki-client