
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/4D98C36AE414DE2AFABA625C601188337044CEB5.mft
File: 4D98C36AE414DE2AFABA625C601188337044CEB5.mft (raw, json)
Hash identifier: mOONxQCREEMlO1HecZMS+BzI1xdJf0sFQf9eM091qdE=
Subject key identifier: 06:F4:AF:62:D4:31:8F:B3:18:5A:7C:EF:28:3A:5C:50:B0:E6:A7:65
Authority key identifier: 4D:98:C3:6A:E4:14:DE:2A:FA:BA:62:5C:60:11:88:33:70:44:CE:B5
Certificate issuer: /CN=4D98C36AE414DE2AFABA625C601188337044CEB5
Certificate serial: 55F29623C94DFA5566485019A78CAB28A6A9CECD
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D98C36AE414DE2AFABA625C601188337044CEB5.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/4D98C36AE414DE2AFABA625C601188337044CEB5.mft
Manifest number: 2B
Signing time: Tue 02 Jun 2026 19:49:05 +0000
Manifest this update: Tue 02 Jun 2026 19:44:05 +0000
Manifest next update: Wed 03 Jun 2026 20:52:05 +0000
Files and hashes: 1: 3130332e3138362e322e302f32342d3234203d3e20313439383837.roa (hash: 6bUEU/g2qE4eAxx1xLeHn2NWPyG7RA0NRzuQx5ize0g=)
2: 4D98C36AE414DE2AFABA625C601188337044CEB5.crl (hash: b6o+nNTjh79fHtpBEaV5VVVVdzGESgHci/EkQ4KxA8A=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/4D98C36AE414DE2AFABA625C601188337044CEB5.crl
rsync://rpki-rsync.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/4D98C36AE414DE2AFABA625C601188337044CEB5.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D98C36AE414DE2AFABA625C601188337044CEB5.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 20:52:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:f2:96:23:c9:4d:fa:55:66:48:50:19:a7:8c:ab:28:a6:a9:ce:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4D98C36AE414DE2AFABA625C601188337044CEB5
Validity
Not Before: Jun 2 19:44:05 2026 GMT
Not After : Jun 3 20:52:05 2026 GMT
Subject: CN=06F4AF62D4318FB3185A7CEF283A5C50B0E6A765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:86:4d:29:d6:11:92:2c:3c:27:83:b1:53:6b:
5c:ea:18:38:72:2f:b5:a8:1e:cb:8f:84:0b:f1:be:
be:5a:2a:a4:88:8f:ab:3f:4f:4c:64:27:24:80:85:
07:19:5a:88:5f:9d:5d:b5:bf:22:fa:fe:8b:58:c9:
16:2d:6d:93:de:90:c6:8d:52:f8:ee:1d:a2:70:12:
81:35:89:b0:7f:47:e6:ce:cd:4c:d7:e8:b7:1b:1c:
9c:ab:65:73:b0:0f:cd:de:7a:df:51:64:ce:01:70:
dc:83:fe:a3:82:e2:c2:a7:bb:e1:0f:ce:73:73:2c:
5e:92:1f:6e:c0:6f:ce:d0:2c:3e:3d:b8:a6:29:c2:
54:77:f0:2f:ff:42:fa:e4:0e:90:2c:2f:bb:09:4e:
d8:af:14:ac:06:a2:28:5d:05:71:3d:d8:1e:60:e9:
5d:9b:a4:2d:19:46:a3:df:3f:29:ec:5f:a7:c1:1f:
fb:89:ec:bd:cf:48:1d:9d:d3:f7:a9:d9:eb:aa:7f:
0f:ad:87:b2:5f:95:3c:36:27:f3:c4:f1:f6:2f:5a:
7f:a4:fb:cc:3f:c6:2d:b0:e1:b6:98:e9:a7:6f:d9:
5b:db:6c:9c:9e:a0:d7:16:54:68:61:2d:52:ef:eb:
58:33:4c:88:40:9c:cb:99:08:7a:94:ab:9f:00:09:
61:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:F4:AF:62:D4:31:8F:B3:18:5A:7C:EF:28:3A:5C:50:B0:E6:A7:65
X509v3 Authority Key Identifier:
keyid:4D:98:C3:6A:E4:14:DE:2A:FA:BA:62:5C:60:11:88:33:70:44:CE:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/4D98C36AE414DE2AFABA625C601188337044CEB5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D98C36AE414DE2AFABA625C601188337044CEB5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/4D98C36AE414DE2AFABA625C601188337044CEB5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:4d:cb:2f:1c:71:61:d9:de:a7:ca:c1:1e:9c:41:d4:06:18:
79:83:e9:3e:46:b9:2f:8e:3d:51:8f:f6:dd:1d:ed:bd:c7:86:
be:6e:3b:df:8b:51:2d:48:ae:ec:d5:69:62:47:6d:c2:af:82:
54:c5:c8:d8:15:52:d0:46:b7:b3:9c:e0:0c:d4:be:94:d4:ca:
5c:eb:ac:36:38:09:bd:f7:7f:f1:82:29:4f:16:6f:2f:30:7a:
c1:78:37:a4:c2:1e:d8:16:79:63:78:38:5e:0f:20:71:f7:35:
ff:8c:ad:5a:0e:5f:ea:f3:bd:3e:44:99:f1:a1:f7:77:b6:81:
24:32:ae:4e:12:23:39:ae:a9:3a:3a:78:e4:f2:c4:b2:ac:65:
ca:f1:7a:92:cd:11:44:a8:36:09:22:8d:b3:a8:4e:87:85:06:
29:1b:c3:2d:89:19:84:52:80:ec:ff:e8:8f:f7:f5:1a:46:99:
58:44:98:6d:98:ea:52:27:28:3d:a6:82:5d:51:5e:06:57:bd:
88:50:23:cf:04:60:61:ef:32:8f:5c:d2:64:e7:3d:73:71:de:
6b:54:a5:2c:87:e6:2d:40:07:4c:19:34:6e:a4:87:aa:fa:f5:
df:7e:0b:0c:40:02:56:a2:53:41:4c:83:53:a5:51:39:9d:9d:
f2:81:e3:44
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUVfKWI8lN+lVmSFAZp4yrKKapzs0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEQ5OEMzNkFFNDE0REUyQUZBQkE2MjVDNjAxMTg4MzM3
MDQ0Q0VCNTAeFw0yNjA2MDIxOTQ0MDVaFw0yNjA2MDMyMDUyMDVaMDMxMTAvBgNV
BAMTKDA2RjRBRjYyRDQzMThGQjMxODVBN0NFRjI4M0E1QzUwQjBFNkE3NjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrhk0p1hGSLDwng7FTa1zqGDhy
L7WoHsuPhAvxvr5aKqSIj6s/T0xkJySAhQcZWohfnV21vyL6/otYyRYtbZPekMaN
UvjuHaJwEoE1ibB/R+bOzUzX6LcbHJyrZXOwD83eet9RZM4BcNyD/qOC4sKnu+EP
znNzLF6SH27Ab87QLD49uKYpwlR38C//QvrkDpAsL7sJTtivFKwGoihdBXE92B5g
6V2bpC0ZRqPfPynsX6fBH/uJ7L3PSB2d0/ep2euqfw+th7JflTw2J/PE8fYvWn+k
+8w/xi2w4baY6adv2VvbbJyeoNcWVGhhLVLv61gzTIhAnMuZCHqUq58ACWGZAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUBvSvYtQxj7MYWnzvKDpcULDmp2UwHwYDVR0j
BBgwFoAUTZjDauQU3ir6umJcYBGIM3BEzrUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZDRmNmQ4NmItZTNkZi00ZTJmLTkzNmYtZWQ5Yjk2MzUwM2ExLzAvNEQ5OEMzNkFF
NDE0REUyQUZBQkE2MjVDNjAxMTg4MzM3MDQ0Q0VCNS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS80RDk4QzM2QUU0MTRERTJBRkFCQTYyNUM2MDExODgzMzcwNDRD
RUI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDRmNmQ4NmItZTNkZi00ZTJmLTkz
NmYtZWQ5Yjk2MzUwM2ExLzAvNEQ5OEMzNkFFNDE0REUyQUZBQkE2MjVDNjAxMTg4
MzM3MDQ0Q0VCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAB9Nyy8ccWHZ3qfKwR6cQdQGGHmD6T5GuS+O
PVGP9t0d7b3Hhr5uO9+LUS1IruzVaWJHbcKvglTFyNgVUtBGt7Oc4AzUvpTUylzr
rDY4Cb33f/GCKU8Wby8wesF4N6TCHtgWeWN4OF4PIHH3Nf+MrVoOX+rzvT5EmfGh
93e2gSQyrk4SIzmuqTo6eOTyxLKsZcrxepLNEUSoNgkijbOoToeFBikbwy2JGYRS
gOz/6I/39RpGmVhEmG2Y6lInKD2mgl1RXgZXvYhQI88EYGHvMo9c0mTnPXNx3mtU
pSyH5i1AB0wZNG6kh6r69d9+CwxAAlaiU0FMg1OlUTmdnfKB40Q=
-----END CERTIFICATE-----
Generated at Wed Jun 3 04:44:16 2026 by rpki-client