
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e11a3d56-ac75-4981-9726-c440214c81ed/0/4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4.mft
File: 4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4.mft (raw, json)
Hash identifier: h62GaJYahy8zSwPvAX6v3R/KpNgyPvL+P+gkfvX87qA=
Subject key identifier: E9:7C:7F:17:1C:2C:37:5A:39:16:6D:C4:EF:8E:7C:46:96:3D:BC:E1
Authority key identifier: 4B:B3:1C:C0:C0:64:3A:8E:F7:5F:54:B2:C3:50:B6:D9:E3:FD:4F:E4
Certificate issuer: /CN=4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4
Certificate serial: 73477EDFB1ED0BD91245CCCE09CD85E2930C1A76
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e11a3d56-ac75-4981-9726-c440214c81ed/0/4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4.mft
Manifest number: 2B
Signing time: Tue 02 Jun 2026 15:59:19 +0000
Manifest this update: Tue 02 Jun 2026 15:54:19 +0000
Manifest next update: Wed 03 Jun 2026 19:33:19 +0000
Files and hashes: 1: 3130332e3130312e3134302e302f32332d3234203d3e20313530393536.roa (hash: epbts0iMFTrBEO83zvZ3MaXP2Z9y72tIdDCt87torNA=)
2: 4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4.crl (hash: yUdYojo+lDry3a5YeKTeUSdNAb1nqlxygQDPh7FGkJo=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e11a3d56-ac75-4981-9726-c440214c81ed/0/4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4.crl
rsync://rpki-rsync.idnic.net/repo/e11a3d56-ac75-4981-9726-c440214c81ed/0/4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 19:33:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:47:7e:df:b1:ed:0b:d9:12:45:cc:ce:09:cd:85:e2:93:0c:1a:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4
Validity
Not Before: Jun 2 15:54:19 2026 GMT
Not After : Jun 3 19:33:19 2026 GMT
Subject: CN=E97C7F171C2C375A39166DC4EF8E7C46963DBCE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:15:f0:a6:bb:70:36:e3:b0:53:55:3b:d4:7d:
04:38:fa:fd:e5:67:96:ba:e6:7f:6a:6a:b0:68:ae:
4a:63:89:f1:77:55:b0:38:22:87:53:5a:32:c4:ea:
87:b1:bc:cd:0a:f4:4e:10:45:d4:5e:11:e9:c7:2e:
1c:a5:89:d1:f1:bb:25:80:64:9b:c1:ff:fa:76:f1:
1c:df:ed:4c:fb:01:55:13:91:c1:bb:ab:4a:39:08:
d1:7c:a7:e9:26:bd:fb:d9:c3:2b:0a:34:ea:c5:28:
32:2e:c0:36:13:77:d8:d9:50:f6:40:42:2d:47:46:
5d:a6:53:60:b1:3d:14:d3:43:8d:85:6f:a3:11:08:
20:96:a8:bd:35:0c:63:fc:6b:97:e1:f4:11:36:43:
c5:f3:3f:38:68:9e:f1:9c:89:81:82:01:e5:2f:d5:
2f:67:f3:bd:41:46:82:bc:8b:8d:87:1a:04:ed:72:
12:d1:c3:55:ea:96:17:9e:96:98:d6:1a:55:19:48:
68:5c:58:63:cd:3a:2c:eb:20:90:20:e9:fa:c1:c7:
cd:c9:a1:d3:3f:71:05:02:33:76:01:82:19:28:0d:
ba:88:5e:4f:ad:1a:04:f2:5d:59:93:65:97:73:a3:
64:94:b5:16:4f:1f:40:c5:c9:83:e5:51:0c:09:38:
86:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:7C:7F:17:1C:2C:37:5A:39:16:6D:C4:EF:8E:7C:46:96:3D:BC:E1
X509v3 Authority Key Identifier:
keyid:4B:B3:1C:C0:C0:64:3A:8E:F7:5F:54:B2:C3:50:B6:D9:E3:FD:4F:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e11a3d56-ac75-4981-9726-c440214c81ed/0/4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e11a3d56-ac75-4981-9726-c440214c81ed/0/4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:b4:b1:67:19:a3:26:88:80:fa:54:a8:94:48:18:d2:aa:d3:
5d:c4:18:a5:53:3c:33:9c:77:08:4d:73:a8:de:36:a7:07:69:
74:56:56:5e:c8:11:d2:59:c6:58:da:15:88:82:95:2b:06:7c:
df:56:dd:bf:8c:9d:fe:26:3a:ad:d4:59:b1:f8:8f:81:4a:18:
7b:fa:f8:d5:28:9d:16:1c:f4:0a:bc:22:bc:47:49:df:cf:f8:
ee:5c:1c:3c:fd:bc:ea:06:c4:16:8b:3e:b9:2d:05:31:bb:09:
e0:a5:ae:54:5f:fd:86:8f:5b:1c:b9:a5:5f:d3:fb:f7:3d:05:
f4:81:88:48:4f:de:59:7d:9f:e1:a2:2f:52:14:11:e4:9e:78:
fb:5d:5d:f4:4e:17:13:aa:17:7a:38:68:4e:1c:96:78:0f:f3:
e0:62:7a:d0:0e:36:e0:60:a1:33:c5:58:5d:69:b7:71:1b:74:
62:ec:68:fe:3a:02:c0:c9:d5:2d:67:24:f7:d2:8b:8a:64:93:
25:bd:64:a8:fd:6f:d1:98:ee:49:d0:1c:5b:ee:22:4c:5b:25:
b0:87:0a:35:ab:be:e6:02:16:3d:b8:93:a5:eb:c2:86:15:e2:
12:a5:cd:ff:00:83:62:01:40:b1:ec:68:4c:e4:40:a0:f2:4a:
ac:2d:83:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:26:51 2026 by rpki-client