
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/4B3B54F4A1203D9DF5E8094228C91FC21FF2C5C4.mft
File: 4B3B54F4A1203D9DF5E8094228C91FC21FF2C5C4.mft (raw, json)
Hash identifier: RUrNAhtFV7Q0BZNGFA76SVjBq3xNoYblLVa24jI+sLU=
Subject key identifier: B9:1C:CD:FF:08:05:33:88:CC:5E:5A:77:8A:53:E2:91:81:E9:BB:CA
Authority key identifier: 4B:3B:54:F4:A1:20:3D:9D:F5:E8:09:42:28:C9:1F:C2:1F:F2:C5:C4
Certificate issuer: /CN=4B3B54F4A1203D9DF5E8094228C91FC21FF2C5C4
Certificate serial: 36C3ADDC5F7F06A74D0F9E37C263B047A301D50C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4B3B54F4A1203D9DF5E8094228C91FC21FF2C5C4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/4B3B54F4A1203D9DF5E8094228C91FC21FF2C5C4.mft
Manifest number: 6A
Signing time: Mon 20 Jul 2026 19:30:27 +0000
Manifest this update: Mon 20 Jul 2026 19:25:27 +0000
Manifest next update: Tue 21 Jul 2026 21:14:27 +0000
Files and hashes: 1: 3130332e3135332e3133312e302f32342d3234203d3e20313430343633.roa (hash: esc3McyAl6hUlG4d1U+cxH9phLSFNKnapu2B7Ix2aTI=)
2: 323030313a6466343a343938303a3a2f34382d3438203d3e20313430343633.roa (hash: rk63OWefzg4vng4Tc3mM68t8dHw3/EWO+Sh3DRDdtqA=)
3: 4B3B54F4A1203D9DF5E8094228C91FC21FF2C5C4.crl (hash: fRLthLSwhQgWaqKEF9/fb+/DB0YS//Vw6rAH2TQYdNY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/4B3B54F4A1203D9DF5E8094228C91FC21FF2C5C4.crl
rsync://rpki-rsync.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/4B3B54F4A1203D9DF5E8094228C91FC21FF2C5C4.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4B3B54F4A1203D9DF5E8094228C91FC21FF2C5C4.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Jul 2026 21:14:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:c3:ad:dc:5f:7f:06:a7:4d:0f:9e:37:c2:63:b0:47:a3:01:d5:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4B3B54F4A1203D9DF5E8094228C91FC21FF2C5C4
Validity
Not Before: Jul 20 19:25:27 2026 GMT
Not After : Jul 21 21:14:27 2026 GMT
Subject: CN=B91CCDFF08053388CC5E5A778A53E29181E9BBCA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c3:3b:dc:55:c6:37:ba:5b:7a:0e:ed:9c:c6:
79:db:b3:08:f2:37:6a:a3:d4:f0:eb:8c:da:09:1b:
1e:0c:7a:83:93:a9:18:1e:44:bc:68:4d:01:15:55:
80:4b:c3:88:91:f4:45:35:16:73:06:02:9a:bb:81:
a2:94:bb:de:d1:ed:76:6e:aa:ba:8e:86:07:34:40:
28:a9:02:2e:6d:b3:90:f7:de:b4:8d:de:1d:f0:24:
e5:6a:46:ee:21:74:78:5e:aa:c1:f1:2c:bc:b0:0c:
65:ba:a8:a2:88:bf:3a:12:c8:24:97:4b:8a:94:42:
27:eb:d6:c3:85:98:d8:47:a6:85:b2:84:f7:5b:2d:
41:72:ab:a6:39:6f:f6:c9:bc:45:7e:7d:86:95:de:
80:7b:28:77:70:31:39:5b:47:af:b6:da:b9:f8:5d:
38:7a:99:02:a0:c5:67:73:55:ca:1b:4f:06:7c:a8:
d7:b1:cb:05:f6:13:84:90:83:2a:9f:66:29:65:2c:
2f:45:87:e4:ac:c5:1e:4c:c8:0d:c9:c1:4d:e4:54:
a3:be:a0:5c:19:24:a3:7b:b9:2e:12:a0:31:0f:5c:
6f:5a:d1:a5:02:1e:71:ba:af:82:e3:9e:15:73:aa:
d6:48:8e:98:9f:7c:b5:db:86:24:f2:7c:e5:82:d5:
21:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:1C:CD:FF:08:05:33:88:CC:5E:5A:77:8A:53:E2:91:81:E9:BB:CA
X509v3 Authority Key Identifier:
keyid:4B:3B:54:F4:A1:20:3D:9D:F5:E8:09:42:28:C9:1F:C2:1F:F2:C5:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/4B3B54F4A1203D9DF5E8094228C91FC21FF2C5C4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4B3B54F4A1203D9DF5E8094228C91FC21FF2C5C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/4B3B54F4A1203D9DF5E8094228C91FC21FF2C5C4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:07:b0:81:11:37:68:e1:11:71:e9:fe:ea:dc:5e:18:f8:d5:
0c:44:87:0e:b2:36:39:03:09:9e:90:53:59:8d:47:af:40:6d:
8f:2a:5f:c6:8f:14:5f:aa:d3:2e:59:32:86:7e:fa:dc:86:f1:
bf:13:91:e4:41:d7:84:9b:b5:6f:e9:89:66:53:57:8d:9c:eb:
e4:db:57:43:bc:4c:b5:30:b3:68:40:60:a2:79:ad:c2:b2:6d:
6d:3e:40:a3:00:b7:48:34:4d:88:e7:d5:59:07:73:71:12:ad:
29:a8:55:84:cd:31:a5:6d:8c:45:73:3d:1d:d5:5c:ec:fe:db:
07:4b:af:64:cb:67:10:0d:f0:c5:27:38:df:07:8c:3c:3e:0e:
31:4a:91:ec:46:54:c8:00:c6:59:6d:cd:86:12:52:e3:d8:9e:
98:09:f1:f9:14:19:b4:64:d4:dd:03:4d:c0:5b:6a:9b:ac:4f:
5d:9a:5d:16:17:8f:70:ef:f2:cf:22:c1:c7:05:4e:72:10:2e:
de:6b:56:9a:f6:1c:52:3b:af:7e:f1:d4:a8:fe:2a:56:58:3d:
33:06:09:bf:2b:ac:70:6a:00:2a:7d:2f:3a:33:dd:50:bf:62:
5f:d4:1a:d6:98:20:09:83:1d:ad:0a:3b:bc:34:16:62:27:eb:
dd:74:bf:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:57:34 2026 by rpki-client