
$ rpki-client -vvf rpki-rsync.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/C4605A0FB7F0E2C2D054433A9E4FCBC4F15EA4F2.mft
File: C4605A0FB7F0E2C2D054433A9E4FCBC4F15EA4F2.mft (raw, json)
Hash identifier: Hf7m3lxWzDUj8WpGpd5/9us8UT2wuav6Gz60vWVe5Ys=
Subject key identifier: 19:7D:EC:4A:FA:C3:3A:B0:90:DC:81:B0:FE:18:9F:6E:EF:A6:61:DD
Authority key identifier: C4:60:5A:0F:B7:F0:E2:C2:D0:54:43:3A:9E:4F:CB:C4:F1:5E:A4:F2
Certificate issuer: /CN=C4605A0FB7F0E2C2D054433A9E4FCBC4F15EA4F2
Certificate serial: 6B01BAD5105D3D21954D01AE83873F9128740337
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C4605A0FB7F0E2C2D054433A9E4FCBC4F15EA4F2.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/C4605A0FB7F0E2C2D054433A9E4FCBC4F15EA4F2.mft
Manifest number: 47
Signing time: Tue 23 Jun 2026 22:13:19 +0000
Manifest this update: Tue 23 Jun 2026 22:08:19 +0000
Manifest next update: Thu 25 Jun 2026 00:04:19 +0000
Files and hashes: 1: 3130332e3135382e3136322e302f32332d3233203d3e203137393935.roa (hash: mCuIl3B+Pq3Irur4J3MaaMeyRxcQ7JCNDx31iNrLDkc=)
2: 3130332e3135382e3136322e302f32342d3234203d3e203137393935.roa (hash: 3Y+Wkuip7kYwTNZB3EWxSZVFtVvvUlonF/rrTJ0WSdE=)
3: 3130332e3135382e3136332e302f32342d3234203d3e203137393935.roa (hash: 9sxhuASFKHOXbj0DOd/0uIHrTBma/ztKpCl/pA1bt+4=)
4: C4605A0FB7F0E2C2D054433A9E4FCBC4F15EA4F2.crl (hash: XPUGVpl3hXQ5EIripbPDl74WT4UN62620D3W9jEZxUE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/C4605A0FB7F0E2C2D054433A9E4FCBC4F15EA4F2.crl
rsync://rpki-rsync.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/C4605A0FB7F0E2C2D054433A9E4FCBC4F15EA4F2.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C4605A0FB7F0E2C2D054433A9E4FCBC4F15EA4F2.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Jun 2026 00:04:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:01:ba:d5:10:5d:3d:21:95:4d:01:ae:83:87:3f:91:28:74:03:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C4605A0FB7F0E2C2D054433A9E4FCBC4F15EA4F2
Validity
Not Before: Jun 23 22:08:19 2026 GMT
Not After : Jun 25 00:04:19 2026 GMT
Subject: CN=197DEC4AFAC33AB090DC81B0FE189F6EEFA661DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b1:bc:2b:01:e9:5d:0c:cd:24:fe:ba:13:10:
5c:f7:d5:a4:1b:aa:f4:86:6b:c9:ab:75:4f:6e:6a:
08:0c:bf:a0:af:a2:d2:64:94:c8:93:47:63:5e:85:
cf:52:ea:53:db:a8:b8:fb:da:a7:d9:fd:48:e2:16:
f6:2d:91:b7:b8:d5:3f:43:1e:9b:df:91:aa:dd:7f:
97:77:96:6a:cd:56:47:84:fb:83:56:cf:87:fd:9e:
0d:5d:03:e1:80:fd:9e:95:dc:8e:e1:6d:34:e7:ec:
20:c2:03:b3:11:5d:ca:be:ab:af:66:fe:b4:a6:6a:
0c:70:83:0e:1d:ec:32:7d:d9:69:30:37:ab:6a:1e:
91:ab:87:69:4b:55:f3:e0:33:73:d6:33:16:be:08:
fe:a1:e4:d3:1b:ec:09:92:8a:1a:2e:b9:bd:2b:fd:
28:90:f7:ca:94:dd:01:17:de:18:7d:e8:b5:12:08:
c7:2b:5e:46:0f:7b:fe:10:c4:74:a3:f4:3e:9f:96:
6f:e9:50:21:7e:86:6d:3d:8d:9b:96:68:b5:6f:a9:
0a:b8:4b:c5:96:ac:9b:6d:59:59:25:81:90:cc:cd:
35:70:63:b8:61:f8:96:9f:49:11:0f:d1:73:a1:5a:
9e:dd:65:f1:c3:b2:4f:3d:9f:0e:3f:f0:d4:70:ec:
15:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:7D:EC:4A:FA:C3:3A:B0:90:DC:81:B0:FE:18:9F:6E:EF:A6:61:DD
X509v3 Authority Key Identifier:
keyid:C4:60:5A:0F:B7:F0:E2:C2:D0:54:43:3A:9E:4F:CB:C4:F1:5E:A4:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/C4605A0FB7F0E2C2D054433A9E4FCBC4F15EA4F2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C4605A0FB7F0E2C2D054433A9E4FCBC4F15EA4F2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/C4605A0FB7F0E2C2D054433A9E4FCBC4F15EA4F2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:cf:17:f4:8c:16:4c:b1:27:f0:ae:c5:76:ff:53:ad:4a:8b:
a9:a0:f1:7c:51:b1:85:16:36:32:96:ec:ab:c6:24:a3:30:8b:
c2:77:39:95:0c:7c:ab:5c:75:fc:6a:d0:65:5d:10:5a:fb:fc:
68:50:21:56:10:b4:d5:38:01:72:fb:20:4c:20:94:2c:7a:cd:
3e:42:a4:10:1f:73:4b:e9:5c:b8:40:b7:00:b6:d4:ea:ef:b1:
79:cf:2a:98:8b:c4:4c:cb:a9:94:ef:c6:9f:10:d6:e8:85:0d:
57:70:b1:a0:61:51:c6:71:bb:5a:a4:b2:5b:17:17:22:83:41:
ad:18:35:08:68:91:8f:f8:38:28:5e:7c:ab:3d:86:42:cf:b0:
03:fe:89:24:da:05:af:fc:6f:be:b4:09:50:c9:a9:fc:23:28:
c2:d3:7b:10:94:fd:a9:18:8e:79:e7:e8:24:39:85:5a:3e:53:
88:09:84:c6:22:21:d7:b8:40:3d:0a:80:9a:4a:9e:16:2d:d4:
5b:d6:9f:86:e7:3d:21:5b:b1:c1:d0:52:dd:ca:78:73:f1:50:
29:79:9f:76:0d:d9:6f:21:1b:4e:66:77:d0:0b:3c:eb:b1:bc:
64:89:b4:b4:11:5a:e8:86:3f:d5:ff:47:1a:96:68:2a:5c:38:
76:a5:99:fd
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUawG61RBdPSGVTQGug4c/kSh0AzcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzQ2MDVBMEZCN0YwRTJDMkQwNTQ0MzNBOUU0RkNCQzRG
MTVFQTRGMjAeFw0yNjA2MjMyMjA4MTlaFw0yNjA2MjUwMDA0MTlaMDMxMTAvBgNV
BAMTKDE5N0RFQzRBRkFDMzNBQjA5MERDODFCMEZFMTg5RjZFRUZBNjYxREQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJsbwrAeldDM0k/roTEFz31aQb
qvSGa8mrdU9uaggMv6CvotJklMiTR2Nehc9S6lPbqLj72qfZ/UjiFvYtkbe41T9D
Hpvfkardf5d3lmrNVkeE+4NWz4f9ng1dA+GA/Z6V3I7hbTTn7CDCA7MRXcq+q69m
/rSmagxwgw4d7DJ92WkwN6tqHpGrh2lLVfPgM3PWMxa+CP6h5NMb7AmSihouub0r
/SiQ98qU3QEX3hh96LUSCMcrXkYPe/4QxHSj9D6flm/pUCF+hm09jZuWaLVvqQq4
S8WWrJttWVklgZDMzTVwY7hh+JafSREP0XOhWp7dZfHDsk89nw4/8NRw7BUJAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUGX3sSvrDOrCQ3IGw/hifbu+mYd0wHwYDVR0j
BBgwFoAUxGBaD7fw4sLQVEM6nk/LxPFepPIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MTZjMWM1MjktNjI0NC00NTAzLWFmNTYtNjk0NTllNGE3NjBmLzAvQzQ2MDVBMEZC
N0YwRTJDMkQwNTQ0MzNBOUU0RkNCQzRGMTVFQTRGMi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9DNDYwNUEwRkI3RjBFMkMyRDA1NDQzM0E5RTRGQ0JDNEYxNUVB
NEYyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTZjMWM1MjktNjI0NC00NTAzLWFm
NTYtNjk0NTllNGE3NjBmLzAvQzQ2MDVBMEZCN0YwRTJDMkQwNTQ0MzNBOUU0RkNC
QzRGMTVFQTRGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGXPF/SMFkyxJ/CuxXb/U61Ki6mg8XxRsYUW
NjKW7KvGJKMwi8J3OZUMfKtcdfxq0GVdEFr7/GhQIVYQtNU4AXL7IEwglCx6zT5C
pBAfc0vpXLhAtwC21OrvsXnPKpiLxEzLqZTvxp8Q1uiFDVdwsaBhUcZxu1qkslsX
FyKDQa0YNQhokY/4OChefKs9hkLPsAP+iSTaBa/8b760CVDJqfwjKMLTexCU/akY
jnnn6CQ5hVo+U4gJhMYiIde4QD0KgJpKnhYt1FvWn4bnPSFbscHQUt3KeHPxUCl5
n3YN2W8hG05md9ALPOuxvGSJtLQRWuiGP9X/RxqWaCpcOHalmf0=
-----END CERTIFICATE-----
Generated at Wed Jun 24 16:42:00 2026 by rpki-client