
$ rpki-client -vvf rpki-rsync.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/4DD4106B03003D9C5B51BF893631C8E467E07F65.mft
File: 4DD4106B03003D9C5B51BF893631C8E467E07F65.mft (raw, json)
Hash identifier: JcGluL+R4ZWzbhyShF3IzQaDDNHFg8iguJmhE6pZy4E=
Subject key identifier: C9:24:02:26:77:ED:19:DA:DC:4B:34:EF:05:AC:EA:80:D4:42:BF:EB
Authority key identifier: 4D:D4:10:6B:03:00:3D:9C:5B:51:BF:89:36:31:C8:E4:67:E0:7F:65
Certificate issuer: /CN=4DD4106B03003D9C5B51BF893631C8E467E07F65
Certificate serial: 6A309045384B018D1202775039D064CBAA18388D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DD4106B03003D9C5B51BF893631C8E467E07F65.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/4DD4106B03003D9C5B51BF893631C8E467E07F65.mft
Manifest number: 41
Signing time: Fri 19 Jun 2026 23:29:22 +0000
Manifest this update: Fri 19 Jun 2026 23:24:22 +0000
Manifest next update: Sun 21 Jun 2026 00:51:22 +0000
Files and hashes: 1: 3130332e3135302e3134392e302f32342d3234203d3e203438343635.roa (hash: vt8DYAXcs1pDLyawi9vIroRmMQYzGKkbfW81Knq/qWg=)
2: 3130332e3135302e3134382e302f32342d3234203d3e203438343635.roa (hash: 8wp+UX0eKC57lngDUIgSZuJvHJ5tDAZofYJHo8cFmpA=)
3: 4DD4106B03003D9C5B51BF893631C8E467E07F65.crl (hash: QcZkKVyYi5zT9Qvkq5rOflbKozt5ZSzCdXctCdTw/EY=)
4: 3130332e3135302e3134382e302f32332d3233203d3e20313430333932.roa (hash: 1g+y0imkE46p3egXComeqIG0umuFfgQzJzzyy2lkq6g=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/4DD4106B03003D9C5B51BF893631C8E467E07F65.crl
rsync://rpki-rsync.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/4DD4106B03003D9C5B51BF893631C8E467E07F65.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DD4106B03003D9C5B51BF893631C8E467E07F65.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 21 Jun 2026 00:51:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:30:90:45:38:4b:01:8d:12:02:77:50:39:d0:64:cb:aa:18:38:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4DD4106B03003D9C5B51BF893631C8E467E07F65
Validity
Not Before: Jun 19 23:24:22 2026 GMT
Not After : Jun 21 00:51:22 2026 GMT
Subject: CN=C924022677ED19DADC4B34EF05ACEA80D442BFEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:cb:ad:ca:69:0d:83:38:99:8e:f9:65:08:e2:
0c:b7:08:a3:1c:76:5a:7b:e6:99:15:d4:eb:da:f1:
19:04:e5:46:02:b5:af:7b:ac:e5:a0:24:8b:c0:1d:
30:0c:3a:d1:2c:4f:f5:02:04:6f:08:98:d8:59:95:
b1:99:be:54:b1:82:b0:59:54:77:a9:0e:e5:da:1d:
8b:39:e1:d9:a2:c6:7e:1a:48:4f:25:8b:d7:8c:92:
43:95:0b:7a:5a:0f:8d:81:54:cb:2c:9f:56:75:21:
04:42:29:5e:4f:88:ef:c4:12:db:3d:40:2b:0e:ea:
ab:7a:ce:7d:2e:d7:4f:50:2e:cc:dd:e4:75:12:a0:
bc:07:5d:ca:ac:b2:e7:31:71:6a:37:5b:b0:c0:75:
36:dc:e8:fc:a0:db:b6:2c:0d:30:79:67:5b:bd:1a:
d6:9a:8f:f5:d1:3b:61:e3:48:2c:4d:40:ce:bb:4a:
2c:c0:84:39:3b:4f:1c:25:d9:bd:40:71:93:30:fc:
02:19:15:47:97:fd:4b:5c:9e:4c:09:7e:57:cc:c5:
bb:66:49:95:8b:6b:31:f5:a8:be:59:a8:c3:6b:b6:
90:6d:36:c6:fb:44:72:8d:9d:51:df:17:14:18:94:
3a:4f:d1:c6:fa:f6:f1:1b:cb:c1:81:93:78:e4:c6:
ba:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:24:02:26:77:ED:19:DA:DC:4B:34:EF:05:AC:EA:80:D4:42:BF:EB
X509v3 Authority Key Identifier:
keyid:4D:D4:10:6B:03:00:3D:9C:5B:51:BF:89:36:31:C8:E4:67:E0:7F:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/4DD4106B03003D9C5B51BF893631C8E467E07F65.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DD4106B03003D9C5B51BF893631C8E467E07F65.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/4DD4106B03003D9C5B51BF893631C8E467E07F65.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:99:47:22:81:52:15:17:e0:04:f2:e5:40:40:a8:7d:1b:f5:
7a:37:17:b6:5d:de:92:64:93:95:87:7c:5c:a9:01:4a:ee:5c:
ec:99:70:d7:e7:76:6d:07:cf:3b:40:2f:a7:93:c4:7e:3d:90:
5e:fb:f2:b5:b1:bc:4f:ba:5a:86:1d:d8:03:7f:e9:af:b0:ee:
dd:6d:1c:a5:e2:9a:dd:5a:c1:45:23:b3:77:d1:a6:79:0f:69:
09:af:81:81:ec:09:11:c0:e4:a2:e1:e2:47:04:71:a8:73:6f:
55:17:fd:16:bf:88:e2:c2:d8:41:10:aa:4e:4e:c6:62:5e:03:
72:b4:b4:58:19:48:8c:0c:90:09:d1:62:83:8e:52:01:93:eb:
44:18:45:a1:1c:4f:da:e7:fd:5d:5c:4d:26:f3:f7:e5:08:4e:
77:b1:c0:66:71:42:12:6c:ee:82:ba:7c:e6:01:3f:dd:58:ba:
8e:71:a8:ed:cd:e8:68:87:77:44:2f:6f:51:cc:47:a2:aa:6b:
f9:9f:43:47:93:57:a9:2b:0b:b4:ad:63:71:a4:cb:d7:6c:80:
f8:96:54:7b:5d:90:08:d7:22:9c:30:b2:eb:93:c1:5a:72:ca:
14:f5:15:9a:f7:8e:8b:45:10:b0:95:12:d4:ac:44:73:7b:bb:
da:61:f5:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 15:47:11 2026 by rpki-client