
$ rpki-client -vvf rpki-rsync.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/4063368E83B93018DA72EDEB060702A5F8F9269C.mft
File: 4063368E83B93018DA72EDEB060702A5F8F9269C.mft (raw, json)
Hash identifier: QPi9MsUaqK4GoH0CZHXSmdtBALwnSemRioh6qhj3BwI=
Subject key identifier: 6D:A0:05:04:79:88:96:0B:76:97:8C:4C:8E:E0:D8:33:3F:29:D9:13
Authority key identifier: 40:63:36:8E:83:B9:30:18:DA:72:ED:EB:06:07:02:A5:F8:F9:26:9C
Certificate issuer: /CN=4063368E83B93018DA72EDEB060702A5F8F9269C
Certificate serial: 52A94142D1AC68D76B9A8F0EC3701D46D2390FEE
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4063368E83B93018DA72EDEB060702A5F8F9269C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/4063368E83B93018DA72EDEB060702A5F8F9269C.mft
Manifest number: 42
Signing time: Fri 19 Jun 2026 22:48:33 +0000
Manifest this update: Fri 19 Jun 2026 22:43:33 +0000
Manifest next update: Sun 21 Jun 2026 01:53:33 +0000
Files and hashes: 1: 3130332e3134372e3136342e302f32332d3234203d3e203137373639.roa (hash: YoPiO/BGRHdiNMspy83HWAqltNlSFq59XV4OA1NunVQ=)
2: 4063368E83B93018DA72EDEB060702A5F8F9269C.crl (hash: HNqBJ4hun/R4L2I5tY4PJpjvLRmN6Hmta83XOi3acig=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/4063368E83B93018DA72EDEB060702A5F8F9269C.crl
rsync://rpki-rsync.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/4063368E83B93018DA72EDEB060702A5F8F9269C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4063368E83B93018DA72EDEB060702A5F8F9269C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 21 Jun 2026 01:53:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:a9:41:42:d1:ac:68:d7:6b:9a:8f:0e:c3:70:1d:46:d2:39:0f:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4063368E83B93018DA72EDEB060702A5F8F9269C
Validity
Not Before: Jun 19 22:43:33 2026 GMT
Not After : Jun 21 01:53:33 2026 GMT
Subject: CN=6DA005047988960B76978C4C8EE0D8333F29D913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:62:27:20:32:a2:47:88:82:6c:f7:ed:e8:04:
08:b9:2f:96:97:59:98:25:c3:de:e2:fb:44:ad:ae:
f7:ed:55:8d:fd:3c:fa:e0:55:cc:85:f2:fc:d1:dd:
e4:db:50:c8:db:f9:6a:34:b4:73:73:e9:ee:b1:32:
f1:bd:9a:5c:cd:d3:13:d5:43:13:9a:1b:cc:5c:e5:
6a:5d:97:08:ee:80:4c:71:2c:aa:47:b3:a4:24:03:
56:00:6a:d6:81:e3:ba:44:7b:29:5c:88:9f:9e:44:
07:40:e2:51:96:82:96:f4:16:d8:52:23:ff:89:36:
0f:f2:38:5d:7a:33:c5:3b:5d:c8:58:c0:42:44:db:
c0:0e:98:b8:19:3a:ef:5f:ae:5d:2f:51:d8:4e:1e:
50:d4:6c:b5:89:b6:42:e0:6f:1a:ca:5b:4b:7f:d6:
a9:fb:31:46:b2:4c:ba:b0:39:76:bf:3f:36:17:e3:
cb:33:d4:32:ed:64:4e:3a:df:36:6c:41:2b:4d:8b:
75:03:58:40:7a:56:0a:18:90:fa:f3:50:2d:08:91:
7a:96:60:b6:37:12:64:07:71:cf:1e:94:d0:7d:1d:
07:16:3b:e0:7c:9b:f4:4c:6f:be:61:99:a6:56:08:
94:8c:cc:d2:3c:26:59:27:e1:3a:a4:ab:bf:56:76:
eb:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:A0:05:04:79:88:96:0B:76:97:8C:4C:8E:E0:D8:33:3F:29:D9:13
X509v3 Authority Key Identifier:
keyid:40:63:36:8E:83:B9:30:18:DA:72:ED:EB:06:07:02:A5:F8:F9:26:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/4063368E83B93018DA72EDEB060702A5F8F9269C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4063368E83B93018DA72EDEB060702A5F8F9269C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/4063368E83B93018DA72EDEB060702A5F8F9269C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:7a:06:49:44:f5:8b:29:19:13:e4:18:3a:52:1d:98:80:b8:
97:1d:c0:08:b7:4b:e9:07:aa:7c:4a:2b:dd:ca:cd:e3:a8:5f:
08:ad:f5:47:cc:70:68:16:83:8f:9c:13:0d:4a:16:84:e3:cd:
28:55:6c:ff:36:73:5f:0a:09:f1:3b:74:e7:1b:24:92:1a:7c:
db:f7:be:59:17:16:52:1e:73:9d:da:e3:97:df:71:07:af:bd:
56:d0:23:de:50:13:45:aa:5b:f4:36:b5:28:39:91:eb:91:bf:
11:92:3e:b6:e8:a9:6f:37:a9:cc:d4:f8:6d:81:36:d8:57:64:
e6:55:d1:59:ad:e1:c1:f5:45:82:86:fd:a2:4a:b8:b1:de:1a:
24:b8:f2:04:77:13:30:45:68:ff:8a:21:9b:31:7c:0c:46:81:
36:ea:b3:79:dd:02:8f:da:bc:3d:fb:96:e7:2e:49:03:94:47:
4c:8a:2e:55:87:cd:01:05:1e:8a:36:3f:72:5a:81:48:d4:87:
be:aa:0f:89:e6:63:49:a2:48:13:81:af:09:2e:13:72:53:65:
9c:84:0a:b3:d3:2f:5f:69:fd:85:b1:c0:74:ae:9e:bc:4d:3c:
32:59:f0:ef:9a:8f:39:15:28:b6:12:78:02:10:7c:6b:4d:83:
69:33:1c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 09:19:58 2026 by rpki-client