
$ rpki-client -vvf rpki-rsync.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/4493CC2E574126EF2608CAE173DD92103E76A98C.mft
File: 4493CC2E574126EF2608CAE173DD92103E76A98C.mft (raw, json)
Hash identifier: xTz0HdKo/XxTI+MvzyRwVrowA8uHaH24pWdbasvtp8c=
Subject key identifier: 47:98:03:00:D2:66:30:5B:88:CE:31:1E:32:BD:EC:98:39:E0:80:61
Authority key identifier: 44:93:CC:2E:57:41:26:EF:26:08:CA:E1:73:DD:92:10:3E:76:A9:8C
Certificate issuer: /CN=4493CC2E574126EF2608CAE173DD92103E76A98C
Certificate serial: 2C59DFA73EA29BB0CCB842E59508309AB941A11E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4493CC2E574126EF2608CAE173DD92103E76A98C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/4493CC2E574126EF2608CAE173DD92103E76A98C.mft
Manifest number: 40
Signing time: Thu 18 Jun 2026 15:05:04 +0000
Manifest this update: Thu 18 Jun 2026 15:00:04 +0000
Manifest next update: Fri 19 Jun 2026 15:47:04 +0000
Files and hashes: 1: 4493CC2E574126EF2608CAE173DD92103E76A98C.crl (hash: wc5AhA+/8PTNJiVF8zWe2W25x9NrEhmqHw06TNdPFI8=)
2: 3135372e31352e37362e302f32342d3234203d3e20313532333734.roa (hash: M2aI0TJnAz0O76NPtC1fdB1sxAIiTB3vENA8aunOOWY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/4493CC2E574126EF2608CAE173DD92103E76A98C.crl
rsync://rpki-rsync.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/4493CC2E574126EF2608CAE173DD92103E76A98C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4493CC2E574126EF2608CAE173DD92103E76A98C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 08:44:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:59:df:a7:3e:a2:9b:b0:cc:b8:42:e5:95:08:30:9a:b9:41:a1:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4493CC2E574126EF2608CAE173DD92103E76A98C
Validity
Not Before: Jun 18 15:00:04 2026 GMT
Not After : Jun 19 15:47:04 2026 GMT
Subject: CN=47980300D266305B88CE311E32BDEC9839E08061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:9b:46:97:d6:43:ea:a2:ca:43:39:22:a9:31:
3a:77:20:47:7b:78:e4:ec:63:5d:9c:2f:fa:f3:66:
ed:77:bb:e1:70:82:45:55:11:e9:65:b0:c0:1f:6d:
1e:fe:8d:c9:28:a4:8b:84:7d:35:d9:e1:62:d2:e5:
48:a6:bb:64:cc:6b:21:ae:84:a1:97:ef:e3:91:ab:
71:42:95:e1:8d:71:14:ba:e4:a6:58:33:25:a4:bb:
3c:59:2e:07:6e:ab:1d:a5:37:f5:ed:e3:c1:2b:a2:
77:fd:8d:bd:3d:5e:15:0c:ed:75:38:f5:e1:73:b7:
6b:19:86:b3:c5:63:3e:b8:5c:9e:4f:25:a0:99:5b:
78:2f:93:3c:5b:c3:07:76:af:f4:6a:04:7f:c4:ac:
c3:98:e4:1b:da:f7:f1:4d:eb:15:18:af:7a:38:7d:
75:82:b5:24:db:d7:8a:9b:65:4f:e1:21:a5:27:dd:
23:ba:06:89:b5:39:de:7e:91:c9:14:85:ab:f5:9c:
11:c8:c2:c0:05:10:46:fe:30:49:b6:a7:6f:ef:00:
a5:31:75:d7:27:ca:f0:ad:e8:d5:ec:41:de:b4:f3:
39:75:40:63:b8:93:85:1b:6e:d8:87:ca:0b:92:69:
aa:87:ac:1f:b3:80:bb:5e:ca:a9:0d:af:e5:6f:d6:
56:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:98:03:00:D2:66:30:5B:88:CE:31:1E:32:BD:EC:98:39:E0:80:61
X509v3 Authority Key Identifier:
keyid:44:93:CC:2E:57:41:26:EF:26:08:CA:E1:73:DD:92:10:3E:76:A9:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/4493CC2E574126EF2608CAE173DD92103E76A98C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4493CC2E574126EF2608CAE173DD92103E76A98C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/4493CC2E574126EF2608CAE173DD92103E76A98C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:1c:16:7f:94:9d:ca:e3:4e:4b:95:14:f9:41:c1:e4:df:76:
66:b2:d8:1d:1b:c5:7c:b7:e7:c5:38:38:d3:11:23:27:e7:68:
e1:15:1c:17:db:3a:cb:60:37:a9:6e:33:b3:0f:cc:a6:0e:b5:
7a:5b:c0:76:f0:56:64:22:45:69:80:ca:56:93:8f:86:f4:e1:
50:dc:55:f6:d6:41:06:07:86:a6:6e:d4:f3:f7:3f:d1:e1:c4:
40:b6:7e:34:d9:95:3c:0b:68:69:c7:d6:bd:d6:84:46:a4:96:
c9:9a:8d:d0:87:d4:e0:2f:63:91:e8:99:08:75:c4:9f:72:fe:
b5:96:59:6f:3b:13:a8:47:c1:b6:f9:d3:46:20:c7:42:ba:05:
27:b8:cf:01:e7:35:d8:5f:d6:7c:46:57:f8:2b:49:16:86:f1:
21:80:3d:c4:24:04:04:f2:0e:57:48:28:9c:3b:50:35:66:20:
ac:11:bf:36:6e:66:28:35:e0:10:f3:a1:28:ba:76:db:e1:5c:
06:f4:9b:8f:ea:f7:6a:cf:48:9d:04:cc:0d:d1:3f:df:7f:88:
cf:2e:db:2a:dd:9d:41:0b:8c:d6:04:bc:9e:10:f5:8b:e0:fa:
fc:0b:7f:c0:c1:93:c5:6d:8a:90:a4:5e:4b:22:55:07:de:60:
86:60:79:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 18 17:15:38 2026 by rpki-client