
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/B46886DF13C95D5C834BD72CDC1742C463272A72.mft
File: B46886DF13C95D5C834BD72CDC1742C463272A72.mft (raw, json)
Hash identifier: n0b5UYB6VQpFR4jw6CrXQuo3oMSFVd7lQi7XmWCLXrU=
Subject key identifier: 13:A5:60:4A:B9:BE:4D:28:24:68:E2:26:51:74:AB:08:2D:F7:D8:F9
Authority key identifier: B4:68:86:DF:13:C9:5D:5C:83:4B:D7:2C:DC:17:42:C4:63:27:2A:72
Certificate issuer: /CN=B46886DF13C95D5C834BD72CDC1742C463272A72
Certificate serial: 349AC741BD2835D3AD2BE66B259BDCDF5FDDDE7D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B46886DF13C95D5C834BD72CDC1742C463272A72.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/B46886DF13C95D5C834BD72CDC1742C463272A72.mft
Manifest number: 40
Signing time: Thu 18 Jun 2026 01:18:25 +0000
Manifest this update: Thu 18 Jun 2026 01:13:25 +0000
Manifest next update: Fri 19 Jun 2026 01:32:25 +0000
Files and hashes: 1: 3136302e32322e3139342e302f32332d3234203d3e20313532383236.roa (hash: q5l3eOYPeemq7qIazHMV6kibSs/1KaEDRsni+YgaV1w=)
2: B46886DF13C95D5C834BD72CDC1742C463272A72.crl (hash: iSapBHMSOO84VQaGv5uVClJRPgzVoao5HLRj4GIKaJg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/B46886DF13C95D5C834BD72CDC1742C463272A72.crl
rsync://rpki-rsync.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/B46886DF13C95D5C834BD72CDC1742C463272A72.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B46886DF13C95D5C834BD72CDC1742C463272A72.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 01:32:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:9a:c7:41:bd:28:35:d3:ad:2b:e6:6b:25:9b:dc:df:5f:dd:de:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B46886DF13C95D5C834BD72CDC1742C463272A72
Validity
Not Before: Jun 18 01:13:25 2026 GMT
Not After : Jun 19 01:32:25 2026 GMT
Subject: CN=13A5604AB9BE4D282468E2265174AB082DF7D8F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3c:84:f6:de:38:00:d8:92:e7:a4:4d:66:2e:
58:ba:59:86:80:5b:43:0c:44:b7:b8:a3:3d:6a:9a:
77:db:a5:9a:d5:dd:42:84:ed:1d:60:d1:99:72:4c:
96:b3:89:b7:d5:f8:a9:99:50:b6:9c:ef:35:f6:da:
e8:0b:81:df:ee:24:02:c5:76:fe:72:cf:88:1d:62:
7a:31:2b:30:22:d8:01:7e:5b:c6:53:e5:8b:c4:e9:
10:a5:e9:f2:a5:ee:b4:b8:a2:bc:24:9a:db:ef:76:
a6:4b:c4:41:e6:de:e5:bd:97:71:62:b6:ff:82:6d:
9e:6d:6d:86:70:f1:ba:25:e5:15:46:ea:01:99:e5:
a1:e3:c4:8a:1e:50:7e:d3:cb:8c:94:0a:60:bb:b1:
93:b8:2e:fa:59:16:12:bb:3f:6c:67:d8:01:72:f3:
ba:6c:89:7a:73:c2:a8:5d:24:ae:28:c3:0b:b9:00:
ff:c9:55:2e:90:f6:ed:af:e4:e8:83:31:b8:62:96:
66:a0:04:fe:1f:dd:c0:3e:f6:fd:05:1d:d1:77:dc:
38:d6:59:2b:2b:91:e9:6f:56:42:49:94:b9:3c:78:
16:98:1c:57:0a:5a:07:be:7d:8e:1f:a6:74:b2:84:
db:00:95:ca:5b:12:73:bf:58:b0:70:ef:6f:3b:57:
d5:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:A5:60:4A:B9:BE:4D:28:24:68:E2:26:51:74:AB:08:2D:F7:D8:F9
X509v3 Authority Key Identifier:
keyid:B4:68:86:DF:13:C9:5D:5C:83:4B:D7:2C:DC:17:42:C4:63:27:2A:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/B46886DF13C95D5C834BD72CDC1742C463272A72.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B46886DF13C95D5C834BD72CDC1742C463272A72.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/B46886DF13C95D5C834BD72CDC1742C463272A72.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:a5:10:b0:07:bb:c0:c5:29:65:eb:ee:4a:27:e1:f7:1b:96:
e5:53:03:e9:d3:89:21:8a:11:d5:d9:a0:c9:9f:ea:0c:b3:97:
d5:4f:45:44:18:eb:e3:1d:b3:9f:71:bf:4b:06:bb:9f:51:05:
7b:f4:38:a5:8a:86:ba:6e:d2:96:9b:d6:92:2c:5e:c6:29:f7:
1e:6d:04:2e:92:9a:13:48:96:85:ac:89:87:d9:d0:db:55:9e:
c4:b9:77:ed:de:20:96:0b:6c:33:7b:69:49:b9:9e:6b:bd:24:
8a:01:fe:f9:2b:2f:ee:e8:78:4a:d2:62:d8:a2:7d:1f:08:0a:
e1:8e:da:07:5a:00:ec:f3:69:a8:88:e7:9d:fb:3f:bd:bd:44:
d6:bd:1b:3d:45:91:8f:ac:9b:4c:83:3a:15:2f:00:78:e5:0e:
c3:65:49:16:98:bc:21:5b:4a:fb:d8:12:6f:61:4d:2f:2e:8d:
a4:4b:05:21:5c:8f:2b:82:b1:6c:c7:42:32:7a:1d:71:bd:0d:
db:8c:50:c3:ca:43:49:3e:62:db:ac:d9:74:e7:d1:d4:c2:d0:
e6:10:0b:f2:68:c2:d4:c1:e3:62:c3:03:ab:ba:35:3d:21:d4:
b3:17:e3:55:22:30:af:ab:34:71:eb:d3:41:97:3f:d8:6f:44:
85:78:db:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 18 17:15:57 2026 by rpki-client