
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/B4C6D06037582FD0F72239B7AEDCBD0F3342E230.mft
File: B4C6D06037582FD0F72239B7AEDCBD0F3342E230.mft (raw, json)
Hash identifier: 0TBsSCoUrFdBtT7nIa6MIxxuOB2xEYjzPIPLg869Ppo=
Subject key identifier: 16:84:F1:38:CF:F3:73:CB:58:30:C2:F9:FA:71:31:41:F9:22:8B:D9
Authority key identifier: B4:C6:D0:60:37:58:2F:D0:F7:22:39:B7:AE:DC:BD:0F:33:42:E2:30
Certificate issuer: /CN=B4C6D06037582FD0F72239B7AEDCBD0F3342E230
Certificate serial: 3204143D0C6B8BBD487DA19F1BE501ED279C0135
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B4C6D06037582FD0F72239B7AEDCBD0F3342E230.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/B4C6D06037582FD0F72239B7AEDCBD0F3342E230.mft
Manifest number: 41
Signing time: Fri 19 Jun 2026 16:05:06 +0000
Manifest this update: Fri 19 Jun 2026 16:00:06 +0000
Manifest next update: Sat 20 Jun 2026 19:28:06 +0000
Files and hashes: 1: 3130332e39312e302e302f32322d3234203d3e203338343936.roa (hash: BKnEE3t5/yyaN3HJnwE9Dy+SO+1ms0WO08R6OxZOm7o=)
2: B4C6D06037582FD0F72239B7AEDCBD0F3342E230.crl (hash: UZvc0z/zxoWsU3mMuyejMLPByQXYW95KojWchHwTTKc=)
3: 34352e3131332e3232382e302f32322d3234203d3e20313339333936.roa (hash: Gy6gsEzVMHwZHSwsQeHdnkzzEfB+MjqsZcuu2XFRbNQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/B4C6D06037582FD0F72239B7AEDCBD0F3342E230.crl
rsync://rpki-rsync.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/B4C6D06037582FD0F72239B7AEDCBD0F3342E230.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B4C6D06037582FD0F72239B7AEDCBD0F3342E230.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 19:28:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:04:14:3d:0c:6b:8b:bd:48:7d:a1:9f:1b:e5:01:ed:27:9c:01:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B4C6D06037582FD0F72239B7AEDCBD0F3342E230
Validity
Not Before: Jun 19 16:00:06 2026 GMT
Not After : Jun 20 19:28:06 2026 GMT
Subject: CN=1684F138CFF373CB5830C2F9FA713141F9228BD9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:10:94:d5:ca:b3:7e:dd:1a:a1:40:f9:1a:9b:
d4:ba:a1:7d:aa:b9:71:0b:8a:5d:2a:2b:a1:cc:97:
d8:cd:3e:a0:d0:47:01:cc:ba:b4:38:6a:ab:b4:60:
40:87:13:b6:42:6f:7e:0a:9e:1b:61:52:c5:07:6d:
5f:24:9a:0b:e6:c6:33:55:c9:d5:29:9e:03:8f:04:
6d:7a:21:72:d9:55:6d:30:c6:46:25:f0:91:68:14:
c6:45:93:c0:72:c0:ea:73:ca:60:08:1a:5a:71:78:
48:cc:d1:7c:16:95:42:4f:1d:06:be:e4:25:c8:88:
82:83:0b:ce:02:59:0d:cf:d3:a7:39:ff:3a:56:80:
af:ea:24:68:82:ca:87:76:fb:a3:87:fd:12:a3:bf:
90:04:73:04:67:47:dc:cd:22:09:33:81:81:54:8b:
50:fc:86:6c:d3:c5:81:8d:3f:5e:eb:36:10:d6:72:
06:e4:a0:9f:0d:2d:c2:b5:03:f7:45:44:3f:4d:9f:
af:0a:0a:4c:32:91:e8:41:d2:87:1a:0e:d6:de:63:
86:4f:43:fc:50:5c:d1:45:2b:38:ad:fa:08:0f:9d:
60:f8:a7:2f:21:c8:57:9f:0c:83:ae:bb:48:8e:7c:
56:93:ed:96:ab:4d:17:6c:8c:32:d8:a1:3f:5a:66:
53:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:84:F1:38:CF:F3:73:CB:58:30:C2:F9:FA:71:31:41:F9:22:8B:D9
X509v3 Authority Key Identifier:
keyid:B4:C6:D0:60:37:58:2F:D0:F7:22:39:B7:AE:DC:BD:0F:33:42:E2:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/B4C6D06037582FD0F72239B7AEDCBD0F3342E230.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B4C6D06037582FD0F72239B7AEDCBD0F3342E230.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/B4C6D06037582FD0F72239B7AEDCBD0F3342E230.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:03:cf:58:90:d6:33:fe:d1:47:d7:f6:4f:ad:a4:7a:9d:d7:
ab:3a:03:9b:55:9d:3a:ce:4b:f3:33:3c:b7:16:46:cf:f8:b0:
22:ae:99:a3:35:28:19:f0:f7:9b:28:a4:b9:c0:b3:07:ee:a3:
f2:bc:64:01:52:8a:61:90:7c:87:fb:47:8f:92:50:b9:51:65:
a2:66:e2:38:99:6b:61:c3:42:c5:a3:99:f6:13:fd:98:68:e0:
c7:70:2c:c1:b5:01:fe:cc:b7:68:74:f3:1b:71:07:a8:eb:f6:
45:48:70:33:e2:6e:76:66:32:d3:bc:9c:f3:ec:9c:92:62:b7:
37:76:8e:fa:27:ce:bf:4a:c5:61:4a:21:64:54:14:eb:3f:44:
4a:f0:3d:2c:ca:a3:20:de:26:03:17:09:a7:e0:0b:6a:c5:90:
3c:e8:1a:9b:09:80:69:4d:bd:09:84:a8:a5:59:46:18:08:9b:
53:c2:a6:b0:96:fa:13:02:8a:4a:49:ae:04:43:62:14:d4:75:
b7:29:3b:98:2e:01:6e:0f:58:f8:30:24:5b:66:eb:ff:81:d4:
4e:f0:31:0d:54:38:dc:e6:60:93:ff:6b:65:ce:0b:53:86:48:
99:ee:81:4d:d0:62:8d:ce:34:c0:fe:c7:0c:2a:7d:88:76:1c:
69:eb:2c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 09:04:56 2026 by rpki-client