
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e8ced18d-a7cc-4b44-af4a-85f304f9eb6c/0/4AE1581EC7DFE65F5E99AA613475D8542808C46A.mft
File: 4AE1581EC7DFE65F5E99AA613475D8542808C46A.mft (raw, json)
Hash identifier: F56HXaDfa5PXNBj/bduaTeU0sOHWck/py2Nz5oZa6oE=
Subject key identifier: 18:EA:6D:D3:70:B9:09:4C:0A:33:D0:18:1F:D1:D1:A2:94:2A:7D:87
Authority key identifier: 4A:E1:58:1E:C7:DF:E6:5F:5E:99:AA:61:34:75:D8:54:28:08:C4:6A
Certificate issuer: /CN=4AE1581EC7DFE65F5E99AA613475D8542808C46A
Certificate serial: 24672A8863569EA0D07D9858C7E6A8967D486AF0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4AE1581EC7DFE65F5E99AA613475D8542808C46A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e8ced18d-a7cc-4b44-af4a-85f304f9eb6c/0/4AE1581EC7DFE65F5E99AA613475D8542808C46A.mft
Manifest number: 3F
Signing time: Wed 17 Jun 2026 23:26:01 +0000
Manifest this update: Wed 17 Jun 2026 23:21:01 +0000
Manifest next update: Fri 19 Jun 2026 03:13:01 +0000
Files and hashes: 1: 3135372e32302e3233332e302f32342d3234203d3e20313532343339.roa (hash: Tkh0+XsPVTypniidThAuJHBFvt6qbkv8XEWtO3EZhzc=)
2: 4AE1581EC7DFE65F5E99AA613475D8542808C46A.crl (hash: 8jJBVbZl5n/KXVkxCxws1oiYD0trXaVvJJuLh3ArSv4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e8ced18d-a7cc-4b44-af4a-85f304f9eb6c/0/4AE1581EC7DFE65F5E99AA613475D8542808C46A.crl
rsync://rpki-rsync.idnic.net/repo/e8ced18d-a7cc-4b44-af4a-85f304f9eb6c/0/4AE1581EC7DFE65F5E99AA613475D8542808C46A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4AE1581EC7DFE65F5E99AA613475D8542808C46A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 03:13:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:67:2a:88:63:56:9e:a0:d0:7d:98:58:c7:e6:a8:96:7d:48:6a:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4AE1581EC7DFE65F5E99AA613475D8542808C46A
Validity
Not Before: Jun 17 23:21:01 2026 GMT
Not After : Jun 19 03:13:01 2026 GMT
Subject: CN=18EA6DD370B9094C0A33D0181FD1D1A2942A7D87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:2f:42:b4:cb:b0:84:d8:03:b6:0e:32:1c:14:
fd:0c:b1:ac:be:42:16:cb:10:9e:84:71:d6:c7:b9:
6e:23:c7:1f:6c:02:99:77:2a:46:4e:e1:e1:a8:0b:
d7:ef:d3:6e:a4:bc:00:ee:c5:55:71:1e:12:65:14:
8a:5e:d9:fc:58:c9:30:cc:d2:e2:eb:b4:c8:d4:9c:
96:92:a0:12:03:03:10:90:de:27:f0:b9:3e:d2:c4:
71:99:ab:d6:76:96:8b:39:0f:0f:01:57:a7:8e:ae:
a1:8d:72:31:fd:85:61:09:ce:19:c7:9e:78:e6:47:
e8:31:51:bb:e0:54:fd:6e:16:75:4b:1a:23:e7:e1:
b6:8e:58:04:43:5a:d7:73:72:01:5a:f2:18:b1:43:
43:aa:af:24:bf:01:5a:b5:ff:10:7c:d6:a9:24:7c:
11:95:85:b4:e2:fa:e9:26:f2:ef:c1:80:b1:05:69:
bf:54:2a:44:c2:f8:71:ff:46:4e:f2:86:5a:97:01:
e7:c1:27:52:f3:9d:ee:da:e8:fd:22:cb:c7:9e:7f:
6d:ca:13:03:1f:ab:51:a1:81:9c:d9:a3:49:33:f5:
ae:3c:9f:df:9f:d2:5a:6a:4a:c0:38:4e:b0:55:f3:
a1:31:29:d7:58:7d:57:bd:31:42:3f:78:60:3d:ce:
bd:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:EA:6D:D3:70:B9:09:4C:0A:33:D0:18:1F:D1:D1:A2:94:2A:7D:87
X509v3 Authority Key Identifier:
keyid:4A:E1:58:1E:C7:DF:E6:5F:5E:99:AA:61:34:75:D8:54:28:08:C4:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e8ced18d-a7cc-4b44-af4a-85f304f9eb6c/0/4AE1581EC7DFE65F5E99AA613475D8542808C46A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4AE1581EC7DFE65F5E99AA613475D8542808C46A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e8ced18d-a7cc-4b44-af4a-85f304f9eb6c/0/4AE1581EC7DFE65F5E99AA613475D8542808C46A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:08:7c:5d:bf:67:96:8a:38:94:d6:79:85:3f:d7:1f:b9:a7:
5f:f9:7f:19:39:5b:14:fd:b2:11:1f:1f:83:c9:61:d2:7f:cb:
e0:7b:fb:b2:a2:55:ed:b6:13:98:cb:85:7d:cd:0a:a5:b3:36:
9a:66:60:4e:3d:33:7d:ea:23:c9:ff:ab:40:97:81:0f:43:9b:
9e:82:2d:ce:c5:6b:35:2a:c4:27:19:7a:7c:e5:b2:46:fe:6a:
e4:36:9b:2d:45:3a:01:16:bc:7d:75:7b:9e:9e:ef:4a:ab:e2:
63:3c:c2:8b:8f:30:7a:7b:76:cd:2a:98:28:32:f8:1b:a3:02:
ad:ae:b2:b8:b9:4f:ce:9c:5c:1e:68:fa:b5:4d:1c:8e:16:f4:
84:df:9b:c2:84:68:61:50:aa:2d:4b:6f:78:af:e4:b8:d8:ff:
c6:fa:36:34:37:09:d8:59:fe:22:79:9c:bd:6c:02:b4:5e:5e:
75:ba:4e:e7:01:1e:b8:a7:1a:4b:f8:c4:9c:74:f7:a3:e0:0c:
e1:a0:3d:4f:f6:46:34:fb:6e:de:37:e1:f0:78:7d:40:76:93:
aa:38:4e:9d:dd:69:76:1c:6d:d8:b2:d6:1d:85:8a:4c:46:db:
86:78:ef:a4:9a:06:38:28:3b:be:7a:c4:a7:02:d6:a1:39:58:
89:1d:55:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 18 17:13:25 2026 by rpki-client