
$ rpki-client -vvf repo-rpki.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/1F56B4FADE1163027086547FBCB424EDF45191FD.mft
File: 1F56B4FADE1163027086547FBCB424EDF45191FD.mft (raw, json)
Hash identifier: JuAdTcTEod7pmXrKqhTvhtWriBcONxK7pcJMyfV2nIk=
Subject key identifier: 43:97:4A:86:CB:A2:0A:45:EC:CD:17:9E:B1:07:4D:33:68:E0:86:B0
Authority key identifier: 1F:56:B4:FA:DE:11:63:02:70:86:54:7F:BC:B4:24:ED:F4:51:91:FD
Certificate issuer: /CN=1F56B4FADE1163027086547FBCB424EDF45191FD
Certificate serial: 6DA847F263B408A29DE2D8F2536158DAC8041B5E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F56B4FADE1163027086547FBCB424EDF45191FD.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/1F56B4FADE1163027086547FBCB424EDF45191FD.mft
Manifest number: 0250
Signing time: Sun 01 Mar 2026 01:11:46 +0000
Manifest this update: Sun 01 Mar 2026 01:06:46 +0000
Manifest next update: Wed 04 Mar 2026 13:05:46 +0000
Files and hashes: 1: 3130332e3133362e342e302f32322d3234203d3e203338333230.roa (hash: MgjQuZZ4Lo3TWUBhrnPqAcWFkrZSN9rapanfesBZ5eM=)
2: 1F56B4FADE1163027086547FBCB424EDF45191FD.crl (hash: OzlNvKxqUBzAnOUCNRKjUiEDPb+m00IcG6miTsj/D1w=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/1F56B4FADE1163027086547FBCB424EDF45191FD.crl
rsync://repo-rpki.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/1F56B4FADE1163027086547FBCB424EDF45191FD.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F56B4FADE1163027086547FBCB424EDF45191FD.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 13:05:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:a8:47:f2:63:b4:08:a2:9d:e2:d8:f2:53:61:58:da:c8:04:1b:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1F56B4FADE1163027086547FBCB424EDF45191FD
Validity
Not Before: Mar 1 01:06:46 2026 GMT
Not After : Mar 4 13:05:46 2026 GMT
Subject: CN=43974A86CBA20A45ECCD179EB1074D3368E086B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e8:e8:3a:61:c4:fb:ce:75:e3:9a:47:0c:ef:
32:53:80:d3:0c:69:e2:b1:2f:51:c1:9d:f8:7d:44:
54:21:c0:d7:36:65:cf:c4:3b:3c:19:39:c4:31:fe:
89:8e:e6:28:5f:62:a2:21:88:72:e4:ca:1b:36:ad:
f2:d9:c5:0a:3e:fb:7d:f0:24:06:24:b9:fe:ce:55:
05:9d:00:6c:dd:67:c7:ba:39:df:09:78:15:90:2b:
4c:fd:37:75:71:45:71:2a:37:ae:ee:b2:3f:d2:27:
14:4e:75:6b:10:c2:75:07:b9:b6:c7:6e:95:c1:a9:
b0:25:71:cf:cb:fc:1b:20:6b:90:02:44:89:38:1b:
2f:54:1c:7a:c8:52:07:a7:5e:23:34:fe:5e:72:00:
70:94:d2:19:bf:64:ff:fa:77:60:32:f9:65:96:80:
04:39:40:07:dc:da:2f:9f:47:40:d1:f8:27:f7:99:
c9:51:ab:d6:bf:22:11:5e:e5:f3:6e:82:77:96:b4:
49:b7:c5:5e:0d:c9:2f:93:e5:5d:06:ff:43:45:b3:
91:59:50:2a:87:ac:41:e7:d1:81:83:52:99:61:cb:
f7:2a:fa:da:e9:ff:d5:db:8f:be:ba:11:30:46:20:
3d:a9:ca:37:a3:60:2e:b9:f9:b0:5e:60:95:d0:c5:
12:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:97:4A:86:CB:A2:0A:45:EC:CD:17:9E:B1:07:4D:33:68:E0:86:B0
X509v3 Authority Key Identifier:
keyid:1F:56:B4:FA:DE:11:63:02:70:86:54:7F:BC:B4:24:ED:F4:51:91:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/1F56B4FADE1163027086547FBCB424EDF45191FD.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F56B4FADE1163027086547FBCB424EDF45191FD.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/1F56B4FADE1163027086547FBCB424EDF45191FD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:a5:77:ef:ed:ed:d1:83:62:49:1a:07:6a:32:fd:7c:43:cb:
7b:47:70:25:b0:de:ab:37:47:e4:91:1c:2a:fd:44:e6:bb:94:
27:67:2e:ce:fb:45:06:9e:58:cf:94:72:5f:77:00:56:72:4f:
95:af:96:0c:81:0a:b6:10:a6:32:17:b9:69:e9:83:21:f0:1c:
8c:0c:8d:14:b1:8e:10:f8:53:60:94:b0:6d:6e:a7:05:c0:f3:
aa:e8:4f:81:a2:9e:7a:c1:72:50:de:3d:bc:86:15:3d:eb:bb:
b1:44:8d:88:10:da:0f:09:92:7a:b4:9e:c3:b6:70:d9:ca:bc:
3a:d2:3c:76:06:9f:a2:a8:9b:3b:7a:08:fd:9b:15:97:cb:fa:
2c:e0:88:5d:3f:68:a9:dd:13:95:37:51:d4:d7:17:86:dc:74:
53:34:fa:fb:5d:36:3e:68:b9:9e:d8:3b:cd:d3:92:b4:ff:c4:
1d:62:a8:e7:6c:1d:ec:55:40:cc:6d:ce:62:ee:50:7c:a9:3a:
84:8f:6c:46:80:94:5e:31:a9:cd:10:a0:1a:8c:88:6c:d6:7a:
2b:fe:f3:22:9f:ff:ba:b5:16:77:bf:57:4b:ac:b8:5b:bc:fb:
ce:36:25:40:23:80:da:dd:94:d9:6d:75:ef:88:00:36:2e:19:
ee:07:04:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:00:01 2026 by rpki-client