
$ rpki-client -vvf rpki-rsync.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205.mft
File: 1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205.mft (raw, json)
Hash identifier: hBy9iWlzfCf/4umpq/xbH39wM/tbzdZBoyZKd2TYBL0=
Subject key identifier: B6:91:31:48:21:74:D0:D4:D1:D3:8E:E4:67:2C:AB:2A:6B:69:06:21
Authority key identifier: 1C:64:A5:D7:8F:86:E2:7A:0F:CF:C0:B1:E2:60:6E:2A:96:1F:72:05
Certificate issuer: /CN=1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205
Certificate serial: 01415FAAFFFA19F843B3AE4457C97EF5B3903D24
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205.mft
Manifest number: 3D
Signing time: Tue 16 Jun 2026 21:30:16 +0000
Manifest this update: Tue 16 Jun 2026 21:25:16 +0000
Manifest next update: Thu 18 Jun 2026 00:31:16 +0000
Files and hashes: 1: 3130332e3132312e3132332e302f32342d3234203d3e20313338303539.roa (hash: krKKJL8xoxgN2wyxvjJrqrqA9vT6YHk/PFCm7/PP3c4=)
2: 1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205.crl (hash: 65BraHjUeWD1JcuBiZtHyoAzDFcVZt1brl6VxWXCxqE=)
3: 323030313a6466363a343530303a3a2f34382d3438203d3e20313338303539.roa (hash: sefAns8WGP+QODtyZI5xSMBLlCAhkEsg1IdG1oXtiJc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205.crl
rsync://rpki-rsync.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 00:31:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:41:5f:aa:ff:fa:19:f8:43:b3:ae:44:57:c9:7e:f5:b3:90:3d:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205
Validity
Not Before: Jun 16 21:25:16 2026 GMT
Not After : Jun 18 00:31:16 2026 GMT
Subject: CN=B69131482174D0D4D1D38EE4672CAB2A6B690621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b2:8c:c0:55:70:92:52:5d:fd:9d:b5:d2:52:
0c:76:fe:55:1f:88:09:d9:a0:a6:1e:79:cb:e5:34:
55:cd:f0:b2:92:bf:21:c0:bb:9a:f9:d0:09:a5:8c:
98:10:65:f5:ab:39:29:a6:f2:0d:b6:06:01:9d:8c:
48:e6:bb:10:58:86:07:c2:6e:6a:4c:f5:bb:d4:d8:
90:6a:61:4e:1b:b2:2b:51:17:9d:5b:24:54:8a:f4:
d3:9e:94:39:6c:1c:5e:23:a3:48:a9:26:24:1b:6a:
d1:82:9f:6a:25:96:e3:1e:a6:80:09:fb:77:76:89:
95:a1:66:e5:96:f1:f3:67:2c:64:3c:b9:ba:b6:b4:
ab:1e:f1:8c:39:a0:30:77:77:82:df:30:84:2a:71:
b3:f3:b5:fc:c9:e7:33:4a:e6:4d:5a:68:11:05:31:
5e:fd:26:3c:8b:78:c4:ac:cf:b9:46:e4:37:8d:88:
a2:ab:9d:39:b7:bc:98:92:14:57:4c:cc:d7:ce:3a:
e6:06:28:fa:4f:93:95:e8:ab:20:58:3c:1e:db:d4:
8d:13:ea:91:6b:26:4f:26:1d:e0:47:a1:9b:98:c7:
53:32:93:96:75:92:43:43:1c:cf:38:db:9b:aa:4d:
1f:2b:99:91:f0:78:ca:48:83:d3:3f:e1:ee:a4:ed:
80:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:91:31:48:21:74:D0:D4:D1:D3:8E:E4:67:2C:AB:2A:6B:69:06:21
X509v3 Authority Key Identifier:
keyid:1C:64:A5:D7:8F:86:E2:7A:0F:CF:C0:B1:E2:60:6E:2A:96:1F:72:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:81:62:d7:6f:a0:64:af:a6:82:49:2f:16:88:26:68:39:ba:
b6:73:64:a1:06:c1:92:b2:02:0b:ab:ed:28:d6:5c:8e:7b:52:
89:71:5c:42:4c:e6:80:37:7d:68:8e:a2:65:bb:21:44:54:d4:
49:57:5e:68:8f:be:4b:d2:ef:ed:f5:ab:16:b3:4e:6d:46:1e:
2e:6a:32:c2:81:b4:d3:88:25:83:a7:ce:8d:95:1a:0d:aa:55:
8c:2f:0e:af:f4:a1:bb:2b:f2:24:f6:c9:26:85:e3:86:4c:42:
c7:11:41:df:f5:91:e7:3c:20:ec:18:c3:e4:87:8c:df:35:40:
e6:b4:80:60:63:74:6e:89:40:77:05:a1:6a:b2:c2:ef:cb:13:
02:53:be:23:44:a3:cb:86:0f:a7:7b:c7:08:01:61:bc:92:e1:
cd:c8:ad:35:2a:64:8b:89:a6:6f:aa:08:00:c0:c5:09:35:b9:
04:57:80:0f:06:c4:98:27:d4:72:c2:b7:a2:95:23:4b:25:65:
e6:9c:43:3e:b3:25:6a:f2:54:df:50:6f:96:8b:ef:b6:68:49:
c8:b3:cc:2f:2d:6a:42:7c:5e:d9:f4:a7:ef:32:82:75:7e:f3:
6b:24:da:fc:c6:1a:da:7d:a5:f3:0f:26:a9:52:da:8d:87:70:
0b:8f:52:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 12:39:54 2026 by rpki-client