
$ rpki-client -vvf rpki-rsync.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.mft
File: 1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.mft (raw, json)
Hash identifier: wTy+s1NKRcQa+pY4GUzXarfO9rxfXx64NZ/CPeBSgYo=
Subject key identifier: 88:00:10:47:A4:E2:88:B9:05:DA:A8:E4:10:8B:FC:F0:88:D9:DF:A0
Authority key identifier: 1E:97:AF:BD:D2:A9:C7:E4:65:D0:CD:63:F5:78:BB:21:29:12:A1:CA
Certificate issuer: /CN=1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA
Certificate serial: 6828292E525D07006571387E1DC385FA7FEEA65B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.mft
Manifest number: 3E
Signing time: Tue 16 Jun 2026 20:49:20 +0000
Manifest this update: Tue 16 Jun 2026 20:44:20 +0000
Manifest next update: Thu 18 Jun 2026 00:40:20 +0000
Files and hashes: 1: 3136332e36312e372e302f32342d3234203d3e20313534343134.roa (hash: xZf6NghAkeA3rnWZR27UkazUN/6A+OfxJZ+uYiCfjSs=)
2: 1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.crl (hash: 6YTtfUox7nld13P/tKPwNe1ew6FLZzfJFYH19vUkZ7Y=)
3: 3136332e36312e362e302f32332d3234203d3e20313534343134.roa (hash: y2SWQDiorMVb0CUbtxKzRSTlLsTgGsBsbYUUXmrxSoA=)
4: 3136332e36312e362e302f32342d3234203d3e20313534343134.roa (hash: XD8BvYm1biavlW1Q3HzD/pWFbqnbw6Lp7bWjvS0iO0U=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.crl
rsync://rpki-rsync.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 00:40:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:28:29:2e:52:5d:07:00:65:71:38:7e:1d:c3:85:fa:7f:ee:a6:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA
Validity
Not Before: Jun 16 20:44:20 2026 GMT
Not After : Jun 18 00:40:20 2026 GMT
Subject: CN=88001047A4E288B905DAA8E4108BFCF088D9DFA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:bd:17:7e:b4:3c:14:0b:f9:c9:e6:e3:34:1a:
9a:b2:10:4e:ef:34:c7:a5:b9:94:12:d9:3f:8f:84:
ff:77:a5:77:5b:e5:5d:d1:3a:e2:77:af:04:a5:db:
a4:67:64:bb:e5:05:3a:5f:3a:32:90:ee:78:04:9f:
50:98:cf:5c:be:76:58:f3:17:6f:22:23:7f:18:37:
c6:e8:a2:43:0a:96:fc:20:89:1a:7b:db:03:20:56:
f1:8b:75:89:2b:a4:85:a3:72:a0:58:32:ee:4b:79:
75:5e:95:45:64:d1:0b:14:90:bd:e5:12:cc:f6:34:
f1:99:87:4b:ef:2c:17:89:7c:5f:03:a4:a7:91:d6:
da:67:b1:64:f6:55:c1:71:f4:fe:27:a4:43:3e:d0:
da:d7:23:ee:ce:98:07:ff:a1:93:42:8e:a0:6f:0e:
ff:41:70:42:17:f2:71:13:7d:a1:19:79:9c:88:b0:
12:00:86:2c:0f:c1:25:58:20:0d:44:eb:22:c7:9e:
3d:5f:3c:bd:c2:26:b7:31:3d:85:96:c2:4d:6a:4d:
23:b7:90:fd:51:30:a8:28:c8:07:b9:01:a8:4d:d4:
d1:1e:fa:6f:eb:6e:a9:ce:f6:01:c0:c0:86:f0:11:
14:f2:83:74:e3:75:4a:4a:49:eb:34:fa:c7:a8:f8:
1e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:00:10:47:A4:E2:88:B9:05:DA:A8:E4:10:8B:FC:F0:88:D9:DF:A0
X509v3 Authority Key Identifier:
keyid:1E:97:AF:BD:D2:A9:C7:E4:65:D0:CD:63:F5:78:BB:21:29:12:A1:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:97:80:eb:7a:25:47:54:b0:3a:17:27:14:ff:4a:31:8c:20:
8d:06:89:57:b1:33:ed:12:a5:56:0f:a0:ab:97:e5:5d:8d:21:
03:95:d6:e6:4d:26:c2:d7:d9:d1:25:82:22:16:db:71:51:ca:
48:07:b7:a5:98:1c:0c:07:43:ce:42:15:76:d8:51:cd:9c:a2:
c0:6f:76:6b:ae:2c:85:4b:57:71:d3:a4:8d:c9:84:0f:d0:80:
2b:98:d5:7c:3b:3f:a1:a2:b4:f7:b0:17:14:35:5a:e8:2b:b7:
f7:2d:63:5e:be:c5:50:0d:03:a0:db:0d:4c:69:15:e7:ff:2a:
a9:0e:3f:db:ab:fc:29:7d:17:f7:d9:73:b1:bc:db:d6:cc:8a:
f1:3b:88:77:f4:10:54:7e:ac:a5:54:a8:b5:2f:ee:bb:3e:93:
84:39:5a:da:8c:d0:70:30:48:3f:02:ad:7a:99:0c:ad:16:d5:
0d:69:6e:d4:7d:0a:62:b1:33:f7:04:e2:83:13:4d:c8:e2:7c:
62:6f:c7:70:7a:8d:02:37:5f:22:66:89:b2:75:8c:17:bf:a4:
77:da:af:c0:85:4e:22:f4:9e:42:93:c0:8d:a1:28:29:dd:b1:
99:da:de:ac:19:06:f9:84:2a:6a:bd:fb:4d:76:a9:ca:b6:5e:
dd:c4:a4:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:33:31 2026 by rpki-client