
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/19101281C951DCE434F1B713AE570F59EE413A09.mft
File: 19101281C951DCE434F1B713AE570F59EE413A09.mft (raw, json)
Hash identifier: 0xUK0WIYMubxDzpWtAa0qkDjiKMP7KOS5OFpScNu4Gg=
Subject key identifier: B1:CD:21:C9:21:A8:A3:C3:BE:1A:C0:39:79:07:62:65:6E:73:14:5E
Authority key identifier: 19:10:12:81:C9:51:DC:E4:34:F1:B7:13:AE:57:0F:59:EE:41:3A:09
Certificate issuer: /CN=19101281C951DCE434F1B713AE570F59EE413A09
Certificate serial: 6E154E4488F924C4E962A03C4F3C0CF28981A5C3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19101281C951DCE434F1B713AE570F59EE413A09.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/19101281C951DCE434F1B713AE570F59EE413A09.mft
Manifest number: BE
Signing time: Mon 21 Sep 2026 11:51:01 +0000
Manifest this update: Mon 21 Sep 2026 11:46:01 +0000
Manifest next update: Tue 22 Sep 2026 13:21:01 +0000
Files and hashes: 1: 3130332e3230382e3130302e302f32342d3234203d3e20313334363438.roa (hash: w5VnAqDMpxkCSyJK8a4JzBCfvPRADlp4Zd050ewYnlA=)
2: 3130332e3230382e3130332e302f32342d3234203d3e20313334363438.roa (hash: lsZJ+/dkSenhsqGfebfOtSdM0lXp316Uwu+8bQgCJfE=)
3: 3130332e3230382e3130312e302f32342d3234203d3e20313334363438.roa (hash: pQnNBmBtFzueuc0/RAfPveu5rYMb0ariGWnKZ/WG/t8=)
4: 3130332e3230382e3130322e302f32342d3234203d3e20313334363438.roa (hash: bgJcO1kAlUNDdjIqyEDrjwkCdWK+MIfy7MXbYHWX1YE=)
5: 19101281C951DCE434F1B713AE570F59EE413A09.crl (hash: NA19tHhX3k/PWDG7ih46U6fEufFuzJx4aUSJIK7wpRc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/19101281C951DCE434F1B713AE570F59EE413A09.crl
rsync://rpki-rsync.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/19101281C951DCE434F1B713AE570F59EE413A09.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19101281C951DCE434F1B713AE570F59EE413A09.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 13:21:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:15:4e:44:88:f9:24:c4:e9:62:a0:3c:4f:3c:0c:f2:89:81:a5:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19101281C951DCE434F1B713AE570F59EE413A09
Validity
Not Before: Sep 21 11:46:01 2026 GMT
Not After : Sep 22 13:21:01 2026 GMT
Subject: CN=B1CD21C921A8A3C3BE1AC039790762656E73145E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:8c:d5:e9:d4:d2:67:d0:e1:e0:55:e7:de:5d:
1a:4b:eb:66:d2:84:f6:8c:c3:d5:7f:f9:f0:9b:7f:
54:5b:d1:6c:c6:28:65:5e:3a:d6:ba:93:4a:d8:87:
50:18:4f:c5:97:9e:09:dd:15:28:9c:f6:79:af:ea:
45:0e:be:f9:81:b2:ba:ec:73:97:e4:b6:e4:07:81:
4c:a9:83:8d:43:6a:aa:c1:9b:c9:9b:86:36:e2:c7:
53:df:87:93:4a:13:6d:19:ee:b7:6a:e8:88:d1:43:
bf:ad:81:86:75:fe:8c:17:44:3f:88:be:05:e2:ea:
ae:ef:40:01:1d:62:31:22:32:3b:d9:e8:ed:99:1f:
07:e5:21:4b:58:46:4b:82:a9:90:30:aa:fe:7e:d0:
72:d0:58:f8:b9:24:9c:65:05:fe:35:f2:93:5e:e3:
e7:8b:6c:92:5d:65:47:15:d1:28:70:7e:85:da:3e:
dc:a2:59:9b:30:fa:d1:53:29:cd:76:9c:71:3c:d7:
e6:16:8c:c4:0a:b7:d4:e6:41:49:2f:83:d3:75:0b:
46:03:31:43:ee:4d:e7:8b:84:04:ce:b1:2c:22:17:
69:22:63:e3:b8:9e:5c:7f:e7:36:af:b9:c8:ad:c0:
35:bb:af:06:97:84:9c:79:f8:1f:71:aa:70:e3:f4:
30:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:CD:21:C9:21:A8:A3:C3:BE:1A:C0:39:79:07:62:65:6E:73:14:5E
X509v3 Authority Key Identifier:
keyid:19:10:12:81:C9:51:DC:E4:34:F1:B7:13:AE:57:0F:59:EE:41:3A:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/19101281C951DCE434F1B713AE570F59EE413A09.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19101281C951DCE434F1B713AE570F59EE413A09.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/19101281C951DCE434F1B713AE570F59EE413A09.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:b8:d7:e9:ed:f1:66:ba:8c:18:71:15:ed:7e:f4:0a:65:26:
04:8f:12:bd:01:52:bc:31:90:fa:09:76:4d:a0:50:8b:2d:c6:
66:24:ed:1e:72:af:b6:c3:73:c2:5d:50:b7:47:85:e6:17:62:
98:8c:ba:ef:b7:85:cc:21:52:bd:cf:1b:19:ff:da:50:c6:c4:
26:93:a3:19:2b:05:39:7a:7d:75:02:6b:ab:e1:79:af:ef:5a:
94:0d:9d:ec:bb:8d:ce:7e:61:e6:a7:3e:3a:3d:d4:31:b9:36:
cb:fa:51:7d:b4:e3:5f:0f:fe:6c:d4:7b:ed:36:64:d7:b1:e4:
77:f7:74:f2:33:48:e1:3e:5c:10:b8:ee:cb:5f:11:ac:8e:32:
df:83:fd:ed:91:f7:3c:a1:e5:c2:1a:ae:14:af:da:f0:5b:c4:
1b:3b:20:5d:c1:2b:99:fd:8d:78:89:70:43:eb:dd:8a:e8:2e:
84:d8:47:a3:eb:31:88:fe:2d:7f:24:4e:6d:4d:4c:fb:ac:a0:
0c:9c:b3:c4:7b:98:07:81:38:cb:f9:3d:cc:5f:57:82:59:fd:
f5:28:68:af:74:9f:28:a5:6c:84:88:19:db:a7:9f:6e:e0:56:
04:b0:22:6e:0e:f3:7b:c8:ea:01:8b:08:d2:34:f8:93:6b:ff:
98:fc:bf:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:10:33 2026 by rpki-client