
$ rpki-client -vvf rpki-rsync.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/1D6DFD04F8DB228DA7838746BB665BB2CD6FB9B9.mft
File: 1D6DFD04F8DB228DA7838746BB665BB2CD6FB9B9.mft (raw, json)
Hash identifier: chM2CxoFJ1ZR8jliZwrFhED3KTYieAEWQLHitXuR3Fo=
Subject key identifier: 4A:44:40:9D:FB:23:B6:2B:1B:9E:96:B5:91:96:54:34:2B:ED:E8:24
Authority key identifier: 1D:6D:FD:04:F8:DB:22:8D:A7:83:87:46:BB:66:5B:B2:CD:6F:B9:B9
Certificate issuer: /CN=1D6DFD04F8DB228DA7838746BB665BB2CD6FB9B9
Certificate serial: 5041A12586D1F15282963F6415DF2ED21189FBA8
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D6DFD04F8DB228DA7838746BB665BB2CD6FB9B9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/1D6DFD04F8DB228DA7838746BB665BB2CD6FB9B9.mft
Manifest number: 3D
Signing time: Wed 17 Jun 2026 01:44:55 +0000
Manifest this update: Wed 17 Jun 2026 01:39:55 +0000
Manifest next update: Thu 18 Jun 2026 04:13:55 +0000
Files and hashes: 1: 1D6DFD04F8DB228DA7838746BB665BB2CD6FB9B9.crl (hash: gVe5sFbgyamfnSs+Nm7bIBWPlnxn+aYkgr59mvf9pok=)
2: 3130332e3137322e39362e302f32342d3234203d3e20313437303736.roa (hash: zhUAsPQU+LACnP7Ok3rWyU2O9s5oA5N+R3I26q0xz80=)
3: 3130332e3138392e3232392e302f32342d3234203d3e20313437303736.roa (hash: KV+jDI5u7NDFg1jUUu5ndk8c7SwXpZDQJflp05ARGsU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/1D6DFD04F8DB228DA7838746BB665BB2CD6FB9B9.crl
rsync://rpki-rsync.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/1D6DFD04F8DB228DA7838746BB665BB2CD6FB9B9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D6DFD04F8DB228DA7838746BB665BB2CD6FB9B9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:41:a1:25:86:d1:f1:52:82:96:3f:64:15:df:2e:d2:11:89:fb:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1D6DFD04F8DB228DA7838746BB665BB2CD6FB9B9
Validity
Not Before: Jun 17 01:39:55 2026 GMT
Not After : Jun 18 04:13:55 2026 GMT
Subject: CN=4A44409DFB23B62B1B9E96B5919654342BEDE824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6b:9f:44:ea:ee:45:26:23:15:63:e6:75:63:
27:2e:1c:db:25:36:81:e1:c1:69:87:f0:d3:af:93:
fa:f5:7d:99:94:cb:22:35:72:5b:8c:35:c4:89:32:
58:73:b4:4a:c3:a7:7b:67:58:c7:fe:0b:9b:14:2b:
e2:a9:9e:fa:ea:89:a1:94:2c:b4:de:6a:b3:6e:51:
cb:43:e3:53:1c:d4:40:dd:e7:66:88:29:ad:1f:b0:
1b:6d:20:38:6d:65:d9:67:a5:c1:d3:ed:45:c8:ff:
b4:af:66:a6:99:70:b2:4e:73:13:43:97:bc:3f:fb:
f4:1d:34:4a:60:b5:e6:c9:de:87:2c:8d:17:8c:2c:
85:9b:8f:7a:83:6a:2e:e2:8b:21:15:d4:81:6f:a7:
ed:13:c1:a0:82:7a:f9:62:32:67:b1:49:b4:6a:d8:
dd:e4:8c:14:e1:9d:59:7a:4a:4b:ce:07:62:47:f7:
a3:76:ad:19:2a:fe:55:ed:32:7c:f6:0a:9a:f9:f6:
4a:9d:00:3c:bf:13:a9:c5:84:5a:13:86:bf:75:49:
ba:96:3c:62:f3:18:af:95:e1:fe:28:88:80:04:ae:
2c:fa:69:af:3d:be:06:29:df:70:52:14:96:75:64:
f0:5c:68:30:4e:f2:02:f4:fe:ec:ca:42:77:1f:6a:
91:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:44:40:9D:FB:23:B6:2B:1B:9E:96:B5:91:96:54:34:2B:ED:E8:24
X509v3 Authority Key Identifier:
keyid:1D:6D:FD:04:F8:DB:22:8D:A7:83:87:46:BB:66:5B:B2:CD:6F:B9:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/1D6DFD04F8DB228DA7838746BB665BB2CD6FB9B9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D6DFD04F8DB228DA7838746BB665BB2CD6FB9B9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/1D6DFD04F8DB228DA7838746BB665BB2CD6FB9B9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:67:e7:2a:1d:88:ff:c0:e2:ec:52:5c:47:a9:99:54:f7:e0:
c0:2e:4c:ce:43:51:50:aa:86:7d:96:67:cd:97:75:d1:af:bd:
5a:6f:1d:e4:5f:92:b7:28:48:91:59:90:6e:dd:e3:4b:be:11:
c7:6b:44:76:85:4b:17:c6:da:97:ed:4e:5d:43:fc:cb:b2:8f:
9f:6f:08:6b:51:af:64:11:5b:49:1b:52:05:46:2e:49:e0:e6:
d7:de:aa:7b:1a:58:cb:8a:98:ad:a6:ab:6b:6a:df:72:29:50:
e3:c5:af:77:ec:38:53:4f:dd:61:b8:ab:35:d5:71:ce:82:26:
e8:6a:3a:c4:57:61:ff:e0:20:fe:cd:da:80:4f:0d:68:f1:0c:
69:84:b8:47:5b:50:27:31:1c:06:a1:89:f6:a1:ce:fd:6d:3f:
09:a4:cf:dd:e0:67:70:de:c5:64:2d:5d:05:d8:a5:f7:6c:68:
48:6a:db:bf:e0:49:10:58:97:60:7b:4c:26:6e:c4:7b:55:83:
0f:b9:47:0b:9f:53:30:95:27:59:a2:1d:1f:38:8b:6f:38:e7:
c5:22:4d:78:c1:a0:b3:81:69:71:97:7a:63:da:92:e4:85:cc:
0a:c3:63:00:c4:4f:b0:61:4c:ee:3e:c0:36:81:9d:f8:6b:99:
f7:24:cf:98
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUUEGhJYbR8VKClj9kFd8u0hGJ+6gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUQ2REZEMDRGOERCMjI4REE3ODM4NzQ2QkI2NjVCQjJD
RDZGQjlCOTAeFw0yNjA2MTcwMTM5NTVaFw0yNjA2MTgwNDEzNTVaMDMxMTAvBgNV
BAMTKDRBNDQ0MDlERkIyM0I2MkIxQjlFOTZCNTkxOTY1NDM0MkJFREU4MjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCja59E6u5FJiMVY+Z1YycuHNsl
NoHhwWmH8NOvk/r1fZmUyyI1cluMNcSJMlhztErDp3tnWMf+C5sUK+KpnvrqiaGU
LLTearNuUctD41Mc1EDd52aIKa0fsBttIDhtZdlnpcHT7UXI/7SvZqaZcLJOcxND
l7w/+/QdNEpgtebJ3ocsjReMLIWbj3qDai7iiyEV1IFvp+0TwaCCevliMmexSbRq
2N3kjBThnVl6SkvOB2JH96N2rRkq/lXtMnz2Cpr59kqdADy/E6nFhFoThr91SbqW
PGLzGK+V4f4oiIAEriz6aa89vgYp33BSFJZ1ZPBcaDBO8gL0/uzKQncfapF1AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUSkRAnfsjtisbnpa1kZZUNCvt6CQwHwYDVR0j
BBgwFoAUHW39BPjbIo2ng4dGu2Zbss1vubkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
Mzk4ZWViMzgtNzc0Ni00ODk5LTlhMTAtNzk4MGY4YjkwNTMyLzAvMUQ2REZEMDRG
OERCMjI4REE3ODM4NzQ2QkI2NjVCQjJDRDZGQjlCOS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8xRDZERkQwNEY4REIyMjhEQTc4Mzg3NDZCQjY2NUJCMkNENkZC
OUI5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzk4ZWViMzgtNzc0Ni00ODk5LTlh
MTAtNzk4MGY4YjkwNTMyLzAvMUQ2REZEMDRGOERCMjI4REE3ODM4NzQ2QkI2NjVC
QjJDRDZGQjlCOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBACVn5yodiP/A4uxSXEepmVT34MAuTM5DUVCq
hn2WZ82XddGvvVpvHeRfkrcoSJFZkG7d40u+EcdrRHaFSxfG2pftTl1D/Muyj59v
CGtRr2QRW0kbUgVGLkng5tfeqnsaWMuKmK2mq2tq33IpUOPFr3fsOFNP3WG4qzXV
cc6CJuhqOsRXYf/gIP7N2oBPDWjxDGmEuEdbUCcxHAahifahzv1tPwmkz93gZ3De
xWQtXQXYpfdsaEhq27/gSRBYl2B7TCZuxHtVgw+5RwufUzCVJ1miHR84i28458Ui
TXjBoLOBaXGXemPakuSFzArDYwDET7BhTO4+wDaBnfhrmfckz5g=
-----END CERTIFICATE-----
Generated at Wed Jun 17 11:31:37 2026 by rpki-client