
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/1C241AD1CC301E815CA4D6FA5F1BCC6606915910.mft
File: 1C241AD1CC301E815CA4D6FA5F1BCC6606915910.mft (raw, json)
Hash identifier: u92KlkmKTk/mCvjSiKRbTci1V4rF8iWgAFrb58aVhN0=
Subject key identifier: 00:EC:6C:C3:4E:03:CF:E3:5B:AA:9F:DF:25:A2:AE:73:6B:36:28:36
Authority key identifier: 1C:24:1A:D1:CC:30:1E:81:5C:A4:D6:FA:5F:1B:CC:66:06:91:59:10
Certificate issuer: /CN=1C241AD1CC301E815CA4D6FA5F1BCC6606915910
Certificate serial: 7319C4F0589A6F730419EC26870483D58CB8B5EA
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1C241AD1CC301E815CA4D6FA5F1BCC6606915910.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/1C241AD1CC301E815CA4D6FA5F1BCC6606915910.mft
Manifest number: BD
Signing time: Sun 20 Sep 2026 11:31:27 +0000
Manifest this update: Sun 20 Sep 2026 11:26:27 +0000
Manifest next update: Mon 21 Sep 2026 13:08:27 +0000
Files and hashes: 1: 3130332e3133312e3130342e302f32332d3234203d3e203539313531.roa (hash: FOuLqe8z3jP9/FdA5FO4WwiK2ha2s9B/nD4rv4Mnpyg=)
2: 323430303a653332303a3a2f33322d3438203d3e203539313531.roa (hash: 8FVK2/2gNZC5oxeYl9/JXd0zGR6AZ1yS8I4EVn+PCZM=)
3: 3130332e3231302e33352e302f32342d3234203d3e203539313531.roa (hash: tYiK/crTfBIFT43mP50CWE5Oz0vdhgTgDowq7UN7boc=)
4: 1C241AD1CC301E815CA4D6FA5F1BCC6606915910.crl (hash: dgWvof5c8Kp8RaaxQqXa5XFeQUZV15V7alXLOIvt7vg=)
5: 3130332e3235352e31352e302f32342d3234203d3e203539313531.roa (hash: OGO8y1XI3uaFZBO8XdrSwCG094qddn+s0g2Ctr82rYM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/1C241AD1CC301E815CA4D6FA5F1BCC6606915910.crl
rsync://rpki-rsync.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/1C241AD1CC301E815CA4D6FA5F1BCC6606915910.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1C241AD1CC301E815CA4D6FA5F1BCC6606915910.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 21 Sep 2026 13:08:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:19:c4:f0:58:9a:6f:73:04:19:ec:26:87:04:83:d5:8c:b8:b5:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1C241AD1CC301E815CA4D6FA5F1BCC6606915910
Validity
Not Before: Sep 20 11:26:27 2026 GMT
Not After : Sep 21 13:08:27 2026 GMT
Subject: CN=00EC6CC34E03CFE35BAA9FDF25A2AE736B362836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:95:1a:37:8e:19:0d:e4:15:2b:4c:fd:b6:b2:
96:c9:01:51:6d:2c:14:14:e5:61:f1:c8:17:ff:db:
38:c4:06:07:61:73:59:6c:40:d6:9d:fb:e8:ac:28:
49:ca:a5:66:b5:15:84:c1:24:28:72:e8:8c:11:c9:
22:9f:a1:f0:fa:23:f0:4a:78:72:e5:ce:3b:41:7c:
3a:35:ff:17:9f:80:a2:be:ff:0e:c8:ae:b6:12:23:
d4:c2:c8:e1:fc:e7:78:70:07:19:d2:bc:6a:15:d2:
71:b5:3a:6d:d6:86:f2:78:b0:ae:11:35:14:1e:5f:
df:c0:06:76:40:c0:dd:53:19:5a:2b:9a:c1:35:fa:
e5:a0:13:4d:54:2d:69:22:1f:eb:4e:c2:bf:18:60:
24:32:4e:7f:c4:71:23:ee:46:39:f1:cc:65:01:2b:
68:0f:96:4b:20:49:be:b2:b2:bf:97:c1:77:c2:06:
c2:3a:c3:eb:f8:0d:e7:b9:ad:fe:07:c7:d8:3e:a4:
78:df:a3:f8:30:06:9f:e5:e7:d7:06:ba:ea:10:37:
5c:4e:cf:78:7f:cc:bd:43:bb:f2:f3:cc:04:d0:ba:
05:b1:e7:ff:43:d1:f3:43:6d:3f:88:59:6d:e7:c1:
1d:ed:03:92:73:b2:00:79:a3:02:a6:19:ff:eb:7d:
e2:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:EC:6C:C3:4E:03:CF:E3:5B:AA:9F:DF:25:A2:AE:73:6B:36:28:36
X509v3 Authority Key Identifier:
keyid:1C:24:1A:D1:CC:30:1E:81:5C:A4:D6:FA:5F:1B:CC:66:06:91:59:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/1C241AD1CC301E815CA4D6FA5F1BCC6606915910.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1C241AD1CC301E815CA4D6FA5F1BCC6606915910.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/1C241AD1CC301E815CA4D6FA5F1BCC6606915910.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:e3:e1:40:76:f3:04:08:b8:a7:28:f5:39:67:69:36:81:f9:
90:e3:db:bd:36:cf:87:68:43:2c:b0:02:9b:72:3f:91:4b:ce:
57:12:c4:b4:95:4c:18:9c:e4:3b:5c:f9:d3:48:a7:4c:bc:d6:
3b:f5:77:6f:6e:a9:4d:00:76:6d:6c:3f:28:f4:09:44:85:12:
54:fd:09:4b:01:1c:df:10:5b:c1:94:0f:7d:43:f9:dd:99:97:
50:db:a6:0f:07:4c:5d:23:52:76:8e:24:6a:00:3e:5a:de:58:
ba:90:e4:4e:fb:6f:f4:27:ed:00:ee:69:b6:60:58:2e:46:40:
01:6e:5c:fd:c3:43:18:17:01:41:53:7d:1f:5c:53:af:33:d7:
36:fe:db:33:77:41:77:83:bc:58:aa:45:5a:34:cd:dd:5a:a1:
52:cd:b0:7d:65:f5:a4:1b:db:6b:04:a2:f0:8e:0b:60:48:56:
9d:db:9d:e0:17:3a:8e:0a:ec:df:8c:f4:b8:1f:fb:14:a9:04:
b1:99:8e:d8:bb:2d:b2:4f:d9:f4:65:40:fe:34:e8:c9:20:17:
44:1a:71:88:1f:df:3e:e0:21:b1:48:08:33:e1:35:89:2b:38:
c2:40:e2:59:d3:3d:f3:1a:1c:d3:d2:a5:c5:56:26:d4:18:66:
4e:ce:52:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 17:58:32 2026 by rpki-client