
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/19F593FB6094A53D2F567FA23EBD00CEE6BD7F63.mft
File: 19F593FB6094A53D2F567FA23EBD00CEE6BD7F63.mft (raw, json)
Hash identifier: q7afqRm6tpGoTRdtVcFtkUKYcOakd7nyF+HyqUTLx30=
Subject key identifier: 08:0C:49:1F:52:F7:F2:11:41:AB:C6:52:DD:E0:93:FF:69:3B:AF:07
Authority key identifier: 19:F5:93:FB:60:94:A5:3D:2F:56:7F:A2:3E:BD:00:CE:E6:BD:7F:63
Certificate issuer: /CN=19F593FB6094A53D2F567FA23EBD00CEE6BD7F63
Certificate serial: 5783EC59E5E80C9B60A1AEE9CD98E6453454D19D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19F593FB6094A53D2F567FA23EBD00CEE6BD7F63.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/19F593FB6094A53D2F567FA23EBD00CEE6BD7F63.mft
Manifest number: C0
Signing time: Tue 22 Sep 2026 04:37:07 +0000
Manifest this update: Tue 22 Sep 2026 04:32:07 +0000
Manifest next update: Wed 23 Sep 2026 08:10:07 +0000
Files and hashes: 1: 3131312e36382e3131322e302f32302d3234203d3e203435323837.roa (hash: HunPJtEqs/fqqsfQUOtU9B9wzUHewY8exb3L7KPploo=)
2: 19F593FB6094A53D2F567FA23EBD00CEE6BD7F63.crl (hash: D3X0dsYuZhlb6EJFWoLL3BLj7zKLN4FlmB604pZGqys=)
3: 3135302e3132392e35362e302f32322d3234203d3e203435323837.roa (hash: wbDwlUlyFrGZQKl0gY5JTi07kDW91OicmcdUSy58sFE=)
4: 3130332e32332e3230302e302f32322d3234203d3e203435323837.roa (hash: 8HqeGnG6uWiDbhlaJ6tLdsHXeZ7XmeYJjtOP51aVtq4=)
5: 3137352e3137362e3136302e302f32312d3234203d3e203435323837.roa (hash: htKH4YuWIU36Hbp8yo72kjRU4hOcfi7XM5LsdSWMbvg=)
6: 3130332e33312e3131302e302f32332d3234203d3e203435323837.roa (hash: 35qG3cZsKTQr56CXE5ASWwkKMND8Y/J6/M9bysYMszM=)
7: 323430363a323430303a3a2f33322d3438203d3e203435323837.roa (hash: wUweDGGeMnbb7IWcYNeBY1oGGX+HDZ7VecKq2px9zPo=)
8: 3230322e35362e3136302e302f32322d3234203d3e203435323837.roa (hash: QiGX1QkZSjLaMXHZar4XrbmTjiSd8XSa/Ltq8nabR1Q=)
9: 3230332e39392e3133302e302f32332d3234203d3e203435323837.roa (hash: 6osBaVpCEcyr4sPNLrXGO9OphhAYx5PHHXLqmm632lw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/19F593FB6094A53D2F567FA23EBD00CEE6BD7F63.crl
rsync://rpki-rsync.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/19F593FB6094A53D2F567FA23EBD00CEE6BD7F63.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19F593FB6094A53D2F567FA23EBD00CEE6BD7F63.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 23 Sep 2026 08:10:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:83:ec:59:e5:e8:0c:9b:60:a1:ae:e9:cd:98:e6:45:34:54:d1:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19F593FB6094A53D2F567FA23EBD00CEE6BD7F63
Validity
Not Before: Sep 22 04:32:07 2026 GMT
Not After : Sep 23 08:10:07 2026 GMT
Subject: CN=080C491F52F7F21141ABC652DDE093FF693BAF07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:04:42:92:85:ad:7d:57:d7:8a:9a:fc:e0:14:
20:47:6e:da:12:fa:c1:7c:15:cb:f7:66:31:bc:a1:
c8:2b:81:70:77:41:e4:5b:83:39:fd:11:b0:1f:91:
59:00:c5:a2:09:23:09:5f:b6:3b:8f:30:d2:59:a3:
20:65:e0:7d:2a:2d:7b:a4:a7:2f:27:9b:ca:79:c9:
83:74:58:61:85:b3:d7:51:4d:44:d1:fa:c9:ac:03:
62:80:d8:28:7f:23:64:c9:9d:02:43:5d:92:99:34:
ed:dc:2e:e9:ad:2e:25:d4:58:29:80:d1:de:7d:36:
77:75:04:c1:f4:a2:a7:76:4c:13:9c:19:b6:ce:0e:
4d:7a:bf:74:a9:df:1e:50:7d:be:90:17:23:94:79:
96:07:69:fa:30:57:80:4d:b7:87:9f:3a:0a:8e:a4:
a1:3e:a3:dd:5a:05:d4:d7:d9:80:35:7b:12:26:fa:
91:0b:d4:c6:a6:29:67:0b:ca:64:45:16:f3:61:6f:
e8:f6:5b:a8:07:da:3d:af:63:b6:75:26:74:4b:7e:
55:40:bb:3b:41:95:90:d8:6c:a6:f4:73:4a:a0:23:
3a:99:d4:b8:f2:9c:55:e6:1b:10:16:90:32:0d:9d:
51:b9:14:4e:b9:82:65:48:62:25:74:a9:59:06:33:
5b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:0C:49:1F:52:F7:F2:11:41:AB:C6:52:DD:E0:93:FF:69:3B:AF:07
X509v3 Authority Key Identifier:
keyid:19:F5:93:FB:60:94:A5:3D:2F:56:7F:A2:3E:BD:00:CE:E6:BD:7F:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/19F593FB6094A53D2F567FA23EBD00CEE6BD7F63.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19F593FB6094A53D2F567FA23EBD00CEE6BD7F63.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/19F593FB6094A53D2F567FA23EBD00CEE6BD7F63.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:3d:86:1d:c4:82:79:c6:0a:41:16:e5:56:c7:ba:8e:49:0b:
a3:ec:65:bc:80:c7:6a:3a:22:07:b6:35:7a:3f:5e:47:70:51:
b2:34:8b:58:e0:fe:56:3e:46:a3:01:85:eb:95:45:9b:aa:20:
9d:d3:57:ba:d2:53:71:84:54:3a:a8:b7:a2:11:4e:65:59:7d:
2a:19:b7:f7:e6:b4:39:80:5c:94:83:7f:78:98:13:bb:09:21:
74:f9:45:97:c1:1f:31:aa:7a:37:80:0f:ff:5e:aa:f8:33:a6:
4b:7e:2b:f9:4a:18:ff:63:23:ec:4e:13:d0:a7:97:b9:69:4f:
5d:b7:d6:c2:69:8c:5b:36:85:a2:21:f3:ff:35:43:3f:a2:b0:
b0:83:bb:c3:f6:7c:f2:71:72:aa:87:79:5f:e7:cc:4c:9d:30:
ca:da:1f:66:91:da:22:79:3d:8c:6e:14:43:f1:b8:fd:8f:ca:
82:59:05:92:c0:41:7c:6b:0e:27:2a:ed:66:37:da:a9:0f:93:
8b:02:0b:cd:49:22:74:67:89:9a:f2:a5:c0:30:0a:b2:bb:be:
4b:da:99:1c:fe:0a:ac:21:a7:12:6f:8a:ec:b9:63:31:64:ca:
84:c9:ab:f4:db:4e:4b:ee:69:02:2e:34:5e:57:c1:d1:8e:03:
e6:df:7c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:12:19 2026 by rpki-client