
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/18C2007FE56CED83879B955CB8DA89E0922D6AB9.mft
File: 18C2007FE56CED83879B955CB8DA89E0922D6AB9.mft (raw, json)
Hash identifier: TidW4ms2sSbgnDEOqZWLndkdJSJEUYyBp3xiv+esPJw=
Subject key identifier: DC:98:69:80:0E:27:A0:89:94:E5:B5:73:E5:E0:23:C4:AF:A3:CF:70
Authority key identifier: 18:C2:00:7F:E5:6C:ED:83:87:9B:95:5C:B8:DA:89:E0:92:2D:6A:B9
Certificate issuer: /CN=18C2007FE56CED83879B955CB8DA89E0922D6AB9
Certificate serial: 5B324E36126AB8D8EEB2763705F941F13A1F0127
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/18C2007FE56CED83879B955CB8DA89E0922D6AB9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/18C2007FE56CED83879B955CB8DA89E0922D6AB9.mft
Manifest number: C3
Signing time: Thu 24 Sep 2026 13:07:04 +0000
Manifest this update: Thu 24 Sep 2026 13:02:04 +0000
Manifest next update: Fri 25 Sep 2026 14:08:04 +0000
Files and hashes: 1: 3130332e38352e31322e302f32322d3234203d3e20313336303736.roa (hash: ictls1d8fDHoUd3C28juE/v5HQdxwfMf3GiA749+DqU=)
2: 3130332e38352e31352e302f32342d3234203d3e20313338303936.roa (hash: gFD5ZtfkV8WLuWBlQkaPkrNIjj5Z4cE3YofpumoYjys=)
3: 18C2007FE56CED83879B955CB8DA89E0922D6AB9.crl (hash: f580Lj0Qsr3U9gzysleYlw92LaTidu/dfajSD0w0KM8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/18C2007FE56CED83879B955CB8DA89E0922D6AB9.crl
rsync://rpki-rsync.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/18C2007FE56CED83879B955CB8DA89E0922D6AB9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/18C2007FE56CED83879B955CB8DA89E0922D6AB9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 14:08:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:32:4e:36:12:6a:b8:d8:ee:b2:76:37:05:f9:41:f1:3a:1f:01:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18C2007FE56CED83879B955CB8DA89E0922D6AB9
Validity
Not Before: Sep 24 13:02:04 2026 GMT
Not After : Sep 25 14:08:04 2026 GMT
Subject: CN=DC9869800E27A08994E5B573E5E023C4AFA3CF70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:44:b6:dc:44:d7:c9:97:15:38:04:ae:b5:c3:
bd:5e:99:52:3e:40:42:c9:da:50:04:69:3b:c8:2a:
02:53:85:b6:de:27:bb:7d:d8:f1:66:a8:ce:7e:e8:
48:14:58:1f:d6:e1:b1:73:aa:34:39:86:99:22:84:
5a:49:1c:39:94:db:3e:86:03:b4:8f:35:e4:1f:59:
6b:50:17:69:16:b3:c4:14:6e:eb:69:74:e4:00:85:
ab:08:3a:1f:de:57:33:ab:38:b5:87:5e:1c:67:c6:
37:0e:57:9b:88:3c:fc:2a:24:95:82:e5:99:84:56:
85:2e:ff:76:dc:22:13:1d:ce:69:d2:e0:61:31:e8:
e4:e0:15:17:1d:45:a8:ce:9f:01:7d:ec:a3:9d:64:
88:15:ee:cc:6f:7a:da:5a:71:24:6b:ab:c4:e7:e6:
36:78:90:15:15:16:bc:f7:fa:43:21:80:69:82:01:
60:fd:68:bd:db:b8:08:ea:d7:69:0e:2a:8d:2a:f6:
06:55:3a:1d:5e:dd:b8:8c:93:c0:dd:dc:eb:64:41:
71:af:c5:e9:1c:3d:2f:26:7e:7b:39:8c:04:3a:74:
78:f4:e9:22:c8:b7:c7:01:97:dc:6e:90:7a:91:64:
49:6d:bf:1b:86:d6:f3:f5:dc:e6:52:05:9d:a4:5b:
db:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:98:69:80:0E:27:A0:89:94:E5:B5:73:E5:E0:23:C4:AF:A3:CF:70
X509v3 Authority Key Identifier:
keyid:18:C2:00:7F:E5:6C:ED:83:87:9B:95:5C:B8:DA:89:E0:92:2D:6A:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/18C2007FE56CED83879B955CB8DA89E0922D6AB9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/18C2007FE56CED83879B955CB8DA89E0922D6AB9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/18C2007FE56CED83879B955CB8DA89E0922D6AB9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:ac:e6:d9:8d:63:04:66:e7:e9:0a:f4:42:9c:5f:05:6a:df:
c7:d1:4b:dd:5a:73:6e:16:49:b0:a1:25:48:9a:52:ef:f8:bd:
39:82:78:c2:03:a1:87:94:8e:56:1c:d0:db:65:4f:0e:57:69:
af:d7:98:da:5c:02:53:3a:ef:9d:b4:91:af:15:d6:ca:55:ca:
35:97:9b:76:6c:ac:9e:af:9c:c7:de:b6:9e:f5:27:c7:ea:a3:
9a:dd:b9:ff:e8:5d:ae:9e:da:d8:1d:a5:b9:56:5e:a4:33:e6:
70:00:82:76:ca:19:d4:96:bc:81:44:87:8d:40:19:50:e5:5e:
d9:f2:f4:90:26:db:30:3f:97:43:26:43:5d:80:ff:fc:39:47:
1c:f1:7b:15:1c:ef:55:82:d5:e9:d0:d0:5c:aa:03:a9:a6:27:
48:21:84:8a:2a:04:1f:22:b9:d4:68:5d:ec:09:31:95:68:bb:
46:08:2a:98:df:a8:ca:36:22:f0:ab:25:c1:14:2f:36:b3:36:
b8:d6:0e:29:63:50:5b:65:07:aa:62:6d:e6:77:b8:b5:76:97:
6d:57:86:42:3d:6c:f7:a1:b0:22:f0:aa:ed:de:13:d9:4a:56:
3f:f6:f4:83:de:6f:5f:03:2c:bd:7b:f6:82:12:62:d6:12:21:
b1:e8:58:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:45:44 2026 by rpki-client