
$ rpki-client -vvf rpki-rsync.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/18C2007FE56CED83879B955CB8DA89E0922D6AB9.mft
File: 18C2007FE56CED83879B955CB8DA89E0922D6AB9.mft (raw, json)
Hash identifier: ryoq9EePbu9kkla8bM+LYt98ITGzhQiduwSwkxiWtk0=
Subject key identifier: 5B:D0:69:56:7D:9C:EC:DF:C3:F6:CA:4B:16:0B:EF:4E:58:E7:07:3B
Authority key identifier: 18:C2:00:7F:E5:6C:ED:83:87:9B:95:5C:B8:DA:89:E0:92:2D:6A:B9
Certificate issuer: /CN=18C2007FE56CED83879B955CB8DA89E0922D6AB9
Certificate serial: 148883EFEF29BFC14D5CFF15136216E37D760A40
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/18C2007FE56CED83879B955CB8DA89E0922D6AB9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/18C2007FE56CED83879B955CB8DA89E0922D6AB9.mft
Manifest number: 3A
Signing time: Sun 14 Jun 2026 00:23:23 +0000
Manifest this update: Sun 14 Jun 2026 00:18:23 +0000
Manifest next update: Mon 15 Jun 2026 03:18:23 +0000
Files and hashes: 1: 3130332e38352e31352e302f32342d3234203d3e20313338303936.roa (hash: gFD5ZtfkV8WLuWBlQkaPkrNIjj5Z4cE3YofpumoYjys=)
2: 3130332e38352e31322e302f32322d3234203d3e20313336303736.roa (hash: ictls1d8fDHoUd3C28juE/v5HQdxwfMf3GiA749+DqU=)
3: 18C2007FE56CED83879B955CB8DA89E0922D6AB9.crl (hash: CjR+ALgY2W37kwSHfoeJwKMIbNd2QJ8q2EsZIKNMQz8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/18C2007FE56CED83879B955CB8DA89E0922D6AB9.crl
rsync://rpki-rsync.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/18C2007FE56CED83879B955CB8DA89E0922D6AB9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/18C2007FE56CED83879B955CB8DA89E0922D6AB9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:88:83:ef:ef:29:bf:c1:4d:5c:ff:15:13:62:16:e3:7d:76:0a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18C2007FE56CED83879B955CB8DA89E0922D6AB9
Validity
Not Before: Jun 14 00:18:23 2026 GMT
Not After : Jun 15 03:18:23 2026 GMT
Subject: CN=5BD069567D9CECDFC3F6CA4B160BEF4E58E7073B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:bd:ca:70:12:57:43:ac:b2:b0:e2:29:b2:2d:
a5:98:25:17:1d:ae:7b:d9:2f:d8:41:fb:eb:8b:fc:
63:89:1e:e1:da:57:62:8b:d6:33:3b:bb:81:5e:56:
55:83:71:4f:ce:af:a7:be:ad:d3:c7:7c:79:f5:8b:
86:e8:9a:33:19:a3:cb:11:30:11:9f:8a:71:aa:ba:
ed:99:df:b5:61:43:ba:20:fd:2b:f1:87:ed:b9:da:
de:e5:ac:e4:e3:e3:43:82:18:2a:11:54:5c:b9:63:
94:6a:d0:a7:01:ab:33:4c:4e:7e:27:43:03:c9:20:
05:5b:8c:4d:86:67:5d:32:6f:42:a6:06:02:dc:6a:
3d:e0:0f:96:02:9e:e7:46:d1:02:e2:76:98:23:e8:
ba:0b:b8:51:75:90:c8:f0:9c:25:ad:6b:c6:52:a2:
d0:a0:77:39:2b:56:8d:d3:18:0f:8c:a0:4a:f0:e5:
da:51:88:1e:e1:90:3d:fd:38:9a:79:a8:fa:16:86:
e4:9a:a5:28:6f:0f:ee:b8:14:a9:35:40:21:c1:11:
64:56:9f:95:04:ae:5d:93:c6:d1:10:44:16:27:b2:
47:28:af:39:18:15:7d:b0:43:9a:ad:fc:67:4e:1a:
93:79:3b:e1:47:fd:f1:aa:1e:84:00:28:4e:24:d4:
a5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:D0:69:56:7D:9C:EC:DF:C3:F6:CA:4B:16:0B:EF:4E:58:E7:07:3B
X509v3 Authority Key Identifier:
keyid:18:C2:00:7F:E5:6C:ED:83:87:9B:95:5C:B8:DA:89:E0:92:2D:6A:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/18C2007FE56CED83879B955CB8DA89E0922D6AB9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/18C2007FE56CED83879B955CB8DA89E0922D6AB9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/18C2007FE56CED83879B955CB8DA89E0922D6AB9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:da:9b:5a:78:bf:fc:35:87:c2:3a:55:19:5f:0c:70:f9:d8:
f0:40:80:ae:8b:ed:ac:d7:64:66:0d:17:24:3c:24:99:22:64:
44:13:3d:ac:f9:4c:8b:30:50:95:d2:24:1c:fb:f7:2d:04:c7:
f8:65:39:64:7b:06:0e:87:83:76:6d:7c:db:8c:11:ed:8e:f0:
09:30:5f:01:5b:2c:4a:4a:d3:f9:70:f6:d9:19:14:24:ac:0f:
9f:21:91:9c:e6:a3:e1:4c:1b:16:2c:f9:3c:41:7c:8d:9d:29:
e3:70:96:b7:94:0b:bd:1d:30:f2:fc:77:bd:9e:ac:79:98:78:
d3:f7:27:af:a1:ce:be:8e:2f:0c:ef:09:3f:7b:b8:4c:dc:77:
25:9d:a7:ab:29:04:6e:86:99:52:9c:8f:4f:a2:9b:ce:9c:5d:
36:b5:bd:0d:5e:45:52:85:04:dd:97:e2:c6:c6:9f:52:37:df:
8e:4e:f0:20:c4:a0:a3:9e:cb:45:e1:65:1a:fe:a6:8d:5a:25:
28:7d:13:26:39:58:80:5f:a9:c8:78:cd:26:ef:f0:9f:b1:7f:
6c:1b:4f:fe:c9:3b:21:7d:21:ab:54:99:cd:89:c0:9f:a4:78:
47:2a:8b:f1:91:42:d7:a0:0b:08:87:af:41:6b:24:86:4d:fc:
d1:97:c0:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:43:56 2026 by rpki-client