
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/19045F868E09E8CC6E09639ABA7B1C1471E608E9.mft
File: 19045F868E09E8CC6E09639ABA7B1C1471E608E9.mft (raw, json)
Hash identifier: BP9wIYUFt6jwUKFR3y3kZHaUvKnSdc/S4ps4d6+OCAs=
Subject key identifier: 66:14:0B:4B:70:DF:A8:AD:F6:0D:3B:7E:F5:4E:3C:CF:66:DB:49:04
Authority key identifier: 19:04:5F:86:8E:09:E8:CC:6E:09:63:9A:BA:7B:1C:14:71:E6:08:E9
Certificate issuer: /CN=19045F868E09E8CC6E09639ABA7B1C1471E608E9
Certificate serial: 795CC07BAE8674C64A0586AF21F98DBAB9A03965
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19045F868E09E8CC6E09639ABA7B1C1471E608E9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/19045F868E09E8CC6E09639ABA7B1C1471E608E9.mft
Manifest number: BE
Signing time: Mon 21 Sep 2026 02:34:39 +0000
Manifest this update: Mon 21 Sep 2026 02:29:39 +0000
Manifest next update: Tue 22 Sep 2026 03:23:39 +0000
Files and hashes: 1: 3130332e3134302e39302e302f32342d3234203d3e20313338383736.roa (hash: uA8oOUmwBAgrgbzVE7TBrqVu5fFTSKpBcYjOkH1eMWI=)
2: 3130332e3134302e39312e302f32342d3234203d3e20313338383736.roa (hash: xzNU/vlOf3TfA9hg5oEM5XxH528y493JULwxnNfsViI=)
3: 323030313a6466303a623538303a3a2f34382d3438203d3e20313338383736.roa (hash: OwnxfPLeUrtNm40iRIXJAgj10Ula0MR83EXj/2YtNZ4=)
4: 19045F868E09E8CC6E09639ABA7B1C1471E608E9.crl (hash: Dluy4JS0f4c/vfKl6tEgIoK6+3bfdBTKtcBVrfx2HyY=)
5: 3130332e3134302e39302e302f32332d3234203d3e20313338383736.roa (hash: jSozWSD5sMiX02pWV0d7a17kun2jtCGklOnwsfoqAUs=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/19045F868E09E8CC6E09639ABA7B1C1471E608E9.crl
rsync://rpki-rsync.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/19045F868E09E8CC6E09639ABA7B1C1471E608E9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19045F868E09E8CC6E09639ABA7B1C1471E608E9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 21 Sep 2026 17:28:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:5c:c0:7b:ae:86:74:c6:4a:05:86:af:21:f9:8d:ba:b9:a0:39:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19045F868E09E8CC6E09639ABA7B1C1471E608E9
Validity
Not Before: Sep 21 02:29:39 2026 GMT
Not After : Sep 22 03:23:39 2026 GMT
Subject: CN=66140B4B70DFA8ADF60D3B7EF54E3CCF66DB4904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:84:01:6c:7e:05:22:f1:85:85:01:1e:fb:b6:
63:79:97:5c:00:a4:9d:2d:b2:ff:37:89:07:68:89:
a5:c5:6c:73:b4:ce:45:0d:22:a1:4f:6a:a3:d1:98:
27:07:83:c0:e7:ff:d6:c1:b0:83:aa:47:30:3c:f7:
13:c5:16:0a:e6:e2:3f:d7:d4:ee:e8:4e:f4:95:17:
ec:36:fd:bf:0b:65:27:86:78:9a:ef:49:d8:0c:02:
0b:60:72:90:53:41:03:01:49:49:78:1d:5c:70:c8:
70:56:e9:f5:60:08:1b:37:29:0a:98:cb:df:0b:b2:
a8:1a:c1:b1:8f:be:bc:76:8d:37:2d:2b:56:e3:c6:
b1:db:07:ea:4e:13:2b:76:d7:6e:78:aa:03:8e:77:
56:4d:ec:be:20:43:2b:d9:ee:d4:51:24:04:98:a5:
d7:41:fb:4c:16:29:5d:0c:2f:c4:8b:a0:e6:8d:7c:
7d:3c:58:c2:1b:ea:c9:b2:f4:0e:55:11:a6:25:ad:
e5:c6:6b:a9:23:e0:ef:e8:ac:b3:74:a3:32:83:3e:
af:e7:1c:80:5a:6d:96:e5:96:98:fd:7f:ee:b1:85:
c0:c1:48:31:fa:4d:15:37:85:db:a4:b7:1c:96:1d:
a3:73:15:70:01:bf:a5:c5:3b:49:9e:e8:a7:d4:9f:
be:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:14:0B:4B:70:DF:A8:AD:F6:0D:3B:7E:F5:4E:3C:CF:66:DB:49:04
X509v3 Authority Key Identifier:
keyid:19:04:5F:86:8E:09:E8:CC:6E:09:63:9A:BA:7B:1C:14:71:E6:08:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/19045F868E09E8CC6E09639ABA7B1C1471E608E9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19045F868E09E8CC6E09639ABA7B1C1471E608E9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/19045F868E09E8CC6E09639ABA7B1C1471E608E9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:8b:8c:ee:27:e0:25:33:71:d8:8a:88:d7:3d:4f:a1:bb:cf:
25:76:5a:56:66:bc:eb:02:ec:96:42:99:9b:fa:e4:06:91:9d:
ba:fa:a4:32:47:ff:ac:90:53:cc:d0:2e:ef:b7:e8:16:1b:a8:
d1:fb:6f:85:ed:4d:77:08:84:51:13:d4:a1:14:e1:e4:ba:b0:
20:c2:0d:94:88:aa:ac:c1:80:33:cf:18:81:3e:f7:d7:9c:44:
11:05:fa:1c:b2:f6:e3:9b:09:5f:b6:1a:98:0b:82:6f:9e:59:
0e:55:d8:e4:a0:06:41:a3:43:e9:c2:15:a4:a2:de:60:d9:d7:
1b:8e:9a:11:f6:e0:a7:54:e7:8e:4a:3a:8b:79:aa:96:db:11:
c5:7c:d7:46:d4:a7:0d:cb:02:32:ea:4c:40:fb:47:13:94:11:
e2:b6:d3:36:97:fc:86:49:f7:26:c2:10:64:db:5f:10:e6:75:
db:5b:58:71:49:7c:cd:63:4e:5d:0b:71:e0:af:ed:4c:e2:b7:
ea:6f:6d:6a:28:aa:fb:2a:16:1f:c8:14:3e:dc:2b:e7:cc:ff:
25:8e:50:7a:4b:19:7e:22:2e:e2:08:1a:21:55:35:d7:a8:4b:
01:ce:bf:0d:bf:d3:10:a5:84:cc:5c:b8:9d:21:77:c4:e4:b3:
86:d4:7f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 07:11:39 2026 by rpki-client