
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD.mft
File: 1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD.mft (raw, json)
Hash identifier: Ve8+idbPQB8/Dv4ODm604lVjsd5a8HIjuIWKDuzfJM8=
Subject key identifier: 24:8F:A3:9D:54:F0:AB:61:C0:BC:7D:35:E2:AD:58:84:19:B7:CA:4E
Authority key identifier: 1D:AC:DC:41:C2:8C:E5:C3:8F:42:51:C6:14:DE:10:0A:3F:1E:FC:AD
Certificate issuer: /CN=1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD
Certificate serial: 11E5DB8DC1F815FE5E5D3C1024AD422184E744FB
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD.mft
Manifest number: BE
Signing time: Mon 21 Sep 2026 07:10:27 +0000
Manifest this update: Mon 21 Sep 2026 07:05:27 +0000
Manifest next update: Tue 22 Sep 2026 09:02:27 +0000
Files and hashes: 1: 3137352e3130332e33332e302f32342d3234203d3e203338333230.roa (hash: fH8oSgU7fmQVwzRayIdktJrCM/nMbyH0Ngj6vCl4r/k=)
2: 3137352e3130332e33322e302f32342d3234203d3e203338333230.roa (hash: 6UH8eYTOp0aY/zXHw+l1TECmEHZ7Z5b3t8oyY92k670=)
3: 323430343a333930303a313939323a3a2f34382d3438203d3e203338333230.roa (hash: YLpNL78dS+hrdN7t5xzPdvLY1lNxrdFsxq9VzIbxRC4=)
4: 323430343a333930303a313a3a2f34382d3438203d3e203338333230.roa (hash: 5B5+pc329D1iQV3SlgDy544BDthefmzEqIq6UspEPv0=)
5: 3137352e3130332e34352e302f32342d3234203d3e203338333230.roa (hash: 6jdofG9Wtkc0Blm7BytpJS1luG4FVORdWSiFv1pRnGo=)
6: 3132322e3134342e302e302f32322d3234203d3e203338333230.roa (hash: 5ASXDenOep5Tt7YJZHbFIGXZ+8+G0rFlHOjdxQjS0ok=)
7: 3131392e3131302e36342e302f32322d3234203d3e203338333230.roa (hash: ZERu879JSfInetFD6X8u09OHoVJYMOwx32bifQ58o0I=)
8: 3137352e3130332e35332e302f32342d3234203d3e203338333230.roa (hash: pGgVnEQzqbPIt26vgoTmZkdvlEMdwjiT5NsiAgvS52I=)
9: 3137352e3130332e35372e302f32342d3234203d3e203338333230.roa (hash: zQ39zo17bNTdHhQWmkLn9luFrVhzUw3k/+vmz2gMem8=)
10: 3137352e3130332e33342e302f32342d3234203d3e203338333230.roa (hash: 2n5/F9J9TnrohLmnHa9IVjRQNfO2Fv9UX/IHQLPC0cc=)
11: 323430343a333930303a6139323a3a2f34382d3438203d3e203338333230.roa (hash: 8rfx5hsa0X1hhhAYAV+GnW9jNKRrSym9Qaq/7mxW1Sk=)
12: 3230332e3137332e38382e302f32342d3234203d3e20313339343630.roa (hash: Rpm98TP8lpn5L0MciL+HgBtsQPS4AoEpZ3E+uKifZME=)
13: 3230332e3137332e39302e302f32332d3234203d3e20313339343630.roa (hash: AyON9uU/2WhJhJicI2tnaqaN5CXoHp/HaUSy7Pc2unw=)
14: 3132322e3134342e342e302f32322d3234203d3e203338333230.roa (hash: kPTHx+hWG+LDuE6CeeYUrKB6mmUM7VHlb/As0JV8R5Y=)
15: 3131392e3131302e36382e302f32322d3234203d3e203338333230.roa (hash: WvBKlshkFphXVWmpSdt/+evxZdbmBKGdDC7K6rMtEn8=)
16: 3131392e3131302e37322e302f32322d3234203d3e203338333230.roa (hash: CuN94QnhhFu2NHfTipRrUMIPrCdOqqGtN3MEo0A8ZXk=)
17: 3230332e3137332e38392e302f32342d3234203d3e203338333230.roa (hash: W4OxxH0PyquWwT3oVoi6TfL9I1tMai3D4cWcBmXRIg8=)
18: 3130332e32392e3136342e302f32322d3234203d3e203338333230.roa (hash: NsGf/NKjXysT0NZWo8Ns+ZYja/LdeVhLVXCJP5P2m74=)
19: 3230332e3137332e39312e302f32342d3234203d3e20313339343630.roa (hash: NOo+o1xJtEt1kXlDwTIpF0OuzTUZnud5A2M0CHSRBk0=)
20: 34332e3234372e31322e302f32322d3234203d3e203338333230.roa (hash: SBWhEba9nbctUyFhfmHmCGJfJLFuvZIwVJb4MxQzTUY=)
21: 1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD.crl (hash: dflIuXCbp7JtpOh6T/bbVo+aGmgVWI+COLXRfKhZ/Ig=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD.crl
rsync://rpki-rsync.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 09:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:e5:db:8d:c1:f8:15:fe:5e:5d:3c:10:24:ad:42:21:84:e7:44:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD
Validity
Not Before: Sep 21 07:05:27 2026 GMT
Not After : Sep 22 09:02:27 2026 GMT
Subject: CN=248FA39D54F0AB61C0BC7D35E2AD588419B7CA4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:df:87:cf:99:b0:94:31:92:4c:f6:12:a2:07:
30:7b:93:ed:29:cf:98:ee:58:14:90:b4:3c:5a:58:
ad:24:35:12:5e:bf:4c:84:81:37:de:11:e5:c4:02:
95:ef:cf:f2:ca:35:64:eb:89:72:2e:38:41:3d:73:
e5:c7:d0:cc:cb:d8:43:1d:88:d1:df:9f:29:51:eb:
01:ef:cb:01:33:58:db:ab:83:34:9b:cc:59:40:8c:
27:69:df:e8:c0:af:16:48:53:88:c4:19:c3:ec:e7:
0f:d5:07:6c:e8:1f:8f:77:ba:c6:62:b6:13:b6:6b:
8d:b0:7a:b3:24:fd:2c:de:0a:a3:4a:6e:d7:00:99:
71:7a:1a:c3:01:68:2f:1f:b6:ff:69:64:02:da:d5:
de:1a:3b:db:9c:5d:c5:08:ff:07:c5:c1:b5:51:cf:
28:66:5d:88:3e:42:a9:14:59:90:8a:e6:3a:72:9d:
1e:68:7a:af:55:1d:ac:ea:60:fc:04:70:9c:94:d6:
41:32:ed:e2:99:13:0d:1c:a3:e2:e9:80:a2:72:68:
d7:e1:35:6f:4b:15:3d:2d:e8:f5:eb:4b:94:5b:fe:
ed:8b:4f:48:7d:4a:dc:a6:1c:bf:95:c5:67:a5:a0:
df:72:cb:ff:5a:5c:dd:16:16:f5:98:39:b2:7b:3c:
30:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:8F:A3:9D:54:F0:AB:61:C0:BC:7D:35:E2:AD:58:84:19:B7:CA:4E
X509v3 Authority Key Identifier:
keyid:1D:AC:DC:41:C2:8C:E5:C3:8F:42:51:C6:14:DE:10:0A:3F:1E:FC:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:6c:b2:c3:dd:e0:bf:d6:3a:3a:92:17:ca:87:de:cf:ed:e0:
f0:90:a5:e0:6f:ec:54:30:1d:ac:a5:9b:78:26:ff:74:88:77:
76:b3:28:e4:7f:75:58:19:e2:2a:fc:2a:3e:b4:76:a6:e6:69:
e1:1e:8d:a4:1f:66:37:91:01:23:3d:8d:ce:2c:d3:52:a5:6e:
24:13:f9:8d:53:60:58:56:53:37:46:43:89:d9:9c:d6:ae:25:
b0:73:4b:10:60:09:cd:f1:81:90:c3:9d:02:3f:ac:16:af:c3:
27:f5:c5:54:11:a3:11:90:a3:b7:45:d9:4f:ce:99:61:72:f4:
1a:8c:3e:42:80:54:ca:0e:a0:bb:36:b0:41:e2:42:5d:e7:32:
b2:87:73:a7:08:d6:19:65:c1:e2:97:2f:ee:15:bf:0f:cf:d2:
44:26:a2:42:02:01:3c:d9:1c:5b:ef:7d:4f:2c:fc:69:dd:e5:
fb:15:ec:c9:e9:42:e0:27:7d:09:38:b6:1f:16:23:a9:2b:a8:
50:ea:9d:f9:f1:3a:b3:d6:e2:60:0a:26:8c:67:2c:65:81:e8:
f2:04:0c:80:b3:68:c5:51:84:b3:ff:c4:de:28:d3:f9:5b:f2:
16:55:ce:ae:b7:7d:0f:e2:81:9d:00:0f:b0:61:80:a7:d0:04:
68:2f:81:64
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUEeXbjcH4Ff5eXTwQJK1CIYTnRPswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMURBQ0RDNDFDMjhDRTVDMzhGNDI1MUM2MTRERTEwMEEz
RjFFRkNBRDAeFw0yNjA5MjEwNzA1MjdaFw0yNjA5MjIwOTAyMjdaMDMxMTAvBgNV
BAMTKDI0OEZBMzlENTRGMEFCNjFDMEJDN0QzNUUyQUQ1ODg0MTlCN0NBNEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDl34fPmbCUMZJM9hKiBzB7k+0p
z5juWBSQtDxaWK0kNRJev0yEgTfeEeXEApXvz/LKNWTriXIuOEE9c+XH0MzL2EMd
iNHfnylR6wHvywEzWNurgzSbzFlAjCdp3+jArxZIU4jEGcPs5w/VB2zoH493usZi
thO2a42werMk/SzeCqNKbtcAmXF6GsMBaC8ftv9pZALa1d4aO9ucXcUI/wfFwbVR
zyhmXYg+QqkUWZCK5jpynR5oeq9VHazqYPwEcJyU1kEy7eKZEw0co+LpgKJyaNfh
NW9LFT0t6PXrS5Rb/u2LT0h9StymHL+VxWeloN9yy/9aXN0WFvWYObJ7PDAFAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUJI+jnVTwq2HAvH014q1YhBm3yk4wHwYDVR0j
BBgwFoAUHazcQcKM5cOPQlHGFN4QCj8e/K0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YTk0NWI4NmUtMDg5NS00NzU5LWE3N2MtYTA2Y2UxNGUyNDNjLzAvMURBQ0RDNDFD
MjhDRTVDMzhGNDI1MUM2MTRERTEwMEEzRjFFRkNBRC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8xREFDREM0MUMyOENFNUMzOEY0MjUxQzYxNERFMTAwQTNGMUVG
Q0FELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTk0NWI4NmUtMDg5NS00NzU5LWE3
N2MtYTA2Y2UxNGUyNDNjLzAvMURBQ0RDNDFDMjhDRTVDMzhGNDI1MUM2MTRERTEw
MEEzRjFFRkNBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFRsssPd4L/WOjqSF8qH3s/t4PCQpeBv7FQw
Haylm3gm/3SId3azKOR/dVgZ4ir8Kj60dqbmaeEejaQfZjeRASM9jc4s01KlbiQT
+Y1TYFhWUzdGQ4nZnNauJbBzSxBgCc3xgZDDnQI/rBavwyf1xVQRoxGQo7dF2U/O
mWFy9BqMPkKAVMoOoLs2sEHiQl3nMrKHc6cI1hllweKXL+4Vvw/P0kQmokICATzZ
HFvvfU8s/Gnd5fsV7MnpQuAnfQk4th8WI6krqFDqnfnxOrPW4mAKJoxnLGWB6PIE
DICzaMVRhLP/xN4o0/lb8hZVzq63fQ/igZ0AD7BhgKfQBGgvgWQ=
-----END CERTIFICATE-----
Generated at Mon Sep 21 23:34:28 2026 by rpki-client