
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/1E0301E0EA0A06DC8435E43BCC6977EF3BD4AF1A.mft
File: 1E0301E0EA0A06DC8435E43BCC6977EF3BD4AF1A.mft (raw, json)
Hash identifier: zpMLfey1w0s1UaC6OLc8+Eztm+Vuh1nWBfNcut5/FwU=
Subject key identifier: D7:55:C7:86:BD:C9:67:1D:DD:08:03:63:25:3B:C8:27:E2:A5:90:12
Authority key identifier: 1E:03:01:E0:EA:0A:06:DC:84:35:E4:3B:CC:69:77:EF:3B:D4:AF:1A
Certificate issuer: /CN=1E0301E0EA0A06DC8435E43BCC6977EF3BD4AF1A
Certificate serial: 09AF4B8C4368AF721F5EABF54329F15C2CF6AFD4
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1E0301E0EA0A06DC8435E43BCC6977EF3BD4AF1A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/1E0301E0EA0A06DC8435E43BCC6977EF3BD4AF1A.mft
Manifest number: 3D
Signing time: Wed 17 Jun 2026 04:43:34 +0000
Manifest this update: Wed 17 Jun 2026 04:38:34 +0000
Manifest next update: Thu 18 Jun 2026 04:59:34 +0000
Files and hashes: 1: 3130332e3136382e3135312e302f32342d3234203d3e20313432333131.roa (hash: 10z6uPoT7+KF3jmKNjwiPYU/fWtSzXtmxjuZX3KE6+w=)
2: 3130332e3136382e3135302e302f32342d3234203d3e20313432333131.roa (hash: +vANdbTWMrufItFa0nCpqJPgPphPTUGA/kS3/GJ4B1E=)
3: 3130332e3136382e3135302e302f32332d3233203d3e20313432333131.roa (hash: ilMWkREaaRUsVGA1yBY9I9uXOlfT5ODPbD+SLMsp1gg=)
4: 1E0301E0EA0A06DC8435E43BCC6977EF3BD4AF1A.crl (hash: pKdmEcuJNd5lxAIu8iH1YkWfDcg+S32b5XkUxrsL7DI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/1E0301E0EA0A06DC8435E43BCC6977EF3BD4AF1A.crl
rsync://rpki-rsync.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/1E0301E0EA0A06DC8435E43BCC6977EF3BD4AF1A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1E0301E0EA0A06DC8435E43BCC6977EF3BD4AF1A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:af:4b:8c:43:68:af:72:1f:5e:ab:f5:43:29:f1:5c:2c:f6:af:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1E0301E0EA0A06DC8435E43BCC6977EF3BD4AF1A
Validity
Not Before: Jun 17 04:38:34 2026 GMT
Not After : Jun 18 04:59:34 2026 GMT
Subject: CN=D755C786BDC9671DDD080363253BC827E2A59012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b9:5a:9c:b8:a6:63:b1:52:bc:a4:00:ea:2e:
09:24:19:6c:63:df:87:42:e7:cc:11:e5:b6:5f:40:
87:2c:46:49:a8:04:7a:e0:87:c6:10:81:5d:3a:bf:
66:86:6d:a0:35:62:64:f9:d5:a2:4a:6a:ea:e4:52:
20:2f:01:af:2d:51:79:d8:73:dc:a2:ae:cc:13:8c:
b0:0f:4f:2b:26:49:97:3b:c8:81:9c:0f:f6:f4:ef:
52:0d:9f:05:fa:2c:d9:68:31:c1:26:da:96:10:3e:
e6:e3:4f:6c:9b:4f:ac:2d:69:45:56:63:26:16:b2:
63:d1:0f:fc:d9:15:59:60:8d:ac:56:8b:ca:b1:52:
86:29:36:1c:1a:8c:86:a6:a9:16:64:da:70:8e:d9:
4c:61:d2:1c:9e:3f:3b:ac:55:ec:5d:ee:02:dc:db:
21:3d:a3:92:c6:9d:75:80:a2:4e:b8:34:74:35:76:
df:11:22:3d:6e:eb:de:10:b8:71:2a:b3:19:65:2b:
ad:b8:14:dc:05:14:d9:cc:70:dd:56:2e:bf:7a:48:
d0:95:55:30:f5:a3:99:f0:07:7a:37:e6:9c:d0:96:
17:8c:a2:73:04:d2:4f:bc:b5:1f:26:75:4e:48:88:
41:63:bf:f7:13:6a:56:bd:32:4f:8b:20:6e:35:42:
08:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:55:C7:86:BD:C9:67:1D:DD:08:03:63:25:3B:C8:27:E2:A5:90:12
X509v3 Authority Key Identifier:
keyid:1E:03:01:E0:EA:0A:06:DC:84:35:E4:3B:CC:69:77:EF:3B:D4:AF:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/1E0301E0EA0A06DC8435E43BCC6977EF3BD4AF1A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1E0301E0EA0A06DC8435E43BCC6977EF3BD4AF1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/1E0301E0EA0A06DC8435E43BCC6977EF3BD4AF1A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:03:b6:38:be:a5:9f:f0:3b:52:12:8a:d2:58:10:88:76:29:
3f:cb:d2:d1:76:5e:61:7e:06:5f:be:80:7d:bc:56:ae:a3:42:
72:b8:0d:5b:13:90:82:cf:e9:42:3f:12:18:97:18:b0:5b:64:
22:9d:3b:fd:c5:40:07:81:15:67:f2:f0:f3:b5:1d:d8:ee:14:
64:cd:f6:7c:14:86:fc:09:5b:d2:59:7c:49:fd:6e:cc:48:58:
b4:b9:00:2a:21:05:a5:88:4f:e3:0b:9b:49:d4:27:ac:81:26:
38:8d:6b:56:17:2c:d7:e8:8f:94:e1:c5:6e:84:37:cf:92:f8:
84:91:46:61:7a:1f:a3:8c:f1:53:14:9a:42:e1:67:d2:fa:3f:
d9:31:8e:f1:bb:1d:fd:21:34:1b:39:61:d6:7e:5c:6f:55:ba:
f9:6f:71:e2:94:bb:1b:7f:9a:32:3f:b5:33:ac:ad:a9:f6:cf:
83:94:4c:01:81:b6:f6:66:c4:27:c0:32:37:c9:26:e5:0a:1b:
dc:c0:fc:ed:d7:c1:26:d3:b5:ad:89:96:0f:73:03:ab:c6:dd:
54:fa:2b:c4:d3:aa:96:65:52:1b:71:8e:85:d8:47:89:6d:d2:
66:4e:f9:5f:2d:77:2a:22:84:a9:0d:64:57:fb:10:45:2d:c3:
4e:98:9f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:32:02 2026 by rpki-client