
$ rpki-client -vvf rpki-rsync.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/1CCC9F903B0797259D4851831FDB74E850E28573.mft
File: 1CCC9F903B0797259D4851831FDB74E850E28573.mft (raw, json)
Hash identifier: ww4kbanK1WzGtP27CQP+I4jwwFlJ0fDu1xgadeSOq6M=
Subject key identifier: B4:23:CC:C3:E8:E2:E3:93:60:22:C6:03:89:99:0B:18:B4:DC:DF:37
Authority key identifier: 1C:CC:9F:90:3B:07:97:25:9D:48:51:83:1F:DB:74:E8:50:E2:85:73
Certificate issuer: /CN=1CCC9F903B0797259D4851831FDB74E850E28573
Certificate serial: 1DDA665E1172B7166579987D98F276E30C21D8D8
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1CCC9F903B0797259D4851831FDB74E850E28573.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/1CCC9F903B0797259D4851831FDB74E850E28573.mft
Manifest number: 38
Signing time: Sat 13 Jun 2026 08:29:10 +0000
Manifest this update: Sat 13 Jun 2026 08:24:10 +0000
Manifest next update: Sun 14 Jun 2026 08:46:10 +0000
Files and hashes: 1: 3136302e32352e35352e302f32342d3234203d3e20313533303630.roa (hash: 1QSTMTha75VQUavzNrm00rtAo2y/e9vazzdx0pcZJXk=)
2: 3136302e32352e35342e302f32342d3234203d3e20313533303630.roa (hash: zB+Gp09Xv+ze/cWNBFwHk3DIfApc6pdj5NfB2Dg0qyE=)
3: 1CCC9F903B0797259D4851831FDB74E850E28573.crl (hash: qOSzKPlAo3nS8lKXS9qIL1cz/bX1j+VHlr88JR0JwmI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/1CCC9F903B0797259D4851831FDB74E850E28573.crl
rsync://rpki-rsync.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/1CCC9F903B0797259D4851831FDB74E850E28573.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1CCC9F903B0797259D4851831FDB74E850E28573.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 21:18:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:da:66:5e:11:72:b7:16:65:79:98:7d:98:f2:76:e3:0c:21:d8:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1CCC9F903B0797259D4851831FDB74E850E28573
Validity
Not Before: Jun 13 08:24:10 2026 GMT
Not After : Jun 14 08:46:10 2026 GMT
Subject: CN=B423CCC3E8E2E3936022C60389990B18B4DCDF37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a4:b8:36:de:79:e8:d2:2e:a6:7c:72:db:10:
4c:02:94:b1:14:c3:c4:70:51:d4:76:51:b0:34:ff:
ce:da:30:c5:de:c3:bf:8e:8e:2e:3e:b1:e8:95:44:
65:26:65:c2:43:4d:01:0b:40:a6:26:c6:a0:70:33:
d9:25:16:ef:17:be:ee:9b:97:32:ae:7d:04:63:6d:
28:15:46:de:e0:f5:1a:c7:44:0c:c3:e2:0f:81:45:
c8:f4:47:e6:b8:d8:8a:78:6c:de:04:e7:0c:19:e3:
31:c8:e9:a9:83:14:eb:38:4e:e9:e6:6d:88:10:b8:
4f:01:48:1d:87:1d:53:84:6a:46:4b:62:e2:62:5d:
42:33:37:9b:fa:2e:8e:8c:3b:8f:18:88:1d:3a:0d:
a3:9f:89:f7:4d:e4:5c:bd:1b:68:61:0f:82:df:36:
5a:16:a3:ba:14:fd:bb:4f:91:c8:07:91:58:ee:b0:
15:81:cd:2e:92:bf:f7:9c:5f:58:3a:30:c3:59:f7:
47:a6:bd:51:de:f9:cc:07:4c:9d:f2:90:36:0b:95:
d0:86:9f:c5:f7:6f:07:11:0a:90:66:8a:89:07:c1:
37:99:41:fd:ad:58:0a:8a:4d:51:d4:1c:b7:85:d7:
4d:6d:21:2a:37:16:fc:c0:17:f1:94:3d:c6:82:ca:
6f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:23:CC:C3:E8:E2:E3:93:60:22:C6:03:89:99:0B:18:B4:DC:DF:37
X509v3 Authority Key Identifier:
keyid:1C:CC:9F:90:3B:07:97:25:9D:48:51:83:1F:DB:74:E8:50:E2:85:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/1CCC9F903B0797259D4851831FDB74E850E28573.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1CCC9F903B0797259D4851831FDB74E850E28573.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/1CCC9F903B0797259D4851831FDB74E850E28573.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:60:04:6a:77:c3:fb:ea:bb:e3:cb:67:88:f8:f6:e5:63:85:
2d:af:60:d0:3b:c7:72:f2:b6:67:30:2e:68:b2:d4:64:99:3f:
1b:5f:f7:af:8a:90:2b:b0:68:1c:1e:a7:bb:68:3a:b3:b4:35:
1b:c5:3d:69:31:68:cb:6b:6b:33:e7:72:e2:17:44:02:6e:10:
43:78:c1:67:f9:7a:2e:d9:6e:72:cc:53:42:cc:02:ef:a1:a3:
b3:af:e6:78:3b:fc:25:46:7e:bc:a1:8d:ce:4e:12:81:28:75:
f6:7c:ae:55:21:39:c9:39:36:c1:59:4c:e9:09:b4:98:24:69:
a5:07:6d:86:4b:b9:7b:13:34:41:40:c4:c2:57:38:69:15:93:
20:f3:1a:cb:95:54:3e:0e:29:46:63:b7:2f:29:6c:1e:e0:72:
b1:ec:13:12:b6:24:c4:0d:40:b6:de:93:97:72:e7:22:53:b9:
1b:1a:99:50:22:d2:eb:eb:c1:6e:bb:e4:38:95:0e:81:9c:99:
94:7d:b3:cf:48:4a:b9:ad:9e:b7:68:70:cb:17:54:1b:b6:46:
4d:d3:d2:d2:7d:e1:2f:a8:66:5f:7f:3c:16:3d:b1:6a:3f:83:
10:de:3e:ae:4e:5f:7c:cc:16:6d:92:1b:0c:ae:d6:10:70:8c:
c8:ff:af:5b
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUHdpmXhFytxZleZh9mPJ24wwh2NgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUNDQzlGOTAzQjA3OTcyNTlENDg1MTgzMUZEQjc0RTg1
MEUyODU3MzAeFw0yNjA2MTMwODI0MTBaFw0yNjA2MTQwODQ2MTBaMDMxMTAvBgNV
BAMTKEI0MjNDQ0MzRThFMkUzOTM2MDIyQzYwMzg5OTkwQjE4QjREQ0RGMzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYpLg23nno0i6mfHLbEEwClLEU
w8RwUdR2UbA0/87aMMXew7+Oji4+seiVRGUmZcJDTQELQKYmxqBwM9klFu8Xvu6b
lzKufQRjbSgVRt7g9RrHRAzD4g+BRcj0R+a42Ip4bN4E5wwZ4zHI6amDFOs4Tunm
bYgQuE8BSB2HHVOEakZLYuJiXUIzN5v6Lo6MO48YiB06DaOfifdN5Fy9G2hhD4Lf
NloWo7oU/btPkcgHkVjusBWBzS6Sv/ecX1g6MMNZ90emvVHe+cwHTJ3ykDYLldCG
n8X3bwcRCpBmiokHwTeZQf2tWAqKTVHUHLeF101tISo3FvzAF/GUPcaCym93AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUtCPMw+ji45NgIsYDiZkLGLTc3zcwHwYDVR0j
BBgwFoAUHMyfkDsHlyWdSFGDH9t06FDihXMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YWVhMjZhMTAtNThlOC00M2M3LTk0N2UtNzIyMTczZDY2NjE0LzAvMUNDQzlGOTAz
QjA3OTcyNTlENDg1MTgzMUZEQjc0RTg1MEUyODU3My5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC8xQ0NDOUY5MDNCMDc5NzI1OUQ0ODUxODMxRkRCNzRFODUwRTI4
NTczLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWVhMjZhMTAtNThlOC00M2M3LTk0
N2UtNzIyMTczZDY2NjE0LzAvMUNDQzlGOTAzQjA3OTcyNTlENDg1MTgzMUZEQjc0
RTg1MEUyODU3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAKxgBGp3w/vqu+PLZ4j49uVjhS2vYNA7x3Ly
tmcwLmiy1GSZPxtf96+KkCuwaBwep7toOrO0NRvFPWkxaMtrazPncuIXRAJuEEN4
wWf5ei7ZbnLMU0LMAu+ho7Ov5ng7/CVGfryhjc5OEoEodfZ8rlUhOck5NsFZTOkJ
tJgkaaUHbYZLuXsTNEFAxMJXOGkVkyDzGsuVVD4OKUZjty8pbB7gcrHsExK2JMQN
QLbek5dy5yJTuRsamVAi0uvrwW675DiVDoGcmZR9s89ISrmtnrdocMsXVBu2Rk3T
0tJ94S+oZl9/PBY9sWo/gxDePq5OX3zMFm2SGwyu1hBwjMj/r1s=
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:20:10 2026 by rpki-client