
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/1859662B11A1F7335B5E5F6093D493B45F785BCF.mft
File: 1859662B11A1F7335B5E5F6093D493B45F785BCF.mft (raw, json)
Hash identifier: zQI75nms6sLPffhxuz1czz4Fo9m8nf4NILgY86QpPBU=
Subject key identifier: 1E:88:EF:BD:23:17:19:8D:46:39:AD:0E:B5:AC:62:33:F5:A0:B3:53
Authority key identifier: 18:59:66:2B:11:A1:F7:33:5B:5E:5F:60:93:D4:93:B4:5F:78:5B:CF
Certificate issuer: /CN=1859662B11A1F7335B5E5F6093D493B45F785BCF
Certificate serial: 66F4E713A77FCCF2A37AF52C49C086BF50232AA6
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1859662B11A1F7335B5E5F6093D493B45F785BCF.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/1859662B11A1F7335B5E5F6093D493B45F785BCF.mft
Manifest number: 38
Signing time: Fri 12 Jun 2026 16:09:47 +0000
Manifest this update: Fri 12 Jun 2026 16:04:47 +0000
Manifest next update: Sat 13 Jun 2026 18:28:47 +0000
Files and hashes: 1: 1859662B11A1F7335B5E5F6093D493B45F785BCF.crl (hash: JE98EVSiOA7YKcPENI2jcsS6Zf5Z5yzKDM5G+bbKXr4=)
2: 3130332e3136362e3137382e302f32342d3234203d3e20313534343130.roa (hash: U9buHNsi2jDfo5KH+0Kih4bcNzBuDuVWdR/10Uc4Q3A=)
3: 3130332e3136362e3137382e302f32342d3234203d3e20313431393534.roa (hash: FjXRjyTIW7jBUwedjN45SmsENn+GAhcicAGgdt3Asa8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/1859662B11A1F7335B5E5F6093D493B45F785BCF.crl
rsync://rpki-rsync.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/1859662B11A1F7335B5E5F6093D493B45F785BCF.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1859662B11A1F7335B5E5F6093D493B45F785BCF.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 18:28:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:f4:e7:13:a7:7f:cc:f2:a3:7a:f5:2c:49:c0:86:bf:50:23:2a:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1859662B11A1F7335B5E5F6093D493B45F785BCF
Validity
Not Before: Jun 12 16:04:47 2026 GMT
Not After : Jun 13 18:28:47 2026 GMT
Subject: CN=1E88EFBD2317198D4639AD0EB5AC6233F5A0B353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:dc:7c:87:b2:ac:45:df:68:87:86:25:31:c2:
5b:87:66:41:58:f0:2d:31:b8:43:90:89:9c:6f:f8:
2d:02:77:7e:67:24:0a:41:29:1c:9e:9d:b4:43:dc:
90:25:78:08:62:6c:1b:1b:63:d0:df:25:e7:92:68:
85:97:86:12:3b:c3:82:5c:89:83:58:a9:71:9b:a2:
36:83:84:57:9c:d3:a1:ee:f4:c3:51:23:01:08:95:
83:9b:31:d2:0a:15:00:44:ac:52:29:43:ca:34:a5:
25:97:bc:cd:60:a2:52:bb:d3:c9:e2:5c:76:42:ef:
65:e2:63:ba:6c:e5:de:58:60:95:11:0b:3d:65:ee:
1c:d7:a0:b7:60:64:6a:32:b5:75:a9:78:66:0d:24:
ab:e7:d8:e5:5e:e5:c5:3d:46:5b:72:bf:18:8f:a5:
8e:79:9b:d8:e2:87:90:c1:f2:95:0f:75:73:83:1f:
e5:bc:d6:de:6c:b0:18:db:f8:05:76:49:2d:c3:4e:
89:75:bb:5d:3f:6e:13:64:6a:5f:33:b7:73:a8:71:
cb:9e:be:4e:27:77:59:34:32:f2:11:90:2e:c5:cb:
96:67:18:a3:9f:c6:37:c2:08:0a:10:b8:2f:69:0e:
b4:56:cb:03:2b:a9:ef:25:d4:c2:46:6e:92:0d:67:
d0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:88:EF:BD:23:17:19:8D:46:39:AD:0E:B5:AC:62:33:F5:A0:B3:53
X509v3 Authority Key Identifier:
keyid:18:59:66:2B:11:A1:F7:33:5B:5E:5F:60:93:D4:93:B4:5F:78:5B:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/1859662B11A1F7335B5E5F6093D493B45F785BCF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1859662B11A1F7335B5E5F6093D493B45F785BCF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/1859662B11A1F7335B5E5F6093D493B45F785BCF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:73:a8:0d:37:b9:5e:58:a8:18:46:c7:e0:c4:9f:91:68:27:
3c:9e:82:cd:d1:9b:ac:2a:c0:60:59:7e:d0:1d:59:21:3e:29:
e1:3d:c1:db:63:8f:5e:ca:b5:81:a6:7d:44:c3:d2:9f:d0:16:
7b:c0:ab:ac:3e:f9:ea:05:a9:a5:a0:8d:27:0f:24:06:f9:32:
4f:22:ea:aa:ee:58:c7:e1:8e:ed:de:66:08:17:56:fe:86:70:
93:a7:1d:f3:9a:cd:12:80:bf:60:98:d8:fe:02:67:28:a4:01:
4d:7d:3b:83:a8:b2:01:af:28:6f:12:bd:0e:24:3a:c5:fc:d7:
0a:cb:94:01:50:33:e6:af:5c:e7:82:51:d5:40:ea:22:91:6f:
bd:04:9d:e9:d5:6f:4b:47:5b:6b:d4:c8:89:0a:68:e5:ef:5e:
c4:69:04:46:99:48:33:4c:b8:14:91:5b:04:b0:e0:40:50:88:
12:c8:10:62:a9:2b:14:a7:1e:5b:eb:be:09:63:d7:c4:c5:bf:
ac:43:55:cb:1f:a0:04:3c:6f:dd:dc:c8:69:f1:ff:d7:9c:a3:
68:93:79:5c:c5:a3:49:90:89:7b:ab:d7:b7:2e:9c:65:d4:25:
f7:c6:56:2a:61:f2:01:88:5e:2f:54:95:d8:49:2d:d9:32:6d:
3a:1d:e4:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:56:45 2026 by rpki-client