
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/1FD138814ED6ED10A74AEDE620ECC6CB414D8D49.mft
File: 1FD138814ED6ED10A74AEDE620ECC6CB414D8D49.mft (raw, json)
Hash identifier: 3sV8w41ncmIhPRgKJW/OU8PMNn9wKyn6pl3yGl6vk6c=
Subject key identifier: EC:D1:58:1C:4B:B6:2A:3D:A1:2B:AD:28:B8:41:23:98:6C:E1:9E:33
Authority key identifier: 1F:D1:38:81:4E:D6:ED:10:A7:4A:ED:E6:20:EC:C6:CB:41:4D:8D:49
Certificate issuer: /CN=1FD138814ED6ED10A74AEDE620ECC6CB414D8D49
Certificate serial: 44B3179AC2D70A99A7E7385212BBC72BBA7E0752
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1FD138814ED6ED10A74AEDE620ECC6CB414D8D49.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/1FD138814ED6ED10A74AEDE620ECC6CB414D8D49.mft
Manifest number: BC
Signing time: Sun 20 Sep 2026 04:07:15 +0000
Manifest this update: Sun 20 Sep 2026 04:02:15 +0000
Manifest next update: Mon 21 Sep 2026 05:24:15 +0000
Files and hashes: 1: AS137346.roa (hash: NZ6wUFk5XR7PD9+fJ1hvHsTgRiRIMRLn5KDTlukuqTs=)
2: AS140421.roa (hash: NubwM9MWXF/shtYPHNCf93qRquIZw5eXxpOBi0ubSeY=)
3: AS38755.roa (hash: rrRHicGoTqQQ5KVonJVs0FP/MR7/6NaqqXA8D/2TInc=)
4: AS24520.roa (hash: RlHOKG3iuobVB1DAMGAm+asFdd1ASONRpQ1lrWJUUMA=)
5: 1FD138814ED6ED10A74AEDE620ECC6CB414D8D49.crl (hash: D7FIrcjCsMPwBQip3YFOhL8eDisqR9rNNvG1bfF3ku4=)
6: AS38768.roa (hash: cYG0UjFfYvF8rnbWyEC/rqKPjOD6XMnko8jMH8VBKzc=)
7: AS46024.roa (hash: ylmYw4/KnmlumROmFOx5Ugd+ZvIq9v4dyoc2wy3GxMY=)
8: AS135457.roa (hash: X1w4nzNuA26rXRd5yVYdj4Puf4QzWuOiYkpDYswCdZY=)
9: AS38496.roa (hash: yYz1sIG6N2Kn9PvkhdiFovkBZr7zFMKsgWeqKN8ae+8=)
10: AS138885.roa (hash: MXHah2Crj721VSI4LYqxgOTDqWKKFzAoSwM3O6/hIWs=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/1FD138814ED6ED10A74AEDE620ECC6CB414D8D49.crl
rsync://rpki-rsync.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/1FD138814ED6ED10A74AEDE620ECC6CB414D8D49.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1FD138814ED6ED10A74AEDE620ECC6CB414D8D49.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 21 Sep 2026 05:24:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:b3:17:9a:c2:d7:0a:99:a7:e7:38:52:12:bb:c7:2b:ba:7e:07:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1FD138814ED6ED10A74AEDE620ECC6CB414D8D49
Validity
Not Before: Sep 20 04:02:15 2026 GMT
Not After : Sep 21 05:24:15 2026 GMT
Subject: CN=ECD1581C4BB62A3DA12BAD28B84123986CE19E33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e4:13:98:ed:8a:42:de:a8:08:e1:af:08:e4:
b5:3d:8e:3c:24:3b:67:ed:82:0b:ef:9c:4c:ff:52:
99:60:81:76:2b:19:8d:82:7d:08:eb:27:f6:cf:8f:
61:f3:70:eb:28:97:49:a3:34:db:9c:d6:60:68:cc:
8d:c9:de:03:f7:57:06:92:39:7b:8d:b4:0c:8d:8e:
03:ec:fc:86:dc:cc:28:f2:37:47:57:25:c8:70:7d:
e5:bc:5c:d8:a0:43:71:c8:73:4c:66:23:1e:4b:a9:
88:e8:60:57:21:1d:57:27:54:e5:04:a4:5a:ae:ca:
28:a6:0e:7b:ad:7c:64:95:82:41:e6:a2:8c:67:12:
88:0e:40:24:6a:07:8c:7f:58:28:3e:81:b9:2c:20:
8f:ef:34:89:54:83:e0:ae:b3:f3:20:cd:1b:17:39:
a0:7a:9f:36:8a:6f:76:cb:7e:ca:5e:96:f8:97:fc:
51:20:da:42:a3:79:af:6c:bf:1b:4b:76:f7:4b:7c:
f0:63:d9:78:bd:5f:0d:1a:5e:f9:34:11:de:2d:92:
df:af:90:90:b7:84:f5:74:eb:dd:8d:0a:89:7b:12:
cf:45:10:46:d6:44:dd:f7:05:33:d2:27:3d:19:3e:
42:e2:83:20:1e:e2:2b:89:22:9f:98:f6:1e:61:a3:
d0:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:D1:58:1C:4B:B6:2A:3D:A1:2B:AD:28:B8:41:23:98:6C:E1:9E:33
X509v3 Authority Key Identifier:
keyid:1F:D1:38:81:4E:D6:ED:10:A7:4A:ED:E6:20:EC:C6:CB:41:4D:8D:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/1FD138814ED6ED10A74AEDE620ECC6CB414D8D49.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1FD138814ED6ED10A74AEDE620ECC6CB414D8D49.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/1FD138814ED6ED10A74AEDE620ECC6CB414D8D49.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:ca:b4:ce:8f:6a:e8:b7:d9:b0:c3:e7:de:a5:4f:8e:18:e2:
fb:df:6f:b2:d0:3f:e6:a1:58:39:5d:59:e9:07:6a:9f:4d:d4:
35:e8:3f:10:49:da:c2:fa:03:38:01:a8:01:d5:e1:89:e7:d9:
f3:f1:6c:00:22:82:b0:83:3f:7c:95:28:5d:40:87:5f:df:75:
01:12:39:80:c1:64:aa:c7:ba:83:c2:9a:49:15:ff:33:77:8c:
41:ee:43:be:5d:78:86:94:4e:d9:27:dd:f6:a9:cc:2a:48:0b:
70:1a:74:b7:c8:bf:63:8c:7a:69:46:97:e5:28:53:80:1f:62:
1c:26:ee:b5:f3:50:e3:e1:db:e3:dd:b0:ca:d1:8f:4f:dc:fa:
37:48:75:c9:01:db:5b:33:b8:ee:20:21:79:8d:9f:b4:d0:ac:
4b:11:c7:9e:1c:61:f8:8a:08:99:e0:6b:84:cf:82:55:c0:13:
48:9f:b7:62:b3:c3:34:39:ee:c0:49:ab:6f:f5:16:c5:12:63:
12:53:36:7f:34:ae:b6:0a:27:a1:22:45:63:35:b1:f0:40:2d:
43:97:ce:a9:5a:ef:67:39:fa:d9:18:71:bd:c7:d0:da:81:3f:
f6:6e:20:be:d8:d9:a5:7d:87:c3:69:0e:64:cd:25:a3:b8:7c:
ad:d0:95:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 22:34:19 2026 by rpki-client