
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/1AD9403233542883A89282A52F92A9AC66CB9D45.mft
File: 1AD9403233542883A89282A52F92A9AC66CB9D45.mft (raw, json)
Hash identifier: F6/VsHXozYD5sIwMzAfHvbfUZ0YQVSuIe8EIZuy9E5o=
Subject key identifier: 02:FB:5E:C4:33:14:DB:35:EA:1D:63:49:6E:67:A7:63:BC:54:EB:A1
Authority key identifier: 1A:D9:40:32:33:54:28:83:A8:92:82:A5:2F:92:A9:AC:66:CB:9D:45
Certificate issuer: /CN=1AD9403233542883A89282A52F92A9AC66CB9D45
Certificate serial: 7CCADC6052513B7D5C3EFD823CC94A65AC04E9B1
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1AD9403233542883A89282A52F92A9AC66CB9D45.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/1AD9403233542883A89282A52F92A9AC66CB9D45.mft
Manifest number: 75
Signing time: Tue 28 Jul 2026 21:33:13 +0000
Manifest this update: Tue 28 Jul 2026 21:28:13 +0000
Manifest next update: Wed 29 Jul 2026 23:51:13 +0000
Files and hashes: 1: 3130332e3130302e32372e302f32342d3234203d3e20313336383335.roa (hash: mJSGu8A/4Dy8uEYCBOpVGIvPxs11huUPRlbNbg4vJUA=)
2: 1AD9403233542883A89282A52F92A9AC66CB9D45.crl (hash: cdThfewGOGiJCd3u0UAQiYJFC/FCYaeangRjJBtYH+w=)
3: 3130332e3134312e3135342e302f32342d3234203d3e20313336383335.roa (hash: PAkY9cD4hOLFVdGNgMNY2HQi6aJ2ztIpajYc1pjG9X8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/1AD9403233542883A89282A52F92A9AC66CB9D45.crl
rsync://rpki-rsync.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/1AD9403233542883A89282A52F92A9AC66CB9D45.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1AD9403233542883A89282A52F92A9AC66CB9D45.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 23:51:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:ca:dc:60:52:51:3b:7d:5c:3e:fd:82:3c:c9:4a:65:ac:04:e9:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1AD9403233542883A89282A52F92A9AC66CB9D45
Validity
Not Before: Jul 28 21:28:13 2026 GMT
Not After : Jul 29 23:51:13 2026 GMT
Subject: CN=02FB5EC43314DB35EA1D63496E67A763BC54EBA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:dd:db:a6:4c:fa:2a:5a:fb:78:63:ed:4d:3a:
8c:31:6e:31:99:ed:2e:ad:19:f3:aa:b1:f8:6b:7d:
1b:b2:7d:c3:f0:9b:86:55:5a:e8:c4:c5:a9:9c:a1:
05:2e:4d:94:b3:66:27:b1:01:33:2b:c6:ec:1d:1c:
55:1a:68:53:ad:6c:4f:73:c9:9f:44:f3:ec:5d:07:
b3:ba:6c:24:80:81:58:ca:c8:76:24:36:79:9c:73:
93:b7:37:d5:5a:f5:e9:25:2f:a4:ac:1f:d4:6b:00:
98:b2:f9:fb:58:52:20:32:f0:e2:51:d8:92:1a:1f:
5d:a3:b9:65:cc:df:b2:73:5b:7e:db:2f:1a:4c:cc:
a5:46:ec:9b:35:ab:dc:78:d5:ac:29:1f:5d:cc:61:
75:47:2e:79:f4:3d:45:3d:3d:1d:2c:b8:56:f4:fe:
3b:30:6d:7d:42:64:a6:4b:96:d2:0a:b0:08:58:2c:
96:90:96:e9:f8:a4:9f:8f:ad:b5:10:0b:ee:1a:1e:
c8:4c:65:c0:e3:5f:25:03:dd:76:cc:19:46:de:bd:
ce:e1:18:af:7c:9d:4b:ef:72:20:0c:96:0f:0b:f1:
93:5c:30:60:a9:45:c8:3f:89:e6:f3:d5:31:1c:1f:
bc:c5:db:eb:ad:85:51:36:99:6a:de:07:a0:ca:76:
df:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:FB:5E:C4:33:14:DB:35:EA:1D:63:49:6E:67:A7:63:BC:54:EB:A1
X509v3 Authority Key Identifier:
keyid:1A:D9:40:32:33:54:28:83:A8:92:82:A5:2F:92:A9:AC:66:CB:9D:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/1AD9403233542883A89282A52F92A9AC66CB9D45.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1AD9403233542883A89282A52F92A9AC66CB9D45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/1AD9403233542883A89282A52F92A9AC66CB9D45.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:91:ea:eb:2e:4f:2c:d0:fd:99:bb:ad:9e:7a:51:0a:30:04:
bb:b7:49:17:8d:6b:11:c8:21:ff:8b:da:20:36:1f:43:2a:04:
82:e4:7a:56:0b:3d:ad:17:03:b8:78:1d:49:53:e8:b4:eb:24:
ce:91:d2:9c:00:c4:23:9e:52:57:90:81:76:e5:1f:57:f6:2a:
2a:e1:7b:8d:8f:ec:85:96:eb:f2:a2:4d:a2:49:40:77:33:9b:
2d:f4:45:b8:9c:fe:71:45:f4:04:95:f9:36:72:d4:eb:84:d1:
8b:3e:19:6f:c0:bc:b5:3f:2b:2d:94:38:45:09:90:99:6d:8c:
a7:23:6c:61:8e:fc:9d:7f:eb:66:5d:43:a5:a2:82:ed:a1:46:
1a:4e:34:c1:39:76:e7:cd:c7:8d:24:43:a9:62:f3:1e:42:07:
d3:d6:e8:bc:e5:47:1b:2d:1b:87:e8:73:bd:cf:6f:bd:a9:fa:
85:49:2a:05:9f:c2:99:82:37:83:ad:5a:30:19:fb:7e:c8:d7:
75:92:27:d8:65:d3:6c:a3:ed:50:a2:39:13:b4:86:e4:b0:d3:
ba:88:38:7d:b4:0a:ca:f3:fc:22:54:e2:c3:b4:66:af:86:52:
d9:53:d7:c3:3b:8c:c0:e2:98:0e:cf:f6:b0:86:4f:9d:8b:ad:
af:7c:93:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:28:43 2026 by rpki-client