
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/1AD9403233542883A89282A52F92A9AC66CB9D45.mft
File: 1AD9403233542883A89282A52F92A9AC66CB9D45.mft (raw, json)
Hash identifier: QShRIvEkLzeJLwvLmaXysdOVu7UBDq+fTOYwhQDcROo=
Subject key identifier: 89:0F:73:BE:7C:97:9C:CF:78:5C:FC:68:90:64:75:59:A9:AE:F2:C3
Authority key identifier: 1A:D9:40:32:33:54:28:83:A8:92:82:A5:2F:92:A9:AC:66:CB:9D:45
Certificate issuer: /CN=1AD9403233542883A89282A52F92A9AC66CB9D45
Certificate serial: 5D764B3EF98806E6319C6043960437F279A16CF0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1AD9403233542883A89282A52F92A9AC66CB9D45.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/1AD9403233542883A89282A52F92A9AC66CB9D45.mft
Manifest number: 38
Signing time: Sat 13 Jun 2026 00:19:46 +0000
Manifest this update: Sat 13 Jun 2026 00:14:46 +0000
Manifest next update: Sun 14 Jun 2026 03:33:46 +0000
Files and hashes: 1: 3130332e3130302e32372e302f32342d3234203d3e20313336383335.roa (hash: mJSGu8A/4Dy8uEYCBOpVGIvPxs11huUPRlbNbg4vJUA=)
2: 1AD9403233542883A89282A52F92A9AC66CB9D45.crl (hash: hLIMXQv/nSAOXkYCz28HInUFIhVQf8gqzk3CyX7g2no=)
3: 3130332e3134312e3135342e302f32342d3234203d3e20313336383335.roa (hash: PAkY9cD4hOLFVdGNgMNY2HQi6aJ2ztIpajYc1pjG9X8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/1AD9403233542883A89282A52F92A9AC66CB9D45.crl
rsync://rpki-rsync.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/1AD9403233542883A89282A52F92A9AC66CB9D45.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1AD9403233542883A89282A52F92A9AC66CB9D45.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 03:33:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:76:4b:3e:f9:88:06:e6:31:9c:60:43:96:04:37:f2:79:a1:6c:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1AD9403233542883A89282A52F92A9AC66CB9D45
Validity
Not Before: Jun 13 00:14:46 2026 GMT
Not After : Jun 14 03:33:46 2026 GMT
Subject: CN=890F73BE7C979CCF785CFC6890647559A9AEF2C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:22:d0:a3:61:20:d0:48:00:88:55:17:7e:ac:
8a:b0:4a:d2:96:75:c5:6e:a4:44:9d:ad:58:dc:b7:
e8:e6:aa:d8:aa:ec:c3:a8:57:0a:57:c7:83:71:f1:
e9:47:bd:32:34:55:3a:f2:5b:26:47:70:d2:55:c8:
c8:97:dc:b2:35:0b:02:36:78:07:a3:f4:c7:1b:7a:
db:e8:73:98:2f:d6:4f:8b:ad:e1:d2:55:e0:33:1c:
6c:ad:31:8b:9e:c9:09:7b:7e:1b:15:4a:6c:70:1c:
7a:a9:bb:c1:80:a8:8b:1d:07:be:24:a3:ad:69:3c:
a2:a6:2f:17:ac:50:21:09:40:da:16:c6:eb:5b:69:
37:bc:b4:d9:a9:61:da:f2:8c:94:13:07:24:c4:e5:
b7:11:d1:7b:34:33:22:8d:d9:8a:7b:f3:78:d8:e0:
86:88:74:8d:36:96:4d:8e:38:27:6f:92:7b:f9:46:
4c:b2:ed:78:12:80:50:11:8d:e2:5a:ae:5e:e8:e7:
e0:48:85:77:29:23:8e:c8:90:9f:03:2d:e0:4c:47:
64:79:8c:d8:36:d4:1e:cc:27:7f:57:99:19:0b:50:
75:00:4b:a8:95:7e:c0:4b:9a:b6:62:02:1e:31:cc:
a3:bb:76:29:8e:4a:6b:dc:24:a1:c7:c6:8d:e2:dc:
80:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:0F:73:BE:7C:97:9C:CF:78:5C:FC:68:90:64:75:59:A9:AE:F2:C3
X509v3 Authority Key Identifier:
keyid:1A:D9:40:32:33:54:28:83:A8:92:82:A5:2F:92:A9:AC:66:CB:9D:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/1AD9403233542883A89282A52F92A9AC66CB9D45.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1AD9403233542883A89282A52F92A9AC66CB9D45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/1AD9403233542883A89282A52F92A9AC66CB9D45.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:2f:49:cb:b2:34:89:e5:09:59:1b:4e:6a:8b:b7:b8:4c:17:
26:85:1c:8e:ad:36:0c:3c:ed:7d:86:44:85:87:53:f9:94:0b:
1a:18:b7:d8:ce:17:c7:22:03:fc:65:b0:9e:df:c5:2f:a4:9a:
74:4c:26:a0:93:ec:76:6d:51:b9:b2:85:46:2f:f1:19:7b:82:
b8:53:7d:bd:36:35:72:e7:7a:83:34:83:f3:5d:4c:fe:25:9a:
ff:96:3e:60:be:34:61:1f:3f:be:40:dc:0c:31:7e:51:ac:5c:
27:a6:8f:d6:af:f3:bf:2a:c7:f4:fe:51:e5:ad:43:33:a8:6d:
6b:83:72:4f:11:7f:76:e5:4f:ce:ec:f9:20:72:2f:ff:1f:be:
6b:03:75:4f:aa:1a:07:55:64:ef:11:b0:38:39:09:38:42:43:
a9:a7:54:25:37:78:c2:14:00:2f:73:04:45:fd:2e:a2:c1:c9:
8f:46:76:36:05:42:91:5b:5a:77:3b:12:4b:78:dd:b2:cd:78:
a5:a0:89:85:3c:91:15:c8:a7:24:0e:68:67:2a:72:13:be:08:
75:5d:e1:01:da:6a:b7:82:e3:67:e0:e2:c6:a4:18:9a:db:20:
3c:ae:c8:9d:c7:65:01:cd:ee:c5:ea:a6:b2:ec:7d:8a:f6:6c:
4b:eb:bf:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:05:50 2026 by rpki-client