
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1420484BD98BF83C1C6C5FF62F97723CB369F3CD.mft
File: 1420484BD98BF83C1C6C5FF62F97723CB369F3CD.mft (raw, json)
Hash identifier: W1Th+IDJBY1HVvXX7CuZS4yPkQ9rwEYQ9xEqdV0fWLk=
Subject key identifier: 24:ED:60:78:C7:A6:61:A6:8B:7C:9A:35:CC:93:51:E0:5F:5B:98:C5
Authority key identifier: 14:20:48:4B:D9:8B:F8:3C:1C:6C:5F:F6:2F:97:72:3C:B3:69:F3:CD
Certificate issuer: /CN=1420484BD98BF83C1C6C5FF62F97723CB369F3CD
Certificate serial: 5857832CFA7B97905930CC3CA1C5A4E2B3813B83
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1420484BD98BF83C1C6C5FF62F97723CB369F3CD.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1420484BD98BF83C1C6C5FF62F97723CB369F3CD.mft
Manifest number: D5
Signing time: Thu 08 Oct 2026 03:21:20 +0000
Manifest this update: Thu 08 Oct 2026 03:16:20 +0000
Manifest next update: Fri 09 Oct 2026 03:58:20 +0000
Files and hashes: 1: 1420484BD98BF83C1C6C5FF62F97723CB369F3CD.crl (hash: 4IPUeyM+c8OeSrPbwt60RKZ6xXm6elS03Rk95OB2UFE=)
2: 3130332e3137342e3137362e302f32332d3234203d3e203338333230.roa (hash: 6AZ8JAgtI94iBZvhn289sOw/311Gf5HWF9lx3CgDg/c=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1420484BD98BF83C1C6C5FF62F97723CB369F3CD.crl
rsync://rpki-rsync.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1420484BD98BF83C1C6C5FF62F97723CB369F3CD.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1420484BD98BF83C1C6C5FF62F97723CB369F3CD.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 03:58:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:57:83:2c:fa:7b:97:90:59:30:cc:3c:a1:c5:a4:e2:b3:81:3b:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1420484BD98BF83C1C6C5FF62F97723CB369F3CD
Validity
Not Before: Oct 8 03:16:20 2026 GMT
Not After : Oct 9 03:58:20 2026 GMT
Subject: CN=24ED6078C7A661A68B7C9A35CC9351E05F5B98C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7e:c5:24:2c:4d:8e:ae:fb:4b:4a:52:5d:fd:
c3:c1:74:f0:b2:18:eb:0d:6b:38:b3:ea:59:b3:e4:
af:74:66:3a:2e:2f:ee:06:bb:bc:78:37:d3:4e:5b:
f8:24:b9:d2:dc:a5:30:6e:35:74:3e:09:12:12:71:
49:a8:35:40:f6:e5:a7:14:1e:16:83:e6:bb:2c:2f:
c0:ab:16:38:4c:d0:25:da:e8:f5:4f:ff:ff:9f:df:
ee:66:5d:f0:5b:fb:db:ea:0f:97:df:aa:21:91:1e:
d5:86:31:de:7d:b2:4f:9c:66:8c:5a:42:95:67:f5:
c6:8f:b0:64:d7:0d:77:fa:31:dc:a1:58:21:60:0f:
49:21:e4:0e:e6:e3:c3:2c:e6:93:36:16:9a:ca:ac:
4a:e9:3b:63:54:7f:64:cb:ac:df:22:c0:e4:2b:c0:
5e:db:9c:8c:85:8b:ff:c4:e9:8a:dd:33:61:de:0f:
b8:c2:6e:d2:c7:de:72:d9:c5:dc:d7:de:df:94:ff:
c9:02:cd:5e:b5:10:ab:87:01:e0:b8:36:a8:5e:7b:
60:f6:af:fe:90:8d:3e:67:c4:25:53:a8:f7:3c:7e:
ef:ef:87:3a:bc:39:f4:84:4f:05:a3:a8:4f:01:2b:
5c:be:3b:86:08:b4:99:cd:07:ca:96:4e:61:1b:cf:
7f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:ED:60:78:C7:A6:61:A6:8B:7C:9A:35:CC:93:51:E0:5F:5B:98:C5
X509v3 Authority Key Identifier:
keyid:14:20:48:4B:D9:8B:F8:3C:1C:6C:5F:F6:2F:97:72:3C:B3:69:F3:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1420484BD98BF83C1C6C5FF62F97723CB369F3CD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1420484BD98BF83C1C6C5FF62F97723CB369F3CD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1420484BD98BF83C1C6C5FF62F97723CB369F3CD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:b1:14:60:38:02:ea:21:aa:57:7b:0f:2d:32:33:10:59:a3:
fc:6f:c0:37:8c:10:b4:fd:87:0c:f2:e3:63:e6:95:66:25:21:
41:59:a9:b2:58:fe:41:40:0a:88:7f:80:77:65:5a:4b:80:6f:
20:5b:3f:33:10:e5:ab:22:f1:52:87:b7:07:9b:94:91:13:99:
8c:78:9a:12:72:94:97:ab:a6:b7:ad:f3:25:b6:33:33:6d:0d:
8b:53:e1:6c:68:51:99:9a:2b:51:0b:a4:36:5b:27:aa:d5:46:
80:5e:ef:6a:8b:fb:1e:4a:ac:bd:6c:1c:6c:c1:23:3e:95:22:
67:36:7b:d9:ec:8a:b5:e6:72:51:25:25:f8:03:80:67:a5:b9:
37:58:4d:4f:69:dc:8a:11:a9:59:16:86:af:3d:82:c7:5b:c6:
d4:37:1d:01:51:69:5b:b6:d0:fb:56:73:82:6d:70:4a:e0:ac:
e7:fe:d2:a1:4a:ae:43:c5:0e:fe:b0:e3:43:12:b0:d9:cf:c8:
c3:b8:da:0e:98:86:2a:6d:50:b4:a9:8c:45:70:db:e6:4f:10:
50:6c:3a:4b:7e:c1:a7:ea:a8:a2:72:9c:a1:7a:1a:18:31:bc:
45:7d:4c:54:35:55:08:7d:93:46:bc:29:d0:a3:cb:0e:de:7d:
b5:6c:77:04
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUWFeDLPp7l5BZMMw8ocWk4rOBO4MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQyMDQ4NEJEOThCRjgzQzFDNkM1RkY2MkY5NzcyM0NC
MzY5RjNDRDAeFw0yNjEwMDgwMzE2MjBaFw0yNjEwMDkwMzU4MjBaMDMxMTAvBgNV
BAMTKDI0RUQ2MDc4QzdBNjYxQTY4QjdDOUEzNUNDOTM1MUUwNUY1Qjk4QzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCifsUkLE2OrvtLSlJd/cPBdPCy
GOsNaziz6lmz5K90ZjouL+4Gu7x4N9NOW/gkudLcpTBuNXQ+CRIScUmoNUD25acU
HhaD5rssL8CrFjhM0CXa6PVP//+f3+5mXfBb+9vqD5ffqiGRHtWGMd59sk+cZoxa
QpVn9caPsGTXDXf6MdyhWCFgD0kh5A7m48Ms5pM2FprKrErpO2NUf2TLrN8iwOQr
wF7bnIyFi//E6YrdM2HeD7jCbtLH3nLZxdzX3t+U/8kCzV61EKuHAeC4Nqhee2D2
r/6QjT5nxCVTqPc8fu/vhzq8OfSETwWjqE8BK1y+O4YItJnNB8qWTmEbz38vAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUJO1geMemYaaLfJo1zJNR4F9bmMUwHwYDVR0j
BBgwFoAUFCBIS9mL+DwcbF/2L5dyPLNp880wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZmJlMTVlNmYtMDY4OS00NzEzLWIwZmMtOTQzMDYyYWM1OTJlLzAvMTQyMDQ4NEJE
OThCRjgzQzFDNkM1RkY2MkY5NzcyM0NCMzY5RjNDRC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8xNDIwNDg0QkQ5OEJGODNDMUM2QzVGRjYyRjk3NzIzQ0IzNjlG
M0NELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmJlMTVlNmYtMDY4OS00NzEzLWIw
ZmMtOTQzMDYyYWM1OTJlLzAvMTQyMDQ4NEJEOThCRjgzQzFDNkM1RkY2MkY5Nzcy
M0NCMzY5RjNDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAKKxFGA4Auohqld7Dy0yMxBZo/xvwDeMELT9
hwzy42PmlWYlIUFZqbJY/kFACoh/gHdlWkuAbyBbPzMQ5asi8VKHtweblJETmYx4
mhJylJerpret8yW2MzNtDYtT4WxoUZmaK1ELpDZbJ6rVRoBe72qL+x5KrL1sHGzB
Iz6VImc2e9nsirXmclElJfgDgGeluTdYTU9p3IoRqVkWhq89gsdbxtQ3HQFRaVu2
0PtWc4JtcErgrOf+0qFKrkPFDv6w40MSsNnPyMO42g6YhiptULSpjEVw2+ZPEFBs
Okt+wafqqKJynKF6GhgxvEV9TFQ1VQh9k0a8KdCjyw7efbVsdwQ=
-----END CERTIFICATE-----
Generated at Thu Oct 8 15:50:52 2026 by rpki-client