
$ rpki-client -vvf rpki-rsync.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C26EDB3142A0D7089EB5B4DE81D381D57270DFAA.mft
File: C26EDB3142A0D7089EB5B4DE81D381D57270DFAA.mft (raw, json)
Hash identifier: 7Vz4UZ++YdhGFnKAF6XeetUjFlPH+GlNcs0GMKBk1VA=
Subject key identifier: D2:45:B1:C5:BA:23:CA:0C:1E:ED:59:F9:23:D0:C3:DF:0F:D2:5F:01
Authority key identifier: C2:6E:DB:31:42:A0:D7:08:9E:B5:B4:DE:81:D3:81:D5:72:70:DF:AA
Certificate issuer: /CN=C26EDB3142A0D7089EB5B4DE81D381D57270DFAA
Certificate serial: 5CA67FD83BD0DE6CA68A65D9B9893D48599A3749
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C26EDB3142A0D7089EB5B4DE81D381D57270DFAA.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C26EDB3142A0D7089EB5B4DE81D381D57270DFAA.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 22:30:49 +0000
Manifest this update: Tue 12 May 2026 22:25:49 +0000
Manifest next update: Wed 13 May 2026 23:57:49 +0000
Files and hashes: 1: 323030313a6466333a653034303a3a2f34382d3438203d3e20313532383036.roa (hash: /YjQziPfkygPIif69V6qP80rIoVIWnI2ryfoi9HJSBY=)
2: C26EDB3142A0D7089EB5B4DE81D381D57270DFAA.crl (hash: RjNpAy/ITeP073RVaN26gbQGDc/KLGQED0qYtwaPOaM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C26EDB3142A0D7089EB5B4DE81D381D57270DFAA.crl
rsync://rpki-rsync.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C26EDB3142A0D7089EB5B4DE81D381D57270DFAA.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C26EDB3142A0D7089EB5B4DE81D381D57270DFAA.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:a6:7f:d8:3b:d0:de:6c:a6:8a:65:d9:b9:89:3d:48:59:9a:37:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C26EDB3142A0D7089EB5B4DE81D381D57270DFAA
Validity
Not Before: May 12 22:25:49 2026 GMT
Not After : May 13 23:57:49 2026 GMT
Subject: CN=D245B1C5BA23CA0C1EED59F923D0C3DF0FD25F01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ac:59:27:41:bf:53:57:bc:46:ac:86:c6:ca:
e2:2a:37:2c:9d:e2:46:c1:87:70:48:7f:ec:b1:a5:
02:db:9e:6e:b9:4c:02:09:39:3d:ce:d1:46:c1:1c:
06:c0:da:00:d5:05:8d:20:28:10:ee:80:6f:ce:58:
2d:75:8a:72:4f:aa:02:69:d8:2a:2c:8e:61:a2:31:
45:03:04:6d:bd:17:47:ac:08:66:da:b8:eb:e1:e9:
0a:72:18:32:c6:57:22:e0:6d:f9:c5:fc:e7:e8:3e:
69:3c:17:d2:f4:4f:65:04:77:58:e0:62:3f:b3:9a:
c2:77:bf:69:f1:79:0c:35:01:1f:32:38:71:ce:9c:
25:8d:d5:24:97:ba:75:2b:69:47:4f:e8:bc:1d:7b:
40:e1:c6:7b:cb:97:03:e0:ba:e4:be:75:58:a2:15:
58:50:61:3c:99:6b:1e:e4:13:61:f5:ab:ae:66:51:
c4:4e:86:2d:4e:f4:1b:17:08:cb:73:28:ff:a9:ce:
3c:b5:08:5f:62:b6:2d:02:81:f2:95:a6:26:81:07:
c1:62:44:98:db:22:2d:92:4b:f5:a0:5d:30:d3:f8:
4d:97:c3:4b:bf:8f:23:d9:5e:a9:bb:d1:6c:81:66:
ae:2d:20:83:1b:0a:09:35:1c:86:c5:6f:fe:9e:15:
04:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:45:B1:C5:BA:23:CA:0C:1E:ED:59:F9:23:D0:C3:DF:0F:D2:5F:01
X509v3 Authority Key Identifier:
keyid:C2:6E:DB:31:42:A0:D7:08:9E:B5:B4:DE:81:D3:81:D5:72:70:DF:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C26EDB3142A0D7089EB5B4DE81D381D57270DFAA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C26EDB3142A0D7089EB5B4DE81D381D57270DFAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C26EDB3142A0D7089EB5B4DE81D381D57270DFAA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:90:bd:f9:8b:79:e5:21:4f:9b:93:a3:d7:f1:bc:f4:69:bd:
61:eb:3e:a9:0f:a5:a8:ca:27:44:a3:2a:dd:93:fe:33:16:9b:
1e:ee:06:6e:83:3e:7f:72:ed:c3:61:b7:06:42:e0:14:5b:6d:
fe:0e:63:89:f4:6f:79:c0:2d:c6:73:92:e0:25:21:da:a1:70:
f7:f5:1c:e6:bb:15:0b:48:82:a0:7c:68:95:05:9d:3e:64:85:
c6:45:09:9b:5b:9b:b2:8c:17:bc:f6:9a:78:30:80:60:70:5c:
78:dc:82:b6:24:96:8f:75:f8:1f:06:47:15:3b:ec:a2:45:bc:
86:a4:4e:fa:f0:5a:64:2e:c3:77:95:a8:e8:40:ad:2a:86:96:
4b:2b:d8:02:07:10:6a:4b:b9:76:55:c4:37:2a:61:72:e6:21:
43:30:42:15:3b:ad:ff:5f:d9:e5:dc:09:61:8f:78:29:1c:e5:
8a:67:f9:50:61:e5:b8:92:3f:7e:52:93:58:97:13:c6:ce:59:
65:b2:5d:2c:66:da:42:bc:fe:8b:9a:03:c2:e5:13:a6:49:96:
b9:37:62:8b:33:ae:d5:f5:7f:e8:0b:d1:46:cd:28:5a:27:23:
b3:33:46:23:75:9d:ed:8b:72:7c:22:1d:d7:a8:c4:f6:18:5d:
34:d8:03:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:44:42 2026 by rpki-client