
$ rpki-client -vvf rpki-rsync.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/1EDD1B42D44367E3FCDD1648F66A1076C95105A6.mft
File: 1EDD1B42D44367E3FCDD1648F66A1076C95105A6.mft (raw, json)
Hash identifier: bX0/Bl+BFHhs/mzDvqVL04Oey5OstIq+T7D1rNX3EfA=
Subject key identifier: D2:C1:29:42:FE:B6:FE:05:A1:38:51:3B:71:E1:09:33:6E:4E:18:0B
Authority key identifier: 1E:DD:1B:42:D4:43:67:E3:FC:DD:16:48:F6:6A:10:76:C9:51:05:A6
Certificate issuer: /CN=1EDD1B42D44367E3FCDD1648F66A1076C95105A6
Certificate serial: 59E9ED5AAE5BFE55A2A4E5862FCE5735FF09C1D4
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EDD1B42D44367E3FCDD1648F66A1076C95105A6.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/1EDD1B42D44367E3FCDD1648F66A1076C95105A6.mft
Manifest number: 6F
Signing time: Thu 23 Jul 2026 16:40:17 +0000
Manifest this update: Thu 23 Jul 2026 16:35:17 +0000
Manifest next update: Fri 24 Jul 2026 19:24:17 +0000
Files and hashes: 1: 3130332e3130362e3137342e302f32342d3234203d3e20313336383838.roa (hash: Zn62f1fBkgDvG3W52DfKvheKU31p9VTPEEMoYm0lHJA=)
2: 1EDD1B42D44367E3FCDD1648F66A1076C95105A6.crl (hash: z28CtJ4ej54oXH8baog68XL3m4EdNSS9DDBkSM5cMoQ=)
3: 3130332e3130362e3137322e302f32332d3234203d3e20313336383838.roa (hash: 38bOTSe4cTdefI8PO7GN8RWELwk4anfmyd09536sUts=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/1EDD1B42D44367E3FCDD1648F66A1076C95105A6.crl
rsync://rpki-rsync.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/1EDD1B42D44367E3FCDD1648F66A1076C95105A6.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EDD1B42D44367E3FCDD1648F66A1076C95105A6.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 19:24:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:e9:ed:5a:ae:5b:fe:55:a2:a4:e5:86:2f:ce:57:35:ff:09:c1:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1EDD1B42D44367E3FCDD1648F66A1076C95105A6
Validity
Not Before: Jul 23 16:35:17 2026 GMT
Not After : Jul 24 19:24:17 2026 GMT
Subject: CN=D2C12942FEB6FE05A138513B71E109336E4E180B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e2:d8:2c:ac:8b:b0:d5:4f:b8:2d:ad:c3:96:
22:2b:f4:c3:10:2f:a4:2b:20:dc:58:83:d3:44:c2:
87:08:26:85:c3:b5:63:31:dc:6c:02:0d:e4:47:b0:
83:42:12:da:af:cf:f5:e3:bb:8d:43:aa:d2:2a:af:
cd:75:b5:79:0a:df:dc:eb:d0:22:34:4e:07:39:08:
d4:59:d6:38:b7:99:71:ae:b7:2e:89:cb:78:94:9d:
05:3d:a4:c2:01:fe:58:73:69:36:22:a2:b5:c9:21:
32:45:f8:73:73:14:a2:de:4b:ed:ef:e5:07:af:8d:
7d:25:d3:86:ae:f8:c0:b9:94:b8:95:ee:7a:50:65:
36:78:91:82:6d:2c:fb:29:38:c5:4b:bd:9c:aa:99:
62:56:a0:d7:9c:c6:31:d5:62:50:c2:6b:4b:b8:ef:
6d:2f:93:ed:e9:25:88:1b:af:88:55:6f:25:34:58:
98:79:55:7c:f2:11:a0:bc:60:88:74:e2:e1:4a:04:
73:d0:b6:a1:45:49:ea:30:23:bc:54:f2:98:d6:a8:
37:81:80:0f:bd:10:5f:aa:d3:cf:01:3a:e5:6e:1f:
98:f6:be:dc:e4:b7:67:2a:8a:8b:6e:83:9f:ee:bb:
f7:09:92:05:c9:38:6b:f7:f5:8a:ba:00:3b:a5:5c:
b1:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:C1:29:42:FE:B6:FE:05:A1:38:51:3B:71:E1:09:33:6E:4E:18:0B
X509v3 Authority Key Identifier:
keyid:1E:DD:1B:42:D4:43:67:E3:FC:DD:16:48:F6:6A:10:76:C9:51:05:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/1EDD1B42D44367E3FCDD1648F66A1076C95105A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EDD1B42D44367E3FCDD1648F66A1076C95105A6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/1EDD1B42D44367E3FCDD1648F66A1076C95105A6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:96:15:05:b3:4b:c1:a6:e4:99:87:6b:c9:a2:c0:85:9e:44:
40:99:8b:2f:0e:23:4c:6c:46:60:8e:a6:0c:08:bb:48:67:c3:
1b:df:73:47:c6:79:95:32:df:a4:fd:08:84:4b:e3:da:46:17:
a1:b2:ce:0a:d8:4b:93:ff:93:d5:e9:46:ac:be:12:07:06:e8:
1d:b3:3f:c3:fe:be:c0:36:6e:9c:1c:e2:83:80:85:c8:f7:ba:
a7:3b:76:28:c6:28:7a:19:54:05:fa:09:b7:cc:41:cd:28:56:
59:d3:29:48:8d:90:3f:0b:a7:9a:9d:46:78:a6:8e:c1:bf:86:
8a:d1:fb:3c:88:64:4d:1a:88:eb:a7:35:51:34:51:6b:54:e9:
42:47:e1:72:47:7a:52:1d:e9:59:e1:af:d4:4a:1e:32:68:86:
57:75:71:46:2d:1a:f2:97:1d:88:0d:7a:82:e5:a9:61:b7:74:
74:02:4f:32:3b:27:3c:83:c1:83:d5:e5:fe:06:81:e4:9b:22:
18:b9:f3:2b:97:2d:35:b7:5c:17:00:28:ce:5d:af:ce:53:d0:
aa:36:10:de:e5:70:e9:6b:24:f5:bb:a7:ed:b2:46:1c:6b:21:
4b:2e:86:c3:aa:90:fb:a5:07:c0:71:03:ed:8c:cc:ea:cd:8d:
fd:4d:5f:e1
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUWentWq5b/lWipOWGL85XNf8JwdQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUVERDFCNDJENDQzNjdFM0ZDREQxNjQ4RjY2QTEwNzZD
OTUxMDVBNjAeFw0yNjA3MjMxNjM1MTdaFw0yNjA3MjQxOTI0MTdaMDMxMTAvBgNV
BAMTKEQyQzEyOTQyRkVCNkZFMDVBMTM4NTEzQjcxRTEwOTMzNkU0RTE4MEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC4tgsrIuw1U+4La3DliIr9MMQ
L6QrINxYg9NEwocIJoXDtWMx3GwCDeRHsINCEtqvz/Xju41DqtIqr811tXkK39zr
0CI0Tgc5CNRZ1ji3mXGuty6Jy3iUnQU9pMIB/lhzaTYiorXJITJF+HNzFKLeS+3v
5QevjX0l04au+MC5lLiV7npQZTZ4kYJtLPspOMVLvZyqmWJWoNecxjHVYlDCa0u4
720vk+3pJYgbr4hVbyU0WJh5VXzyEaC8YIh04uFKBHPQtqFFSeowI7xU8pjWqDeB
gA+9EF+q088BOuVuH5j2vtzkt2cqiotug5/uu/cJkgXJOGv39Yq6ADulXLHHAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU0sEpQv62/gWhOFE7ceEJM25OGAswHwYDVR0j
BBgwFoAUHt0bQtRDZ+P83RZI9moQdslRBaYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MmZiZDdjZjYtZjU1YS00Yjc4LWE1ODgtZDkyNjFmMTVmNzYzLzAvMUVERDFCNDJE
NDQzNjdFM0ZDREQxNjQ4RjY2QTEwNzZDOTUxMDVBNi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8xRUREMUI0MkQ0NDM2N0UzRkNERDE2NDhGNjZBMTA3NkM5NTEw
NUE2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmZiZDdjZjYtZjU1YS00Yjc4LWE1
ODgtZDkyNjFmMTVmNzYzLzAvMUVERDFCNDJENDQzNjdFM0ZDREQxNjQ4RjY2QTEw
NzZDOTUxMDVBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAC+WFQWzS8Gm5JmHa8miwIWeRECZiy8OI0xs
RmCOpgwIu0hnwxvfc0fGeZUy36T9CIRL49pGF6GyzgrYS5P/k9XpRqy+EgcG6B2z
P8P+vsA2bpwc4oOAhcj3uqc7dijGKHoZVAX6CbfMQc0oVlnTKUiNkD8Lp5qdRnim
jsG/horR+zyIZE0aiOunNVE0UWtU6UJH4XJHelId6Vnhr9RKHjJohld1cUYtGvKX
HYgNeoLlqWG3dHQCTzI7JzyDwYPV5f4GgeSbIhi58yuXLTW3XBcAKM5dr85T0Ko2
EN7lcOlrJPW7p+2yRhxrIUsuhsOqkPulB8BxA+2MzOrNjf1NX+E=
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:56:00 2026 by rpki-client