
$ rpki-client -vvf rpki-rsync.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/1EDD1B42D44367E3FCDD1648F66A1076C95105A6.mft
File: 1EDD1B42D44367E3FCDD1648F66A1076C95105A6.mft (raw, json)
Hash identifier: nGGELzR+B/Da3yqnuKxli+Hc9zxvQtdI/QcYbtc37t8=
Subject key identifier: 0D:6F:A7:83:DA:E0:E8:87:53:E7:94:C3:48:5D:56:8C:6B:47:87:5C
Authority key identifier: 1E:DD:1B:42:D4:43:67:E3:FC:DD:16:48:F6:6A:10:76:C9:51:05:A6
Certificate issuer: /CN=1EDD1B42D44367E3FCDD1648F66A1076C95105A6
Certificate serial: 4924FB0D840871A576343F07A59D3150D5F75D44
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EDD1B42D44367E3FCDD1648F66A1076C95105A6.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/1EDD1B42D44367E3FCDD1648F66A1076C95105A6.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 23:53:11 +0000
Manifest this update: Tue 12 May 2026 23:48:11 +0000
Manifest next update: Thu 14 May 2026 01:26:11 +0000
Files and hashes: 1: 3130332e3130362e3137322e302f32332d3234203d3e20313336383838.roa (hash: 38bOTSe4cTdefI8PO7GN8RWELwk4anfmyd09536sUts=)
2: 3130332e3130362e3137342e302f32342d3234203d3e20313336383838.roa (hash: Zn62f1fBkgDvG3W52DfKvheKU31p9VTPEEMoYm0lHJA=)
3: 1EDD1B42D44367E3FCDD1648F66A1076C95105A6.crl (hash: RW78maGPhnJTXMuPDqcEOZIUqFI48E7LOA6dIZ/psZM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/1EDD1B42D44367E3FCDD1648F66A1076C95105A6.crl
rsync://rpki-rsync.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/1EDD1B42D44367E3FCDD1648F66A1076C95105A6.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EDD1B42D44367E3FCDD1648F66A1076C95105A6.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:24:fb:0d:84:08:71:a5:76:34:3f:07:a5:9d:31:50:d5:f7:5d:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1EDD1B42D44367E3FCDD1648F66A1076C95105A6
Validity
Not Before: May 12 23:48:11 2026 GMT
Not After : May 14 01:26:11 2026 GMT
Subject: CN=0D6FA783DAE0E88753E794C3485D568C6B47875C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ec:c9:7e:8d:06:5b:82:02:2c:8d:79:30:82:
1a:4a:9d:1d:3d:19:53:47:1b:b2:55:f7:e0:30:73:
07:3b:f4:45:ab:a9:17:8e:98:37:d2:56:e9:0d:e9:
2c:39:0c:59:77:15:a3:ff:25:6c:19:f2:23:1f:60:
b6:d7:e8:33:42:19:f4:c9:56:41:62:32:03:ac:6c:
27:2b:40:28:38:c7:56:1b:79:8d:e8:78:35:3f:90:
21:c2:39:5a:e8:e6:c4:ae:ea:2b:26:a3:b0:74:d6:
dc:4c:1e:c4:65:56:3b:20:2b:95:67:bb:c3:11:7d:
98:8c:18:8e:dd:d9:e2:08:c0:49:5b:f6:d1:17:ba:
43:40:54:2a:46:ea:13:39:7b:0f:3e:58:f8:df:d8:
20:69:12:ca:a7:eb:d5:d8:69:72:99:8c:04:19:73:
8f:2a:16:13:30:2d:01:3e:51:28:62:43:65:f2:93:
87:3a:2c:13:08:07:14:c1:f1:9c:fd:ac:d9:11:ca:
f5:46:11:78:a6:8c:c4:48:b5:a6:11:57:99:9a:85:
5a:19:1b:86:c3:90:fd:d5:27:9d:36:3e:9a:d8:79:
e4:02:ed:0b:96:fb:a3:ff:3f:6e:7f:7f:69:5a:2e:
55:fc:3d:eb:7b:20:d3:05:cb:c2:12:cd:34:09:a5:
40:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:6F:A7:83:DA:E0:E8:87:53:E7:94:C3:48:5D:56:8C:6B:47:87:5C
X509v3 Authority Key Identifier:
keyid:1E:DD:1B:42:D4:43:67:E3:FC:DD:16:48:F6:6A:10:76:C9:51:05:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/1EDD1B42D44367E3FCDD1648F66A1076C95105A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EDD1B42D44367E3FCDD1648F66A1076C95105A6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/1EDD1B42D44367E3FCDD1648F66A1076C95105A6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:a9:81:1a:d6:46:d7:6f:57:44:05:91:fe:7a:51:37:45:d4:
ef:c2:17:ce:62:3e:99:2a:7e:e4:a3:de:15:99:94:1b:10:1f:
4b:65:90:29:50:32:bc:d7:49:19:d3:2e:2a:86:9e:ef:b0:80:
d1:99:6c:a3:d0:e4:02:bf:5a:65:19:75:0c:f9:1f:b2:74:73:
d5:19:8f:5b:6a:33:96:7a:a9:5f:8f:30:2b:85:f3:fb:29:ef:
0a:95:18:24:81:5d:86:83:cc:bb:8d:a4:4d:89:4b:53:16:37:
b0:fb:5d:a4:7c:10:0a:5c:91:dc:ef:b8:64:6e:09:3e:1c:74:
3c:cd:be:f1:97:6b:07:19:d2:77:89:b7:04:8d:af:18:47:e0:
54:a3:ea:2f:94:39:61:bf:f5:f8:c9:7d:e4:57:e3:72:57:f3:
17:61:0c:6a:c7:b3:ed:ee:37:00:83:16:9b:45:6f:21:11:86:
46:a4:53:12:d9:72:4f:b8:63:01:2e:e3:6b:54:75:0c:de:c6:
33:b1:a2:67:cc:70:0e:66:74:28:d6:5d:8c:29:ec:87:37:df:
1a:0e:15:18:03:bb:78:75:b1:8a:49:6a:16:f7:63:40:38:ac:
4a:52:a5:11:c5:73:e7:66:22:7b:dc:cf:0b:c4:ed:6f:70:bc:
1c:7d:50:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:51:10 2026 by rpki-client