
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1A4531574FEFFD9E221DE0D82CE657853E4CEE3A.mft
File: 1A4531574FEFFD9E221DE0D82CE657853E4CEE3A.mft (raw, json)
Hash identifier: ozmzoTARMgmal2ko4aWpqKisNTtAV29+u4a7sSmg1q0=
Subject key identifier: 8D:37:BF:04:1C:77:B6:E4:42:D9:8D:A0:D8:8B:EC:16:13:CD:D4:6C
Authority key identifier: 1A:45:31:57:4F:EF:FD:9E:22:1D:E0:D8:2C:E6:57:85:3E:4C:EE:3A
Certificate issuer: /CN=1A4531574FEFFD9E221DE0D82CE657853E4CEE3A
Certificate serial: 6F79FA94C05179CFC3D8F9313152E014ED83534B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A4531574FEFFD9E221DE0D82CE657853E4CEE3A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1A4531574FEFFD9E221DE0D82CE657853E4CEE3A.mft
Manifest number: C1
Signing time: Thu 24 Sep 2026 06:49:09 +0000
Manifest this update: Thu 24 Sep 2026 06:44:09 +0000
Manifest next update: Fri 25 Sep 2026 09:30:09 +0000
Files and hashes: 1: 3131372e37342e3131332e302f32342d3234203d3e203338353233.roa (hash: 2RFM120BK2x+ijcQiQQFduH+zaBhpG83qp16mYO7vG8=)
2: 3131372e37342e3131392e302f32342d3234203d3e203338353233.roa (hash: uwXs1B2vENHoFPXzX6L0y7II8AePyfh6rZF6h22vRrA=)
3: 323430313a326334303a3a2f34382d3438203d3e203338353233.roa (hash: NsEUBjEg4RvBD7zitmsA9BrE/lRHRKsCpJUJlO5IUjE=)
4: 323430313a326334303a353a3a2f34382d3438203d3e203338353233.roa (hash: Ulhe7SBzoKXa0nbHiYWTSM2UW8Ne9l9FUM0Zzr+5Taw=)
5: 323430313a326334303a333a3a2f34382d3438203d3e203338353233.roa (hash: 1Xw8ZcmhMagcycv6RIC2nnyQd9l0Ss7PGPzzLHbvNJI=)
6: 3131372e37342e3131342e302f32342d3234203d3e203338353233.roa (hash: 99QIwzzuN/Z0qUxV3WwSxtLTN6hnTR8mitqHt39iQf4=)
7: 3131372e37342e3131322e302f32342d3234203d3e203338353233.roa (hash: oJAKvIjQYUnV4YiPQwgQNfHdtV+ujtVQM+Xex28JGbg=)
8: 3131372e37342e3131352e302f32342d3234203d3e203338353233.roa (hash: 8bY1t1WWG1ycFYAnepDoYlqaZY4Ueot1JfgflfLyzZA=)
9: 3131372e37342e3131382e302f32342d3234203d3e203338353233.roa (hash: JVFHSqzVsgqy22qJbtrvNEyG8V0kzJkVnI2PAp64X94=)
10: 3131372e37342e3131372e302f32342d3234203d3e203338353233.roa (hash: MAqDcQzKsQ7AU2jwczXNTkd2KAp2lSq7hYrm+mz5mbc=)
11: 323430313a326334303a313a3a2f34382d3438203d3e203338353233.roa (hash: 6p/psu31RGuXqE6YHMjc6bPnb3I31ZolmJJogTJhucY=)
12: 3131372e37342e3131362e302f32342d3234203d3e203338353233.roa (hash: MRJCCb3fXe1PqSBXHNtZ+I4+QxuZf0FtTfzRiqIoYFg=)
13: 1A4531574FEFFD9E221DE0D82CE657853E4CEE3A.crl (hash: LMxZhqcmPX3pEKxXbVBJFs0XJMCfo5sO4zTAbVGMnWI=)
14: 323430313a326334303a323a3a2f34382d3438203d3e203338353233.roa (hash: dioQduQ3RsGsXcF2fvN/JbmBfWyTlyf1+yoiwspl0zk=)
15: 323430313a326334303a343a3a2f34382d3438203d3e203338353233.roa (hash: r8bhwMyuWK8pro2AJ6O3DeDhHxZkOZDkQzVfsAiQ4HM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1A4531574FEFFD9E221DE0D82CE657853E4CEE3A.crl
rsync://rpki-rsync.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1A4531574FEFFD9E221DE0D82CE657853E4CEE3A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A4531574FEFFD9E221DE0D82CE657853E4CEE3A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 09:30:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:79:fa:94:c0:51:79:cf:c3:d8:f9:31:31:52:e0:14:ed:83:53:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1A4531574FEFFD9E221DE0D82CE657853E4CEE3A
Validity
Not Before: Sep 24 06:44:09 2026 GMT
Not After : Sep 25 09:30:09 2026 GMT
Subject: CN=8D37BF041C77B6E442D98DA0D88BEC1613CDD46C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:76:95:86:ad:f3:c0:e9:6c:79:c0:6d:d7:e2:
24:a0:cd:84:36:65:b8:94:60:87:0a:d1:47:26:bb:
5d:1e:dc:31:c4:60:55:06:e1:fa:30:3d:7e:2a:7a:
ac:be:75:9f:f3:0d:87:7a:fe:2a:82:d2:49:86:33:
80:96:3f:bc:13:83:96:b6:79:46:c1:5b:ee:6c:b7:
91:ea:e8:52:1a:48:8e:65:29:f0:89:e0:07:89:6f:
f5:b7:f0:79:45:4f:c6:fa:93:f3:64:0d:1b:c9:e2:
e2:d8:14:27:01:62:b2:42:77:13:fd:ab:1b:fb:37:
ce:67:2b:5c:56:d9:72:b9:74:87:52:10:4c:ad:31:
87:4c:ce:23:f2:f0:1e:c3:66:75:82:1e:1c:61:22:
5b:ac:c9:aa:7e:72:24:97:92:9a:f6:ee:a1:5e:3c:
b6:fc:4a:c0:48:9a:f3:d1:c8:8d:7f:9f:46:35:bb:
59:22:9d:04:55:a1:ad:ea:4f:57:7e:27:93:5b:8c:
4c:97:2a:3e:c2:23:7e:e7:d3:0d:f3:9e:2d:85:3f:
bc:49:22:52:ac:bd:10:cb:c7:24:08:0f:9c:5e:25:
8d:20:51:f9:6a:01:d9:62:67:9e:15:fe:bf:fb:01:
c4:0d:fe:31:da:67:c7:8a:ac:96:3a:df:56:3b:ef:
41:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:37:BF:04:1C:77:B6:E4:42:D9:8D:A0:D8:8B:EC:16:13:CD:D4:6C
X509v3 Authority Key Identifier:
keyid:1A:45:31:57:4F:EF:FD:9E:22:1D:E0:D8:2C:E6:57:85:3E:4C:EE:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1A4531574FEFFD9E221DE0D82CE657853E4CEE3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A4531574FEFFD9E221DE0D82CE657853E4CEE3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1A4531574FEFFD9E221DE0D82CE657853E4CEE3A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:fe:20:1b:bb:ab:df:cf:42:20:ff:a1:8a:a7:b9:82:90:49:
0c:56:21:2a:67:fc:cd:95:2b:cf:a3:15:37:4b:ed:a4:6f:60:
d9:18:04:7b:e6:14:2b:7d:71:79:eb:af:1f:a9:77:5e:60:ff:
c0:a0:14:8a:86:87:56:cf:eb:92:70:bb:aa:d3:3f:53:1a:ed:
9d:2d:0b:4d:58:de:0d:e8:a3:e6:0f:7d:a3:d8:32:fc:27:8e:
b2:11:0d:9d:2f:0e:65:f0:60:71:6e:4e:47:ce:62:2e:1d:77:
a0:c8:23:89:42:2e:79:9b:17:07:33:f2:c9:d6:c0:d9:ba:b1:
42:de:80:fc:2a:ed:e5:a5:f1:47:b2:be:d5:d3:34:8d:df:c3:
91:16:a5:8c:eb:cf:fb:bf:84:cb:13:92:7b:2b:78:a7:78:c3:
ad:65:9c:83:fd:9c:8c:6a:c4:bf:ab:83:cd:63:31:c2:e9:0e:
ae:55:72:7e:8c:33:4d:25:f7:da:1c:6d:1a:96:21:82:d4:67:
29:94:10:13:cf:15:12:80:f5:ed:75:e8:44:c5:b0:28:15:6b:
11:9f:7a:c4:e0:99:10:2c:45:ce:b6:be:97:8a:b0:b5:4c:33:
90:93:14:71:62:a2:8c:73:bf:22:6c:47:e1:2b:f1:d2:b6:3f:
1e:e2:01:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:41:43 2026 by rpki-client