
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/1EDE1180AE9C992B6485CD659C5D7E1BF270AB7A.mft
File: 1EDE1180AE9C992B6485CD659C5D7E1BF270AB7A.mft (raw, json)
Hash identifier: Afo2AE1jz49u93RbX8ihrICPbBh9ukk53mteIWPM7lM=
Subject key identifier: 5A:06:A5:29:35:6E:2D:AF:C1:B3:FA:53:97:89:E7:5C:34:F8:41:30
Authority key identifier: 1E:DE:11:80:AE:9C:99:2B:64:85:CD:65:9C:5D:7E:1B:F2:70:AB:7A
Certificate issuer: /CN=1EDE1180AE9C992B6485CD659C5D7E1BF270AB7A
Certificate serial: 7F5CAA4D8812EC2B2A427C1DBFE205D83C18C67D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EDE1180AE9C992B6485CD659C5D7E1BF270AB7A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/1EDE1180AE9C992B6485CD659C5D7E1BF270AB7A.mft
Manifest number: 0E
Signing time: Tue 12 May 2026 11:47:26 +0000
Manifest this update: Tue 12 May 2026 11:42:26 +0000
Manifest next update: Wed 13 May 2026 14:41:26 +0000
Files and hashes: 1: 323030313a6466343a346230303a3a2f34382d3438203d3e20313337333135.roa (hash: 6zf7vx7+kMHdnFJu/oDlY4/HuNaESvsIJtoWRx8KDTI=)
2: 3130332e3130392e3231302e302f32342d3234203d3e20313337333135.roa (hash: Acd+CNDLcrmehVnAROgrc31TunZVSjXxsQg7HAi/x2w=)
3: 1EDE1180AE9C992B6485CD659C5D7E1BF270AB7A.crl (hash: OjaUUbwyDQanxlxJlSZTWTcwh6aax2sPAKOnY646qQ4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/1EDE1180AE9C992B6485CD659C5D7E1BF270AB7A.crl
rsync://rpki-rsync.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/1EDE1180AE9C992B6485CD659C5D7E1BF270AB7A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EDE1180AE9C992B6485CD659C5D7E1BF270AB7A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:5c:aa:4d:88:12:ec:2b:2a:42:7c:1d:bf:e2:05:d8:3c:18:c6:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1EDE1180AE9C992B6485CD659C5D7E1BF270AB7A
Validity
Not Before: May 12 11:42:26 2026 GMT
Not After : May 13 14:41:26 2026 GMT
Subject: CN=5A06A529356E2DAFC1B3FA539789E75C34F84130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3c:05:07:53:e5:fe:f2:07:2f:ae:e5:4a:d6:
fa:55:b7:78:06:d3:60:f5:c7:bd:73:31:a7:5a:65:
16:04:85:16:0b:f1:f1:f1:de:ab:e3:54:0d:bb:ac:
83:81:23:ea:0b:6b:fb:f6:cb:e7:54:6c:d7:65:a4:
2c:b7:1d:88:20:90:08:2d:b8:17:e5:2f:d7:96:02:
0f:5b:b8:64:c3:6d:f9:cb:31:2a:45:55:78:9e:9e:
ae:72:43:55:db:60:da:25:a8:e4:8d:c9:bf:62:b9:
c8:76:6c:52:9c:2b:fa:37:de:a0:4f:39:38:97:72:
ba:c1:f6:8d:60:a9:17:55:d2:72:f1:45:7a:28:c1:
45:49:7f:5a:df:97:5a:45:33:8d:d7:3e:66:7c:b1:
e5:35:34:b9:ea:0c:a8:d9:95:f2:5b:cc:64:93:f3:
9c:31:39:de:bd:03:fd:a1:bf:dc:1e:03:ee:02:48:
ae:8b:2a:bc:ce:60:38:8f:54:b5:c4:f6:6b:a2:6a:
06:dd:b7:b2:df:c4:c3:7a:f9:a2:fa:4d:a6:b3:42:
71:c2:01:16:57:06:7e:bd:b4:f1:a8:d3:18:f9:b7:
5b:f9:51:02:a3:2b:e6:05:5f:fd:7c:c3:c9:8b:2b:
45:84:0f:bb:4e:0e:fe:46:e8:b1:7d:46:7b:1d:bc:
5a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:06:A5:29:35:6E:2D:AF:C1:B3:FA:53:97:89:E7:5C:34:F8:41:30
X509v3 Authority Key Identifier:
keyid:1E:DE:11:80:AE:9C:99:2B:64:85:CD:65:9C:5D:7E:1B:F2:70:AB:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/1EDE1180AE9C992B6485CD659C5D7E1BF270AB7A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EDE1180AE9C992B6485CD659C5D7E1BF270AB7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/1EDE1180AE9C992B6485CD659C5D7E1BF270AB7A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:03:24:6e:fe:6f:d6:6a:fe:32:46:86:e0:e6:f7:03:e7:35:
b1:76:dd:16:5c:82:4e:9a:6e:fb:af:fe:03:9a:64:76:18:2b:
6c:75:bb:a9:cc:1c:c5:5d:b9:d1:e9:b3:a8:4b:81:07:ce:10:
37:2c:eb:a3:19:d8:58:f6:50:89:06:d3:f5:dc:81:1c:1c:cf:
4c:fb:93:29:66:7a:3e:91:77:cd:26:26:9b:2f:fa:c6:0c:61:
89:7c:23:76:46:13:47:95:11:15:db:5b:ba:6f:af:48:2e:30:
a5:02:84:96:2d:dc:be:a5:5f:e3:d6:52:d9:ec:68:86:0f:c7:
52:4e:55:83:72:42:99:bd:cf:70:a1:46:59:73:e7:53:4f:b4:
b0:35:83:ef:65:b4:76:43:6a:c3:38:30:96:a5:48:5f:3f:8d:
61:d6:24:12:6c:f3:ae:97:cf:a2:31:c2:ac:5e:c4:06:41:a2:
fd:10:00:97:2b:0a:e7:3c:fc:3c:b5:68:79:de:8e:cc:2f:81:
62:49:f5:b9:81:fa:40:d3:d9:44:2e:ec:94:c8:cf:9e:83:31:
bc:b3:bc:a4:a5:89:be:50:b0:99:72:26:78:11:e4:21:b8:ef:
0d:61:c6:31:b6:dd:6c:5a:53:85:6c:b7:3b:73:16:d6:35:28:
6e:f2:22:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:12:59 2026 by rpki-client