
$ rpki-client -vvf rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.mft
File: 1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.mft (raw, json)
Hash identifier: liXLZmAFqLY9zM3/EbwSy3NabOcf0K+bpAL5Ta95J7M=
Subject key identifier: 14:1F:69:19:6E:08:9C:2C:B2:1A:1F:DC:7B:75:67:27:35:73:17:48
Authority key identifier: 1E:0C:0A:D8:0A:64:1E:28:82:F9:02:55:41:FB:6D:AC:8F:9D:00:71
Certificate issuer: /CN=1E0C0AD80A641E2882F9025541FB6DAC8F9D0071
Certificate serial: 120309E3F0BDAF87C424756269C4EF17AADBB790
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.mft
Manifest number: 6F
Signing time: Thu 23 Jul 2026 18:58:16 +0000
Manifest this update: Thu 23 Jul 2026 18:53:16 +0000
Manifest next update: Fri 24 Jul 2026 21:30:16 +0000
Files and hashes: 1: AS17885.roa (hash: 3Nn5BIp9l2d6qwrPMnlXmVzjNdvVAOjZPjaxN/LFUNQ=)
2: 1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.crl (hash: kgGA75dmiUaS/xIMT6UAJ366PdQDlLwcjaYRnVYXd10=)
3: AS24203.roa (hash: GC9KIMugoCl+PFxNhKrxUiJjAqMz/PW5WzhJj/Fex+w=)
4: AS139994.roa (hash: G9jUsHOqGF8GyMe4d4F0m9p9Wpq1ELwFCpA8Pkmrzks=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.crl
rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 21:30:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:03:09:e3:f0:bd:af:87:c4:24:75:62:69:c4:ef:17:aa:db:b7:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1E0C0AD80A641E2882F9025541FB6DAC8F9D0071
Validity
Not Before: Jul 23 18:53:16 2026 GMT
Not After : Jul 24 21:30:16 2026 GMT
Subject: CN=141F69196E089C2CB21A1FDC7B75672735731748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:e4:7e:d6:d3:2f:9f:d8:c4:1a:03:cf:36:27:
f5:0c:ba:75:8b:81:aa:ff:fd:65:43:75:3f:9b:d1:
3f:93:7c:ca:50:53:f9:54:7b:32:45:40:6d:5f:48:
da:68:af:c7:6c:f5:99:7d:2c:86:6e:c9:77:e6:d4:
7b:7a:89:ba:2d:95:58:13:16:27:37:52:c6:10:0d:
7a:4c:b4:ea:89:e9:f3:44:a8:69:45:5f:37:74:c7:
04:91:52:bf:0e:5f:ae:c3:3f:f4:66:cf:a5:6e:00:
03:94:28:3e:98:28:af:fc:8a:4b:81:5e:89:91:02:
f5:e3:0d:b5:46:18:72:84:a7:71:96:ec:de:ee:60:
21:bd:e1:29:2b:9f:20:a5:31:a0:61:56:64:41:80:
fa:b4:c6:50:c6:42:a3:a0:c2:80:72:05:c9:57:c2:
92:66:03:f3:3f:56:be:b3:a5:bb:b2:ee:7e:d2:5b:
98:ef:97:24:d1:11:c0:b9:d0:58:34:d1:3f:76:c0:
3f:6a:ec:c0:a2:95:0a:34:42:88:f5:1c:67:c5:67:
de:37:90:d0:10:6b:ce:42:56:64:ec:99:19:fe:e3:
06:fd:05:f1:2e:5e:93:42:5a:d4:c3:1e:69:65:ac:
5d:af:ec:81:24:61:cf:b3:34:14:6d:cd:18:34:82:
88:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:1F:69:19:6E:08:9C:2C:B2:1A:1F:DC:7B:75:67:27:35:73:17:48
X509v3 Authority Key Identifier:
keyid:1E:0C:0A:D8:0A:64:1E:28:82:F9:02:55:41:FB:6D:AC:8F:9D:00:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:78:a9:57:09:0f:b4:32:73:ad:0a:8a:6a:f9:6a:c4:d5:8a:
e2:f9:d6:d3:34:74:09:8c:5f:8a:5a:3d:60:e8:f7:28:d2:15:
98:ee:da:94:d5:6c:30:07:19:f9:07:58:9a:5a:38:af:c4:70:
eb:15:29:af:d0:88:b3:a8:04:0f:f5:e6:32:93:5c:bb:f4:5f:
29:c6:48:9a:55:5e:4c:ce:9c:a7:26:b2:13:fa:2f:93:a5:8f:
1e:d2:f3:0b:7a:0b:a0:ca:4b:68:fb:51:7c:34:d8:99:fb:d7:
8e:c8:4a:8a:bd:38:db:1f:6f:a8:12:dd:14:12:f8:9f:d8:76:
6c:16:1b:04:f3:00:f1:a0:e7:c7:0b:60:69:0a:b5:6f:0d:96:
54:c6:58:1d:fb:ea:b5:a5:0c:65:df:aa:fa:d1:ab:52:bb:fa:
7e:eb:19:58:6f:4c:ea:46:80:94:75:88:aa:df:e2:ae:46:f6:
52:9a:e8:95:94:30:c6:ad:d9:5c:f0:b6:f9:13:28:85:4a:4d:
18:a3:64:8e:52:b2:70:18:90:e8:5d:6d:f5:e3:f5:b5:a7:aa:
0f:39:bc:69:40:62:d7:9e:68:83:6d:33:eb:8b:0e:d5:80:8c:
04:75:b6:f1:a5:37:1d:0d:51:b4:d9:bd:08:d1:19:45:2d:27:
7d:57:bf:ba
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUEgMJ4/C9r4fEJHViacTvF6rbt5AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUUwQzBBRDgwQTY0MUUyODgyRjkwMjU1NDFGQjZEQUM4
RjlEMDA3MTAeFw0yNjA3MjMxODUzMTZaFw0yNjA3MjQyMTMwMTZaMDMxMTAvBgNV
BAMTKDE0MUY2OTE5NkUwODlDMkNCMjFBMUZEQzdCNzU2NzI3MzU3MzE3NDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDl5H7W0y+f2MQaA882J/UMunWL
gar//WVDdT+b0T+TfMpQU/lUezJFQG1fSNpor8ds9Zl9LIZuyXfm1Ht6ibotlVgT
Fic3UsYQDXpMtOqJ6fNEqGlFXzd0xwSRUr8OX67DP/Rmz6VuAAOUKD6YKK/8ikuB
XomRAvXjDbVGGHKEp3GW7N7uYCG94SkrnyClMaBhVmRBgPq0xlDGQqOgwoByBclX
wpJmA/M/Vr6zpbuy7n7SW5jvlyTREcC50Fg00T92wD9q7MCilQo0Qoj1HGfFZ943
kNAQa85CVmTsmRn+4wb9BfEuXpNCWtTDHmllrF2v7IEkYc+zNBRtzRg0gogtAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUFB9pGW4InCyyGh/ce3VnJzVzF0gwHwYDVR0j
BBgwFoAUHgwK2ApkHiiC+QJVQfttrI+dAHEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NGJkYjFlMGEtYTRlYy00OWRiLWJlODktOGQ3ZTdmYzJjMjI3LzAvMUUwQzBBRDgw
QTY0MUUyODgyRjkwMjU1NDFGQjZEQUM4RjlEMDA3MS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC8xRTBDMEFEODBBNjQxRTI4ODJGOTAyNTU0MUZCNkRBQzhGOUQw
MDcxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGJkYjFlMGEtYTRlYy00OWRiLWJl
ODktOGQ3ZTdmYzJjMjI3LzAvMUUwQzBBRDgwQTY0MUUyODgyRjkwMjU1NDFGQjZE
QUM4RjlEMDA3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJJ4qVcJD7Qyc60Kimr5asTViuL51tM0dAmM
X4paPWDo9yjSFZju2pTVbDAHGfkHWJpaOK/EcOsVKa/QiLOoBA/15jKTXLv0XynG
SJpVXkzOnKcmshP6L5Oljx7S8wt6C6DKS2j7UXw02Jn7147ISoq9ONsfb6gS3RQS
+J/YdmwWGwTzAPGg58cLYGkKtW8NllTGWB376rWlDGXfqvrRq1K7+n7rGVhvTOpG
gJR1iKrf4q5G9lKa6JWUMMat2VzwtvkTKIVKTRijZI5SsnAYkOhdbfXj9bWnqg85
vGlAYteeaINtM+uLDtWAjAR1tvGlNx0NUbTZvQjRGUUtJ31Xv7o=
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:56:35 2026 by rpki-client