
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5272e527-725b-49e3-8743-c753dd3379e3/0/1E1AC1C9B3E67F8395395423DA2EB26E8E691FC1.mft
File: 1E1AC1C9B3E67F8395395423DA2EB26E8E691FC1.mft (raw, json)
Hash identifier: BuMRfh6JulTEVEnBOvoO895vz1IVXaV5xo+uVXeZW6o=
Subject key identifier: 57:5B:80:25:14:29:85:55:CE:A4:40:D0:AF:E1:34:64:B2:D5:37:6B
Authority key identifier: 1E:1A:C1:C9:B3:E6:7F:83:95:39:54:23:DA:2E:B2:6E:8E:69:1F:C1
Certificate issuer: /CN=1E1AC1C9B3E67F8395395423DA2EB26E8E691FC1
Certificate serial: 22FC1F0E6DEFF518A73A1E147EF1033E0B0F3A04
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1E1AC1C9B3E67F8395395423DA2EB26E8E691FC1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5272e527-725b-49e3-8743-c753dd3379e3/0/1E1AC1C9B3E67F8395395423DA2EB26E8E691FC1.mft
Manifest number: C2
Signing time: Thu 24 Sep 2026 20:30:51 +0000
Manifest this update: Thu 24 Sep 2026 20:25:51 +0000
Manifest next update: Fri 25 Sep 2026 22:13:51 +0000
Files and hashes: 1: 3135372e36362e3234362e302f32332d3234203d3e20313532373630.roa (hash: m0f229ZhLX9SKvKbXbKHogZj70tOf+VKSr9KHdgMRls=)
2: 1E1AC1C9B3E67F8395395423DA2EB26E8E691FC1.crl (hash: pesVwThFRddoy38NWvvLOcKf1ieIvSNM6RJpNlZNtE0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5272e527-725b-49e3-8743-c753dd3379e3/0/1E1AC1C9B3E67F8395395423DA2EB26E8E691FC1.crl
rsync://rpki-rsync.idnic.net/repo/5272e527-725b-49e3-8743-c753dd3379e3/0/1E1AC1C9B3E67F8395395423DA2EB26E8E691FC1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1E1AC1C9B3E67F8395395423DA2EB26E8E691FC1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 11:52:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:fc:1f:0e:6d:ef:f5:18:a7:3a:1e:14:7e:f1:03:3e:0b:0f:3a:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1E1AC1C9B3E67F8395395423DA2EB26E8E691FC1
Validity
Not Before: Sep 24 20:25:51 2026 GMT
Not After : Sep 25 22:13:51 2026 GMT
Subject: CN=575B802514298555CEA440D0AFE13464B2D5376B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:50:7a:71:e4:b4:08:ff:31:3c:37:c0:a7:6e:
38:8c:a3:ac:23:ad:85:53:0f:3d:5d:d8:8c:b9:4e:
13:73:fc:5b:b5:da:10:b0:5a:db:0b:e1:ba:87:7c:
2d:ad:87:8d:e1:e7:ad:74:58:33:0a:03:75:a8:77:
fb:8b:28:54:ee:ac:ce:79:fa:07:de:4f:76:81:77:
4f:44:40:8e:2c:85:75:b5:05:e3:1b:a2:98:29:63:
3d:72:91:98:55:e7:a6:83:72:83:bf:7b:5e:df:31:
c7:49:ff:07:e0:b9:e0:1c:fc:e9:9f:49:e2:72:98:
57:49:c3:da:19:83:35:c8:fb:8d:50:36:48:44:c4:
04:a1:2a:8a:71:2a:d2:8f:05:51:4e:44:3e:35:be:
40:fc:0f:f8:39:dc:f8:5f:b0:43:77:21:21:8c:93:
4c:1a:33:dc:cf:20:c9:a8:62:4a:39:51:dd:45:6d:
20:09:2e:b8:3d:e1:16:f1:f9:cc:bd:76:b7:b1:3d:
e5:a6:1e:08:f3:ec:d8:7e:ee:61:1c:ae:9e:21:a8:
9f:d7:73:63:58:7d:33:75:45:2e:84:63:00:9a:05:
6a:d5:99:95:38:d1:6d:3c:b6:f9:67:45:fc:f6:f8:
98:65:c2:ce:18:20:57:ae:ed:57:fe:bf:52:21:91:
5d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:5B:80:25:14:29:85:55:CE:A4:40:D0:AF:E1:34:64:B2:D5:37:6B
X509v3 Authority Key Identifier:
keyid:1E:1A:C1:C9:B3:E6:7F:83:95:39:54:23:DA:2E:B2:6E:8E:69:1F:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5272e527-725b-49e3-8743-c753dd3379e3/0/1E1AC1C9B3E67F8395395423DA2EB26E8E691FC1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1E1AC1C9B3E67F8395395423DA2EB26E8E691FC1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5272e527-725b-49e3-8743-c753dd3379e3/0/1E1AC1C9B3E67F8395395423DA2EB26E8E691FC1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:5b:1b:82:84:90:6f:e0:cc:9e:28:0b:d2:6a:61:58:15:0f:
a1:40:d3:11:bf:a2:88:8f:a1:05:fc:b4:06:e9:20:5d:f0:f5:
0e:f7:c3:2f:ac:49:09:0f:a5:00:a7:98:46:29:30:f0:16:25:
8a:20:70:7c:8a:10:4f:46:ae:29:f2:ac:a7:c4:e9:14:d1:b0:
35:68:58:50:5a:2d:59:19:36:5f:7e:6e:85:c1:bd:3b:9b:ea:
72:d4:5e:fe:52:23:6b:0e:c8:5b:4a:6c:ca:ff:81:42:09:77:
56:3d:21:0d:5f:fc:31:00:b8:7b:e8:cd:96:f1:bb:6e:11:bb:
20:15:2c:d0:3d:c7:7c:b8:ea:56:84:9f:2f:1d:8e:85:d2:64:
b6:e3:07:29:11:a8:f5:6c:d7:f1:8f:c0:27:0a:5a:a8:a3:90:
99:e4:fa:dc:f8:52:49:a6:20:54:5d:d2:27:e8:e7:58:26:8e:
cb:38:1c:59:bc:80:6a:87:19:9f:40:d3:8c:95:c7:db:45:51:
b4:cf:ba:bc:93:30:fc:9a:e1:fb:cf:e0:28:61:c2:8e:ed:bf:
ab:ba:52:98:82:e0:22:70:d1:94:ea:34:66:4f:7c:c5:38:a0:
cc:9b:eb:4f:6e:a0:60:5b:d4:49:56:88:c0:cf:a1:98:e8:ac:
70:2f:b7:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:10:12 2026 by rpki-client