
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5ce6ac01-8eac-46c5-9469-35efa36099fd/0/1B06933632B5A267F98A1716F3CB78EA840D6E65.mft
File: 1B06933632B5A267F98A1716F3CB78EA840D6E65.mft (raw, json)
Hash identifier: KSjULvlVTztX6y82ky0eKptVet0HnVsSTamaPBANp+g=
Subject key identifier: 52:BD:6D:8D:0B:D0:E4:3F:28:C6:48:0C:DC:D5:16:BB:58:2E:DE:16
Authority key identifier: 1B:06:93:36:32:B5:A2:67:F9:8A:17:16:F3:CB:78:EA:84:0D:6E:65
Certificate issuer: /CN=1B06933632B5A267F98A1716F3CB78EA840D6E65
Certificate serial: 7B6E6B016927166A788C33DA0B9DE089D2D71AE2
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1B06933632B5A267F98A1716F3CB78EA840D6E65.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5ce6ac01-8eac-46c5-9469-35efa36099fd/0/1B06933632B5A267F98A1716F3CB78EA840D6E65.mft
Manifest number: C1
Signing time: Wed 23 Sep 2026 20:16:00 +0000
Manifest this update: Wed 23 Sep 2026 20:11:00 +0000
Manifest next update: Thu 24 Sep 2026 22:32:00 +0000
Files and hashes: 1: 3130332e3232352e34342e302f32332d3234203d3e2034383030.roa (hash: 0VVs/sIJ5MrPj5d4PmHdMp47XW+kiXnvAYhD29LsMwA=)
2: 1B06933632B5A267F98A1716F3CB78EA840D6E65.crl (hash: kTufGXgocdUz1sKDlyfCP1bmPgjnbycmZNwryr82Htg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5ce6ac01-8eac-46c5-9469-35efa36099fd/0/1B06933632B5A267F98A1716F3CB78EA840D6E65.crl
rsync://rpki-rsync.idnic.net/repo/5ce6ac01-8eac-46c5-9469-35efa36099fd/0/1B06933632B5A267F98A1716F3CB78EA840D6E65.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1B06933632B5A267F98A1716F3CB78EA840D6E65.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 22:32:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:6e:6b:01:69:27:16:6a:78:8c:33:da:0b:9d:e0:89:d2:d7:1a:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1B06933632B5A267F98A1716F3CB78EA840D6E65
Validity
Not Before: Sep 23 20:11:00 2026 GMT
Not After : Sep 24 22:32:00 2026 GMT
Subject: CN=52BD6D8D0BD0E43F28C6480CDCD516BB582EDE16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:22:4b:42:35:7c:79:64:ca:74:d0:f2:8f:62:
0e:42:57:77:cf:fb:95:27:4a:70:ef:e2:1e:4e:fc:
eb:96:b1:60:05:1a:30:cd:6f:4b:20:e6:4c:2a:70:
54:e1:38:02:ec:ee:bf:63:ef:92:92:4f:ad:e7:2f:
26:c1:5b:34:b1:34:9a:db:25:f5:ec:59:c1:9f:eb:
f3:df:62:1c:9f:60:7c:59:51:52:c1:eb:6c:5c:85:
1b:21:20:fa:e3:e3:00:8d:2d:2e:5e:39:7f:7c:f9:
08:5a:a7:9f:23:0d:c5:87:e8:73:2f:c3:21:1e:05:
20:80:89:b5:c6:60:9d:7d:85:37:01:09:64:da:7f:
5a:dd:02:f5:67:7c:9d:75:5a:5b:43:4c:5f:66:1e:
d1:82:8e:99:96:c7:e4:39:d6:ec:19:dc:64:b3:bd:
c6:e4:31:0d:66:46:f0:48:e1:b4:64:48:5c:ad:17:
4a:11:dd:eb:39:48:aa:d4:0d:8c:7e:13:2b:57:69:
ed:31:0c:26:06:68:75:fd:75:58:0a:26:f3:c5:16:
c0:aa:af:3f:56:cb:7b:94:d0:ad:3f:39:67:1d:f9:
7b:b4:73:35:59:f6:7c:8d:55:74:e7:aa:70:21:db:
96:29:e8:82:df:59:ae:7e:59:59:d0:e6:d1:55:62:
93:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:BD:6D:8D:0B:D0:E4:3F:28:C6:48:0C:DC:D5:16:BB:58:2E:DE:16
X509v3 Authority Key Identifier:
keyid:1B:06:93:36:32:B5:A2:67:F9:8A:17:16:F3:CB:78:EA:84:0D:6E:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5ce6ac01-8eac-46c5-9469-35efa36099fd/0/1B06933632B5A267F98A1716F3CB78EA840D6E65.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1B06933632B5A267F98A1716F3CB78EA840D6E65.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5ce6ac01-8eac-46c5-9469-35efa36099fd/0/1B06933632B5A267F98A1716F3CB78EA840D6E65.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:dd:4e:57:6e:08:b5:d6:35:20:22:34:f2:73:4b:7e:29:21:
a4:fc:d8:55:68:12:55:3e:ad:8e:cc:bf:f2:34:c6:3d:41:55:
16:af:3a:d4:13:16:a5:ba:00:9a:55:af:59:9d:f2:a1:2e:f7:
e0:06:76:d1:e1:02:94:09:d5:4e:68:9d:b2:17:f7:4a:a0:86:
da:48:88:ff:e6:14:12:8d:2f:00:06:07:21:0c:e5:72:01:8f:
ed:1d:b6:d0:8b:5e:02:1d:90:8d:91:9f:78:00:6c:66:9f:cb:
69:ca:ba:ad:17:95:57:70:e1:78:86:d0:c5:5d:1e:40:ae:f6:
2c:fd:a2:cf:de:a6:41:6a:90:cf:f3:59:0b:8c:ba:55:ac:25:
55:56:1b:70:09:fb:f5:53:66:cf:76:94:a6:98:05:fc:91:01:
ab:10:bf:60:80:70:69:73:15:0c:93:f8:52:b3:3d:70:f3:65:
6b:32:20:ae:fa:d6:b8:ba:fc:be:83:7e:76:91:d4:2c:3f:5a:
5a:41:8a:4f:c0:af:c5:2b:59:3e:ef:3a:0b:a7:ac:b9:8b:21:
28:68:d4:19:e0:dd:da:9a:df:98:3f:8b:b6:98:c6:bd:c2:f7:
2b:02:a3:52:e8:7c:ca:73:7a:32:66:28:a0:30:77:d3:72:de:
d3:8f:ef:a9
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUe25rAWknFmp4jDPaC53gidLXGuIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUIwNjkzMzYzMkI1QTI2N0Y5OEExNzE2RjNDQjc4RUE4
NDBENkU2NTAeFw0yNjA5MjMyMDExMDBaFw0yNjA5MjQyMjMyMDBaMDMxMTAvBgNV
BAMTKDUyQkQ2RDhEMEJEMEU0M0YyOEM2NDgwQ0RDRDUxNkJCNTgyRURFMTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWIktCNXx5ZMp00PKPYg5CV3fP
+5UnSnDv4h5O/OuWsWAFGjDNb0sg5kwqcFThOALs7r9j75KST63nLybBWzSxNJrb
JfXsWcGf6/PfYhyfYHxZUVLB62xchRshIPrj4wCNLS5eOX98+Qhap58jDcWH6HMv
wyEeBSCAibXGYJ19hTcBCWTaf1rdAvVnfJ11WltDTF9mHtGCjpmWx+Q51uwZ3GSz
vcbkMQ1mRvBI4bRkSFytF0oR3es5SKrUDYx+EytXae0xDCYGaHX9dVgKJvPFFsCq
rz9Wy3uU0K0/OWcd+Xu0czVZ9nyNVXTnqnAh25Yp6ILfWa5+WVnQ5tFVYpPLAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUUr1tjQvQ5D8oxkgM3NUWu1gu3hYwHwYDVR0j
BBgwFoAUGwaTNjK1omf5ihcW88t46oQNbmUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NWNlNmFjMDEtOGVhYy00NmM1LTk0NjktMzVlZmEzNjA5OWZkLzAvMUIwNjkzMzYz
MkI1QTI2N0Y5OEExNzE2RjNDQjc4RUE4NDBENkU2NS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8xQjA2OTMzNjMyQjVBMjY3Rjk4QTE3MTZGM0NCNzhFQTg0MEQ2
RTY1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWNlNmFjMDEtOGVhYy00NmM1LTk0
NjktMzVlZmEzNjA5OWZkLzAvMUIwNjkzMzYzMkI1QTI2N0Y5OEExNzE2RjNDQjc4
RUE4NDBENkU2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFzdTlduCLXWNSAiNPJzS34pIaT82FVoElU+
rY7Mv/I0xj1BVRavOtQTFqW6AJpVr1md8qEu9+AGdtHhApQJ1U5onbIX90qghtpI
iP/mFBKNLwAGByEM5XIBj+0dttCLXgIdkI2Rn3gAbGafy2nKuq0XlVdw4XiG0MVd
HkCu9iz9os/epkFqkM/zWQuMulWsJVVWG3AJ+/VTZs92lKaYBfyRAasQv2CAcGlz
FQyT+FKzPXDzZWsyIK761ri6/L6DfnaR1Cw/WlpBik/Ar8UrWT7vOgunrLmLISho
1Bng3dqa35g/i7aYxr3C9ysCo1LofMpzejJmKKAwd9Ny3tOP76k=
-----END CERTIFICATE-----
Generated at Thu Sep 24 13:53:14 2026 by rpki-client