
$ rpki-client -vvf rpki-rsync.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/1B13598E3DC3A8D5F01EE86947B74951E81266FC.mft
File: 1B13598E3DC3A8D5F01EE86947B74951E81266FC.mft (raw, json)
Hash identifier: 6q432u2+LMNQ8s7mkTZO/XGadZgDn8ZR97Wb7T5leHc=
Subject key identifier: 20:D4:5A:32:33:B6:DB:4E:03:A1:16:01:76:17:25:85:9C:34:AF:78
Authority key identifier: 1B:13:59:8E:3D:C3:A8:D5:F0:1E:E8:69:47:B7:49:51:E8:12:66:FC
Certificate issuer: /CN=1B13598E3DC3A8D5F01EE86947B74951E81266FC
Certificate serial: 43D14498BF3630E7A3F1341BEE04B74639520766
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1B13598E3DC3A8D5F01EE86947B74951E81266FC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/1B13598E3DC3A8D5F01EE86947B74951E81266FC.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 18:08:11 +0000
Manifest this update: Tue 12 May 2026 18:03:11 +0000
Manifest next update: Wed 13 May 2026 18:54:11 +0000
Files and hashes: 1: 3130332e3132322e392e302f32342d3234203d3e20313530393635.roa (hash: X1BuffyPqZatWKWcf+HC9BxedbehRoziiAknm7XowP4=)
2: 1B13598E3DC3A8D5F01EE86947B74951E81266FC.crl (hash: osGAhzeaQA3Ya9lPclHfaXWHg5n2lX3s+FEJ6rfWKzg=)
3: 3130332e3132322e382e302f32342d3234203d3e20313530393635.roa (hash: 7FE61Zc3WU63aXcyhhG+2SBAGWSpraBvNcEGom2PNzw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/1B13598E3DC3A8D5F01EE86947B74951E81266FC.crl
rsync://rpki-rsync.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/1B13598E3DC3A8D5F01EE86947B74951E81266FC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1B13598E3DC3A8D5F01EE86947B74951E81266FC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:d1:44:98:bf:36:30:e7:a3:f1:34:1b:ee:04:b7:46:39:52:07:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1B13598E3DC3A8D5F01EE86947B74951E81266FC
Validity
Not Before: May 12 18:03:11 2026 GMT
Not After : May 13 18:54:11 2026 GMT
Subject: CN=20D45A3233B6DB4E03A11601761725859C34AF78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:18:01:e9:c1:1f:99:73:a7:0d:ba:6a:9d:04:
1b:8b:a3:d9:d5:a1:c3:7f:95:46:b2:de:76:7c:06:
e2:28:4f:ce:dd:31:d4:ae:80:17:03:f9:1f:5e:c7:
af:98:66:82:ce:87:d8:30:ca:7d:6c:98:a9:30:c5:
93:10:1a:ee:8d:59:76:1d:6c:24:07:d7:d8:83:48:
c8:e3:21:f8:39:5b:59:c1:aa:72:35:78:ac:44:09:
54:1b:67:cb:53:1e:c9:9d:2c:f6:ec:a6:12:54:b9:
6d:93:64:f2:56:1b:a5:91:d5:29:84:fc:dd:17:b0:
10:7b:83:f3:c5:9e:aa:16:8a:33:de:ae:f9:4b:bc:
58:7f:8c:c7:52:90:e9:61:74:4f:b8:89:2c:9f:89:
3c:5f:3b:eb:b5:e0:60:cd:f6:dc:dd:23:ed:ca:c8:
fe:ef:fb:dd:2f:a9:55:e5:d3:7e:c2:cb:d5:58:41:
10:92:70:98:39:4a:ce:ee:78:e3:80:de:2e:40:aa:
f7:f9:64:91:b0:14:40:22:b0:dd:dc:1e:eb:af:62:
41:62:81:c9:fc:58:c1:78:e8:8b:07:b8:71:0a:7b:
95:aa:7c:56:5c:86:3e:e8:30:26:01:60:99:0a:67:
85:db:e6:13:03:12:a1:2e:67:2f:2e:e6:c4:a5:6d:
c4:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:D4:5A:32:33:B6:DB:4E:03:A1:16:01:76:17:25:85:9C:34:AF:78
X509v3 Authority Key Identifier:
keyid:1B:13:59:8E:3D:C3:A8:D5:F0:1E:E8:69:47:B7:49:51:E8:12:66:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/1B13598E3DC3A8D5F01EE86947B74951E81266FC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1B13598E3DC3A8D5F01EE86947B74951E81266FC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/1B13598E3DC3A8D5F01EE86947B74951E81266FC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:24:f5:fa:11:3b:89:98:c2:d0:e5:19:6a:16:73:6c:89:5a:
17:7b:53:ef:09:9c:86:aa:1c:4b:e3:50:5b:7e:1a:f5:55:b1:
1d:99:68:ea:00:fe:e3:8a:3a:25:50:27:b0:dc:6a:8c:5d:8d:
85:3b:d8:ae:cd:b9:72:b8:fc:d1:e9:7e:7d:62:93:91:4c:82:
4a:5c:2a:c3:b4:5a:93:30:02:6a:f6:2e:a6:14:78:42:f1:cf:
13:14:01:dc:b9:66:79:97:0a:4c:99:d8:ee:5e:49:50:b7:9e:
d4:9c:0e:86:4a:ed:1c:49:38:a1:54:5d:b5:8e:ba:7a:4c:38:
17:cc:f2:99:e8:86:d4:54:f8:57:05:9d:77:de:4d:cb:ea:5e:
b0:59:ad:ce:16:51:21:32:9e:dd:8d:ee:61:2d:64:b2:97:08:
61:12:5b:2f:00:08:75:32:a5:92:a9:17:3f:c0:b6:cb:10:9b:
31:e6:95:1b:b0:4c:24:a4:a8:0b:0a:96:c0:3f:ae:d7:01:59:
24:de:98:5a:5d:59:10:47:68:18:eb:3e:d8:cb:52:b4:f5:a2:
3b:b4:da:c5:d7:fc:76:af:f8:36:34:85:6d:a6:a4:50:dc:32:
bb:7e:54:79:b1:c9:1d:38:a6:6b:31:f3:12:12:b9:c9:84:b1:
09:12:cd:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:11:35 2026 by rpki-client