
$ rpki-client -vvf rpki-rsync.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/1D911706C9A5E8A4993B1AD519498DE9F609FD97.mft
File: 1D911706C9A5E8A4993B1AD519498DE9F609FD97.mft (raw, json)
Hash identifier: 6BXJ89+OlfqDLfd5Tb9SQKZ+YOUnpwNzsGk4+dHAfI0=
Subject key identifier: 5F:71:CC:40:97:8F:9D:D7:97:1E:24:9F:8A:0A:1A:5C:3F:64:CA:CD
Authority key identifier: 1D:91:17:06:C9:A5:E8:A4:99:3B:1A:D5:19:49:8D:E9:F6:09:FD:97
Certificate issuer: /CN=1D911706C9A5E8A4993B1AD519498DE9F609FD97
Certificate serial: 0C782597A586D23802DBC0C20899A36CB9A9E8BA
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1D911706C9A5E8A4993B1AD519498DE9F609FD97.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/1D911706C9A5E8A4993B1AD519498DE9F609FD97.mft
Manifest number: 0F
Signing time: Wed 13 May 2026 02:46:45 +0000
Manifest this update: Wed 13 May 2026 02:41:45 +0000
Manifest next update: Thu 14 May 2026 05:43:45 +0000
Files and hashes: 1: 3135372e36362e35372e302f32342d3234203d3e20313530393835.roa (hash: F4rX5kdBMIK+q1JAnOl0J4l31YWcV9qdCJ59RuEth5I=)
2: 1D911706C9A5E8A4993B1AD519498DE9F609FD97.crl (hash: G15xTUUlhgGBiK+XIDoIw5aj64PxdYbtmsmGOMZ058U=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/1D911706C9A5E8A4993B1AD519498DE9F609FD97.crl
rsync://rpki-rsync.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/1D911706C9A5E8A4993B1AD519498DE9F609FD97.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1D911706C9A5E8A4993B1AD519498DE9F609FD97.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 05:43:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:78:25:97:a5:86:d2:38:02:db:c0:c2:08:99:a3:6c:b9:a9:e8:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1D911706C9A5E8A4993B1AD519498DE9F609FD97
Validity
Not Before: May 13 02:41:45 2026 GMT
Not After : May 14 05:43:45 2026 GMT
Subject: CN=5F71CC40978F9DD7971E249F8A0A1A5C3F64CACD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0d:9d:88:8b:ff:59:81:46:e2:1d:40:db:ea:
92:43:63:aa:8f:14:31:d3:96:15:f8:90:4d:1d:b8:
5a:55:92:31:81:ec:8d:3c:9c:83:54:28:34:e6:c4:
73:92:c0:3c:90:68:aa:0d:36:90:e8:69:e4:4a:9e:
a5:f7:b1:48:10:fa:82:1f:23:b1:e9:dc:5c:9d:a0:
8c:48:59:5a:b9:da:77:6b:68:8f:ed:c6:51:b2:ba:
22:60:f4:70:80:8d:96:e0:d1:7a:d5:b1:ce:68:5e:
03:de:ad:5d:b3:04:fe:01:47:4a:ee:40:d2:6f:5e:
8a:cd:84:5f:89:63:2b:81:3d:af:ed:41:e8:03:07:
af:70:1c:4a:3a:21:41:64:22:73:b0:95:3e:83:f2:
3b:89:10:85:8f:d4:04:6d:bb:69:2a:87:a1:4e:fe:
f2:01:3a:0f:2e:35:e9:bc:72:e6:59:17:10:14:b0:
c0:c0:fb:92:61:d8:22:bd:a0:d3:df:05:6b:38:1a:
9c:bf:f6:a3:8a:84:7b:df:b4:0e:18:33:db:b0:46:
23:f5:2a:42:e9:5f:89:e9:a2:a7:6a:ce:39:fd:c2:
f3:d5:9c:86:44:ed:89:5d:e2:a1:40:d7:d1:2c:01:
2b:11:c8:78:fd:b7:1a:62:10:18:56:e8:27:41:36:
b3:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:71:CC:40:97:8F:9D:D7:97:1E:24:9F:8A:0A:1A:5C:3F:64:CA:CD
X509v3 Authority Key Identifier:
keyid:1D:91:17:06:C9:A5:E8:A4:99:3B:1A:D5:19:49:8D:E9:F6:09:FD:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/1D911706C9A5E8A4993B1AD519498DE9F609FD97.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1D911706C9A5E8A4993B1AD519498DE9F609FD97.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/1D911706C9A5E8A4993B1AD519498DE9F609FD97.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:27:1d:f6:b4:a4:9f:88:cc:34:a2:43:9f:8d:b3:db:82:97:
ff:3a:66:8e:fe:d8:2e:5b:c5:34:cf:17:13:51:9a:60:3e:c1:
d1:30:fd:97:b4:42:2d:96:99:ed:ca:13:de:5f:a2:f1:00:64:
f9:df:4d:88:46:c5:11:22:50:6d:1c:76:c2:51:6d:41:b7:f0:
fd:42:88:6d:bd:c5:04:20:4b:d8:48:8e:76:0d:d3:f8:b0:d3:
68:16:64:dd:41:6a:8b:b7:86:42:ea:d1:6d:97:2a:db:c6:e2:
41:bf:3d:97:ed:f3:cc:bf:a1:43:24:9a:27:f8:af:e3:d4:0f:
a0:8b:71:c9:ea:4b:83:21:6c:51:10:66:aa:33:b0:13:71:b2:
44:54:3d:47:ec:3e:3d:92:2d:5f:c8:cc:29:e6:12:df:8a:f6:
9a:13:40:03:0c:3e:6b:d2:0d:3c:ae:93:a3:82:5a:e2:7b:43:
90:55:c4:72:c2:ff:81:73:17:58:66:bc:b9:bf:19:df:35:18:
7f:20:9d:04:1d:2c:18:31:c6:fd:fb:e5:1b:5d:5e:fc:2c:3e:
49:1a:52:61:a9:e6:4b:17:21:1a:04:48:87:ea:8c:fd:79:82:
d1:50:70:85:97:9a:69:23:cb:25:d9:03:05:d8:41:b8:92:2f:
82:cc:54:ac
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUDHgll6WG0jgC28DCCJmjbLmp6LowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUQ5MTE3MDZDOUE1RThBNDk5M0IxQUQ1MTk0OThERTlG
NjA5RkQ5NzAeFw0yNjA1MTMwMjQxNDVaFw0yNjA1MTQwNTQzNDVaMDMxMTAvBgNV
BAMTKDVGNzFDQzQwOTc4RjlERDc5NzFFMjQ5RjhBMEExQTVDM0Y2NENBQ0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyDZ2Ii/9ZgUbiHUDb6pJDY6qP
FDHTlhX4kE0duFpVkjGB7I08nINUKDTmxHOSwDyQaKoNNpDoaeRKnqX3sUgQ+oIf
I7Hp3FydoIxIWVq52ndraI/txlGyuiJg9HCAjZbg0XrVsc5oXgPerV2zBP4BR0ru
QNJvXorNhF+JYyuBPa/tQegDB69wHEo6IUFkInOwlT6D8juJEIWP1ARtu2kqh6FO
/vIBOg8uNem8cuZZFxAUsMDA+5Jh2CK9oNPfBWs4Gpy/9qOKhHvftA4YM9uwRiP1
KkLpX4npoqdqzjn9wvPVnIZE7Yld4qFA19EsASsRyHj9txpiEBhW6CdBNrMBAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUX3HMQJePndeXHiSfigoaXD9kys0wHwYDVR0j
BBgwFoAUHZEXBsml6KSZOxrVGUmN6fYJ/ZcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OTMyOTc5M2UtOGYxOC00MTE2LTkyNjgtYTEzM2RhZjExY2VmLzAvMUQ5MTE3MDZD
OUE1RThBNDk5M0IxQUQ1MTk0OThERTlGNjA5RkQ5Ny5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC8xRDkxMTcwNkM5QTVFOEE0OTkzQjFBRDUxOTQ5OERFOUY2MDlG
RDk3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTMyOTc5M2UtOGYxOC00MTE2LTky
NjgtYTEzM2RhZjExY2VmLzAvMUQ5MTE3MDZDOUE1RThBNDk5M0IxQUQ1MTk0OThE
RTlGNjA5RkQ5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEknHfa0pJ+IzDSiQ5+Ns9uCl/86Zo7+2C5b
xTTPFxNRmmA+wdEw/Ze0Qi2Wme3KE95fovEAZPnfTYhGxREiUG0cdsJRbUG38P1C
iG29xQQgS9hIjnYN0/iw02gWZN1Baou3hkLq0W2XKtvG4kG/PZft88y/oUMkmif4
r+PUD6CLccnqS4MhbFEQZqozsBNxskRUPUfsPj2SLV/IzCnmEt+K9poTQAMMPmvS
DTyuk6OCWuJ7Q5BVxHLC/4FzF1hmvLm/Gd81GH8gnQQdLBgxxv375RtdXvwsPkka
UmGp5ksXIRoESIfqjP15gtFQcIWXmmkjyyXZAwXYQbiSL4LMVKw=
-----END CERTIFICATE-----
Generated at Wed May 13 05:37:48 2026 by rpki-client