
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/1/1D4E21B5B06FE9A04643A702C72B9616D450DE8E.mft
File: 1D4E21B5B06FE9A04643A702C72B9616D450DE8E.mft (raw, json)
Hash identifier: RJNYjEMUxQCHpCnTnbFhGKmeidA8msbedsLLbon4kOY=
Subject key identifier: 77:97:08:D7:1B:39:CF:38:57:E5:98:C2:74:D8:0F:86:20:5A:48:05
Authority key identifier: 1D:4E:21:B5:B0:6F:E9:A0:46:43:A7:02:C7:2B:96:16:D4:50:DE:8E
Certificate issuer: /CN=1D4E21B5B06FE9A04643A702C72B9616D450DE8E
Certificate serial: 1F588B486A56649FD9EF281D4A5B0C9C041EE16D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D4E21B5B06FE9A04643A702C72B9616D450DE8E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/1/1D4E21B5B06FE9A04643A702C72B9616D450DE8E.mft
Manifest number: C4
Signing time: Sat 26 Sep 2026 03:44:57 +0000
Manifest this update: Sat 26 Sep 2026 03:39:57 +0000
Manifest next update: Sun 27 Sep 2026 05:30:57 +0000
Files and hashes: 1: 1D4E21B5B06FE9A04643A702C72B9616D450DE8E.crl (hash: uXObZ39e9vL+o7KMKRcHSLeW3gHvpvThGKnqixbn0X8=)
2: 3130332e3232382e31382e302f32342d3234203d3e20313530393835.roa (hash: SYMIAQW6lQfm+rZplODVm3xwEprXIfjqtxhwRoNnM10=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/1/1D4E21B5B06FE9A04643A702C72B9616D450DE8E.crl
rsync://rpki-rsync.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/1/1D4E21B5B06FE9A04643A702C72B9616D450DE8E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D4E21B5B06FE9A04643A702C72B9616D450DE8E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 26 Sep 2026 17:58:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:58:8b:48:6a:56:64:9f:d9:ef:28:1d:4a:5b:0c:9c:04:1e:e1:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1D4E21B5B06FE9A04643A702C72B9616D450DE8E
Validity
Not Before: Sep 26 03:39:57 2026 GMT
Not After : Sep 27 05:30:57 2026 GMT
Subject: CN=779708D71B39CF3857E598C274D80F86205A4805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ad:c7:0f:76:bd:7c:e0:3e:9a:ab:b1:79:dc:
5a:12:91:fe:cb:35:4a:77:1b:b7:96:fa:af:d4:f5:
e0:b1:64:11:bb:8f:cf:21:d1:21:6f:bc:6f:ad:1c:
6b:d6:57:d3:56:f7:56:12:81:21:58:b0:9f:c5:7d:
47:c2:0a:80:f5:8b:21:94:fe:79:9c:45:94:3a:14:
44:f2:c7:fd:23:46:a5:2f:da:e6:03:6a:05:40:f4:
9a:33:50:14:e0:25:46:44:69:70:63:3a:d2:f4:72:
fb:14:33:95:e0:6f:5a:05:c8:3a:df:ee:d0:11:95:
1e:95:09:17:df:54:7b:31:94:15:39:ca:33:8e:4f:
26:15:65:57:64:67:94:74:31:18:04:bd:ac:71:1e:
65:92:df:57:52:0b:da:02:e4:e9:e2:6b:fd:32:c1:
2a:78:c6:ce:6c:4e:50:85:13:6e:e5:5b:6d:3b:5e:
4f:fd:2f:40:45:50:b7:ea:80:e3:67:64:c5:bd:64:
be:24:d6:61:22:f3:2f:29:6c:85:e1:d5:a7:68:17:
95:8e:ad:b4:d1:d6:b9:62:b2:d7:1d:37:40:87:a0:
25:34:70:ed:4b:b5:63:83:9a:37:2d:42:9f:26:98:
0e:ea:72:a9:c8:12:91:f3:86:2f:e2:7d:78:79:76:
48:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:97:08:D7:1B:39:CF:38:57:E5:98:C2:74:D8:0F:86:20:5A:48:05
X509v3 Authority Key Identifier:
keyid:1D:4E:21:B5:B0:6F:E9:A0:46:43:A7:02:C7:2B:96:16:D4:50:DE:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/1/1D4E21B5B06FE9A04643A702C72B9616D450DE8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D4E21B5B06FE9A04643A702C72B9616D450DE8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/1/1D4E21B5B06FE9A04643A702C72B9616D450DE8E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:a3:53:6a:6a:c3:3c:65:8e:37:dc:66:06:d8:72:1c:11:fa:
6b:b1:f7:19:e2:c4:ba:3f:55:3a:a6:0d:17:56:da:62:81:da:
be:37:56:84:39:30:6e:10:f6:ab:ea:b7:68:a5:c7:30:2c:55:
e9:a5:14:69:86:b6:4a:06:bd:09:71:9c:98:16:9c:0c:37:1e:
f6:53:e9:86:09:cc:ae:66:a0:11:85:93:e0:d4:a6:98:ea:32:
7b:56:82:22:b4:3a:ea:60:25:3b:e9:37:b8:a9:50:58:d8:9f:
6a:ea:aa:8b:7b:19:ec:5a:a1:a5:7d:e6:c2:12:8e:4e:0d:a1:
54:23:b4:e6:16:3c:d0:0d:b3:58:59:35:88:4a:2b:40:97:c3:
7d:7e:0b:93:5f:6e:e4:43:cc:7d:f4:7d:fa:04:0b:7d:0f:31:
96:fe:45:d5:80:c0:07:52:18:a7:69:fa:f2:7e:50:3b:1e:30:
18:b3:ec:6f:bb:ca:5f:f3:eb:f9:b6:e7:d4:06:69:0d:a2:41:
3d:0a:00:d0:46:39:6b:80:64:2e:16:ca:3e:91:de:d9:a8:10:
35:9a:a0:4b:cd:49:cd:f8:40:3e:3c:5c:f2:67:d0:7f:a2:2e:
2e:1e:46:45:41:74:11:5f:c7:8d:ba:4c:0b:38:fe:0a:b6:6c:
cc:58:7d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:37:39 2026 by rpki-client