
$ rpki-client -vvf rpki-rsync.idnic.net/repo/998432cd-a047-485b-8143-59a3532c07b7/0/1A0DAD245766AEB19BB04F688F000254E9F4BB89.mft
File: 1A0DAD245766AEB19BB04F688F000254E9F4BB89.mft (raw, json)
Hash identifier: 6bm6Tnta9YCKRIDLd9POBUcvMGESHftwCJRjkNMxXyE=
Subject key identifier: 61:F8:21:37:F7:8E:9B:6B:29:A6:80:4E:97:3A:B0:50:86:17:D4:90
Authority key identifier: 1A:0D:AD:24:57:66:AE:B1:9B:B0:4F:68:8F:00:02:54:E9:F4:BB:89
Certificate issuer: /CN=1A0DAD245766AEB19BB04F688F000254E9F4BB89
Certificate serial: 30652C2E871930ADDF664B1597A516C26A410FBC
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A0DAD245766AEB19BB04F688F000254E9F4BB89.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/998432cd-a047-485b-8143-59a3532c07b7/0/1A0DAD245766AEB19BB04F688F000254E9F4BB89.mft
Manifest number: 0F
Signing time: Wed 13 May 2026 01:50:49 +0000
Manifest this update: Wed 13 May 2026 01:45:49 +0000
Manifest next update: Thu 14 May 2026 04:34:49 +0000
Files and hashes: 1: 3130332e3131352e33352e302f32342d3234203d3e20313530343831.roa (hash: 8ZC6zz9Re3rZ3m+opQHEHUjBM1e+RO/tPdv5dWkLhp4=)
2: 1A0DAD245766AEB19BB04F688F000254E9F4BB89.crl (hash: VLLGvCGt/UYSm2IjogVN2jH+TiyoJQVcPrz0BGGqG4k=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/998432cd-a047-485b-8143-59a3532c07b7/0/1A0DAD245766AEB19BB04F688F000254E9F4BB89.crl
rsync://rpki-rsync.idnic.net/repo/998432cd-a047-485b-8143-59a3532c07b7/0/1A0DAD245766AEB19BB04F688F000254E9F4BB89.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A0DAD245766AEB19BB04F688F000254E9F4BB89.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:31:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:65:2c:2e:87:19:30:ad:df:66:4b:15:97:a5:16:c2:6a:41:0f:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1A0DAD245766AEB19BB04F688F000254E9F4BB89
Validity
Not Before: May 13 01:45:49 2026 GMT
Not After : May 14 04:34:49 2026 GMT
Subject: CN=61F82137F78E9B6B29A6804E973AB0508617D490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:e5:31:1e:e8:c0:20:08:39:5b:04:0a:6c:5f:
94:de:27:bc:ee:24:40:a8:03:fc:a0:66:7e:37:a0:
47:5e:0f:ab:b4:5a:5d:7d:e4:19:e6:23:ea:43:8c:
43:79:4a:e0:3b:16:dc:4b:6c:dc:ad:25:89:30:7c:
ae:e4:50:44:7a:27:6f:9c:fe:ab:96:4f:6f:cd:e0:
59:de:db:d4:df:ba:f1:c9:a1:ad:79:e9:bd:e3:79:
da:a6:3e:59:a7:90:f9:9b:fb:54:94:ff:8b:5e:fc:
ce:ac:c7:36:59:e4:fc:ad:ce:96:97:8c:de:14:fc:
df:7d:c0:a9:c2:88:9c:44:12:50:1e:59:6c:cd:4e:
84:15:c0:42:9e:db:e1:75:33:36:a9:e7:4e:0c:af:
87:24:1d:b9:d7:95:97:7d:44:e2:f5:59:6d:9d:08:
96:8b:81:ad:2e:9e:e9:2b:5d:11:b6:5b:f2:1f:c8:
01:c1:32:2d:10:ae:09:88:1c:83:ce:3e:3b:5f:7b:
ea:32:4e:22:8e:ef:f2:d7:16:4a:d0:89:d0:ff:fd:
86:76:db:9e:1e:86:b1:15:0d:68:a9:a7:91:4e:48:
3c:78:55:5c:60:32:89:26:7a:c0:9d:a5:5a:93:81:
57:0d:5c:ad:de:55:b4:df:9b:1d:1e:4d:cc:cc:f5:
a1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:F8:21:37:F7:8E:9B:6B:29:A6:80:4E:97:3A:B0:50:86:17:D4:90
X509v3 Authority Key Identifier:
keyid:1A:0D:AD:24:57:66:AE:B1:9B:B0:4F:68:8F:00:02:54:E9:F4:BB:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/998432cd-a047-485b-8143-59a3532c07b7/0/1A0DAD245766AEB19BB04F688F000254E9F4BB89.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A0DAD245766AEB19BB04F688F000254E9F4BB89.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/998432cd-a047-485b-8143-59a3532c07b7/0/1A0DAD245766AEB19BB04F688F000254E9F4BB89.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:30:07:6a:57:ae:fd:88:78:51:7a:43:e5:33:a8:22:72:a2:
0b:91:9b:6d:d1:72:f0:09:e4:66:1b:c5:e6:db:62:85:43:9f:
1f:e5:b2:72:8e:c3:49:bb:0a:b4:63:8a:28:5b:c8:2f:78:77:
52:79:d1:3d:8d:3d:17:0e:aa:51:74:87:53:66:5e:8b:b7:c4:
79:c0:0a:c2:23:4c:3c:52:f9:b8:33:1a:06:4f:38:93:1a:9c:
fc:45:98:07:d7:54:a0:3b:50:71:04:42:48:5a:69:1d:8c:b4:
b4:6a:6d:f3:e9:b4:52:51:42:7a:ca:bc:ac:c4:f6:1f:a1:57:
53:4f:97:07:71:e3:91:76:52:4f:18:9e:6e:ab:aa:2f:a0:9a:
c1:e5:ae:ab:88:7f:ae:13:34:2a:77:34:ea:36:0d:bc:30:af:
ca:ad:f1:f0:b2:69:29:ac:4a:a2:05:ad:34:ff:d9:49:bd:fa:
61:d7:fc:d0:57:c4:62:2c:97:96:3e:2d:64:b8:1d:8d:17:80:
be:44:3d:0d:07:24:50:f2:4a:23:8e:01:ec:60:b3:1a:5a:50:
d1:98:63:c7:b8:e8:bf:32:91:b1:96:9d:14:1a:8d:0c:ce:d1:
91:50:7c:cf:ce:c5:9a:9d:16:6f:b8:4f:d4:73:d6:94:5c:af:
10:e4:bc:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:51:44 2026 by rpki-client