
$ rpki-client -vvf rpki-rsync.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/1F3B2D12BD297463BA7717F257A40F73DE290B89.mft
File: 1F3B2D12BD297463BA7717F257A40F73DE290B89.mft (raw, json)
Hash identifier: noVE6SDysjiKNpa7bkubynBHZi/mQIHPiJqpTsb7EbE=
Subject key identifier: 44:26:C4:1E:F1:A3:53:45:D1:68:38:22:98:35:EA:96:54:7F:8B:3B
Authority key identifier: 1F:3B:2D:12:BD:29:74:63:BA:77:17:F2:57:A4:0F:73:DE:29:0B:89
Certificate issuer: /CN=1F3B2D12BD297463BA7717F257A40F73DE290B89
Certificate serial: 59AD0CA84BD452EE74CB64ED710F976F7EAA06D5
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1F3B2D12BD297463BA7717F257A40F73DE290B89.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/1F3B2D12BD297463BA7717F257A40F73DE290B89.mft
Manifest number: 6E
Signing time: Fri 24 Jul 2026 01:05:26 +0000
Manifest this update: Fri 24 Jul 2026 01:00:26 +0000
Manifest next update: Sat 25 Jul 2026 02:19:26 +0000
Files and hashes: 1: 3130332e3139302e37362e302f32332d3234203d3e2034383030.roa (hash: VTF9DKsDDs5XXBhLFlLnAOGE0dR7pXYnN3FimbyGZt4=)
2: 1F3B2D12BD297463BA7717F257A40F73DE290B89.crl (hash: CYxRGd8K4goUZ2MIYlohzPlcSWx0CIg2RwM4I7yyZ9o=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/1F3B2D12BD297463BA7717F257A40F73DE290B89.crl
rsync://rpki-rsync.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/1F3B2D12BD297463BA7717F257A40F73DE290B89.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1F3B2D12BD297463BA7717F257A40F73DE290B89.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 02:19:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:ad:0c:a8:4b:d4:52:ee:74:cb:64:ed:71:0f:97:6f:7e:aa:06:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1F3B2D12BD297463BA7717F257A40F73DE290B89
Validity
Not Before: Jul 24 01:00:26 2026 GMT
Not After : Jul 25 02:19:26 2026 GMT
Subject: CN=4426C41EF1A35345D16838229835EA96547F8B3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:cf:3b:f5:3a:3f:30:66:31:72:e2:ed:88:7a:
b8:85:e9:de:21:7c:45:27:1f:ee:af:cc:e3:66:7a:
0b:b8:22:79:fa:3f:98:7e:32:4c:0e:b0:74:c6:70:
05:0e:1a:46:9e:5c:7d:f9:e4:1b:83:83:bb:c5:13:
a6:c3:4f:b3:06:d1:e8:bf:39:03:f9:d0:c3:12:4b:
dd:31:f7:64:97:37:09:aa:54:fe:c0:b3:19:3a:76:
c5:77:a6:c2:6c:53:7b:a7:fe:7c:db:b6:39:18:ae:
01:bc:02:c3:1f:74:ec:98:24:7d:36:84:89:9b:88:
84:41:64:56:31:59:04:77:1a:54:fc:cd:d4:33:34:
7a:f4:ef:cd:70:cb:7a:1f:3d:79:8b:58:fe:1f:b1:
e7:53:db:e1:24:c6:8d:4b:45:23:56:04:3a:65:b9:
bb:99:fe:67:cb:03:9d:1a:6c:75:78:39:61:5d:4a:
77:9a:1e:4f:33:e4:fc:af:0c:37:22:57:10:54:7a:
69:e1:80:7b:55:36:b0:e1:bb:6c:02:c7:30:75:a4:
1e:0a:9c:1e:31:ad:ec:39:17:12:3e:76:40:2a:d2:
41:51:f8:dd:56:f9:a3:7d:aa:13:0e:f0:04:ad:32:
36:69:e7:ef:d6:bb:31:31:7f:71:51:69:9a:c5:e0:
f8:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:26:C4:1E:F1:A3:53:45:D1:68:38:22:98:35:EA:96:54:7F:8B:3B
X509v3 Authority Key Identifier:
keyid:1F:3B:2D:12:BD:29:74:63:BA:77:17:F2:57:A4:0F:73:DE:29:0B:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/1F3B2D12BD297463BA7717F257A40F73DE290B89.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1F3B2D12BD297463BA7717F257A40F73DE290B89.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/1F3B2D12BD297463BA7717F257A40F73DE290B89.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:02:78:7c:fc:15:dd:83:bc:3f:a7:27:95:4e:54:02:e1:a7:
37:52:d5:be:d5:5e:ee:3d:17:b1:fb:32:b0:4d:9c:4c:e3:05:
9a:f3:39:e0:91:06:dc:cb:bf:3e:e7:dc:4f:ff:37:9a:90:a8:
3a:72:7d:07:cc:a6:9b:48:81:2f:52:a2:d1:5b:0d:af:1f:ec:
de:f3:aa:93:21:da:04:6e:c8:8c:5d:e6:ab:5e:fc:ab:3d:25:
31:20:8f:50:e4:ba:1b:12:dd:6f:e8:43:c6:8d:05:4e:82:bc:
a2:ce:9e:02:50:ef:6c:63:e4:ae:e3:2f:29:06:01:5a:ac:94:
10:cc:2b:61:55:4a:e1:8b:36:9b:a9:88:41:3e:24:ce:38:37:
d8:bc:a5:24:e4:8a:97:bd:3a:e4:4a:ca:84:3e:44:4b:fc:58:
00:f8:37:02:10:fc:3f:1e:e4:06:53:62:a5:ef:30:62:8b:76:
fd:c3:57:be:80:df:65:cd:14:da:2e:cc:77:c2:ba:11:c6:78:
f7:ca:86:88:6f:16:07:53:53:e1:7f:b8:96:26:fe:47:ce:63:
7e:d1:39:31:9e:44:31:4c:89:0b:79:ca:b2:3d:18:cb:99:2a:
fd:67:4e:f0:f5:0d:b7:68:31:74:1a:18:61:22:ba:06:f2:64:
ae:85:f1:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:23:33 2026 by rpki-client