
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/1E0301E0EA0A06DC8435E43BCC6977EF3BD4AF1A.mft
File: 1E0301E0EA0A06DC8435E43BCC6977EF3BD4AF1A.mft (raw, json)
Hash identifier: GGXkuwKMPkt+HZpbX2YBQGL1znHDHV0jiDeVi7owP9E=
Subject key identifier: AC:AF:29:6F:E0:94:BE:AF:4E:35:36:60:69:60:6F:99:5C:CB:2D:5C
Authority key identifier: 1E:03:01:E0:EA:0A:06:DC:84:35:E4:3B:CC:69:77:EF:3B:D4:AF:1A
Certificate issuer: /CN=1E0301E0EA0A06DC8435E43BCC6977EF3BD4AF1A
Certificate serial: 04EB9AA472A671376A187DF9DF72DEA28BFEB7CC
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1E0301E0EA0A06DC8435E43BCC6977EF3BD4AF1A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/1E0301E0EA0A06DC8435E43BCC6977EF3BD4AF1A.mft
Manifest number: 0E
Signing time: Tue 12 May 2026 07:59:20 +0000
Manifest this update: Tue 12 May 2026 07:54:20 +0000
Manifest next update: Wed 13 May 2026 11:14:20 +0000
Files and hashes: 1: 1E0301E0EA0A06DC8435E43BCC6977EF3BD4AF1A.crl (hash: T9YXTJgVLOjKTEwCxb8RkVxJhiw+d5ArAcp1Af1QKFs=)
2: 3130332e3136382e3135302e302f32332d3233203d3e20313432333131.roa (hash: ilMWkREaaRUsVGA1yBY9I9uXOlfT5ODPbD+SLMsp1gg=)
3: 3130332e3136382e3135312e302f32342d3234203d3e20313432333131.roa (hash: 10z6uPoT7+KF3jmKNjwiPYU/fWtSzXtmxjuZX3KE6+w=)
4: 3130332e3136382e3135302e302f32342d3234203d3e20313432333131.roa (hash: +vANdbTWMrufItFa0nCpqJPgPphPTUGA/kS3/GJ4B1E=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/1E0301E0EA0A06DC8435E43BCC6977EF3BD4AF1A.crl
rsync://rpki-rsync.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/1E0301E0EA0A06DC8435E43BCC6977EF3BD4AF1A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1E0301E0EA0A06DC8435E43BCC6977EF3BD4AF1A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:eb:9a:a4:72:a6:71:37:6a:18:7d:f9:df:72:de:a2:8b:fe:b7:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1E0301E0EA0A06DC8435E43BCC6977EF3BD4AF1A
Validity
Not Before: May 12 07:54:20 2026 GMT
Not After : May 13 11:14:20 2026 GMT
Subject: CN=ACAF296FE094BEAF4E35366069606F995CCB2D5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:86:e1:22:1b:b6:86:e2:f1:ad:03:14:78:05:
47:9a:42:fb:f4:9c:43:d7:09:f3:fd:e8:8e:cf:5b:
39:1a:8d:c6:06:3b:92:45:a5:d1:a1:0b:a5:e6:9d:
b0:99:fc:96:74:ec:61:b2:92:ca:1c:35:c5:4d:6a:
dc:fa:1d:ce:ca:8f:19:d0:fc:77:f1:95:10:9c:ad:
5b:e8:8b:52:3f:d0:43:79:8f:cd:79:9f:ef:16:0e:
80:24:6e:36:23:1f:35:88:77:c8:ef:61:20:3f:03:
9d:22:80:46:32:cc:06:ed:1e:5d:71:91:15:ec:61:
0a:fb:f5:37:eb:2b:d1:d1:50:4e:f7:2b:c7:2c:5d:
30:61:a2:c2:45:37:15:f5:90:21:3f:b2:72:b7:15:
9e:2a:2a:2e:9f:fa:0d:bf:6a:1c:f5:d4:0a:44:d9:
a6:08:e6:60:fd:2d:11:9c:37:80:fe:d1:aa:80:be:
97:28:67:72:6d:4b:6a:4a:1e:8a:9d:ec:99:64:3c:
e0:d7:b2:11:b8:ae:79:db:f5:9d:df:d4:a7:64:ba:
fe:00:b6:e4:12:88:5a:58:33:6e:93:6f:7f:90:cc:
84:ef:1d:2b:db:6b:65:38:30:bd:cf:96:6e:34:cd:
06:ef:1f:49:f1:f3:f2:68:ce:11:18:cf:d5:ff:a3:
0a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:AF:29:6F:E0:94:BE:AF:4E:35:36:60:69:60:6F:99:5C:CB:2D:5C
X509v3 Authority Key Identifier:
keyid:1E:03:01:E0:EA:0A:06:DC:84:35:E4:3B:CC:69:77:EF:3B:D4:AF:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/1E0301E0EA0A06DC8435E43BCC6977EF3BD4AF1A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1E0301E0EA0A06DC8435E43BCC6977EF3BD4AF1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/1E0301E0EA0A06DC8435E43BCC6977EF3BD4AF1A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:55:ae:12:9f:ad:ae:3e:5e:cd:67:9d:d2:96:8d:ef:ba:14:
b3:4b:89:11:f4:b5:c4:b7:80:6b:f2:5c:80:b7:ea:93:17:80:
9c:cf:e1:a6:2d:2b:c3:35:db:fa:cb:73:a3:be:1b:09:e1:1d:
c3:65:98:a4:76:dd:ef:bd:38:6c:bf:34:3d:ca:7c:c0:02:fb:
57:85:c5:ef:b5:2e:9d:f1:36:5e:20:8a:5f:df:8d:fb:f1:b0:
bf:8f:24:c7:06:64:46:a9:fd:48:03:37:7f:74:48:2f:7c:08:
14:e4:5b:44:4c:e9:b7:4b:4c:ec:28:ca:de:2d:f7:21:5c:d6:
13:91:0e:96:80:3d:dd:83:aa:1c:81:e3:ff:5e:a0:bd:75:ba:
25:8d:d2:6d:b5:b3:74:ab:3f:03:fc:39:ab:49:b5:fc:54:5a:
17:cb:51:45:2b:61:e3:eb:a5:be:a1:46:8d:3b:4e:79:8d:75:
24:53:9b:f7:39:13:da:ed:b6:bd:a7:7f:98:3c:a7:46:69:d9:
f6:ac:13:49:68:0d:fc:3c:4a:10:63:08:d5:37:86:d0:bf:ab:
eb:b8:6c:86:96:93:1a:ba:66:d4:5b:ac:6a:e2:8d:f8:f6:5a:
09:c8:e1:ad:02:5a:db:5d:6d:ac:f8:a9:30:8a:e4:d6:82:4f:
32:cf:72:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:36:32 2026 by rpki-client