
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/18FBC56E5CFCC9A1DE8687E25FBC6DFC4A7555AB.mft
File: 18FBC56E5CFCC9A1DE8687E25FBC6DFC4A7555AB.mft (raw, json)
Hash identifier: MY2QM2skSh8vXZldW4ZwuAw0mqzz6AZsSsYBuzC/+Ks=
Subject key identifier: 02:C2:92:AD:38:B6:91:00:A8:77:CB:1F:C7:85:6E:64:F2:F8:58:7B
Authority key identifier: 18:FB:C5:6E:5C:FC:C9:A1:DE:86:87:E2:5F:BC:6D:FC:4A:75:55:AB
Certificate issuer: /CN=18FBC56E5CFCC9A1DE8687E25FBC6DFC4A7555AB
Certificate serial: 26DEE857AA0CC1E4D823D7A8CD038F046D7F7FDE
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/18FBC56E5CFCC9A1DE8687E25FBC6DFC4A7555AB.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/18FBC56E5CFCC9A1DE8687E25FBC6DFC4A7555AB.mft
Manifest number: C3
Signing time: Wed 23 Sep 2026 18:03:18 +0000
Manifest this update: Wed 23 Sep 2026 17:58:18 +0000
Manifest next update: Thu 24 Sep 2026 18:13:18 +0000
Files and hashes: 1: 3130332e3134342e31382e302f32342d3234203d3e20313339343138.roa (hash: sxzvGSUyyV+/Qltw/wPpDgdpQWS1gtDsJ90OR/mPxn8=)
2: 18FBC56E5CFCC9A1DE8687E25FBC6DFC4A7555AB.crl (hash: scNWNj4g7rtZ9cOh3C2XvhZW3hEKJoqVT6PdR/JFJTw=)
3: 323430353a363263303a3a2f33322d3332203d3e20313339343138.roa (hash: anz/jr4eoJ5eQzfHR7W5xMlJS845ed+hSr6JxtIfUAA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/18FBC56E5CFCC9A1DE8687E25FBC6DFC4A7555AB.crl
rsync://rpki-rsync.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/18FBC56E5CFCC9A1DE8687E25FBC6DFC4A7555AB.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/18FBC56E5CFCC9A1DE8687E25FBC6DFC4A7555AB.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 18:13:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:de:e8:57:aa:0c:c1:e4:d8:23:d7:a8:cd:03:8f:04:6d:7f:7f:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18FBC56E5CFCC9A1DE8687E25FBC6DFC4A7555AB
Validity
Not Before: Sep 23 17:58:18 2026 GMT
Not After : Sep 24 18:13:18 2026 GMT
Subject: CN=02C292AD38B69100A877CB1FC7856E64F2F8587B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ae:92:cb:b5:bc:be:30:d4:c7:dd:65:6d:b8:
90:3f:05:64:ef:b4:35:de:17:49:6c:3d:63:e9:4e:
4e:13:c3:d6:bf:11:43:12:5c:68:d3:d2:9c:5e:f3:
f9:99:49:5c:f6:51:51:8b:69:0d:14:8e:7b:a7:9c:
b6:58:24:22:ed:76:f2:6c:4d:30:10:c1:fd:45:7f:
c3:27:47:be:78:d1:9e:d3:e2:c6:64:74:88:95:57:
96:1b:76:15:cf:8b:b9:1e:63:9d:0c:fd:76:13:91:
fa:d2:e2:11:c2:cd:e9:96:c6:c7:e2:9b:b5:81:8c:
a3:06:6f:d9:5a:3a:d5:60:2d:48:46:a8:14:f7:9e:
92:bf:ed:21:08:20:6a:d1:6e:d9:82:44:b8:0b:38:
28:c6:15:ef:de:c9:3d:9c:89:a9:a9:31:1b:fd:1a:
75:4a:be:13:56:81:be:1c:e3:14:c3:8e:76:3d:97:
63:05:ed:5f:e0:cd:9d:49:3c:7f:43:60:50:40:56:
16:99:8b:6c:1c:b7:96:a7:dd:11:8e:56:d0:e7:c5:
d5:b3:63:3c:06:50:4b:78:48:0c:b6:d2:08:57:b7:
d4:dd:ca:11:f0:56:e3:92:6f:8d:0d:9c:99:04:47:
03:c4:79:9f:d7:06:83:30:c2:00:01:37:90:05:0b:
38:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:C2:92:AD:38:B6:91:00:A8:77:CB:1F:C7:85:6E:64:F2:F8:58:7B
X509v3 Authority Key Identifier:
keyid:18:FB:C5:6E:5C:FC:C9:A1:DE:86:87:E2:5F:BC:6D:FC:4A:75:55:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/18FBC56E5CFCC9A1DE8687E25FBC6DFC4A7555AB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/18FBC56E5CFCC9A1DE8687E25FBC6DFC4A7555AB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/18FBC56E5CFCC9A1DE8687E25FBC6DFC4A7555AB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:0b:81:1a:63:85:9d:98:5c:af:c5:bd:5d:08:34:0b:c1:bc:
94:fd:ea:8c:60:57:33:3c:44:8e:2b:d4:e7:7c:5a:77:c4:d5:
0d:76:ba:02:db:70:c9:83:a1:37:54:4b:fc:8d:5b:02:fd:77:
7b:bb:93:97:67:ce:46:c5:2c:2d:cc:90:f3:0a:2d:48:27:32:
53:e3:69:8a:f1:d2:68:c7:a0:06:e3:a1:db:bc:a8:e8:5e:19:
69:69:04:6e:0a:da:67:0a:46:93:af:c7:ea:07:93:59:bb:c9:
bb:e2:18:a0:e4:f4:51:f3:cc:da:c6:7a:31:3b:09:68:93:fe:
64:0c:65:22:6e:60:0e:75:be:ca:e1:2d:3e:26:7f:55:46:a4:
16:f1:dd:9a:c4:72:8d:69:e8:ae:e8:9b:db:01:9f:cd:09:ff:
61:38:e1:62:35:03:d9:c4:1e:44:d1:0a:d3:76:aa:e0:47:c3:
30:99:8d:13:5a:7f:77:dc:67:ac:49:e0:31:54:9c:49:5c:b7:
ee:46:12:42:43:92:60:9a:6a:10:69:f5:f9:02:7b:13:cf:95:
c0:89:23:9c:1f:d2:da:f4:c8:61:23:8b:b8:2b:4b:6d:1a:4c:
72:55:79:c5:04:cd:7a:ab:94:09:e7:e4:c3:82:f8:ac:54:09:
d0:49:9e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:30:39 2026 by rpki-client