
$ rpki-client -vvf rpki-rsync.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/1CCC9F903B0797259D4851831FDB74E850E28573.mft
File: 1CCC9F903B0797259D4851831FDB74E850E28573.mft (raw, json)
Hash identifier: qRXI5fhDdBlKRKNZT3X8/sCZ+X53AotldTfF/ZaX7MA=
Subject key identifier: C9:41:42:68:88:08:A4:88:6E:11:14:E9:52:3F:CD:41:E7:DB:E1:C4
Authority key identifier: 1C:CC:9F:90:3B:07:97:25:9D:48:51:83:1F:DB:74:E8:50:E2:85:73
Certificate issuer: /CN=1CCC9F903B0797259D4851831FDB74E850E28573
Certificate serial: 7A6E83353AFD919BD217E3247C6EC8B61ADACD25
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1CCC9F903B0797259D4851831FDB74E850E28573.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/1CCC9F903B0797259D4851831FDB74E850E28573.mft
Manifest number: 6E
Signing time: Fri 24 Jul 2026 02:52:47 +0000
Manifest this update: Fri 24 Jul 2026 02:47:47 +0000
Manifest next update: Sat 25 Jul 2026 04:24:47 +0000
Files and hashes: 1: 3136302e32352e35342e302f32342d3234203d3e20313533303630.roa (hash: zB+Gp09Xv+ze/cWNBFwHk3DIfApc6pdj5NfB2Dg0qyE=)
2: 3136302e32352e35352e302f32342d3234203d3e20313533303630.roa (hash: 1QSTMTha75VQUavzNrm00rtAo2y/e9vazzdx0pcZJXk=)
3: 1CCC9F903B0797259D4851831FDB74E850E28573.crl (hash: Sy4aYf7yYh4iBIrLLgJ1mM/2LnsUgppth6iHr30zQGQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/1CCC9F903B0797259D4851831FDB74E850E28573.crl
rsync://rpki-rsync.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/1CCC9F903B0797259D4851831FDB74E850E28573.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1CCC9F903B0797259D4851831FDB74E850E28573.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 03:44:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:6e:83:35:3a:fd:91:9b:d2:17:e3:24:7c:6e:c8:b6:1a:da:cd:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1CCC9F903B0797259D4851831FDB74E850E28573
Validity
Not Before: Jul 24 02:47:47 2026 GMT
Not After : Jul 25 04:24:47 2026 GMT
Subject: CN=C94142688808A4886E1114E9523FCD41E7DBE1C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a1:94:41:5e:e9:c8:b6:68:03:3c:bb:fb:31:
cb:db:d7:dc:99:22:3f:5c:2c:72:2b:b7:97:c0:38:
93:56:23:ca:f7:b2:8b:80:c7:5c:ed:d7:51:3d:f9:
2d:c6:90:c4:3d:62:b9:17:2a:f3:36:40:9b:2d:0d:
4d:94:f6:e9:14:ff:7a:0c:3b:67:25:8a:80:4b:0e:
04:bc:51:82:98:d5:61:eb:61:09:3d:37:b6:ac:02:
35:54:d4:08:30:a3:c6:ee:63:7d:f1:9a:cc:b2:3a:
ce:5c:0e:5d:db:2f:fb:bf:ca:6b:3d:33:d1:f6:d1:
7a:b0:d8:af:32:36:82:bf:38:1f:93:08:91:d3:bd:
35:9d:41:e6:5a:d4:52:7e:80:7e:d3:32:b8:6c:c0:
e1:b9:8e:d4:19:bc:a1:6b:82:13:ae:e5:71:6f:34:
91:78:ca:aa:59:cb:b4:04:fd:7f:d3:c7:22:36:21:
f8:57:1e:13:e8:53:f7:5c:f4:dc:11:47:66:d2:50:
95:ba:89:61:41:44:90:b8:1d:91:47:e5:f2:79:7c:
60:ab:8c:fa:76:4f:d3:25:58:55:59:06:14:9b:c5:
be:43:ad:03:07:0b:8a:e5:5f:71:2f:6d:da:12:b3:
0f:ec:86:07:a6:70:20:c5:52:0a:ca:ad:05:57:c1:
ba:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:41:42:68:88:08:A4:88:6E:11:14:E9:52:3F:CD:41:E7:DB:E1:C4
X509v3 Authority Key Identifier:
keyid:1C:CC:9F:90:3B:07:97:25:9D:48:51:83:1F:DB:74:E8:50:E2:85:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/1CCC9F903B0797259D4851831FDB74E850E28573.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1CCC9F903B0797259D4851831FDB74E850E28573.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/1CCC9F903B0797259D4851831FDB74E850E28573.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:02:ba:e0:f2:7d:3b:23:56:13:35:2b:24:b7:2a:86:71:b9:
2e:d3:23:76:83:a1:36:d5:c7:32:e5:ad:ce:31:07:01:3f:08:
25:4a:a4:92:91:e2:2b:0e:be:8d:99:80:0d:3d:53:c1:5e:6e:
7b:f2:94:95:10:28:07:07:60:26:f4:61:62:5e:4f:3e:00:36:
c3:b5:74:e6:88:b6:ab:6f:03:b7:05:d3:0d:bb:32:f5:01:13:
3a:aa:5d:3b:2f:e1:f6:8b:84:df:29:fb:ca:92:39:41:12:35:
06:8a:6f:e9:1b:9b:63:ce:d4:f0:0d:23:17:6d:bd:5c:98:85:
10:a3:5f:f6:8b:8a:07:1a:4d:cd:ee:85:f7:50:f5:c4:85:78:
30:b0:a5:da:1a:51:2f:8d:68:bf:a4:a7:c7:2b:54:8d:89:95:
f4:6f:3d:a9:45:40:ba:52:18:00:b9:99:48:a6:9b:7c:e2:22:
14:dd:99:cf:24:53:ed:59:f2:4f:a0:f2:7d:2b:b7:6d:c8:a3:
97:b2:10:d2:03:06:7d:05:15:2e:33:9b:f3:f2:d1:40:0f:de:
8e:7a:0a:60:46:0c:8a:4b:97:a5:c6:ff:73:2f:28:ee:b8:f0:
b3:71:47:a7:02:3b:49:39:33:f1:c4:b6:72:ed:24:91:8f:72:
3a:1c:10:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:54:37 2026 by rpki-client