
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/C1260A958F86F1FF20AE0F31E846BA1C4E9A24FA.mft
File: C1260A958F86F1FF20AE0F31E846BA1C4E9A24FA.mft (raw, json)
Hash identifier: JZ9L6R9Jl/iAzxGMCtTmPgXKddGcnR7dR3UfkY5Fqfw=
Subject key identifier: CE:4B:D4:E8:A5:4F:35:25:39:38:FC:41:2F:CF:10:62:82:59:7D:31
Authority key identifier: C1:26:0A:95:8F:86:F1:FF:20:AE:0F:31:E8:46:BA:1C:4E:9A:24:FA
Certificate issuer: /CN=C1260A958F86F1FF20AE0F31E846BA1C4E9A24FA
Certificate serial: 4FC9A64EECC2FE6BDF1D7A078AED236986CC8EA6
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1260A958F86F1FF20AE0F31E846BA1C4E9A24FA.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/C1260A958F86F1FF20AE0F31E846BA1C4E9A24FA.mft
Manifest number: C2
Signing time: Fri 25 Sep 2026 10:38:39 +0000
Manifest this update: Fri 25 Sep 2026 10:33:39 +0000
Manifest next update: Sat 26 Sep 2026 13:43:39 +0000
Files and hashes: 1: 3136302e31392e36342e302f32322d3232203d3e203535363939.roa (hash: N0IJVItqLdGXcfuM1pRtEZUOkPN6U39CHBDp9KbxnvE=)
2: C1260A958F86F1FF20AE0F31E846BA1C4E9A24FA.crl (hash: 6S8LYiPGOKWESaI9CJq3E4BgFelz1ZOTE0i32cHOr1U=)
3: 3131362e3139332e3137322e302f32322d3232203d3e203535363939.roa (hash: c03wLpEzYg97ghhueJfI6BXVZd/aJ1GtQxycuxMHJK4=)
4: 3130332e3139332e3131362e302f32322d3232203d3e203535363939.roa (hash: jKiTXm/8vDyf2AvrZzGMw86IoRFu/5T1HNGWk6tq1HI=)
5: 323430343a613163303a3a2f33322d3332203d3e203535363939.roa (hash: VcOXgGCTB4NhXdLkb1b7zn46SySdcXjLhyphDA4ZnsM=)
6: 3230332e3230372e35362e302f32322d3232203d3e203535363939.roa (hash: mfv/AKDA5suUtEeKfRpWWbxh8T9aefWVFLYJyZgMkdg=)
7: 3130332e32382e3131362e302f32322d3232203d3e203535363939.roa (hash: 9VPJuQ90qwdehcRd8MO9eyEcwL4yQF5FxdVlD4S3VMs=)
8: 3136302e31392e3232342e302f32322d3232203d3e203535363939.roa (hash: lIhlMRIZLEBVMJXri3XJA/w3v0WW0NIWvRLNQvPmN24=)
9: 3130332e3235352e3135362e302f32332d3233203d3e203535363939.roa (hash: YQ+Y8UuZzN2YEC3oofbc4PTFQcZkS+muZOf6DD/xArQ=)
10: 3135302e3130372e3234342e302f32322d3232203d3e203535363939.roa (hash: p4Sr8FlFmUwj/pC6EPbP4Z4DB4YyU4S3h6AHeZD4KSk=)
11: 3130332e32332e33322e302f32322d3232203d3e203535363939.roa (hash: Y1EVFuIwP2J3LGEmXO1ADmvKKygK86wXzAkR/y0dT8g=)
12: 3230332e3231302e38342e302f32322d3232203d3e203535363939.roa (hash: cpOS+owQUlhThnbX4ZpGNAdhNpHzy2pOiSrU5Q5UTVY=)
13: 3230322e3135312e31322e302f32322d3232203d3e203535363939.roa (hash: SQDl0NMVHHhQkpG6yxh3VjuT52aZ+ScdAS6b47rIF4Y=)
14: 3132312e35322e3133362e302f32312d3231203d3e203535363939.roa (hash: bJ7AouFb4tIwAc54hXOpuyqA13UTgSDRT2nPRsM2jh0=)
15: 3131332e3139372e3130382e302f32322d3232203d3e203535363939.roa (hash: sJ/pnmphoKExlbrYzPDTgUL5xv4K3amVSnVGmlvFatg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/C1260A958F86F1FF20AE0F31E846BA1C4E9A24FA.crl
rsync://rpki-rsync.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/C1260A958F86F1FF20AE0F31E846BA1C4E9A24FA.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1260A958F86F1FF20AE0F31E846BA1C4E9A24FA.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 26 Sep 2026 13:43:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:c9:a6:4e:ec:c2:fe:6b:df:1d:7a:07:8a:ed:23:69:86:cc:8e:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C1260A958F86F1FF20AE0F31E846BA1C4E9A24FA
Validity
Not Before: Sep 25 10:33:39 2026 GMT
Not After : Sep 26 13:43:39 2026 GMT
Subject: CN=CE4BD4E8A54F35253938FC412FCF106282597D31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:96:aa:b0:70:93:17:78:0f:de:6f:71:fd:da:
da:ad:53:ab:90:fc:5c:7f:b2:96:9c:eb:d7:95:64:
c3:ce:11:11:35:6a:ec:18:9b:ac:93:da:dd:6a:d2:
75:f4:b9:7f:18:1a:14:24:56:40:cc:b5:8e:f9:8c:
02:fb:56:4f:ec:c7:8a:78:f5:c8:cb:90:aa:d0:10:
44:16:b0:38:d5:9c:7f:4c:fd:9e:41:67:77:a1:93:
15:3e:1e:8a:a1:f1:58:32:c2:e0:29:fc:5a:c5:2b:
b7:3f:22:20:00:27:12:45:03:18:2d:8d:49:d4:08:
ec:9a:eb:6d:68:ed:f1:a0:81:65:cf:e6:39:35:ff:
c7:ab:57:f9:d0:8d:2e:23:7b:95:7c:e6:40:5f:8f:
a7:07:ee:2a:b1:88:11:f7:a3:93:ec:f7:a6:c3:3f:
f8:de:6a:0e:45:1b:47:9e:cb:0d:31:1f:58:13:71:
c8:91:f8:6d:a1:85:73:80:e1:24:19:0b:0f:f4:97:
11:39:53:a7:1c:f6:b9:88:f4:ab:fd:64:88:b5:79:
6c:46:fe:ad:95:36:3f:89:2f:de:5e:3d:84:7d:90:
66:1d:f1:82:21:34:6b:0d:ba:4a:31:4a:ba:39:1f:
01:9b:ce:ae:6d:6f:17:7e:96:4d:87:cb:b9:be:de:
f9:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:4B:D4:E8:A5:4F:35:25:39:38:FC:41:2F:CF:10:62:82:59:7D:31
X509v3 Authority Key Identifier:
keyid:C1:26:0A:95:8F:86:F1:FF:20:AE:0F:31:E8:46:BA:1C:4E:9A:24:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/C1260A958F86F1FF20AE0F31E846BA1C4E9A24FA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1260A958F86F1FF20AE0F31E846BA1C4E9A24FA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/C1260A958F86F1FF20AE0F31E846BA1C4E9A24FA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:43:16:32:43:38:5c:fd:d3:f2:33:14:af:5a:82:91:9a:a7:
e4:ff:fa:a8:75:67:69:39:18:38:b8:70:39:7a:69:72:7b:60:
64:7d:be:85:5b:be:6b:fc:35:a6:84:fe:b7:ac:45:78:09:87:
ed:9d:a9:a0:22:79:53:88:4d:10:1f:2c:4b:d3:f8:3f:1e:a5:
86:81:e1:55:6d:57:91:c1:7e:e4:91:d6:62:28:40:4a:96:e0:
7b:5b:b4:58:97:70:35:3d:0f:75:ba:58:cb:dc:3e:51:f9:17:
3c:78:b8:fb:24:30:a2:c1:4e:e9:7d:31:0e:6b:a9:d6:38:0b:
8a:6a:48:e4:aa:1d:0e:be:63:dd:c7:8a:6b:5b:00:33:bb:d3:
30:fd:cd:ad:dd:f7:13:a0:03:00:a8:16:5d:3a:8a:31:d4:d2:
19:bb:93:c7:a8:ef:a9:5f:27:33:5a:da:d9:2b:a7:ca:f5:4d:
3d:80:98:6c:11:35:58:19:7b:03:5f:a3:65:95:df:a7:70:b7:
fe:53:c5:14:a2:bb:46:28:47:72:75:31:32:89:70:63:a9:95:
4b:6d:b6:d2:a3:26:8d:92:ac:52:53:51:19:43:7e:5e:e8:bd:
31:19:4a:1a:9a:6c:a4:17:28:85:c1:8c:ec:31:3b:65:3f:ea:
0f:8e:81:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:32:13 2026 by rpki-client