
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.mft
File: 11900E431DF4CADF5D8220E1753DCCAD3C154EA0.mft (raw, json)
Hash identifier: IpVy6h+Y0q6VFSphvUkSHZWlHYqQE721N7vnvJLqyl0=
Subject key identifier: 57:14:CD:A2:9F:65:C4:CE:9D:2B:5F:90:92:9B:15:60:A7:24:24:28
Authority key identifier: 11:90:0E:43:1D:F4:CA:DF:5D:82:20:E1:75:3D:CC:AD:3C:15:4E:A0
Certificate issuer: /CN=11900E431DF4CADF5D8220E1753DCCAD3C154EA0
Certificate serial: 1B77FFD486648CC0562A487F6C95227A6B53C538
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.mft
Manifest number: BF
Signing time: Wed 23 Sep 2026 05:22:37 +0000
Manifest this update: Wed 23 Sep 2026 05:17:37 +0000
Manifest next update: Thu 24 Sep 2026 09:16:37 +0000
Files and hashes: 1: 3130332e3130352e35372e302f32342d3234203d3e20313530393432.roa (hash: W3s/SdESd03hapvVNS8Tej6LatNo1tGxXixL2qrpljI=)
2: 3130332e3130352e35362e302f32342d3234203d3e20313530393432.roa (hash: 50fnO1/znCwvGbIxgziShFyETpxwE5iSmjctpgUo0sk=)
3: 11900E431DF4CADF5D8220E1753DCCAD3C154EA0.crl (hash: adyaS6GnlpYV4xa5vzMz1menUZkIJ5oH8dxbzHH9FzM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.crl
rsync://rpki-rsync.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 09:16:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:77:ff:d4:86:64:8c:c0:56:2a:48:7f:6c:95:22:7a:6b:53:c5:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11900E431DF4CADF5D8220E1753DCCAD3C154EA0
Validity
Not Before: Sep 23 05:17:37 2026 GMT
Not After : Sep 24 09:16:37 2026 GMT
Subject: CN=5714CDA29F65C4CE9D2B5F90929B1560A7242428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b0:19:db:2b:87:70:d8:d7:5a:df:e6:cc:79:
5b:a4:29:66:ce:18:78:e8:99:13:8c:33:99:41:19:
9b:9a:80:1a:fe:a2:69:48:2e:0c:15:50:bd:cf:83:
4d:0c:32:27:06:b0:9d:ac:e7:c0:6a:d6:17:8d:ac:
c9:59:78:a4:2f:f5:95:53:19:b9:1d:61:b5:69:6f:
22:be:6a:1a:e4:a6:b9:68:14:a3:94:64:ac:d3:b4:
a7:d9:5e:1c:e8:79:1a:0e:8f:53:3a:3e:41:27:9f:
4a:83:c3:46:32:9d:5d:56:24:00:e4:e8:97:a2:e9:
9b:d1:b5:57:85:0b:70:1a:51:9f:31:d5:e8:40:25:
8a:fb:9c:78:83:41:9f:70:0d:e6:3e:25:93:4a:f2:
2e:f1:67:91:18:13:f8:c1:a2:b2:78:8c:00:95:10:
2c:45:72:89:82:4b:a0:64:24:28:79:f4:0e:10:e7:
54:cc:25:73:ca:17:e1:61:6c:91:d6:f0:70:97:91:
30:4d:e3:46:3a:e8:97:e7:c2:de:ff:8a:47:3a:bd:
68:06:ab:00:20:43:60:56:78:2c:b2:63:32:41:71:
27:1c:b7:2e:47:b6:34:0a:f6:5c:83:e4:33:62:d8:
10:9a:78:02:24:ea:b4:ca:0d:b1:1f:9f:5b:b3:53:
f8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:14:CD:A2:9F:65:C4:CE:9D:2B:5F:90:92:9B:15:60:A7:24:24:28
X509v3 Authority Key Identifier:
keyid:11:90:0E:43:1D:F4:CA:DF:5D:82:20:E1:75:3D:CC:AD:3C:15:4E:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:5b:5e:fc:38:ea:b0:3d:b1:43:f9:a9:33:19:97:fe:5b:03:
1d:41:58:e3:ea:cb:09:cb:dd:fc:c5:36:a9:76:61:39:d8:ee:
20:c3:38:50:b7:b9:45:fd:ac:b5:f4:a8:89:f7:27:92:3e:23:
45:1e:a8:f6:ce:27:d7:26:37:e7:e5:91:6b:a7:38:f2:63:17:
b7:c4:04:63:11:a9:44:e4:6a:a0:7d:1f:17:6e:b2:bb:16:e7:
60:fd:48:42:2c:8e:1c:2a:ec:b9:99:c9:6b:c2:b1:bf:9a:8d:
b0:25:b5:cf:f4:f2:6a:a5:77:9d:e3:65:66:1a:0b:fb:b4:89:
90:5f:4f:cb:32:d4:f9:4c:48:ab:ee:02:eb:88:45:26:3e:b7:
6c:04:43:dc:30:44:4b:3c:70:58:a4:0d:db:bb:5d:77:3b:26:
84:7d:c8:00:3e:0a:00:67:8d:57:3b:11:c8:e5:11:4e:fc:1d:
a4:d5:cc:01:e9:68:5b:a4:7f:54:fe:14:25:f5:c7:f3:2d:ed:
16:f3:9a:6a:fa:1f:28:08:61:b7:35:0f:f1:ff:b5:a0:49:bf:
62:76:85:20:1d:02:e6:8a:1d:dd:c1:62:38:f3:f8:c1:c0:8f:
e5:b9:c4:9d:d8:7b:ee:fa:45:62:9e:95:cc:e5:54:55:c3:d9:
47:8e:8d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:42:17 2026 by rpki-client