
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/1FF488AB707220858C10BA99E5944DE409195015.mft
File: 1FF488AB707220858C10BA99E5944DE409195015.mft (raw, json)
Hash identifier: y8kRuSq+dQdvowF+NRP/bOg9EbzxjfdYsTYbfAI66hg=
Subject key identifier: 2B:98:40:72:37:25:1D:EB:35:3E:1F:D8:71:D9:90:CE:F2:E1:98:24
Authority key identifier: 1F:F4:88:AB:70:72:20:85:8C:10:BA:99:E5:94:4D:E4:09:19:50:15
Certificate issuer: /CN=1FF488AB707220858C10BA99E5944DE409195015
Certificate serial: 696F2E34823490FBB9B21108EA59BEEA63FCDA16
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1FF488AB707220858C10BA99E5944DE409195015.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/1FF488AB707220858C10BA99E5944DE409195015.mft
Manifest number: C5
Signing time: Sat 26 Sep 2026 09:26:32 +0000
Manifest this update: Sat 26 Sep 2026 09:21:32 +0000
Manifest next update: Sun 27 Sep 2026 11:49:32 +0000
Files and hashes: 1: 3130332e3138392e3131342e302f32342d3234203d3e20313439373533.roa (hash: 6EwDqg7LpLZJUkIylUyUl3veH/xN6XvmcMqV9SdWGwQ=)
2: 1FF488AB707220858C10BA99E5944DE409195015.crl (hash: lVpqy4RV8zrXw90h1vELFx36l4BedVkj/jF7o2+EpUs=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/1FF488AB707220858C10BA99E5944DE409195015.crl
rsync://rpki-rsync.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/1FF488AB707220858C10BA99E5944DE409195015.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1FF488AB707220858C10BA99E5944DE409195015.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 11:49:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:6f:2e:34:82:34:90:fb:b9:b2:11:08:ea:59:be:ea:63:fc:da:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1FF488AB707220858C10BA99E5944DE409195015
Validity
Not Before: Sep 26 09:21:32 2026 GMT
Not After : Sep 27 11:49:32 2026 GMT
Subject: CN=2B98407237251DEB353E1FD871D990CEF2E19824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:1e:7a:14:6a:02:29:c8:0d:47:48:ce:d1:6c:
b3:51:32:1b:48:a8:09:4f:e7:8e:4b:8b:b8:94:1c:
d2:99:fe:93:11:dc:e9:c5:06:b7:ea:79:74:fe:89:
11:55:92:34:26:8b:1f:87:e5:74:60:e0:ec:ff:7b:
49:e6:ed:6d:68:a8:78:2e:5a:75:1c:f6:dd:f6:31:
61:cd:07:16:8e:81:9b:45:50:f9:ca:c9:11:14:9d:
60:1c:e8:d8:b7:51:09:48:6b:19:68:e7:02:ff:95:
60:fd:6c:1d:2a:ac:db:56:50:bf:66:62:f7:18:2b:
aa:e8:bd:93:4e:f1:4b:ce:02:5a:44:0a:f5:7a:ea:
50:6d:78:a8:cc:fe:72:be:d9:c2:5c:4a:67:22:4d:
e5:39:2c:31:aa:7c:28:0c:e3:18:f3:2e:e7:79:80:
fe:02:79:fa:8c:d8:c5:5b:2c:0d:21:26:49:a9:66:
db:cc:f8:60:31:a9:92:70:28:a3:81:de:c4:d5:7d:
ba:a1:aa:fb:e8:2a:7c:86:84:7a:40:90:67:97:fb:
4e:56:92:6a:14:32:48:75:fe:f3:84:6a:51:56:59:
ac:af:2b:2e:00:ef:23:92:25:09:71:11:b3:66:cb:
a1:04:d0:28:d8:31:db:d8:03:d5:64:cc:25:07:3d:
72:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:98:40:72:37:25:1D:EB:35:3E:1F:D8:71:D9:90:CE:F2:E1:98:24
X509v3 Authority Key Identifier:
keyid:1F:F4:88:AB:70:72:20:85:8C:10:BA:99:E5:94:4D:E4:09:19:50:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/1FF488AB707220858C10BA99E5944DE409195015.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1FF488AB707220858C10BA99E5944DE409195015.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/1FF488AB707220858C10BA99E5944DE409195015.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:f4:7f:89:d1:7a:20:7a:bc:76:a1:24:a6:5d:99:d8:2e:ab:
86:9c:23:ae:2c:a1:74:87:65:99:60:15:af:b0:2b:ba:0e:58:
68:d3:86:00:54:7b:53:31:c9:23:93:3d:80:30:11:55:9b:67:
c1:45:ff:ca:de:0f:14:16:30:77:31:0f:08:9e:58:0c:71:ee:
95:f9:8f:00:2c:7c:93:7e:a3:b2:5f:7f:cc:6a:0d:dc:af:47:
a3:96:f6:2c:40:6c:28:a9:6f:88:ac:6c:fd:a8:81:b1:02:0e:
66:b4:79:3a:bb:71:98:09:24:1e:de:da:41:4b:8b:63:a1:d3:
98:c8:2e:37:36:d7:3c:42:f3:cf:48:df:85:23:89:90:67:5f:
5e:aa:57:b1:8c:45:02:12:85:2a:c7:ec:2b:5c:92:9d:83:3b:
8c:93:fc:43:26:58:0c:5c:ba:df:20:76:73:21:7d:84:1c:b6:
8a:03:c0:b1:a9:37:c7:e1:e6:85:8f:12:be:a1:24:e2:9c:82:
5d:31:46:aa:6e:b0:20:02:92:97:c2:8e:ef:98:7e:af:58:e2:
be:25:8f:ff:34:51:cc:3a:66:ee:f7:a3:af:e8:1d:b2:5b:89:
44:b8:cd:d0:28:8a:89:3e:34:65:0b:58:bb:c7:4e:51:73:52:
a4:cf:e9:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 19:03:35 2026 by rpki-client