
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.mft
File: 1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.mft (raw, json)
Hash identifier: bgErxMD9sOKHq1vOICN/eaffpX3gRP2R2+NtpVOmyfk=
Subject key identifier: 8E:14:64:2E:CB:2F:34:44:DB:32:8C:2C:9B:04:CF:AF:B1:DD:67:FE
Authority key identifier: 1C:F9:F8:25:FC:E3:1C:27:D1:6E:02:FE:54:44:73:0B:A3:9F:CF:F9
Certificate issuer: /CN=1CF9F825FCE31C27D16E02FE5444730BA39FCFF9
Certificate serial: 7485358DE1555A07247963217B69FB3E956E7048
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.mft
Manifest number: 0E
Signing time: Tue 12 May 2026 12:17:41 +0000
Manifest this update: Tue 12 May 2026 12:12:41 +0000
Manifest next update: Wed 13 May 2026 15:25:41 +0000
Files and hashes: 1: 1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.crl (hash: qxDm8XyZDI6oUAJzC2Hza5jxR5nX/CBHPYtsHW7g7ec=)
2: 3230332e3137352e3130302e302f32332d3234203d3e20313532303132.roa (hash: Yhy0kPLYMQCNyqChEExantmOWkrvJQT2nQi7dTwL98I=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.crl
rsync://rpki-rsync.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:85:35:8d:e1:55:5a:07:24:79:63:21:7b:69:fb:3e:95:6e:70:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1CF9F825FCE31C27D16E02FE5444730BA39FCFF9
Validity
Not Before: May 12 12:12:41 2026 GMT
Not After : May 13 15:25:41 2026 GMT
Subject: CN=8E14642ECB2F3444DB328C2C9B04CFAFB1DD67FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d9:db:8e:12:6d:bf:ea:3c:3b:46:fa:47:bc:
c3:6d:3f:5d:f3:3c:a1:92:9d:b8:36:92:e6:b5:f3:
a9:44:96:66:02:77:e3:28:c9:97:04:0d:2f:8b:b1:
ca:a0:e0:ef:c1:6e:9d:d1:43:c7:c7:4a:b0:76:6b:
58:be:5e:0d:03:d2:79:74:63:a7:50:9a:ed:7c:15:
31:68:9b:90:cf:0a:0d:a7:86:7b:61:ed:b5:53:8a:
ee:6a:eb:31:a4:e0:79:6a:97:72:83:8a:c7:3e:5c:
9e:1a:46:d2:1a:57:89:85:22:73:6a:1e:26:83:35:
97:52:eb:b6:47:4c:6b:c4:bd:62:ef:19:c0:19:84:
10:c0:56:47:c0:26:78:e4:d4:29:b7:ec:55:a1:2a:
50:2c:f1:ca:9a:91:b6:c0:da:f0:86:c8:c2:d3:17:
b5:7b:3c:0a:8a:10:9f:fc:a6:5b:7a:21:94:3f:ec:
78:34:75:cf:99:ef:fb:0c:16:31:7c:b5:e0:91:8e:
17:74:50:a0:f1:26:a5:46:ff:c1:e7:97:0c:d0:61:
00:25:5d:63:ff:f4:9f:98:4b:8c:72:d4:1b:20:4a:
5a:bb:fb:38:2b:ca:ab:8c:15:e2:c2:86:9c:e4:a3:
4d:68:e5:87:95:cc:f6:29:38:12:78:cb:a2:5d:b3:
e9:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:14:64:2E:CB:2F:34:44:DB:32:8C:2C:9B:04:CF:AF:B1:DD:67:FE
X509v3 Authority Key Identifier:
keyid:1C:F9:F8:25:FC:E3:1C:27:D1:6E:02:FE:54:44:73:0B:A3:9F:CF:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:48:74:ac:e0:7b:cc:82:2b:29:b9:2d:5b:7e:e3:ad:9e:e3:
46:5b:73:85:bf:db:4d:0d:59:8e:46:f2:4d:93:81:95:aa:cf:
78:d0:b0:3a:89:4a:51:da:50:06:2d:38:53:df:6f:38:a0:0d:
ca:cf:b3:75:40:77:77:1d:4f:31:78:fb:71:2e:89:41:30:33:
93:41:60:c5:2e:81:09:e8:53:4c:7a:28:84:b9:0b:35:b7:3e:
73:d5:60:39:24:70:93:97:97:e1:30:20:13:95:14:91:64:4b:
8a:ab:22:15:6a:cf:c9:7a:de:e7:39:84:fa:00:82:ff:eb:6e:
06:ff:5b:59:de:c2:b4:d7:d7:ac:3d:de:76:40:a9:62:b5:13:
a5:33:96:db:73:5c:ed:60:2a:76:38:0f:cd:85:7a:85:7f:e0:
17:c6:7b:39:19:58:17:71:2a:bf:fc:66:ab:f3:66:77:53:e3:
55:5d:90:31:e7:76:e2:d2:ce:f8:9e:80:a0:29:77:9d:bf:6d:
7b:68:df:06:26:4d:08:f8:42:e9:92:c8:21:6a:ae:ff:b2:45:
16:6e:d9:e8:f3:ec:a6:4b:83:b5:06:4f:1b:c8:2c:ca:81:78:
c3:5b:5a:75:62:fa:b7:66:db:0a:c7:6a:8a:55:50:73:81:90:
cd:e6:c1:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:37:25 2026 by rpki-client