
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/1FD138814ED6ED10A74AEDE620ECC6CB414D8D49.mft
File: 1FD138814ED6ED10A74AEDE620ECC6CB414D8D49.mft (raw, json)
Hash identifier: /wTKLd+9fBCtp/qg2qDlCYdD0Q6yzjB3HmdcLrRuePM=
Subject key identifier: A2:A1:A4:FB:53:79:D6:E0:97:23:2E:E6:27:7F:BB:6E:D9:15:FC:13
Authority key identifier: 1F:D1:38:81:4E:D6:ED:10:A7:4A:ED:E6:20:EC:C6:CB:41:4D:8D:49
Certificate issuer: /CN=1FD138814ED6ED10A74AEDE620ECC6CB414D8D49
Certificate serial: 6A1A09FEB4AA08D6F2433BE5979660B7C19E78FB
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1FD138814ED6ED10A74AEDE620ECC6CB414D8D49.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/1FD138814ED6ED10A74AEDE620ECC6CB414D8D49.mft
Manifest number: 0E
Signing time: Tue 12 May 2026 08:19:50 +0000
Manifest this update: Tue 12 May 2026 08:14:50 +0000
Manifest next update: Wed 13 May 2026 10:29:50 +0000
Files and hashes: 1: AS46024.roa (hash: ylmYw4/KnmlumROmFOx5Ugd+ZvIq9v4dyoc2wy3GxMY=)
2: AS140421.roa (hash: NubwM9MWXF/shtYPHNCf93qRquIZw5eXxpOBi0ubSeY=)
3: AS38496.roa (hash: yYz1sIG6N2Kn9PvkhdiFovkBZr7zFMKsgWeqKN8ae+8=)
4: AS24520.roa (hash: RlHOKG3iuobVB1DAMGAm+asFdd1ASONRpQ1lrWJUUMA=)
5: AS38768.roa (hash: cYG0UjFfYvF8rnbWyEC/rqKPjOD6XMnko8jMH8VBKzc=)
6: AS137346.roa (hash: NZ6wUFk5XR7PD9+fJ1hvHsTgRiRIMRLn5KDTlukuqTs=)
7: AS38755.roa (hash: rrRHicGoTqQQ5KVonJVs0FP/MR7/6NaqqXA8D/2TInc=)
8: AS135457.roa (hash: X1w4nzNuA26rXRd5yVYdj4Puf4QzWuOiYkpDYswCdZY=)
9: AS138885.roa (hash: MXHah2Crj721VSI4LYqxgOTDqWKKFzAoSwM3O6/hIWs=)
10: 1FD138814ED6ED10A74AEDE620ECC6CB414D8D49.crl (hash: 4O5GIL+zdN/FvoV2Ysfu3N10VIeHEzhIsslMb0ZjAC4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/1FD138814ED6ED10A74AEDE620ECC6CB414D8D49.crl
rsync://rpki-rsync.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/1FD138814ED6ED10A74AEDE620ECC6CB414D8D49.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1FD138814ED6ED10A74AEDE620ECC6CB414D8D49.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:1a:09:fe:b4:aa:08:d6:f2:43:3b:e5:97:96:60:b7:c1:9e:78:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1FD138814ED6ED10A74AEDE620ECC6CB414D8D49
Validity
Not Before: May 12 08:14:50 2026 GMT
Not After : May 13 10:29:50 2026 GMT
Subject: CN=A2A1A4FB5379D6E097232EE6277FBB6ED915FC13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:59:2d:18:f6:86:fc:a7:98:93:1b:f6:d2:6f:
ea:88:95:b8:e8:08:dd:3e:11:2a:c2:2c:8d:94:10:
57:ae:93:63:b0:02:2e:d3:be:75:d2:e5:26:fd:87:
78:49:ff:35:63:bb:41:54:f9:15:10:85:db:bc:72:
21:eb:ed:09:79:97:e1:90:78:23:f6:9a:04:09:02:
99:63:0c:fa:3f:27:3e:46:d3:cf:58:fa:ff:fc:49:
14:b4:f8:3f:36:80:db:e7:e8:25:c1:fd:e7:09:c5:
9f:78:cb:36:11:64:9a:14:fc:79:ce:89:9e:17:f5:
1f:d3:30:29:5e:20:19:1f:22:cf:bd:37:2e:dc:26:
91:5e:17:77:38:5e:5d:8c:8a:a5:94:4a:8a:20:66:
ef:3d:56:a8:a0:19:48:97:93:4f:7a:69:e1:18:c5:
f0:2e:72:64:33:a8:b8:b8:da:23:08:aa:87:dc:d0:
b2:cc:eb:5c:3c:ad:e8:42:d9:92:11:c2:f7:79:47:
d1:2d:58:d0:48:5a:c1:1f:d2:c8:d3:05:0b:b8:a9:
b0:2c:7c:f5:a4:7f:bb:d7:81:ef:03:52:38:0d:3f:
f6:7e:51:58:49:49:05:d2:7c:4e:a8:df:2b:98:aa:
86:70:db:b5:c7:9e:3a:30:b2:db:c4:17:58:60:8a:
35:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:A1:A4:FB:53:79:D6:E0:97:23:2E:E6:27:7F:BB:6E:D9:15:FC:13
X509v3 Authority Key Identifier:
keyid:1F:D1:38:81:4E:D6:ED:10:A7:4A:ED:E6:20:EC:C6:CB:41:4D:8D:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/1FD138814ED6ED10A74AEDE620ECC6CB414D8D49.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1FD138814ED6ED10A74AEDE620ECC6CB414D8D49.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/1FD138814ED6ED10A74AEDE620ECC6CB414D8D49.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:f5:2a:98:0d:5a:fc:cd:84:03:12:c5:c2:cb:51:f3:25:6b:
08:06:e5:03:cb:9a:32:09:6d:61:de:b0:d0:7a:88:42:02:83:
80:f0:26:a4:2c:fe:8d:2e:08:06:99:97:e8:88:19:10:1c:d9:
f8:dc:ea:f5:94:9d:b6:57:da:b4:fa:49:be:47:61:13:0b:57:
bc:8f:1a:b8:54:4d:49:92:e9:ca:b4:a5:60:c8:b2:04:13:16:
fb:ac:a2:84:4e:05:57:dc:1b:45:7b:22:10:c5:65:70:f5:61:
3d:0e:15:c8:83:aa:49:05:60:b6:b8:a5:35:8a:0a:c5:55:be:
2a:2a:78:a7:03:6b:28:43:84:a1:45:c0:c5:14:78:2e:ce:71:
73:5b:c2:51:ec:01:d7:0e:f0:7d:28:33:3a:44:fd:8f:c2:57:
cf:6c:38:a8:d3:20:78:27:22:0a:8b:03:05:47:ba:b6:cc:ab:
bf:51:12:45:13:93:fa:dd:88:2d:0a:41:61:95:92:48:05:4c:
c8:60:f6:41:0b:44:5a:a6:27:9e:bf:db:d2:69:cd:34:87:2e:
61:56:b0:14:53:aa:c1:67:d1:6d:cf:50:e7:24:67:15:56:05:
ed:66:84:6e:24:52:e1:55:61:ba:e6:17:4d:0a:5b:d7:f5:a0:
de:1b:97:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:52:26 2026 by rpki-client