
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/1AD9403233542883A89282A52F92A9AC66CB9D45.mft
File: 1AD9403233542883A89282A52F92A9AC66CB9D45.mft (raw, json)
Hash identifier: E3D4X9EaeUo3+yk9A6LuUYtcr3eo0yZS3lhSAk+vk0I=
Subject key identifier: 51:7E:C0:FD:F6:44:98:B9:A3:37:16:08:E8:A0:E8:DD:2C:46:DA:94
Authority key identifier: 1A:D9:40:32:33:54:28:83:A8:92:82:A5:2F:92:A9:AC:66:CB:9D:45
Certificate issuer: /CN=1AD9403233542883A89282A52F92A9AC66CB9D45
Certificate serial: 4E397996CA6E9E9C084226CCD726A8AB671ECF91
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1AD9403233542883A89282A52F92A9AC66CB9D45.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/1AD9403233542883A89282A52F92A9AC66CB9D45.mft
Manifest number: C0
Signing time: Wed 23 Sep 2026 14:08:38 +0000
Manifest this update: Wed 23 Sep 2026 14:03:38 +0000
Manifest next update: Thu 24 Sep 2026 14:45:38 +0000
Files and hashes: 1: 1AD9403233542883A89282A52F92A9AC66CB9D45.crl (hash: 0fBEAkYjhgmJZmNXj3qi8jy5zoGrtUfD12XgAgIxqh8=)
2: 3130332e3134312e3135342e302f32342d3234203d3e20313336383335.roa (hash: PAkY9cD4hOLFVdGNgMNY2HQi6aJ2ztIpajYc1pjG9X8=)
3: 3130332e3130302e32372e302f32342d3234203d3e20313336383335.roa (hash: mJSGu8A/4Dy8uEYCBOpVGIvPxs11huUPRlbNbg4vJUA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/1AD9403233542883A89282A52F92A9AC66CB9D45.crl
rsync://rpki-rsync.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/1AD9403233542883A89282A52F92A9AC66CB9D45.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1AD9403233542883A89282A52F92A9AC66CB9D45.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 14:45:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:39:79:96:ca:6e:9e:9c:08:42:26:cc:d7:26:a8:ab:67:1e:cf:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1AD9403233542883A89282A52F92A9AC66CB9D45
Validity
Not Before: Sep 23 14:03:38 2026 GMT
Not After : Sep 24 14:45:38 2026 GMT
Subject: CN=517EC0FDF64498B9A3371608E8A0E8DD2C46DA94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:32:2b:14:8b:f4:65:8c:1f:ed:1f:c7:37:5c:
10:f8:5a:4a:04:c4:e0:ce:56:b9:81:25:0c:73:8c:
ae:33:78:bf:23:88:6a:f6:fa:02:18:5e:06:85:45:
d3:6e:48:c2:3b:30:a4:59:01:0d:cf:88:69:d8:f0:
22:da:12:f6:b6:15:df:c1:0f:b4:e2:58:c4:b0:f5:
c4:91:96:94:0d:6f:29:88:c7:c8:9e:a8:4b:56:c1:
78:f9:09:43:28:d6:6a:c9:60:5d:86:f9:0f:2f:de:
1d:2d:a4:0a:e2:13:70:37:b7:76:bb:28:1d:12:c7:
37:56:df:f8:9e:58:d8:8e:fd:69:0d:60:eb:3b:75:
4b:c8:b8:49:66:8b:c6:7b:0d:e7:6f:3b:1c:4d:c3:
62:31:42:16:8c:56:f7:25:68:de:41:ae:1b:dd:32:
f2:c2:99:81:02:55:67:e8:4d:4c:ed:65:1b:3a:b6:
d2:ab:7d:a6:8a:43:36:a2:c3:11:83:a7:ef:d4:87:
62:0c:32:0e:a2:59:a2:af:c3:32:05:5f:1e:b4:a1:
ec:b9:e6:84:40:c7:03:09:91:b7:2d:27:dc:00:54:
32:a8:64:96:cb:64:1b:fa:44:a9:3b:49:84:ad:cf:
df:c3:70:bf:3b:7d:e4:9b:6e:f6:69:3b:73:96:f6:
d4:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:7E:C0:FD:F6:44:98:B9:A3:37:16:08:E8:A0:E8:DD:2C:46:DA:94
X509v3 Authority Key Identifier:
keyid:1A:D9:40:32:33:54:28:83:A8:92:82:A5:2F:92:A9:AC:66:CB:9D:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/1AD9403233542883A89282A52F92A9AC66CB9D45.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1AD9403233542883A89282A52F92A9AC66CB9D45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/1AD9403233542883A89282A52F92A9AC66CB9D45.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:b1:d7:48:40:76:28:f8:f1:db:56:4f:bc:82:19:a7:fa:17:
9f:75:70:60:b7:d5:b6:40:9f:a5:a3:0b:be:df:45:bc:c7:6a:
fb:6f:75:35:85:ff:93:09:bd:50:2e:bc:99:84:b4:33:18:e1:
21:0f:65:bd:0b:d3:dc:88:ad:5d:d0:4c:6b:d8:94:85:c9:9c:
1f:5e:12:c9:11:0c:de:83:a6:3c:e4:5a:8b:82:2e:18:d5:58:
94:2e:0a:3c:3d:7f:72:82:f8:ea:c2:8e:8c:4a:a4:a8:5d:af:
37:d7:c1:b2:55:c5:49:1a:35:34:66:c9:7a:05:17:44:79:54:
84:91:31:80:de:a3:73:d7:41:b9:3c:2a:b5:ed:c8:20:ff:7d:
ba:53:ab:ec:8c:fd:20:f8:83:33:3f:0d:72:c9:1e:13:4a:db:
f6:39:c4:c8:ef:d8:d2:0f:ab:50:ce:c8:5c:80:86:ff:4f:1d:
35:d9:cc:09:ce:4d:0d:bf:02:8c:40:67:a1:f0:d4:a1:a2:62:
af:49:44:a1:52:c7:08:20:94:5f:f3:69:e7:97:6d:40:3e:8e:
32:bf:14:9d:32:ac:78:64:37:b9:c3:3b:ba:59:7d:86:65:5a:
10:64:39:fe:3e:60:ab:ca:ed:e5:8e:60:9d:0d:92:b9:d5:e1:
90:a0:8d:cb
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUTjl5lspunpwIQibM1yaoq2cez5EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUFEOTQwMzIzMzU0Mjg4M0E4OTI4MkE1MkY5MkE5QUM2
NkNCOUQ0NTAeFw0yNjA5MjMxNDAzMzhaFw0yNjA5MjQxNDQ1MzhaMDMxMTAvBgNV
BAMTKDUxN0VDMEZERjY0NDk4QjlBMzM3MTYwOEU4QTBFOEREMkM0NkRBOTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaMisUi/RljB/tH8c3XBD4WkoE
xODOVrmBJQxzjK4zeL8jiGr2+gIYXgaFRdNuSMI7MKRZAQ3PiGnY8CLaEva2Fd/B
D7TiWMSw9cSRlpQNbymIx8ieqEtWwXj5CUMo1mrJYF2G+Q8v3h0tpAriE3A3t3a7
KB0SxzdW3/ieWNiO/WkNYOs7dUvIuElmi8Z7DedvOxxNw2IxQhaMVvclaN5Brhvd
MvLCmYECVWfoTUztZRs6ttKrfaaKQzaiwxGDp+/Uh2IMMg6iWaKvwzIFXx60oey5
5oRAxwMJkbctJ9wAVDKoZJbLZBv6RKk7SYStz9/DcL87feSbbvZpO3OW9tRxAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUUX7A/fZEmLmjNxYI6KDo3SxG2pQwHwYDVR0j
BBgwFoAUGtlAMjNUKIOokoKlL5KprGbLnUUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZWE4MTQ1MDctNzE3NC00ZjFlLTg1NjMtZWY1MDM3MDkxM2M5LzAvMUFEOTQwMzIz
MzU0Mjg4M0E4OTI4MkE1MkY5MkE5QUM2NkNCOUQ0NS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8xQUQ5NDAzMjMzNTQyODgzQTg5MjgyQTUyRjkyQTlBQzY2Q0I5
RDQ1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWE4MTQ1MDctNzE3NC00ZjFlLTg1
NjMtZWY1MDM3MDkxM2M5LzAvMUFEOTQwMzIzMzU0Mjg4M0E4OTI4MkE1MkY5MkE5
QUM2NkNCOUQ0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHGx10hAdij48dtWT7yCGaf6F591cGC31bZA
n6WjC77fRbzHavtvdTWF/5MJvVAuvJmEtDMY4SEPZb0L09yIrV3QTGvYlIXJnB9e
EskRDN6DpjzkWouCLhjVWJQuCjw9f3KC+OrCjoxKpKhdrzfXwbJVxUkaNTRmyXoF
F0R5VISRMYDeo3PXQbk8KrXtyCD/fbpTq+yM/SD4gzM/DXLJHhNK2/Y5xMjv2NIP
q1DOyFyAhv9PHTXZzAnOTQ2/AoxAZ6Hw1KGiYq9JRKFSxwgglF/zaeeXbUA+jjK/
FJ0yrHhkN7nDO7pZfYZlWhBkOf4+YKvK7eWOYJ0NkrnV4ZCgjcs=
-----END CERTIFICATE-----
Generated at Thu Sep 24 05:32:05 2026 by rpki-client