
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/C1DC782A98D3C6271702256CCCBDAC64F6EEAB8B.mft
File: C1DC782A98D3C6271702256CCCBDAC64F6EEAB8B.mft (raw, json)
Hash identifier: tp3Bs2Jgdt4z6pPPmzvH72/2bk4NHkIkQiI/YBBnRyg=
Subject key identifier: 50:B9:B7:2B:AD:27:2D:23:CA:71:2C:10:28:AA:0E:6C:FB:D0:EF:52
Authority key identifier: C1:DC:78:2A:98:D3:C6:27:17:02:25:6C:CC:BD:AC:64:F6:EE:AB:8B
Certificate issuer: /CN=C1DC782A98D3C6271702256CCCBDAC64F6EEAB8B
Certificate serial: 0891B5FAECECFD67842EFFC8491C36DB5815EC52
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1DC782A98D3C6271702256CCCBDAC64F6EEAB8B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/C1DC782A98D3C6271702256CCCBDAC64F6EEAB8B.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 15:30:05 +0000
Manifest this update: Tue 12 May 2026 15:25:05 +0000
Manifest next update: Wed 13 May 2026 17:42:05 +0000
Files and hashes: 1: 3130332e3230372e39362e302f32322d3234203d3e20313334363433.roa (hash: wsXzxXCk1I7Qrxi94/hj3J6ZauZ6tEjgsgeblQtUnRE=)
2: 3130332e3230372e39362e302f32322d3234203d3e20313430343730.roa (hash: Xv3thArRVC/1LFshdjbWa2Y+Md6/zXlchWEGOIatNuo=)
3: 323430343a326338303a3a2f33322d3438203d3e20313334363433.roa (hash: xWKM6w+YSqs8CfkUMCmv6mPauJooeyQJc7wELxHZfDg=)
4: C1DC782A98D3C6271702256CCCBDAC64F6EEAB8B.crl (hash: +CgmllX23h145KPZQZsu1z9KVYjE1YU06M4QTBhEExk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/C1DC782A98D3C6271702256CCCBDAC64F6EEAB8B.crl
rsync://rpki-rsync.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/C1DC782A98D3C6271702256CCCBDAC64F6EEAB8B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1DC782A98D3C6271702256CCCBDAC64F6EEAB8B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:91:b5:fa:ec:ec:fd:67:84:2e:ff:c8:49:1c:36:db:58:15:ec:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C1DC782A98D3C6271702256CCCBDAC64F6EEAB8B
Validity
Not Before: May 12 15:25:05 2026 GMT
Not After : May 13 17:42:05 2026 GMT
Subject: CN=50B9B72BAD272D23CA712C1028AA0E6CFBD0EF52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e3:34:ac:64:89:c1:69:db:b9:2d:f5:db:22:
49:e8:bb:df:2b:ad:89:16:a4:da:e7:a2:04:b2:a9:
c0:bf:89:21:93:dd:fb:c5:b8:1f:11:26:40:ce:bd:
0e:44:10:a8:34:98:99:6f:62:cf:6b:40:2b:4f:22:
04:78:3d:5e:08:4f:55:29:0f:48:e4:91:ea:42:d2:
07:3e:e2:ca:20:40:b9:e5:14:f8:f2:b8:d6:8b:e6:
f3:47:c8:22:3a:45:b9:0f:f5:9f:32:66:f6:b6:c4:
8c:d7:72:57:43:5d:9b:51:7c:ab:97:91:e6:d0:74:
8d:1c:cf:37:48:2a:5c:d6:77:43:5b:84:87:1b:40:
18:b2:7e:3d:45:53:7b:1e:fa:cd:5d:4e:33:1f:16:
d6:f5:b6:55:70:ae:91:83:a2:d6:fc:3f:13:88:90:
20:02:1e:44:44:85:df:07:21:97:ee:43:37:0d:28:
91:54:78:92:10:ca:63:d9:c6:1b:26:fe:8a:e1:c2:
f9:01:03:48:7b:98:7a:4d:34:3a:95:55:7f:03:d5:
06:5e:39:75:16:4f:55:98:61:35:da:91:52:d9:0f:
81:a5:ca:ac:28:63:d3:f5:c2:21:28:1b:b4:7e:86:
41:c2:af:8f:0c:ea:a8:b8:3c:38:8b:6b:50:88:be:
79:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:B9:B7:2B:AD:27:2D:23:CA:71:2C:10:28:AA:0E:6C:FB:D0:EF:52
X509v3 Authority Key Identifier:
keyid:C1:DC:78:2A:98:D3:C6:27:17:02:25:6C:CC:BD:AC:64:F6:EE:AB:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/C1DC782A98D3C6271702256CCCBDAC64F6EEAB8B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1DC782A98D3C6271702256CCCBDAC64F6EEAB8B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/C1DC782A98D3C6271702256CCCBDAC64F6EEAB8B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:d5:93:b5:84:81:d2:5b:98:16:ed:6d:6b:76:92:23:0f:0b:
d2:23:5a:b9:0a:9d:78:0c:25:1c:ac:1b:e0:ee:f3:8d:f1:f3:
40:e2:c9:ab:04:02:a1:b8:33:61:56:a4:fa:54:5c:07:33:80:
d2:02:8b:56:94:3b:34:88:53:8f:d8:14:4b:d8:45:25:21:c1:
2b:f4:36:47:14:a0:b5:25:3c:e1:21:ba:fb:32:a6:61:cf:13:
16:f5:a8:19:69:cd:42:29:62:d7:e9:8b:6b:b5:9e:3e:6a:10:
8a:c2:f4:5f:c7:2c:e0:3a:b4:a7:f7:4a:5d:78:60:4c:29:e8:
e1:40:b3:a6:9b:9d:12:0e:c7:fd:1d:54:48:d9:24:08:9a:c3:
1d:f8:8b:83:98:21:00:a4:9c:67:c8:8d:5f:6f:50:3c:0a:53:
16:d3:8c:a0:1b:f5:38:94:5f:37:60:de:0d:00:8e:35:67:f5:
c7:65:25:34:6c:81:cc:aa:bd:bf:c6:a5:24:a5:f5:7c:b1:84:
c7:2b:5b:d5:a5:b3:d1:0e:70:ec:57:0f:54:2f:bb:c0:dd:67:
27:75:51:1e:3c:4e:9e:0e:26:25:af:b0:17:2c:68:88:b1:b7:
e6:fe:b4:fd:d3:16:39:e7:92:a8:ab:b7:24:9b:b1:c5:0e:21:
ec:7c:31:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:13:58 2026 by rpki-client