
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/C1DC782A98D3C6271702256CCCBDAC64F6EEAB8B.mft
File: C1DC782A98D3C6271702256CCCBDAC64F6EEAB8B.mft (raw, json)
Hash identifier: 2CQ3a9uhRbtFVijQIbWfUjOBnlHRZaUpWn+sXXHdLuQ=
Subject key identifier: C2:99:3E:F7:4D:AF:5F:76:41:17:B1:C2:17:C8:A7:5D:CD:63:74:BA
Authority key identifier: C1:DC:78:2A:98:D3:C6:27:17:02:25:6C:CC:BD:AC:64:F6:EE:AB:8B
Certificate issuer: /CN=C1DC782A98D3C6271702256CCCBDAC64F6EEAB8B
Certificate serial: 3BE590C9450910397715253F4AE022554616B390
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1DC782A98D3C6271702256CCCBDAC64F6EEAB8B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/C1DC782A98D3C6271702256CCCBDAC64F6EEAB8B.mft
Manifest number: 6F
Signing time: Fri 24 Jul 2026 02:47:42 +0000
Manifest this update: Fri 24 Jul 2026 02:42:42 +0000
Manifest next update: Sat 25 Jul 2026 03:49:42 +0000
Files and hashes: 1: 3130332e3230372e39362e302f32322d3234203d3e20313334363433.roa (hash: wsXzxXCk1I7Qrxi94/hj3J6ZauZ6tEjgsgeblQtUnRE=)
2: 3130332e3230372e39362e302f32322d3234203d3e20313430343730.roa (hash: Xv3thArRVC/1LFshdjbWa2Y+Md6/zXlchWEGOIatNuo=)
3: 323430343a326338303a3a2f33322d3438203d3e20313334363433.roa (hash: xWKM6w+YSqs8CfkUMCmv6mPauJooeyQJc7wELxHZfDg=)
4: C1DC782A98D3C6271702256CCCBDAC64F6EEAB8B.crl (hash: bZu9vSHnKy7JUAd0Xm5runJyLBgX/AOm2eRW13o0SJ8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/C1DC782A98D3C6271702256CCCBDAC64F6EEAB8B.crl
rsync://rpki-rsync.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/C1DC782A98D3C6271702256CCCBDAC64F6EEAB8B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1DC782A98D3C6271702256CCCBDAC64F6EEAB8B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 03:49:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:e5:90:c9:45:09:10:39:77:15:25:3f:4a:e0:22:55:46:16:b3:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C1DC782A98D3C6271702256CCCBDAC64F6EEAB8B
Validity
Not Before: Jul 24 02:42:42 2026 GMT
Not After : Jul 25 03:49:42 2026 GMT
Subject: CN=C2993EF74DAF5F764117B1C217C8A75DCD6374BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8b:a4:68:3f:bd:5c:55:3d:7c:f5:9f:c2:bf:
69:a2:9c:a9:8b:01:c1:1f:e1:ba:fb:92:24:ff:6d:
d0:05:78:16:fe:de:31:ad:90:f9:c2:ec:7f:54:7e:
2a:ce:72:38:60:33:e1:99:36:43:93:5a:97:6e:fa:
59:a4:17:10:65:78:30:04:6a:a3:15:18:9f:4b:a9:
ce:da:d4:a7:f2:91:42:ad:b6:52:40:2d:d7:3f:37:
d7:ac:8f:c3:bb:2e:c3:33:d5:7c:6f:30:c3:e6:47:
0a:0a:8b:ed:0d:d7:c1:98:af:b5:a7:10:15:62:70:
eb:3b:df:ef:d7:69:af:c2:f9:9b:a9:88:a3:3d:0f:
8f:14:c6:84:a9:a5:a2:19:c6:a9:cf:3f:ef:c0:1f:
44:f3:e8:4a:a6:b9:ae:ea:4d:5f:c2:04:06:49:e5:
b4:a2:be:5a:8e:ae:80:99:d4:29:4a:99:f5:a1:19:
9e:0c:93:85:56:77:53:f3:55:a9:f0:84:8c:10:6d:
3b:09:e0:0d:8f:9f:eb:fd:a1:11:d1:0f:f8:e1:eb:
4c:d3:db:8d:47:e7:a4:b7:c6:94:0f:47:47:98:e3:
09:0a:f8:49:95:8b:56:cf:82:51:9e:4e:97:e0:9f:
36:c9:be:6b:b8:e2:34:79:a0:1d:bc:fd:71:d5:77:
35:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:99:3E:F7:4D:AF:5F:76:41:17:B1:C2:17:C8:A7:5D:CD:63:74:BA
X509v3 Authority Key Identifier:
keyid:C1:DC:78:2A:98:D3:C6:27:17:02:25:6C:CC:BD:AC:64:F6:EE:AB:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/C1DC782A98D3C6271702256CCCBDAC64F6EEAB8B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1DC782A98D3C6271702256CCCBDAC64F6EEAB8B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/C1DC782A98D3C6271702256CCCBDAC64F6EEAB8B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:0a:bc:11:a4:28:c2:bf:85:02:99:40:42:11:68:78:0b:70:
47:09:e4:2d:87:8e:e5:1c:d8:54:53:7b:03:5c:af:ba:ee:99:
d3:b0:2d:14:4a:5b:2d:b1:bb:b6:4f:97:39:55:66:6d:cd:b2:
fe:30:26:27:3d:28:80:7b:57:62:ff:7f:61:55:6c:ed:45:03:
9b:a5:b8:22:b6:29:6a:27:29:0d:43:64:59:27:f0:dd:48:09:
88:f9:c2:1c:70:19:84:79:57:b1:23:8c:4a:a0:7b:6a:a3:28:
45:39:d0:53:50:e5:c5:07:fc:cc:37:ae:68:cb:73:f4:47:fb:
7d:16:ea:8f:4f:2a:2e:c0:a9:48:93:1f:e9:66:a1:bf:f4:96:
55:93:ff:99:79:61:69:1b:33:b4:a5:07:3f:c1:09:d5:e4:2f:
32:a2:aa:71:a9:ef:08:e2:61:86:be:16:4e:2c:a3:6d:64:87:
0a:47:c7:ff:bf:79:e7:dd:ec:30:2d:96:aa:05:db:be:13:3d:
3d:83:0d:aa:fe:ee:5b:2d:f4:44:93:a1:d7:a7:bf:5f:1e:db:
2f:b9:18:23:dc:25:03:75:03:3b:3f:87:89:17:1f:e7:3c:b2:
67:1a:93:49:96:dc:96:d9:49:91:7e:41:54:54:0f:41:79:ea:
c8:b1:ee:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:22:36 2026 by rpki-client