
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/C1DC782A98D3C6271702256CCCBDAC64F6EEAB8B.mft
File: C1DC782A98D3C6271702256CCCBDAC64F6EEAB8B.mft (raw, json)
Hash identifier: s1r+VNig1Ykn5zmNlBkeSJDs/ltTCOs+axpnBtMVAyI=
Subject key identifier: 44:42:A8:DE:5A:E3:45:4F:A9:F1:21:69:12:12:08:1C:78:5F:1C:33
Authority key identifier: C1:DC:78:2A:98:D3:C6:27:17:02:25:6C:CC:BD:AC:64:F6:EE:AB:8B
Certificate issuer: /CN=C1DC782A98D3C6271702256CCCBDAC64F6EEAB8B
Certificate serial: 6D0DCD37737618F3497CC2EF415073C93F978298
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1DC782A98D3C6271702256CCCBDAC64F6EEAB8B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/C1DC782A98D3C6271702256CCCBDAC64F6EEAB8B.mft
Manifest number: C1
Signing time: Wed 23 Sep 2026 16:06:00 +0000
Manifest this update: Wed 23 Sep 2026 16:01:00 +0000
Manifest next update: Thu 24 Sep 2026 19:37:00 +0000
Files and hashes: 1: 3130332e3230372e39362e302f32322d3234203d3e20313430343730.roa (hash: Xv3thArRVC/1LFshdjbWa2Y+Md6/zXlchWEGOIatNuo=)
2: 323430343a326338303a3a2f33322d3438203d3e20313334363433.roa (hash: xWKM6w+YSqs8CfkUMCmv6mPauJooeyQJc7wELxHZfDg=)
3: C1DC782A98D3C6271702256CCCBDAC64F6EEAB8B.crl (hash: //Vwc3GrjLa0cjmlzcSlipRJJxVV5GtIbEuwKBt2/bM=)
4: 3130332e3230372e39362e302f32322d3234203d3e20313334363433.roa (hash: wsXzxXCk1I7Qrxi94/hj3J6ZauZ6tEjgsgeblQtUnRE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/C1DC782A98D3C6271702256CCCBDAC64F6EEAB8B.crl
rsync://rpki-rsync.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/C1DC782A98D3C6271702256CCCBDAC64F6EEAB8B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1DC782A98D3C6271702256CCCBDAC64F6EEAB8B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 19:37:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:0d:cd:37:73:76:18:f3:49:7c:c2:ef:41:50:73:c9:3f:97:82:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C1DC782A98D3C6271702256CCCBDAC64F6EEAB8B
Validity
Not Before: Sep 23 16:01:00 2026 GMT
Not After : Sep 24 19:37:00 2026 GMT
Subject: CN=4442A8DE5AE3454FA9F121691212081C785F1C33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:99:7b:ad:5e:46:e7:fa:0f:f3:ef:18:08:15:
33:ad:ac:f9:52:b8:39:43:b2:13:eb:4d:3f:06:1b:
6d:b6:72:38:9d:a7:03:ed:aa:33:5c:8c:69:e1:e6:
e6:dc:b3:a4:dc:d4:dd:75:57:ba:4b:a8:b8:18:b0:
74:35:e1:73:d1:9c:f0:11:72:39:f3:e1:d3:99:d6:
bd:32:cf:b4:7d:8d:f4:c5:35:89:1b:d9:b2:e1:6a:
d8:4e:35:5f:a1:34:bd:7c:f1:31:16:fd:58:ee:07:
18:18:80:d5:fd:e6:9e:45:af:9d:a6:18:e9:89:b6:
5b:ec:2a:a1:da:c9:75:b8:9e:84:ce:6f:03:82:4a:
9d:f7:5b:07:05:2c:bd:1f:ab:0d:8d:db:05:09:f2:
be:e3:9a:66:98:75:66:70:47:00:fc:14:15:9c:9d:
07:ee:ac:bc:e8:a7:1b:3b:34:c0:c1:8a:87:e5:14:
f0:2c:2f:de:8b:d6:3c:22:3d:19:7e:79:09:08:eb:
50:de:26:59:54:06:8a:81:03:92:32:ae:fb:24:f8:
20:a3:ba:37:67:dc:b4:3b:65:df:17:a4:fd:b7:91:
8e:8c:be:11:04:f6:7a:a6:26:4d:3a:e9:6a:2a:04:
3f:f5:95:2d:ac:fd:41:08:83:83:08:b0:27:49:b7:
40:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:42:A8:DE:5A:E3:45:4F:A9:F1:21:69:12:12:08:1C:78:5F:1C:33
X509v3 Authority Key Identifier:
keyid:C1:DC:78:2A:98:D3:C6:27:17:02:25:6C:CC:BD:AC:64:F6:EE:AB:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/C1DC782A98D3C6271702256CCCBDAC64F6EEAB8B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1DC782A98D3C6271702256CCCBDAC64F6EEAB8B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/C1DC782A98D3C6271702256CCCBDAC64F6EEAB8B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:74:54:75:d2:ed:5d:a4:75:77:0c:a9:91:d8:a6:33:8c:34:
50:9e:6c:b0:4f:dd:7d:b6:00:f1:2b:89:f5:2d:99:f7:01:34:
95:84:a4:5d:07:1f:23:9b:6d:f1:70:43:64:a4:5a:e3:ff:7d:
4d:e9:19:db:c6:a3:be:b7:04:67:92:9c:0e:93:0c:fd:65:28:
31:2c:80:94:ae:9c:2c:1f:ae:88:dd:12:e8:83:cb:53:b8:9f:
87:dc:7b:bc:98:e0:23:fc:d0:36:90:c2:4c:80:d8:f1:cc:81:
10:e2:52:34:49:ae:75:21:62:1e:fb:73:b2:73:1a:af:b3:55:
5c:13:a7:87:85:40:4d:72:4f:69:f7:0b:f5:02:67:f3:8d:0d:
c7:2d:62:2e:76:21:fb:79:2e:e4:a8:ba:27:6c:e3:74:2f:e1:
db:9f:f8:04:38:f8:cc:e1:f9:1c:7e:b7:f3:a3:d3:fc:33:56:
a1:60:52:63:2f:fe:70:1b:0a:34:81:17:1c:53:63:60:39:39:
e1:27:a3:ef:c6:5e:0d:ad:3f:45:c5:d1:17:b9:16:1c:a8:f0:
fb:a3:2b:a8:f0:f2:ee:f4:55:4b:d8:8d:3c:00:5f:d3:6a:90:
26:b8:2a:0a:ff:f9:f7:ff:50:56:ea:84:94:90:e4:ba:42:d4:
9b:78:9d:d8
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUbQ3NN3N2GPNJfMLvQVBzyT+XgpgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzFEQzc4MkE5OEQzQzYyNzE3MDIyNTZDQ0NCREFDNjRG
NkVFQUI4QjAeFw0yNjA5MjMxNjAxMDBaFw0yNjA5MjQxOTM3MDBaMDMxMTAvBgNV
BAMTKDQ0NDJBOERFNUFFMzQ1NEZBOUYxMjE2OTEyMTIwODFDNzg1RjFDMzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+mXutXkbn+g/z7xgIFTOtrPlS
uDlDshPrTT8GG222cjidpwPtqjNcjGnh5ubcs6Tc1N11V7pLqLgYsHQ14XPRnPAR
cjnz4dOZ1r0yz7R9jfTFNYkb2bLhathONV+hNL188TEW/VjuBxgYgNX95p5Fr52m
GOmJtlvsKqHayXW4noTObwOCSp33WwcFLL0fqw2N2wUJ8r7jmmaYdWZwRwD8FBWc
nQfurLzopxs7NMDBioflFPAsL96L1jwiPRl+eQkI61DeJllUBoqBA5Iyrvsk+CCj
ujdn3LQ7Zd8XpP23kY6MvhEE9nqmJk066WoqBD/1lS2s/UEIg4MIsCdJt0CxAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUREKo3lrjRU+p8SFpEhIIHHhfHDMwHwYDVR0j
BBgwFoAUwdx4KpjTxicXAiVszL2sZPbuq4swDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZjI2ZTQ1NjQtNDhmMi00M2I1LTg1MDUtOTNiNDk4ZTdkOGFiLzAvQzFEQzc4MkE5
OEQzQzYyNzE3MDIyNTZDQ0NCREFDNjRGNkVFQUI4Qi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9DMURDNzgyQTk4RDNDNjI3MTcwMjI1NkNDQ0JEQUM2NEY2RUVB
QjhCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjI2ZTQ1NjQtNDhmMi00M2I1LTg1
MDUtOTNiNDk4ZTdkOGFiLzAvQzFEQzc4MkE5OEQzQzYyNzE3MDIyNTZDQ0NCREFD
NjRGNkVFQUI4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFB0VHXS7V2kdXcMqZHYpjOMNFCebLBP3X22
APErifUtmfcBNJWEpF0HHyObbfFwQ2SkWuP/fU3pGdvGo763BGeSnA6TDP1lKDEs
gJSunCwfrojdEuiDy1O4n4fce7yY4CP80DaQwkyA2PHMgRDiUjRJrnUhYh77c7Jz
Gq+zVVwTp4eFQE1yT2n3C/UCZ/ONDcctYi52Ift5LuSouids43Qv4duf+AQ4+Mzh
+Rx+t/Oj0/wzVqFgUmMv/nAbCjSBFxxTY2A5OeEno+/GXg2tP0XF0Re5Fhyo8Puj
K6jw8u70VUvYjTwAX9NqkCa4Kgr/+ff/UFbqhJSQ5LpC1Jt4ndg=
-----END CERTIFICATE-----
Generated at Thu Sep 24 00:03:24 2026 by rpki-client