
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f92254c3-2661-461f-9324-07070470cc6d/0/1F2A25266F0FF3AB5E1077BA20AC3B13ABA6A89C.mft
File: 1F2A25266F0FF3AB5E1077BA20AC3B13ABA6A89C.mft (raw, json)
Hash identifier: WhQYOtkCIVn5OnY9U/OcwIVgzAUoHezjNfBACIOyZSM=
Subject key identifier: 26:FF:2F:D6:0A:6B:5D:8C:91:54:6E:F0:B4:A6:B4:16:64:4B:AF:FA
Authority key identifier: 1F:2A:25:26:6F:0F:F3:AB:5E:10:77:BA:20:AC:3B:13:AB:A6:A8:9C
Certificate issuer: /CN=1F2A25266F0FF3AB5E1077BA20AC3B13ABA6A89C
Certificate serial: 650B93AA28ADA24F9C7749A0E26DA78B6A36DB09
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1F2A25266F0FF3AB5E1077BA20AC3B13ABA6A89C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f92254c3-2661-461f-9324-07070470cc6d/0/1F2A25266F0FF3AB5E1077BA20AC3B13ABA6A89C.mft
Manifest number: 0107
Signing time: Sat 14 Nov 2026 21:21:10 +0000
Manifest this update: Sat 14 Nov 2026 21:16:10 +0000
Manifest next update: Sun 15 Nov 2026 21:34:10 +0000
Files and hashes: 1: 3136302e31392e3136352e302f32342d3234203d3e20313532373739.roa (hash: tpH2JM9YTbmOossLdQW6SZYFmNHRQYnoyuwrrx1s/G4=)
2: 1F2A25266F0FF3AB5E1077BA20AC3B13ABA6A89C.crl (hash: NRi49OxJVyxwX/rzdbgVSBO6U6jXeLmRPWnIU+wRCFA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f92254c3-2661-461f-9324-07070470cc6d/0/1F2A25266F0FF3AB5E1077BA20AC3B13ABA6A89C.crl
rsync://rpki-rsync.idnic.net/repo/f92254c3-2661-461f-9324-07070470cc6d/0/1F2A25266F0FF3AB5E1077BA20AC3B13ABA6A89C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1F2A25266F0FF3AB5E1077BA20AC3B13ABA6A89C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 15 Nov 2026 21:34:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:0b:93:aa:28:ad:a2:4f:9c:77:49:a0:e2:6d:a7:8b:6a:36:db:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1F2A25266F0FF3AB5E1077BA20AC3B13ABA6A89C
Validity
Not Before: Nov 14 21:16:10 2026 GMT
Not After : Nov 15 21:34:10 2026 GMT
Subject: CN=26FF2FD60A6B5D8C91546EF0B4A6B416644BAFFA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:cd:b4:ff:da:7e:c6:49:5b:0d:01:94:03:e6:
08:6e:ac:76:d9:35:b8:0f:77:10:72:ba:32:cb:8d:
a3:46:c4:e8:90:6d:8a:bf:77:7f:5d:fe:a2:37:3d:
68:bb:b6:3f:44:4a:9e:4e:15:62:e0:0c:68:fd:bb:
10:b5:be:19:94:4b:e0:2a:39:c6:a0:9c:d9:1c:1c:
a0:31:84:a5:42:46:11:85:d2:0c:b5:91:a5:51:7d:
2d:81:a4:0d:8a:d7:f6:e0:9f:bb:fb:51:b6:33:6c:
70:ac:79:a8:49:a2:4f:4f:9c:75:56:1b:ac:81:7f:
94:0a:5b:a2:7f:b4:56:04:c7:cf:6c:35:de:e8:0d:
71:95:ee:59:92:56:96:ff:05:55:55:b7:d3:d1:76:
8a:1d:63:0e:f1:6b:3c:e4:c3:9d:4a:12:ca:3f:3c:
44:75:21:b4:20:47:f0:ef:5d:fc:08:eb:6d:93:4b:
fa:65:20:77:74:c2:08:31:b5:8d:71:a9:b4:dc:bc:
41:73:ce:c5:9a:36:33:03:8e:7b:ca:00:c0:0e:d3:
1f:97:f9:d4:73:a7:7a:81:7e:08:10:0b:66:ff:d9:
79:7a:01:ac:21:f3:79:83:e5:c4:07:06:81:0f:2b:
f7:42:df:b6:bc:22:de:b4:76:a9:12:26:07:f4:75:
07:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:FF:2F:D6:0A:6B:5D:8C:91:54:6E:F0:B4:A6:B4:16:64:4B:AF:FA
X509v3 Authority Key Identifier:
keyid:1F:2A:25:26:6F:0F:F3:AB:5E:10:77:BA:20:AC:3B:13:AB:A6:A8:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f92254c3-2661-461f-9324-07070470cc6d/0/1F2A25266F0FF3AB5E1077BA20AC3B13ABA6A89C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1F2A25266F0FF3AB5E1077BA20AC3B13ABA6A89C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f92254c3-2661-461f-9324-07070470cc6d/0/1F2A25266F0FF3AB5E1077BA20AC3B13ABA6A89C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:48:d2:f3:2f:93:ff:fe:20:95:10:2a:ec:97:bd:ab:5f:5b:
1a:62:d5:2b:b0:5f:22:96:4a:cb:61:57:6f:4d:0b:da:e5:18:
a3:e6:cb:03:67:3a:f7:44:e9:23:c6:87:04:54:0b:86:94:87:
33:02:bd:2f:85:78:d8:d7:e9:f3:b3:60:a7:c2:60:c5:2d:f1:
25:7c:6f:53:ba:86:f3:09:d2:c8:e2:4e:f6:76:ed:ef:1b:6f:
a5:6c:57:e3:95:c4:9c:73:47:9b:0d:fd:89:90:8b:36:4a:fc:
5c:92:2e:30:72:b3:4d:b7:71:2f:66:59:c3:f4:01:ec:90:aa:
5c:9e:78:d7:e4:15:ca:57:41:d6:cf:86:4d:7c:d2:21:9a:5d:
ab:30:e8:43:ba:4e:bd:3e:8c:ff:74:0a:15:e5:43:97:95:5f:
bd:27:b6:c2:a0:94:34:c3:62:12:78:c9:3d:3a:9c:0b:51:88:
ce:73:da:55:01:e9:e8:54:8f:ef:40:d0:04:1d:18:59:b1:dc:
c7:6e:d6:9b:29:5a:59:da:a3:1a:8c:43:89:b7:8c:35:a6:60:
02:64:42:33:33:07:e6:26:66:64:db:4e:de:74:0d:8e:fb:6a:
e9:94:a4:3d:b1:dd:b8:ae:8f:ad:4e:9c:f3:75:c1:23:1d:a1:
6a:7f:9d:2e
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUZQuTqiitok+cd0mg4m2ni2o22wkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUYyQTI1MjY2RjBGRjNBQjVFMTA3N0JBMjBBQzNCMTNB
QkE2QTg5QzAeFw0yNjExMTQyMTE2MTBaFw0yNjExMTUyMTM0MTBaMDMxMTAvBgNV
BAMTKDI2RkYyRkQ2MEE2QjVEOEM5MTU0NkVGMEI0QTZCNDE2NjQ0QkFGRkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDizbT/2n7GSVsNAZQD5ghurHbZ
NbgPdxByujLLjaNGxOiQbYq/d39d/qI3PWi7tj9ESp5OFWLgDGj9uxC1vhmUS+Aq
OcagnNkcHKAxhKVCRhGF0gy1kaVRfS2BpA2K1/bgn7v7UbYzbHCseahJok9PnHVW
G6yBf5QKW6J/tFYEx89sNd7oDXGV7lmSVpb/BVVVt9PRdoodYw7xazzkw51KEso/
PER1IbQgR/DvXfwI622TS/plIHd0wggxtY1xqbTcvEFzzsWaNjMDjnvKAMAO0x+X
+dRzp3qBfggQC2b/2Xl6Aawh83mD5cQHBoEPK/dC37a8It60dqkSJgf0dQczAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUJv8v1gprXYyRVG7wtKa0FmRLr/owHwYDVR0j
BBgwFoAUHyolJm8P86teEHe6IKw7E6umqJwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZjkyMjU0YzMtMjY2MS00NjFmLTkzMjQtMDcwNzA0NzBjYzZkLzAvMUYyQTI1MjY2
RjBGRjNBQjVFMTA3N0JBMjBBQzNCMTNBQkE2QTg5Qy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC8xRjJBMjUyNjZGMEZGM0FCNUUxMDc3QkEyMEFDM0IxM0FCQTZB
ODlDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjkyMjU0YzMtMjY2MS00NjFmLTkz
MjQtMDcwNzA0NzBjYzZkLzAvMUYyQTI1MjY2RjBGRjNBQjVFMTA3N0JBMjBBQzNC
MTNBQkE2QTg5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABBI0vMvk//+IJUQKuyXvatfWxpi1SuwXyKW
SsthV29NC9rlGKPmywNnOvdE6SPGhwRUC4aUhzMCvS+FeNjX6fOzYKfCYMUt8SV8
b1O6hvMJ0sjiTvZ27e8bb6VsV+OVxJxzR5sN/YmQizZK/FySLjBys023cS9mWcP0
AeyQqlyeeNfkFcpXQdbPhk180iGaXasw6EO6Tr0+jP90ChXlQ5eVX70ntsKglDTD
YhJ4yT06nAtRiM5z2lUB6ehUj+9A0AQdGFmx3Mdu1pspWlnaoxqMQ4m3jDWmYAJk
QjMzB+YmZmTbTt50DY77aumUpD2x3biuj61OnPN1wSMdoWp/nS4=
-----END CERTIFICATE-----
Generated at Sun Nov 15 11:17:51 2026 by rpki-client