
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f92254c3-2661-461f-9324-07070470cc6d/0/1F2A25266F0FF3AB5E1077BA20AC3B13ABA6A89C.mft
File: 1F2A25266F0FF3AB5E1077BA20AC3B13ABA6A89C.mft (raw, json)
Hash identifier: cnjfCjS5PnfHrD42qOluMDPILw9fEE40RCNTmBKBLPA=
Subject key identifier: 87:2A:A5:E1:AD:C4:A5:43:E8:AF:2C:70:5B:C6:19:95:7A:A5:D9:99
Authority key identifier: 1F:2A:25:26:6F:0F:F3:AB:5E:10:77:BA:20:AC:3B:13:AB:A6:A8:9C
Certificate issuer: /CN=1F2A25266F0FF3AB5E1077BA20AC3B13ABA6A89C
Certificate serial: 515DC2605295849D23CB5C0844E2470F58758FF0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1F2A25266F0FF3AB5E1077BA20AC3B13ABA6A89C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f92254c3-2661-461f-9324-07070470cc6d/0/1F2A25266F0FF3AB5E1077BA20AC3B13ABA6A89C.mft
Manifest number: C1
Signing time: Wed 23 Sep 2026 07:30:29 +0000
Manifest this update: Wed 23 Sep 2026 07:25:29 +0000
Manifest next update: Thu 24 Sep 2026 07:48:29 +0000
Files and hashes: 1: 3136302e31392e3136352e302f32342d3234203d3e20313532373739.roa (hash: tpH2JM9YTbmOossLdQW6SZYFmNHRQYnoyuwrrx1s/G4=)
2: 1F2A25266F0FF3AB5E1077BA20AC3B13ABA6A89C.crl (hash: z648i8N7ejxzk/WVZ7qPDcGG0H/oggHPeRjQ7tNdLWs=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f92254c3-2661-461f-9324-07070470cc6d/0/1F2A25266F0FF3AB5E1077BA20AC3B13ABA6A89C.crl
rsync://rpki-rsync.idnic.net/repo/f92254c3-2661-461f-9324-07070470cc6d/0/1F2A25266F0FF3AB5E1077BA20AC3B13ABA6A89C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1F2A25266F0FF3AB5E1077BA20AC3B13ABA6A89C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 07:48:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:5d:c2:60:52:95:84:9d:23:cb:5c:08:44:e2:47:0f:58:75:8f:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1F2A25266F0FF3AB5E1077BA20AC3B13ABA6A89C
Validity
Not Before: Sep 23 07:25:29 2026 GMT
Not After : Sep 24 07:48:29 2026 GMT
Subject: CN=872AA5E1ADC4A543E8AF2C705BC619957AA5D999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ed:32:fc:d7:a2:92:2e:76:b3:69:47:15:32:
56:11:96:a7:37:92:a8:a2:67:5e:01:1e:57:f0:9c:
d0:c6:e3:b0:3a:b6:1f:c8:52:04:26:1a:ca:dc:5d:
de:59:d2:83:20:8e:9a:6b:01:e9:1a:c8:24:be:a3:
f8:ae:6a:46:ec:f5:45:fe:e1:4e:b8:b4:04:bd:8b:
d3:01:ad:cb:67:6d:7a:26:c1:c6:2d:61:3d:14:56:
65:fa:72:de:92:cc:33:82:4a:31:e3:b5:40:d9:9d:
79:d5:7b:b3:0f:90:5d:83:97:dd:75:a6:75:bf:07:
58:59:ef:d6:8f:72:fb:79:23:70:37:79:2a:1d:99:
6f:a0:00:ef:9e:a5:25:50:49:87:90:67:d8:6e:c2:
d5:fa:37:05:58:1e:61:b4:36:3d:c4:50:e2:ac:54:
1a:9f:e5:bd:79:41:5c:46:45:85:c0:55:6f:2f:8b:
f1:91:09:e2:69:57:77:88:77:50:3d:bc:ef:a8:fa:
a9:83:2f:6c:e9:06:ec:40:38:69:87:7e:49:b3:5f:
1b:0d:47:89:9b:5c:a6:8a:48:45:c8:c2:a7:e6:62:
9a:86:33:15:75:8c:ed:bf:d8:a7:0d:b7:94:21:cd:
0e:e5:f0:00:e8:1d:82:40:78:72:22:f3:fb:9a:e0:
34:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:2A:A5:E1:AD:C4:A5:43:E8:AF:2C:70:5B:C6:19:95:7A:A5:D9:99
X509v3 Authority Key Identifier:
keyid:1F:2A:25:26:6F:0F:F3:AB:5E:10:77:BA:20:AC:3B:13:AB:A6:A8:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f92254c3-2661-461f-9324-07070470cc6d/0/1F2A25266F0FF3AB5E1077BA20AC3B13ABA6A89C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1F2A25266F0FF3AB5E1077BA20AC3B13ABA6A89C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f92254c3-2661-461f-9324-07070470cc6d/0/1F2A25266F0FF3AB5E1077BA20AC3B13ABA6A89C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:5a:4f:a2:99:dd:ed:da:20:7f:c9:f0:a6:e6:96:68:17:e9:
38:7d:94:f4:dd:78:44:06:60:e4:b7:ba:81:5d:ef:db:eb:a4:
6b:e4:53:d6:19:da:d5:f8:c5:58:86:c7:24:07:96:63:e7:9b:
47:0f:34:70:18:74:54:ec:ee:11:f6:ef:5c:fd:10:2a:89:bf:
17:40:aa:a2:45:5b:56:e3:bd:76:b4:fa:e6:dc:a0:20:0e:22:
f1:f0:6d:79:18:54:ef:6c:a6:dd:29:f7:7a:c5:92:0c:98:94:
76:3f:08:81:00:15:93:f4:64:1c:e6:24:9b:6b:05:81:4a:ff:
73:11:1e:24:68:42:1e:23:d1:b4:08:78:89:6e:a8:de:27:69:
e4:9b:7a:a5:e6:48:48:b4:23:ab:d8:c5:fb:f8:f1:a1:e3:74:
6c:03:48:53:b9:b8:9b:20:7c:a3:0e:47:19:2c:f9:41:b4:8e:
5f:98:03:29:3c:55:55:c2:97:70:1b:58:31:9e:d0:2a:b9:29:
1f:5b:49:81:28:94:f8:d9:ba:1c:56:ec:ae:bd:7d:21:98:29:
78:99:cf:39:0d:dd:a0:10:f5:cd:24:9f:d1:69:fa:89:71:ab:
8e:5c:6f:ed:05:71:d0:18:49:b3:c4:1d:15:4c:36:65:d6:1f:
3c:bf:e4:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:15:23 2026 by rpki-client