
$ rpki-client -vvf rpki-rsync.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/1587930E115B02B61F9967A961669E9C2E5D3155.mft
File: 1587930E115B02B61F9967A961669E9C2E5D3155.mft (raw, json)
Hash identifier: EulUCLEvFRu9/gVKiIjEbqVbWfX2Z4t//vaH96bN5J8=
Subject key identifier: F1:BA:DE:0C:B3:54:11:32:04:D3:5B:B7:B8:F9:32:13:80:40:0F:20
Authority key identifier: 15:87:93:0E:11:5B:02:B6:1F:99:67:A9:61:66:9E:9C:2E:5D:31:55
Certificate issuer: /CN=1587930E115B02B61F9967A961669E9C2E5D3155
Certificate serial: 0DC90AD80E97065479803323BDD1D53674BC14EF
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1587930E115B02B61F9967A961669E9C2E5D3155.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/1587930E115B02B61F9967A961669E9C2E5D3155.mft
Manifest number: 6C
Signing time: Tue 21 Jul 2026 03:19:51 +0000
Manifest this update: Tue 21 Jul 2026 03:14:51 +0000
Manifest next update: Wed 22 Jul 2026 03:37:51 +0000
Files and hashes: 1: 1587930E115B02B61F9967A961669E9C2E5D3155.crl (hash: gzasDUqMH6IAtNaBAaptwb8ko1m4I+p1qz0WfrOa01E=)
2: 3130332e3234352e3132332e302f32342d3234203d3e203436303536.roa (hash: WdT499tVpG8NeV+SEnNVp+8I6jVjAbHrv0KbxNWN8RU=)
3: 3230322e35322e35302e302f32342d3234203d3e203436303536.roa (hash: jclNRlrhqL+AfaCj+qvPSgX0Z4Wtr2IefaNqa2LPL2c=)
4: 3130332e3234352e3132322e302f32342d3234203d3e203436303536.roa (hash: bWoZrHRRCMJiRa1MlW6R+wP7Q96czuFPoxQnXJiuOos=)
5: 323030313a6466303a3434613a3a2f34382d3438203d3e203436303536.roa (hash: UOVDSlhXigw/Uz77MSYpnkR4v33gbqMyBOUU19NWXlU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/1587930E115B02B61F9967A961669E9C2E5D3155.crl
rsync://rpki-rsync.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/1587930E115B02B61F9967A961669E9C2E5D3155.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1587930E115B02B61F9967A961669E9C2E5D3155.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Jul 2026 02:08:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:c9:0a:d8:0e:97:06:54:79:80:33:23:bd:d1:d5:36:74:bc:14:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1587930E115B02B61F9967A961669E9C2E5D3155
Validity
Not Before: Jul 21 03:14:51 2026 GMT
Not After : Jul 22 03:37:51 2026 GMT
Subject: CN=F1BADE0CB354113204D35BB7B8F9321380400F20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7f:e8:f1:1d:fc:89:cc:44:40:a4:1d:5e:de:
76:20:29:e0:d4:35:92:c7:09:27:ee:96:84:0f:ed:
bc:fa:cb:a6:28:1c:fc:31:02:5c:57:19:7e:24:a3:
e8:76:83:e1:ee:18:06:13:aa:8e:d6:30:c4:87:f5:
1e:d0:d4:d2:d6:15:14:2a:94:37:73:20:33:93:69:
8c:a4:9d:bf:1e:3f:fa:d2:0f:61:9a:a9:3d:31:0b:
ca:25:a3:b6:9d:0c:05:b1:ce:0c:01:ca:5f:be:c5:
0b:03:1f:fc:fd:1f:48:d4:10:01:64:56:d1:57:a2:
d6:c8:6b:8a:63:d0:cb:93:e8:30:9c:ff:38:68:7a:
2c:47:92:c5:1b:48:15:c1:49:e7:7a:39:14:4a:92:
8a:f5:64:85:06:47:1e:9d:ce:4d:67:61:f0:e6:0c:
e9:ec:8e:e7:24:39:e6:04:e7:c6:b4:a9:a9:10:e5:
54:97:0a:2e:9a:98:1a:e7:1d:21:76:c5:64:1e:b8:
ed:ff:b5:1e:33:08:9b:ab:10:5f:06:f1:f0:54:12:
5b:6f:29:8a:bc:11:db:3d:cd:26:2c:2c:e6:2d:92:
20:d4:f9:3a:a7:e8:1e:4d:98:45:a4:df:64:58:02:
71:5b:46:48:d6:4b:a5:67:b5:90:92:d1:ff:87:c9:
eb:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:BA:DE:0C:B3:54:11:32:04:D3:5B:B7:B8:F9:32:13:80:40:0F:20
X509v3 Authority Key Identifier:
keyid:15:87:93:0E:11:5B:02:B6:1F:99:67:A9:61:66:9E:9C:2E:5D:31:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/1587930E115B02B61F9967A961669E9C2E5D3155.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1587930E115B02B61F9967A961669E9C2E5D3155.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/1587930E115B02B61F9967A961669E9C2E5D3155.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:da:fb:93:73:b4:ff:ca:15:25:ed:32:55:76:83:28:9d:08:
4d:42:2d:f5:8a:3d:68:f8:b8:b4:89:2c:c9:3a:ff:73:be:5f:
6e:bf:8a:9b:34:70:7e:b1:c3:f2:e0:50:8f:bb:bd:b1:7c:e7:
80:27:a6:9e:af:70:17:23:48:9d:e2:82:26:50:95:f2:5e:1c:
0d:0f:bf:f4:69:28:7d:43:95:ba:44:55:b8:15:1b:07:c3:4b:
31:77:55:30:f7:75:03:ae:6b:85:1e:a9:60:e8:4b:71:55:8b:
17:61:f8:79:fd:05:36:8c:84:01:8c:19:9b:55:81:7b:2f:68:
2c:db:bc:43:19:0c:31:e6:d0:04:91:df:d9:85:07:e0:c9:04:
80:54:36:1e:b1:11:5c:43:5e:ee:a1:30:9c:cb:09:80:97:c5:
51:f6:9e:18:a8:75:24:37:d1:96:9b:43:0f:fd:b1:5d:e9:b9:
28:02:91:48:f2:40:8a:61:5d:b6:d3:3f:59:8d:2a:f9:3d:33:
ce:03:84:07:99:89:93:43:73:44:d4:5c:7a:af:99:63:86:13:
58:6c:32:09:f8:52:e6:f5:b5:65:cc:69:16:f2:bf:7b:b5:66:
98:03:69:65:e4:e5:ab:0b:71:59:0e:48:97:f1:85:cc:0c:f9:
37:43:02:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 07:00:42 2026 by rpki-client