
$ rpki-client -vvf rpki-rsync.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.mft
File: C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.mft (raw, json)
Hash identifier: DeMSVMknE/9MJqtiPmwrFRxEirgVVSpK84VeteGQfYk=
Subject key identifier: FB:9A:D5:27:B0:C7:3E:F9:5D:88:F4:78:F7:B5:71:A3:0F:12:43:94
Authority key identifier: C1:A4:AB:40:72:6D:4C:ED:D6:63:D1:C3:4E:BB:E8:17:FA:44:C4:2C
Certificate issuer: /CN=C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C
Certificate serial: 1EF8E74F544C4AACF026685D3280C5FEDA4A763B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.mft
Manifest number: 2A
Signing time: Tue 02 Jun 2026 15:28:45 +0000
Manifest this update: Tue 02 Jun 2026 15:23:45 +0000
Manifest next update: Wed 03 Jun 2026 16:51:45 +0000
Files and hashes: 1: 3130332e3134372e3234372e302f32342d3234203d3e20313339393732.roa (hash: 9v+/PAaAE3kB2jpL2nLAR6QUmzPRV+VwUIaowltdzjk=)
2: 323430353a633434303a313a3a2f34382d3438203d3e20313339393732.roa (hash: +gpInYVfvDiUSg/ougsXZafgspK8aDfkWjNloNqtcJo=)
3: 323430353a633434303a3a2f34382d3438203d3e20313339393732.roa (hash: GmyelAbGRQ5SP8uRB6uS1B5fEbf73mIPEGvTxHlDalw=)
4: 323430353a633434303a333a3a2f34382d3438203d3e20313339393732.roa (hash: lue+qbDlTK8oVnigyB8upc57ElW1RteDV+iRS2CqRWY=)
5: 323430353a633434303a363a3a2f34382d3438203d3e20313339393732.roa (hash: 7F3WHLtEBntcrb4Ca+IwDZrHiakbSxJ9WK4RTWEn7q0=)
6: 323430353a633434303a323a3a2f34382d3438203d3e20313339393732.roa (hash: 6/n96Pug9V/OAfQQphzWdcVB4O+JA7BIOnJOjVVmWls=)
7: 323430353a633434303a393937323a3a2f34382d3438203d3e20313339393732.roa (hash: 7Wb8fPONNSHduul65dwelIc5/5kXZaXJePQ0HGB2Z20=)
8: 3130332e3134372e3234362e302f32342d3234203d3e20313339393732.roa (hash: V0mbiV9kDw2cL8Vw5/to3TzMKA3DdBl/9Mpx2BO1J+s=)
9: 323430353a633434303a383a3a2f34382d3438203d3e20313339393732.roa (hash: XchOovNPvuofEcM3x4SJA/BJsOE2uDXK+i/n28/FDPQ=)
10: 323430353a633434303a343a3a2f34382d3438203d3e20313339393732.roa (hash: eSA0GQYXA6tg4+rkB8mxLDGNoUJioqVLKpYyhC0BS7U=)
11: 3130332e3134372e3234362e302f32332d3233203d3e20313339393732.roa (hash: 4yca+vF1UEkWkMfF4Bm7NWEBGak9nR/PsFLSUJTZc44=)
12: 323430353a633434303a653a3a2f34382d3438203d3e20313339393732.roa (hash: y68zFHghkSdjU7J3SSHx7a8FsoE9RE4A/YK0EM7QaeE=)
13: 323430353a633434303a313339393a3a2f34382d3438203d3e20313339393732.roa (hash: 7M/FpUDv0etwwu7ylJGJwAxNu3aekwI0m/HD51uF5Dg=)
14: 323430353a633434303a393a3a2f34382d3438203d3e20313339393732.roa (hash: F4qXlNeW0qMmxaj0GytT6W5hjXADsYd42e+bOrj63To=)
15: C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.crl (hash: De/APAnywgPljZBIQ931NZXGFLnJsZp2zJZ7dD2Jrr0=)
16: 323430353a633434303a3a2f33322d3332203d3e20313339393732.roa (hash: cPKV+RkV9s2A7YW1XiIN+pJgqnPcjdsqF0sGTYEVCuI=)
17: 323430353a633434303a373a3a2f34382d3438203d3e20313339393732.roa (hash: MRewP/mtcTmJvmAEti0jSDsyTirqW1oh+hUXZAYwK5M=)
18: 323430353a633434303a353a3a2f34382d3438203d3e20313339393732.roa (hash: zxv50OB8eGnHw7wW65EFpQvLtNsIgME3y6GGTkZ9Hew=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.crl
rsync://rpki-rsync.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 10:27:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:f8:e7:4f:54:4c:4a:ac:f0:26:68:5d:32:80:c5:fe:da:4a:76:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C
Validity
Not Before: Jun 2 15:23:45 2026 GMT
Not After : Jun 3 16:51:45 2026 GMT
Subject: CN=FB9AD527B0C73EF95D88F478F7B571A30F124394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:85:21:20:ef:54:f1:2c:38:d1:b1:94:37:84:
6d:ee:2c:48:cc:9c:e4:f2:0b:79:8a:5e:0f:c8:4d:
d2:c3:d4:93:b5:ea:26:43:0e:6f:5e:7e:8b:b6:c9:
2d:00:c2:21:89:c9:04:40:8f:63:73:2a:96:3e:2d:
ac:24:54:33:6b:f3:19:2f:a1:3e:3e:e7:a0:ac:0d:
d6:fc:a1:84:35:b1:21:5b:ff:48:c3:09:1b:e8:e0:
bd:34:c6:87:83:24:06:d0:1c:51:96:0e:db:85:b0:
d8:f3:63:21:ed:9a:4a:99:b6:87:05:7d:4b:fe:64:
cc:c5:43:63:f8:19:0b:05:90:13:94:5b:23:07:02:
42:e9:2c:46:c0:19:43:3e:de:05:a3:02:b2:f3:de:
25:ca:11:f1:63:ff:1d:e8:5b:d4:b7:84:d1:fb:e3:
4a:ee:6b:57:a0:9d:c9:06:d5:8c:7b:fa:bd:68:e0:
a7:98:48:1a:5a:e7:d3:dc:a7:a5:bf:1e:4f:56:03:
c8:da:18:b1:91:be:91:6a:ef:7b:49:1c:a0:51:1f:
c0:3c:c7:66:44:ff:29:86:31:b3:a7:26:1d:2b:44:
3c:81:f7:21:d5:2e:be:58:f7:42:be:ae:d1:4d:1a:
01:07:94:8f:12:eb:80:45:04:28:cf:52:8a:f8:c7:
00:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:9A:D5:27:B0:C7:3E:F9:5D:88:F4:78:F7:B5:71:A3:0F:12:43:94
X509v3 Authority Key Identifier:
keyid:C1:A4:AB:40:72:6D:4C:ED:D6:63:D1:C3:4E:BB:E8:17:FA:44:C4:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:f8:68:a5:1c:21:3d:b9:26:7b:50:70:d3:c4:5d:18:42:f9:
3c:4d:b9:69:5d:17:8f:ac:4d:50:9f:f1:3e:11:35:28:08:69:
10:df:70:cd:c5:2e:a0:e4:00:a5:b7:f5:9c:75:8d:14:dc:3a:
ab:f5:76:03:31:9b:d0:cc:93:4a:89:88:bb:3b:a8:b4:df:f2:
97:44:de:24:56:1a:26:93:a8:08:30:38:69:e2:cf:19:10:40:
81:b6:b9:5f:dc:51:ec:2d:34:9a:66:f6:c8:88:51:5a:a9:3e:
bd:a8:32:b2:8d:3d:f4:62:29:f0:db:0f:46:93:b9:02:16:22:
ed:b3:a1:25:18:f6:d8:7b:cd:34:a3:57:cc:5d:89:7d:ca:07:
5f:9e:6c:a8:9c:6d:86:3e:74:d1:f5:80:11:ac:ea:14:4c:c0:
69:82:73:f4:a7:8a:48:5f:54:c0:b1:65:7a:6a:2e:3c:ac:6a:
ca:ca:85:9d:ac:41:c3:cf:d8:fa:7b:75:29:60:43:ed:3b:fb:
d2:d9:c0:dc:3f:53:6c:71:18:c3:b5:ba:58:f6:ee:77:a1:20:
13:68:91:42:4b:cf:63:b6:30:a1:0c:25:31:50:36:7f:86:40:
5d:7f:9c:f3:78:39:df:65:f8:45:1f:5b:aa:73:94:e9:a2:b0:
f4:4e:04:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:39:01 2026 by rpki-client