
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD.mft
File: 1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD.mft (raw, json)
Hash identifier: gAAxBsxwB+WakTTX3cnpjtlIFIgtPHTn7Gub1XX42mY=
Subject key identifier: 1A:03:08:3B:17:3A:27:CE:A6:76:56:25:8F:F5:90:DC:3F:BD:BC:BA
Authority key identifier: 1D:AC:DC:41:C2:8C:E5:C3:8F:42:51:C6:14:DE:10:0A:3F:1E:FC:AD
Certificate issuer: /CN=1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD
Certificate serial: 5B6A1B4B73DE2A4386611CF8E8D32C8CBE5929CA
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD.mft
Manifest number: 2B
Signing time: Tue 02 Jun 2026 22:43:22 +0000
Manifest this update: Tue 02 Jun 2026 22:38:21 +0000
Manifest next update: Thu 04 Jun 2026 01:58:21 +0000
Files and hashes: 1: 3131392e3131302e37322e302f32322d3234203d3e203338333230.roa (hash: CuN94QnhhFu2NHfTipRrUMIPrCdOqqGtN3MEo0A8ZXk=)
2: 3230332e3137332e39302e302f32332d3234203d3e20313339343630.roa (hash: AyON9uU/2WhJhJicI2tnaqaN5CXoHp/HaUSy7Pc2unw=)
3: 3230332e3137332e38382e302f32342d3234203d3e20313339343630.roa (hash: Rpm98TP8lpn5L0MciL+HgBtsQPS4AoEpZ3E+uKifZME=)
4: 3230332e3137332e39312e302f32342d3234203d3e20313339343630.roa (hash: NOo+o1xJtEt1kXlDwTIpF0OuzTUZnud5A2M0CHSRBk0=)
5: 1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD.crl (hash: ZRSQh7FUs1CbS5N35o8JjIiPlaLwrC9rznptfyLjzBQ=)
6: 3137352e3130332e33342e302f32342d3234203d3e203338333230.roa (hash: 2n5/F9J9TnrohLmnHa9IVjRQNfO2Fv9UX/IHQLPC0cc=)
7: 3130332e32392e3136342e302f32322d3234203d3e203338333230.roa (hash: NsGf/NKjXysT0NZWo8Ns+ZYja/LdeVhLVXCJP5P2m74=)
8: 3132322e3134342e342e302f32322d3234203d3e203338333230.roa (hash: kPTHx+hWG+LDuE6CeeYUrKB6mmUM7VHlb/As0JV8R5Y=)
9: 323430343a333930303a313a3a2f34382d3438203d3e203338333230.roa (hash: 5B5+pc329D1iQV3SlgDy544BDthefmzEqIq6UspEPv0=)
10: 3137352e3130332e35332e302f32342d3234203d3e203338333230.roa (hash: pGgVnEQzqbPIt26vgoTmZkdvlEMdwjiT5NsiAgvS52I=)
11: 3132322e3134342e302e302f32322d3234203d3e203338333230.roa (hash: 5ASXDenOep5Tt7YJZHbFIGXZ+8+G0rFlHOjdxQjS0ok=)
12: 34332e3234372e31322e302f32322d3234203d3e203338333230.roa (hash: SBWhEba9nbctUyFhfmHmCGJfJLFuvZIwVJb4MxQzTUY=)
13: 3137352e3130332e33332e302f32342d3234203d3e203338333230.roa (hash: fH8oSgU7fmQVwzRayIdktJrCM/nMbyH0Ngj6vCl4r/k=)
14: 3230332e3137332e38392e302f32342d3234203d3e203338333230.roa (hash: W4OxxH0PyquWwT3oVoi6TfL9I1tMai3D4cWcBmXRIg8=)
15: 3137352e3130332e35372e302f32342d3234203d3e203338333230.roa (hash: zQ39zo17bNTdHhQWmkLn9luFrVhzUw3k/+vmz2gMem8=)
16: 3131392e3131302e36382e302f32322d3234203d3e203338333230.roa (hash: WvBKlshkFphXVWmpSdt/+evxZdbmBKGdDC7K6rMtEn8=)
17: 323430343a333930303a6139323a3a2f34382d3438203d3e203338333230.roa (hash: 8rfx5hsa0X1hhhAYAV+GnW9jNKRrSym9Qaq/7mxW1Sk=)
18: 323430343a333930303a313939323a3a2f34382d3438203d3e203338333230.roa (hash: YLpNL78dS+hrdN7t5xzPdvLY1lNxrdFsxq9VzIbxRC4=)
19: 3137352e3130332e34352e302f32342d3234203d3e203338333230.roa (hash: 6jdofG9Wtkc0Blm7BytpJS1luG4FVORdWSiFv1pRnGo=)
20: 3131392e3131302e36342e302f32322d3234203d3e203338333230.roa (hash: ZERu879JSfInetFD6X8u09OHoVJYMOwx32bifQ58o0I=)
21: 3137352e3130332e33322e302f32342d3234203d3e203338333230.roa (hash: 6UH8eYTOp0aY/zXHw+l1TECmEHZ7Z5b3t8oyY92k670=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD.crl
rsync://rpki-rsync.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 04 Jun 2026 01:58:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:6a:1b:4b:73:de:2a:43:86:61:1c:f8:e8:d3:2c:8c:be:59:29:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD
Validity
Not Before: Jun 2 22:38:21 2026 GMT
Not After : Jun 4 01:58:21 2026 GMT
Subject: CN=1A03083B173A27CEA67656258FF590DC3FBDBCBA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4c:a7:a7:28:27:cd:a4:48:54:f2:63:67:e7:
e8:85:b9:1d:6e:f9:41:92:f0:f6:00:fa:eb:cc:e2:
d9:f9:a2:87:be:72:73:98:24:84:bf:b8:29:c6:95:
36:73:d1:45:be:96:ff:c7:50:07:a5:ef:7a:c7:d3:
82:cf:7b:7e:15:82:71:c9:e8:77:53:e1:10:3e:d5:
74:d7:28:75:2b:e7:42:aa:c7:3b:82:54:20:3f:14:
3f:90:69:c0:26:4c:b7:9a:8e:97:33:ec:35:96:d4:
52:38:b0:7c:e1:13:bc:8d:40:fb:f3:05:7b:f6:2d:
41:1f:b9:ef:f0:fd:a4:35:87:5e:f2:56:72:c8:fd:
29:69:fd:dd:fa:ab:d0:7a:df:c5:79:44:37:bc:b2:
8b:75:f1:cc:46:7f:fc:f0:8f:ca:50:69:77:b3:de:
b6:01:1a:2f:b9:94:83:31:d7:4f:ce:19:6d:72:a6:
ea:10:10:40:28:85:d6:5e:61:0d:22:a0:64:7d:bd:
92:1d:c8:7a:01:76:b9:ea:7d:e8:7e:78:c6:32:59:
c4:8e:a3:b0:a4:1d:10:3f:05:e8:42:de:24:36:1f:
6f:b8:75:50:20:da:05:7a:73:76:7f:85:e6:0c:34:
87:b4:67:61:3b:ed:47:6d:a9:55:c4:f3:04:4b:ed:
1a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:03:08:3B:17:3A:27:CE:A6:76:56:25:8F:F5:90:DC:3F:BD:BC:BA
X509v3 Authority Key Identifier:
keyid:1D:AC:DC:41:C2:8C:E5:C3:8F:42:51:C6:14:DE:10:0A:3F:1E:FC:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:b5:0a:ed:43:59:f6:b3:b6:6c:c4:92:f2:c5:f3:14:93:ac:
33:eb:d8:91:50:c0:a5:a0:bc:96:28:a8:06:d7:5b:6a:8b:0d:
4d:b9:0d:2b:cb:a3:3c:89:6c:d7:e6:af:6a:2d:11:88:a9:15:
97:c2:a4:09:5a:d7:41:19:bf:d6:a6:77:a4:57:44:51:62:90:
07:02:ec:21:da:cc:94:ba:48:56:84:7d:ff:76:8d:b3:61:00:
0c:b7:05:1f:6c:a1:74:e3:14:3f:5a:63:e2:26:f8:9b:f1:3d:
25:61:5d:0b:66:76:17:78:04:70:c3:f3:6f:c3:b7:e3:03:d5:
70:d6:cd:4f:22:4e:29:81:33:31:10:83:1b:1e:94:f5:33:9f:
0a:3d:be:ed:cb:b3:8b:04:27:ae:b4:0b:b4:c9:23:29:6d:78:
76:46:ff:e7:8c:18:b4:96:ac:7b:de:47:e4:f9:bd:ff:56:b9:
7e:57:6a:26:28:0d:67:be:37:aa:0a:f1:a4:d9:e0:15:f8:97:
6a:11:44:68:b3:55:19:ff:83:fd:f4:3e:3e:65:05:5d:30:a8:
75:b2:d8:89:74:c8:df:8b:19:30:ae:b8:54:ea:7b:97:b2:22:
e5:17:94:e6:a9:f2:f8:b4:0a:c6:cc:ae:6d:2c:d3:19:86:ff:
99:61:6d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:22:36 2026 by rpki-client