
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/1CCC9F903B0797259D4851831FDB74E850E28573.mft
File: 1CCC9F903B0797259D4851831FDB74E850E28573.mft (raw, json)
Hash identifier: POWXL2qwevgnNeVowGuOPW5DP0I/XnXTmfUKSkp24Jw=
Subject key identifier: 2B:6C:E2:BF:E9:27:FF:AD:CD:20:5B:D0:1B:E8:C5:08:1C:B3:39:DD
Authority key identifier: 1C:CC:9F:90:3B:07:97:25:9D:48:51:83:1F:DB:74:E8:50:E2:85:73
Certificate issuer: /CN=1CCC9F903B0797259D4851831FDB74E850E28573
Certificate serial: 7BFE63DCDCA1993735FD5A5FB4BA4077DEC21D0B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1CCC9F903B0797259D4851831FDB74E850E28573.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/1CCC9F903B0797259D4851831FDB74E850E28573.mft
Manifest number: E1
Signing time: Sun 18 Oct 2026 13:05:39 +0000
Manifest this update: Sun 18 Oct 2026 13:00:39 +0000
Manifest next update: Mon 19 Oct 2026 13:10:39 +0000
Files and hashes: 1: 3136302e32352e35352e302f32342d3234203d3e20313533303630.roa (hash: 1QSTMTha75VQUavzNrm00rtAo2y/e9vazzdx0pcZJXk=)
2: 3136302e32352e35342e302f32342d3234203d3e20313533303630.roa (hash: zB+Gp09Xv+ze/cWNBFwHk3DIfApc6pdj5NfB2Dg0qyE=)
3: 1CCC9F903B0797259D4851831FDB74E850E28573.crl (hash: orz5DJmCnQ62mZLNyIJQlZrdDPAmH+zBRjIDjFNPo4U=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/1CCC9F903B0797259D4851831FDB74E850E28573.crl
rsync://rpki-rsync.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/1CCC9F903B0797259D4851831FDB74E850E28573.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1CCC9F903B0797259D4851831FDB74E850E28573.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Oct 2026 13:10:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:fe:63:dc:dc:a1:99:37:35:fd:5a:5f:b4:ba:40:77:de:c2:1d:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1CCC9F903B0797259D4851831FDB74E850E28573
Validity
Not Before: Oct 18 13:00:39 2026 GMT
Not After : Oct 19 13:10:39 2026 GMT
Subject: CN=2B6CE2BFE927FFADCD205BD01BE8C5081CB339DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:cc:d3:a6:9b:cd:41:33:6e:8c:34:62:f1:74:
6d:a8:0a:80:06:bf:e3:01:cb:4e:5c:be:39:24:41:
59:da:23:b5:62:c8:1e:0e:62:4c:f1:61:d2:ff:af:
b4:e2:ab:5f:eb:cc:94:67:1e:22:56:b6:61:4c:7a:
b7:79:bb:bd:ac:92:6f:91:78:75:5b:6c:dd:6d:96:
53:ac:33:54:c4:c2:68:75:48:89:a2:59:10:4f:ee:
30:02:0f:09:19:d1:8b:0a:69:db:06:29:b5:af:7c:
55:8f:b6:72:f6:70:18:6a:b4:39:77:c4:68:f3:62:
8a:f4:5d:3e:d7:12:f3:6b:f4:ae:aa:90:f1:36:35:
9b:10:fa:0a:c0:90:e5:b3:93:3e:54:4c:31:4c:b4:
4d:95:d9:7a:29:7e:30:9c:e0:88:4d:c0:6f:9f:cd:
ad:fd:84:45:db:de:19:5d:ce:dc:8a:e2:23:3a:aa:
65:6d:05:ba:ff:58:e0:46:5c:0f:b9:60:de:13:f6:
03:90:69:ac:a9:aa:ce:9c:24:1d:3b:73:8f:d6:fa:
58:8c:15:03:01:f6:27:4f:4f:fd:ab:6e:ad:fd:fe:
47:8c:44:ae:74:cf:28:f1:6c:ff:61:f1:15:4b:fa:
19:e6:2a:3f:af:5e:96:11:8e:07:2c:95:16:80:f9:
61:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:6C:E2:BF:E9:27:FF:AD:CD:20:5B:D0:1B:E8:C5:08:1C:B3:39:DD
X509v3 Authority Key Identifier:
keyid:1C:CC:9F:90:3B:07:97:25:9D:48:51:83:1F:DB:74:E8:50:E2:85:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/1CCC9F903B0797259D4851831FDB74E850E28573.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1CCC9F903B0797259D4851831FDB74E850E28573.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/1CCC9F903B0797259D4851831FDB74E850E28573.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:0d:09:e5:03:2c:e8:bc:76:66:7c:f8:4a:50:86:4f:f2:65:
30:da:4e:61:7b:f5:7b:0c:cf:8a:88:89:32:12:98:38:95:b3:
a7:61:7f:39:77:11:95:1e:a8:cc:93:e7:c9:02:0a:25:d1:6a:
8e:9e:93:c5:37:9f:d5:46:07:ee:3e:97:e0:97:d8:1b:89:98:
28:b7:12:bd:13:15:30:2e:f7:88:e6:66:ca:cd:93:cc:7f:47:
f5:6a:d7:d5:bf:26:47:b9:2b:27:83:4a:80:19:39:f1:fe:53:
83:57:e9:af:85:3a:b1:e6:20:ac:c5:df:e2:5d:90:73:6e:a3:
78:0a:de:be:92:00:13:14:a3:1e:68:8f:24:3f:08:41:4c:b4:
eb:49:b5:a0:42:62:60:2d:f9:bc:32:e2:70:75:ac:b6:15:e3:
91:b6:89:5b:e2:df:38:e7:27:9a:bb:da:e5:ec:cb:1f:3e:4d:
df:cc:1c:81:8a:38:fe:0a:1c:1d:b7:9a:06:01:95:3d:c4:65:
fe:11:56:8c:57:b3:47:eb:49:b1:66:e8:40:03:3a:19:31:a1:
d9:bb:da:1e:0f:cb:3f:af:c9:2b:43:4e:08:9f:ac:1b:3f:6f:
03:64:da:c0:e3:57:71:ff:aa:7f:0a:2c:24:a4:f3:1f:31:44:
ec:c5:4a:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 03:28:05 2026 by rpki-client