
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/1EA610CFADD727ADAA74FA9BFE8DDFAF27302467.mft
File: 1EA610CFADD727ADAA74FA9BFE8DDFAF27302467.mft (raw, json)
Hash identifier: v9weteDumEpGEarZvI73P9DypqnmODmbIj7PF9/Qwm8=
Subject key identifier: A5:98:97:AE:7B:C2:14:D5:3F:B3:24:07:D8:55:ED:B8:F2:B4:E2:1C
Authority key identifier: 1E:A6:10:CF:AD:D7:27:AD:AA:74:FA:9B:FE:8D:DF:AF:27:30:24:67
Certificate issuer: /CN=1EA610CFADD727ADAA74FA9BFE8DDFAF27302467
Certificate serial: 6C55F52D025080053196DC4121625E511E3BD952
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EA610CFADD727ADAA74FA9BFE8DDFAF27302467.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/1EA610CFADD727ADAA74FA9BFE8DDFAF27302467.mft
Manifest number: A6
Signing time: Wed 02 Sep 2026 22:35:46 +0000
Manifest this update: Wed 02 Sep 2026 22:30:46 +0000
Manifest next update: Fri 04 Sep 2026 01:00:46 +0000
Files and hashes: 1: 1EA610CFADD727ADAA74FA9BFE8DDFAF27302467.crl (hash: S6DXiNAkP7XVic5a0hbiGkpwm82bw4fUXQQLAev8ekw=)
2: 3130332e3138362e35382e302f32332d3234203d3e20313439373034.roa (hash: iLoKSE1pdd15H1Hz5134mXWItT5DvP5967h6GjP5mKY=)
3: 323030313a6466313a396634303a3a2f34382d3438203d3e20313439373034.roa (hash: +7gxgZA4R6XZfqKIvJi9Q/LxoHJw6/TCBpYF4xmvuqk=)
4: 3130332e3138362e35392e302f32342d3234203d3e20313439373034.roa (hash: IOAwzQ73Cr2im/VcFN1TaAQYk3NUUawiD2oAPVCKSrc=)
5: 3130332e3138362e35382e302f32342d3234203d3e20313439373034.roa (hash: ZsJ/jB1I6GIvE0h8Rn6eqplhxHo0cL9KOhuXdGF4spA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/1EA610CFADD727ADAA74FA9BFE8DDFAF27302467.crl
rsync://rpki-rsync.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/1EA610CFADD727ADAA74FA9BFE8DDFAF27302467.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EA610CFADD727ADAA74FA9BFE8DDFAF27302467.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 04 Sep 2026 01:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:55:f5:2d:02:50:80:05:31:96:dc:41:21:62:5e:51:1e:3b:d9:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1EA610CFADD727ADAA74FA9BFE8DDFAF27302467
Validity
Not Before: Sep 2 22:30:46 2026 GMT
Not After : Sep 4 01:00:46 2026 GMT
Subject: CN=A59897AE7BC214D53FB32407D855EDB8F2B4E21C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3a:15:88:57:f8:1e:1f:5c:4d:eb:e5:ee:71:
b7:e3:c4:68:18:01:58:5e:cf:cf:ff:ac:c4:73:2b:
d6:85:2a:c7:31:44:50:df:b6:11:74:6a:2f:41:28:
69:b4:3e:9c:d5:ba:5c:19:8c:7a:2c:21:aa:d1:83:
0e:62:be:89:c4:ee:42:fe:83:56:03:e7:6a:34:45:
0a:85:ba:f5:9c:df:5a:f5:a9:91:a7:91:8a:8f:8f:
e2:ba:4b:a2:f4:24:98:f4:2a:c3:d2:8c:f2:c6:9d:
36:29:d7:61:57:7a:38:97:31:68:00:18:34:4b:ef:
c4:a6:7d:87:98:d6:83:ef:d4:84:71:6b:46:0b:78:
5b:c5:fb:81:bf:69:80:db:65:0d:c6:22:03:ad:03:
3b:01:05:18:6d:17:ab:84:02:42:b8:a2:f8:dc:dc:
19:51:95:52:94:ce:90:4d:05:5f:1f:e5:ec:12:9d:
e0:96:77:83:8f:76:64:79:58:34:fc:70:1f:85:93:
89:59:aa:61:64:f7:c0:80:ac:9a:ab:25:7c:ac:ea:
06:f5:d9:98:b5:41:a4:d6:94:4a:c2:37:43:8c:4a:
35:22:5f:3a:62:d0:c6:52:36:75:98:0f:85:2c:30:
d5:b1:52:ee:bc:79:38:78:0d:e4:6a:f7:3d:5b:24:
3d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:98:97:AE:7B:C2:14:D5:3F:B3:24:07:D8:55:ED:B8:F2:B4:E2:1C
X509v3 Authority Key Identifier:
keyid:1E:A6:10:CF:AD:D7:27:AD:AA:74:FA:9B:FE:8D:DF:AF:27:30:24:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/1EA610CFADD727ADAA74FA9BFE8DDFAF27302467.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EA610CFADD727ADAA74FA9BFE8DDFAF27302467.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/1EA610CFADD727ADAA74FA9BFE8DDFAF27302467.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:cc:7a:bf:25:10:d0:6d:f4:b5:4b:90:0b:9f:c1:c2:65:25:
07:54:b9:0a:6e:d9:fe:18:5a:0d:54:91:b2:15:dd:f4:f9:05:
d6:79:4b:ae:ea:d3:a3:f5:7b:15:b0:5f:a1:13:3f:33:9c:1b:
ee:a9:c8:f7:a1:65:78:6c:fe:fd:5e:1b:28:24:fe:81:6d:df:
ee:90:66:84:6d:a4:82:35:28:35:c6:3e:3c:30:9b:73:f3:b1:
53:c1:b3:bc:1b:cc:3b:c8:b2:03:16:5b:f7:1a:15:43:d5:37:
ab:24:e2:ec:b5:29:56:7d:cd:3c:cb:7b:1d:d6:30:40:57:e3:
3f:a2:f9:72:40:5b:96:64:fb:ee:d3:24:78:ba:ec:5f:b5:e3:
25:6f:36:57:df:ad:fb:27:74:a7:03:fd:c9:60:ca:55:17:4b:
51:27:9d:69:ac:33:89:b9:6b:54:f7:15:c4:0a:a8:9a:bc:ac:
39:59:63:e8:9e:12:8f:72:1a:4d:cb:8c:40:ee:20:4d:2d:23:
2d:71:48:f1:f0:50:f7:7c:6b:3a:e8:c2:de:05:62:65:ee:b4:
b4:ae:d9:93:d4:ae:6e:d4:71:a1:d3:e4:c7:fa:6b:b1:a7:86:
68:07:46:43:ab:8a:36:79:ea:84:13:dd:f5:1d:ed:88:2d:cf:
85:9e:be:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 12:36:57 2026 by rpki-client