
$ rpki-client -vvf rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/1DD0DE90198F9D1A28E457EE5788E7D13547CB91.mft
File: 1DD0DE90198F9D1A28E457EE5788E7D13547CB91.mft (raw, json)
Hash identifier: 6P4SFO1CVXoAbElHTbVmp74Vn19jrK8Mf+LN9PcmVA8=
Subject key identifier: 1E:26:FA:02:77:16:64:CD:C1:BA:10:1C:3E:47:0C:83:E0:A3:E6:F8
Authority key identifier: 1D:D0:DE:90:19:8F:9D:1A:28:E4:57:EE:57:88:E7:D1:35:47:CB:91
Certificate issuer: /CN=1DD0DE90198F9D1A28E457EE5788E7D13547CB91
Certificate serial: 4AD82740116D731D07FEE88411199CF32C801B58
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1DD0DE90198F9D1A28E457EE5788E7D13547CB91.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/1DD0DE90198F9D1A28E457EE5788E7D13547CB91.mft
Manifest number: 3F
Signing time: Thu 18 Jun 2026 11:36:09 +0000
Manifest this update: Thu 18 Jun 2026 11:31:09 +0000
Manifest next update: Fri 19 Jun 2026 12:44:09 +0000
Files and hashes: 1: 1DD0DE90198F9D1A28E457EE5788E7D13547CB91.crl (hash: pQqwiJsxHqh9uHcL5z1GJ9ajX93ksHMb/IYWIJLuLFo=)
2: 323030313a6466333a633334303a3a2f34382d3438203d3e20313532333932.roa (hash: fsyTi1wKrYDgpsKCw76juglRx93+2YzZ5l6lzjCtU8E=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/1DD0DE90198F9D1A28E457EE5788E7D13547CB91.crl
rsync://rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/1DD0DE90198F9D1A28E457EE5788E7D13547CB91.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1DD0DE90198F9D1A28E457EE5788E7D13547CB91.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 12:15:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:d8:27:40:11:6d:73:1d:07:fe:e8:84:11:19:9c:f3:2c:80:1b:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1DD0DE90198F9D1A28E457EE5788E7D13547CB91
Validity
Not Before: Jun 18 11:31:09 2026 GMT
Not After : Jun 19 12:44:09 2026 GMT
Subject: CN=1E26FA02771664CDC1BA101C3E470C83E0A3E6F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:79:f9:d2:4e:b6:b9:f3:c5:55:19:76:8f:92:
d9:80:e1:a1:85:8a:2b:09:4c:72:09:35:3d:95:ac:
2d:9e:dc:95:8e:99:d7:69:0b:46:f1:21:02:eb:47:
e2:42:f1:70:20:c4:be:5a:4b:03:57:34:ef:38:b6:
5f:06:12:7b:e9:c0:60:4c:6e:ef:51:bd:e2:89:db:
1c:f4:80:3c:d1:62:4e:7f:cc:4f:17:3b:59:69:3f:
3e:e8:ba:fc:fa:24:9a:b7:94:69:0e:80:e0:03:46:
c5:8e:86:74:59:95:92:d1:5c:4a:ed:5f:d6:3b:07:
e0:3e:3f:dd:31:99:0a:93:ca:bf:51:b4:b7:0f:93:
4e:6f:bd:7c:27:5e:4e:97:4b:d9:6a:9f:7e:95:e9:
8b:b2:75:2e:38:c5:d0:6a:1c:e3:56:7f:19:ea:09:
27:a2:e5:6e:83:be:28:43:6e:9d:93:06:50:2f:2f:
25:38:73:68:78:62:77:cc:17:26:6b:e5:4e:ea:1f:
a5:de:b1:fc:1f:12:0e:b3:2b:99:48:f6:b4:ca:1a:
94:72:57:88:a4:45:ad:5e:8f:3a:8c:9e:17:7f:f9:
f9:29:e7:a2:d4:36:b2:1a:61:7c:6f:48:fa:d8:f5:
f0:a9:ca:c6:12:e4:eb:5b:51:d7:64:bd:72:b7:59:
e5:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:26:FA:02:77:16:64:CD:C1:BA:10:1C:3E:47:0C:83:E0:A3:E6:F8
X509v3 Authority Key Identifier:
keyid:1D:D0:DE:90:19:8F:9D:1A:28:E4:57:EE:57:88:E7:D1:35:47:CB:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/1DD0DE90198F9D1A28E457EE5788E7D13547CB91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1DD0DE90198F9D1A28E457EE5788E7D13547CB91.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/1DD0DE90198F9D1A28E457EE5788E7D13547CB91.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:0e:f3:37:d2:0a:2d:58:c1:00:15:0b:47:a6:2e:46:69:ae:
72:28:d8:01:38:c5:8d:94:d1:03:5d:7e:d3:f6:85:27:86:ec:
9c:63:55:45:34:d8:37:58:cc:26:8b:8c:e9:d6:eb:22:dd:c2:
f6:24:cc:c6:4a:04:13:76:66:01:a8:5c:be:e4:8f:48:84:c3:
84:f1:a6:ab:4e:d7:5f:d6:10:3a:b8:a9:e7:50:49:c2:c3:2d:
4a:66:40:c7:72:70:01:47:16:69:10:cd:3c:51:53:01:bf:de:
fe:70:67:c0:f2:c5:f8:c5:c3:1d:e5:04:1d:4c:0a:c2:8b:d6:
01:27:ee:3a:bc:d5:95:a6:d0:16:d4:15:e6:e0:cc:b1:50:a3:
09:6e:2c:65:12:d5:e8:ff:14:ed:75:93:e1:e3:15:6e:23:d7:
85:d7:45:a8:c8:46:3b:81:a6:78:70:eb:76:3f:05:6a:62:cc:
19:22:5d:00:35:b3:52:c9:16:fc:8b:20:e9:c1:98:60:a0:31:
a6:8f:5e:09:eb:0d:2f:10:6e:68:f3:95:c7:9d:6f:0a:bd:b0:
f8:1a:98:01:45:4f:89:ca:bf:20:9e:13:ab:7c:df:20:dc:75:
7d:7d:96:31:f5:ff:3c:0a:11:91:57:64:cf:19:9c:45:43:2b:
f0:67:a1:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 18 21:14:39 2026 by rpki-client