
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C26EDB3142A0D7089EB5B4DE81D381D57270DFAA.mft
File: C26EDB3142A0D7089EB5B4DE81D381D57270DFAA.mft (raw, json)
Hash identifier: X8JI3dUwoCyDxK09HRR00X1Ljh2HDe6OBppFOPZu0Q8=
Subject key identifier: 42:12:36:2E:29:8A:E1:4C:C3:02:6D:29:80:D7:AD:71:6D:C5:BB:F7
Authority key identifier: C2:6E:DB:31:42:A0:D7:08:9E:B5:B4:DE:81:D3:81:D5:72:70:DF:AA
Certificate issuer: /CN=C26EDB3142A0D7089EB5B4DE81D381D57270DFAA
Certificate serial: 18D7FCD48922833113FF5008D9DADCAA2BDE669F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C26EDB3142A0D7089EB5B4DE81D381D57270DFAA.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C26EDB3142A0D7089EB5B4DE81D381D57270DFAA.mft
Manifest number: B8
Signing time: Thu 17 Sep 2026 09:55:52 +0000
Manifest this update: Thu 17 Sep 2026 09:50:52 +0000
Manifest next update: Fri 18 Sep 2026 12:36:52 +0000
Files and hashes: 1: C26EDB3142A0D7089EB5B4DE81D381D57270DFAA.crl (hash: rrp5jmpwL7kZMr/XsmkyZHr6TkEMT1/034DyjNaW4j8=)
2: 323030313a6466333a653034303a3a2f34382d3438203d3e20313532383036.roa (hash: /YjQziPfkygPIif69V6qP80rIoVIWnI2ryfoi9HJSBY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C26EDB3142A0D7089EB5B4DE81D381D57270DFAA.crl
rsync://rpki-rsync.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C26EDB3142A0D7089EB5B4DE81D381D57270DFAA.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C26EDB3142A0D7089EB5B4DE81D381D57270DFAA.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 09:57:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:d7:fc:d4:89:22:83:31:13:ff:50:08:d9:da:dc:aa:2b:de:66:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C26EDB3142A0D7089EB5B4DE81D381D57270DFAA
Validity
Not Before: Sep 17 09:50:52 2026 GMT
Not After : Sep 18 12:36:52 2026 GMT
Subject: CN=4212362E298AE14CC3026D2980D7AD716DC5BBF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:53:c3:4d:0f:f9:ab:2c:29:50:b8:2d:77:0b:
33:a6:84:ff:ec:b6:cb:af:16:f8:05:bf:10:e3:97:
1f:ce:3b:16:e0:41:22:96:30:a6:23:51:79:76:d0:
bf:97:87:ee:a3:7f:99:50:f7:f3:5a:ab:88:26:35:
a3:ad:5e:94:ab:c4:52:4e:97:fa:64:29:be:bb:f5:
29:1b:67:a7:64:5e:37:eb:75:22:dc:84:1e:cf:ff:
4f:8e:39:1a:6f:c9:17:0a:7a:f6:c9:0a:2e:d4:e5:
f0:f9:14:f6:ac:6c:14:98:0e:2b:6a:f8:4b:06:54:
68:18:46:bb:c1:85:97:f9:96:f8:d4:c3:fe:7c:5d:
45:59:a1:a9:b1:dd:be:39:ae:5c:3c:5e:04:0e:c5:
8c:fe:19:c9:02:8f:be:59:27:e8:2f:bf:4a:f3:15:
08:01:68:f4:4d:51:28:52:3e:34:1b:75:69:df:95:
d1:79:3b:de:62:01:12:70:b4:cb:a0:9a:bd:88:9c:
18:55:ac:b7:73:b5:bd:97:7e:0c:ca:42:17:2b:71:
31:f2:6d:aa:f4:a9:d8:94:d5:3e:7e:9d:35:2e:cc:
19:ea:f6:49:96:f1:c7:94:fb:4d:06:ef:45:68:bb:
c8:9b:23:7c:be:f3:9a:67:b0:8e:fd:f1:7d:4c:7b:
82:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:12:36:2E:29:8A:E1:4C:C3:02:6D:29:80:D7:AD:71:6D:C5:BB:F7
X509v3 Authority Key Identifier:
keyid:C2:6E:DB:31:42:A0:D7:08:9E:B5:B4:DE:81:D3:81:D5:72:70:DF:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C26EDB3142A0D7089EB5B4DE81D381D57270DFAA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C26EDB3142A0D7089EB5B4DE81D381D57270DFAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C26EDB3142A0D7089EB5B4DE81D381D57270DFAA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:e5:45:c0:b4:02:dd:eb:e5:d5:0d:01:0d:29:00:2f:e9:60:
68:ea:2a:27:fa:db:d4:b1:23:2a:78:ed:31:46:14:4f:25:01:
a2:59:dd:f6:af:5d:65:bb:43:0d:9a:d4:c2:76:15:ef:88:9b:
cf:f0:1f:49:95:59:09:97:3a:fb:66:d1:9c:dc:41:c7:c3:9c:
f3:1f:1e:1d:f0:a8:77:91:4a:64:b2:7e:33:38:6f:1d:98:5b:
f5:b0:34:7b:56:fd:e9:a2:75:2e:2c:2a:0d:69:e1:54:1f:48:
84:c1:9d:96:79:99:47:94:67:cc:b2:25:79:1b:5b:d9:2f:da:
3e:51:3f:01:e4:85:12:3b:d5:62:2c:5b:a6:a1:6c:7a:c7:7d:
26:b5:ef:3b:47:6a:13:01:46:18:71:40:65:99:05:8f:67:a1:
b1:b9:2a:fc:ff:d1:67:d6:b0:16:23:c8:25:1a:b1:56:8d:dd:
43:9c:81:82:ab:63:dd:f0:16:17:c2:58:f8:b5:2c:98:31:7b:
56:19:ca:0d:16:30:f2:24:d3:ae:ce:48:94:c8:66:f1:5f:68:
f0:56:c5:5d:ab:20:b4:56:ce:7e:bc:30:42:aa:3d:7d:eb:72:
a2:2c:a8:14:50:1d:96:db:4c:9a:59:97:fd:00:bf:59:5b:14:
2c:99:80:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 12:40:04 2026 by rpki-client