
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/1C241AD1CC301E815CA4D6FA5F1BCC6606915910.mft
File: 1C241AD1CC301E815CA4D6FA5F1BCC6606915910.mft (raw, json)
Hash identifier: ha16Qpcw3wz/6Y/kvnqhY2ja5DeDYp2tXijphXygPn4=
Subject key identifier: 29:E5:17:51:DC:34:90:B2:98:AD:8A:4E:A4:B2:B5:52:3E:BB:6A:92
Authority key identifier: 1C:24:1A:D1:CC:30:1E:81:5C:A4:D6:FA:5F:1B:CC:66:06:91:59:10
Certificate issuer: /CN=1C241AD1CC301E815CA4D6FA5F1BCC6606915910
Certificate serial: 2BBD9C6DA906933CBDBCC2B16FA222FEBC69C628
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1C241AD1CC301E815CA4D6FA5F1BCC6606915910.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/1C241AD1CC301E815CA4D6FA5F1BCC6606915910.mft
Manifest number: B8
Signing time: Wed 16 Sep 2026 17:15:36 +0000
Manifest this update: Wed 16 Sep 2026 17:10:36 +0000
Manifest next update: Thu 17 Sep 2026 20:16:36 +0000
Files and hashes: 1: 3130332e3133312e3130342e302f32332d3234203d3e203539313531.roa (hash: FOuLqe8z3jP9/FdA5FO4WwiK2ha2s9B/nD4rv4Mnpyg=)
2: 3130332e3235352e31352e302f32342d3234203d3e203539313531.roa (hash: OGO8y1XI3uaFZBO8XdrSwCG094qddn+s0g2Ctr82rYM=)
3: 323430303a653332303a3a2f33322d3438203d3e203539313531.roa (hash: 8FVK2/2gNZC5oxeYl9/JXd0zGR6AZ1yS8I4EVn+PCZM=)
4: 3130332e3231302e33352e302f32342d3234203d3e203539313531.roa (hash: tYiK/crTfBIFT43mP50CWE5Oz0vdhgTgDowq7UN7boc=)
5: 1C241AD1CC301E815CA4D6FA5F1BCC6606915910.crl (hash: /XBhJf4EsUt5a4NK+FmYpPUBQTQW0RwPknmZLudHYCg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/1C241AD1CC301E815CA4D6FA5F1BCC6606915910.crl
rsync://rpki-rsync.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/1C241AD1CC301E815CA4D6FA5F1BCC6606915910.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1C241AD1CC301E815CA4D6FA5F1BCC6606915910.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 20:16:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:bd:9c:6d:a9:06:93:3c:bd:bc:c2:b1:6f:a2:22:fe:bc:69:c6:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1C241AD1CC301E815CA4D6FA5F1BCC6606915910
Validity
Not Before: Sep 16 17:10:36 2026 GMT
Not After : Sep 17 20:16:36 2026 GMT
Subject: CN=29E51751DC3490B298AD8A4EA4B2B5523EBB6A92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:91:e0:43:ec:2f:b2:74:f0:55:73:60:d9:10:
a2:1b:6e:30:dc:01:a2:28:b4:05:35:ea:25:91:19:
b8:2c:23:73:73:78:7c:76:27:b9:00:15:49:d6:87:
58:c9:34:94:73:0c:23:de:be:e1:83:81:c3:e2:31:
68:9c:a4:54:0a:eb:69:c5:e3:bf:11:b6:fe:eb:cd:
34:02:6f:cf:8b:3b:54:c3:77:64:b3:d5:70:5b:9a:
0e:dc:29:2c:50:c8:ab:9c:57:05:62:e3:05:73:38:
cb:6a:9c:11:ed:33:b6:d8:7c:54:42:c0:0b:ca:ac:
6f:5f:90:5a:86:31:3b:36:72:e6:f3:09:d9:a2:42:
0d:f9:1c:a7:2d:4f:e5:c0:6f:0d:0d:59:92:52:42:
22:c7:eb:db:29:5e:42:94:50:26:26:af:d5:f7:71:
1e:30:44:b8:c2:df:75:43:62:fb:3b:41:fd:58:17:
3e:62:fa:20:cd:d3:bc:6e:4d:a1:92:7c:94:7d:b4:
c3:d7:06:a7:0d:1c:05:ce:9c:f3:af:a0:99:10:eb:
b0:f2:dd:c2:b7:6e:21:77:2d:a9:75:93:03:43:bd:
39:04:ac:c4:03:86:ee:07:03:fe:96:a3:a7:b9:af:
0c:3c:40:3f:84:fd:ba:5a:0a:d9:48:a6:70:a5:6d:
7a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:E5:17:51:DC:34:90:B2:98:AD:8A:4E:A4:B2:B5:52:3E:BB:6A:92
X509v3 Authority Key Identifier:
keyid:1C:24:1A:D1:CC:30:1E:81:5C:A4:D6:FA:5F:1B:CC:66:06:91:59:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/1C241AD1CC301E815CA4D6FA5F1BCC6606915910.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1C241AD1CC301E815CA4D6FA5F1BCC6606915910.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/1C241AD1CC301E815CA4D6FA5F1BCC6606915910.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:38:3e:4d:ab:f5:7c:c6:8c:5b:22:c2:c5:0c:a2:06:4a:87:
f3:67:9d:e2:99:52:25:c5:1c:b9:3d:00:46:cf:12:07:36:5a:
12:5b:08:98:98:7b:b4:f1:67:27:fd:13:4b:60:93:18:d4:01:
1e:11:a1:0a:81:3b:c3:d8:0f:cd:9a:a8:9f:d1:58:cc:05:fc:
0b:70:02:d3:d9:0d:de:57:0e:11:fd:fb:32:46:4f:06:0b:4d:
21:2e:c2:fe:f2:82:b5:10:b9:2f:b5:c7:6f:7f:45:8a:77:4b:
01:91:01:e9:05:30:4e:f5:87:10:51:23:41:c6:02:ce:9c:c3:
38:97:c5:49:6a:88:e9:a5:c9:70:4f:0c:b5:82:02:55:eb:be:
82:4d:c4:2e:bf:dc:34:af:bd:9d:73:9c:e9:e9:f3:79:b9:e4:
32:c9:25:24:b5:92:79:b5:c1:4a:a0:99:72:06:0b:39:81:91:
b5:e2:16:12:9f:7a:10:d3:5d:9e:b5:95:b9:cf:09:70:e7:85:
ce:36:1d:d9:bb:5f:65:f3:bd:f8:52:06:4f:41:a6:3d:12:6e:
37:9e:bf:69:aa:b6:aa:97:80:ef:e7:86:98:7c:8f:c7:ce:50:
b2:f7:02:2c:c0:6a:44:d2:cf:a3:64:b2:19:6d:7a:f2:a4:3a:
e6:8f:83:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 09:32:54 2026 by rpki-client