
$ rpki-client -vvf rpki-rsync.idnic.net/repo/5272e527-725b-49e3-8743-c753dd3379e3/0/1E1AC1C9B3E67F8395395423DA2EB26E8E691FC1.mft
File: 1E1AC1C9B3E67F8395395423DA2EB26E8E691FC1.mft (raw, json)
Hash identifier: bOejiDH+U+TfbSFf6Ogrqg7QzwxITF/ATBL2u9shDB0=
Subject key identifier: 2D:F5:81:77:EA:E6:F1:7F:80:36:FC:E1:91:E2:18:B2:8F:1B:83:13
Authority key identifier: 1E:1A:C1:C9:B3:E6:7F:83:95:39:54:23:DA:2E:B2:6E:8E:69:1F:C1
Certificate issuer: /CN=1E1AC1C9B3E67F8395395423DA2EB26E8E691FC1
Certificate serial: 313ACCC06A280D984CEED40123043B369126475B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1E1AC1C9B3E67F8395395423DA2EB26E8E691FC1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5272e527-725b-49e3-8743-c753dd3379e3/0/1E1AC1C9B3E67F8395395423DA2EB26E8E691FC1.mft
Manifest number: 40
Signing time: Thu 18 Jun 2026 11:20:51 +0000
Manifest this update: Thu 18 Jun 2026 11:15:51 +0000
Manifest next update: Fri 19 Jun 2026 12:43:51 +0000
Files and hashes: 1: 3135372e36362e3234362e302f32332d3234203d3e20313532373630.roa (hash: m0f229ZhLX9SKvKbXbKHogZj70tOf+VKSr9KHdgMRls=)
2: 1E1AC1C9B3E67F8395395423DA2EB26E8E691FC1.crl (hash: +kR3TAxQh9+57eo+VNfNH/lO4snSOCKV2wEoPfJNt24=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5272e527-725b-49e3-8743-c753dd3379e3/0/1E1AC1C9B3E67F8395395423DA2EB26E8E691FC1.crl
rsync://rpki-rsync.idnic.net/repo/5272e527-725b-49e3-8743-c753dd3379e3/0/1E1AC1C9B3E67F8395395423DA2EB26E8E691FC1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1E1AC1C9B3E67F8395395423DA2EB26E8E691FC1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 08:44:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:3a:cc:c0:6a:28:0d:98:4c:ee:d4:01:23:04:3b:36:91:26:47:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1E1AC1C9B3E67F8395395423DA2EB26E8E691FC1
Validity
Not Before: Jun 18 11:15:51 2026 GMT
Not After : Jun 19 12:43:51 2026 GMT
Subject: CN=2DF58177EAE6F17F8036FCE191E218B28F1B8313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:53:84:0b:d0:cc:3d:ef:a7:61:73:73:9f:45:
eb:16:c6:20:7a:08:50:d1:e0:e8:0c:c3:d3:df:12:
d6:4f:5b:3b:db:7c:1d:4c:f7:1b:ab:50:5a:61:78:
9f:a2:c1:81:9a:b8:c2:2c:ac:0b:ab:98:30:24:c5:
95:ee:77:0f:76:f1:55:12:7c:37:65:ea:85:2d:5d:
06:e1:49:fb:a5:d4:9e:79:15:ce:00:62:7d:19:8f:
fd:9b:f3:bd:2b:b7:8d:ef:69:2d:d0:11:71:1a:f3:
dc:4c:07:9a:7c:e5:5e:e6:d1:15:7e:48:a6:47:bc:
f2:d2:4e:c8:d9:9e:4e:d9:f1:d5:a4:2e:21:68:1f:
2b:27:e4:5f:cb:4a:b8:14:d2:3e:7d:69:af:49:5a:
89:3a:b1:58:77:4a:64:44:ee:ad:c4:c4:4a:b0:53:
fe:88:8b:0a:89:61:11:64:89:73:5d:66:27:4d:a6:
df:00:32:a2:a2:a1:cc:b7:2a:cb:0c:bb:d4:c6:20:
c7:a8:61:0b:3c:ee:90:dc:87:01:f4:5b:cc:f6:20:
5f:a9:07:8c:59:f4:01:2e:5f:d8:4b:10:09:55:c8:
0a:6f:e5:ab:fa:1c:70:a7:e2:e1:1c:aa:35:c8:2b:
7c:84:9a:e2:34:06:b9:dc:a9:ac:ed:98:05:b1:2c:
00:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:F5:81:77:EA:E6:F1:7F:80:36:FC:E1:91:E2:18:B2:8F:1B:83:13
X509v3 Authority Key Identifier:
keyid:1E:1A:C1:C9:B3:E6:7F:83:95:39:54:23:DA:2E:B2:6E:8E:69:1F:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5272e527-725b-49e3-8743-c753dd3379e3/0/1E1AC1C9B3E67F8395395423DA2EB26E8E691FC1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1E1AC1C9B3E67F8395395423DA2EB26E8E691FC1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5272e527-725b-49e3-8743-c753dd3379e3/0/1E1AC1C9B3E67F8395395423DA2EB26E8E691FC1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:55:ab:62:28:7b:71:21:1a:4c:88:89:7b:03:b5:fc:a6:91:
27:de:74:fa:93:65:57:7a:be:69:18:d8:f6:e3:42:cc:64:cd:
d1:89:17:52:7e:08:81:04:bb:a9:d5:57:d5:6d:f3:71:cc:67:
e2:b6:2d:74:03:eb:1e:95:3c:37:5f:d7:e4:ce:ce:99:55:6d:
03:9d:1c:9e:fe:f6:f6:32:2c:65:19:bc:57:38:7c:b6:c8:34:
6f:d3:77:b5:3a:39:38:2e:2b:1c:9f:51:af:1b:9b:a3:f7:8f:
e9:49:78:39:34:7c:72:01:c8:69:c8:17:51:d2:f2:6f:9a:39:
9f:01:c1:fd:6c:ae:fb:4c:7f:65:11:55:cc:92:39:73:d0:51:
88:c1:81:f4:a6:e4:9f:c6:34:92:fa:62:6e:17:d0:29:75:87:
e0:49:99:18:90:9d:71:b2:2a:ce:2d:a1:5b:d7:8a:a9:01:23:
55:65:4b:11:64:3e:ff:15:a2:fa:d4:2c:df:1e:ec:68:29:86:
79:02:cc:ee:0d:9a:f7:e3:f4:93:6f:be:be:55:cf:86:80:1a:
2b:b3:15:16:80:09:f3:94:97:36:c2:c6:fe:4c:64:3f:a7:87:
e5:46:78:a2:02:42:6a:4d:8a:b2:36:f7:3b:df:9f:e4:85:2e:
28:e9:ed:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 18 17:15:59 2026 by rpki-client