
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/1F6C96793661DE4673D63F9B4676953E4CEFDC3A.mft
File: 1F6C96793661DE4673D63F9B4676953E4CEFDC3A.mft (raw, json)
Hash identifier: NMPRmnkBikUpb8gqhpfCuYjNeE/lxipj2ePLvLzVvMc=
Subject key identifier: AC:61:BB:AA:B7:4D:32:E8:33:F8:A0:8D:1F:35:FA:4D:6B:1A:D0:1B
Authority key identifier: 1F:6C:96:79:36:61:DE:46:73:D6:3F:9B:46:76:95:3E:4C:EF:DC:3A
Certificate issuer: /CN=1F6C96793661DE4673D63F9B4676953E4CEFDC3A
Certificate serial: 251B0BD3AFCFF8B2AE6C0854172C442566C30742
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1F6C96793661DE4673D63F9B4676953E4CEFDC3A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/1F6C96793661DE4673D63F9B4676953E4CEFDC3A.mft
Manifest number: EB
Signing time: Sun 25 Oct 2026 19:36:20 +0000
Manifest this update: Sun 25 Oct 2026 19:31:20 +0000
Manifest next update: Mon 26 Oct 2026 19:36:20 +0000
Files and hashes: 1: 1F6C96793661DE4673D63F9B4676953E4CEFDC3A.crl (hash: Re+91huOfoCzqoSb6eYL8J2G9YQq1UJKczRkuDvO/uY=)
2: 3130332e3131302e3130302e302f32332d3233203d3e20313530393337.roa (hash: grarK/OEkmzbddi3gcH2ULkCDLQvGSboK91xScB9ONU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/1F6C96793661DE4673D63F9B4676953E4CEFDC3A.crl
rsync://rpki-rsync.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/1F6C96793661DE4673D63F9B4676953E4CEFDC3A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1F6C96793661DE4673D63F9B4676953E4CEFDC3A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 19:36:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:1b:0b:d3:af:cf:f8:b2:ae:6c:08:54:17:2c:44:25:66:c3:07:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1F6C96793661DE4673D63F9B4676953E4CEFDC3A
Validity
Not Before: Oct 25 19:31:20 2026 GMT
Not After : Oct 26 19:36:20 2026 GMT
Subject: CN=AC61BBAAB74D32E833F8A08D1F35FA4D6B1AD01B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:78:5d:bd:a0:ec:98:82:02:e6:15:05:3b:6b:
6d:ca:ba:4a:7e:09:1d:47:b5:94:d6:a3:92:99:73:
e2:87:7d:72:21:86:30:0b:20:3b:56:09:df:54:fa:
7e:59:4e:bb:12:c9:14:46:ba:59:19:80:60:ad:19:
a4:fa:4d:43:c4:85:0f:13:30:dd:b8:b2:bc:72:49:
9e:f8:95:4d:e3:d1:00:87:de:d8:3d:8e:73:52:d5:
c6:b6:7f:b6:06:68:8e:75:21:d4:76:b9:39:2f:83:
37:0a:40:34:f9:21:92:1e:23:d6:75:be:02:d4:5d:
fb:b8:b4:4e:0a:71:8d:ee:a0:54:60:4c:24:73:0b:
64:4f:f1:23:8d:f7:99:0a:df:85:40:b8:71:9e:04:
22:f5:24:8e:01:1c:9c:a2:e4:df:fc:2b:17:82:69:
a1:5a:84:d9:f7:cc:03:4a:73:21:f6:c0:08:cd:7a:
c2:38:d8:b3:49:13:48:6f:a8:64:15:9f:98:ee:8d:
86:f7:57:aa:74:2f:63:88:ac:fa:fe:03:9c:74:7a:
b8:35:5f:c0:7f:de:fc:53:17:62:ed:ff:dd:04:25:
97:1f:fd:14:6a:f1:d1:22:5f:4e:0e:48:1d:66:ac:
18:0a:03:74:db:ab:76:f0:fe:c9:4e:90:13:8b:71:
cd:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:61:BB:AA:B7:4D:32:E8:33:F8:A0:8D:1F:35:FA:4D:6B:1A:D0:1B
X509v3 Authority Key Identifier:
keyid:1F:6C:96:79:36:61:DE:46:73:D6:3F:9B:46:76:95:3E:4C:EF:DC:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/1F6C96793661DE4673D63F9B4676953E4CEFDC3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1F6C96793661DE4673D63F9B4676953E4CEFDC3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/1F6C96793661DE4673D63F9B4676953E4CEFDC3A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:8b:dc:0f:41:b1:26:65:e0:88:79:81:0a:f2:93:e9:a8:58:
9a:8f:a1:95:26:9c:6f:49:47:af:2b:58:e4:8d:30:a1:a1:2e:
94:d6:e2:e6:9f:8e:82:0b:02:fb:ff:ec:fe:ec:7a:eb:a2:07:
87:a3:0e:eb:86:64:6e:2c:aa:ba:f8:75:cb:83:a4:a4:44:30:
20:5a:e9:a7:53:5f:36:b1:0a:5e:eb:78:25:35:cb:f5:d4:21:
00:19:e9:ca:33:ea:1f:89:a7:2f:5b:a5:64:b7:12:76:c2:ae:
9a:8b:33:b6:95:8b:2d:f3:4c:a2:7b:17:e1:2e:73:5d:2e:11:
31:dd:b7:88:ec:b6:9d:23:48:fe:90:46:75:08:10:bb:30:ea:
65:5a:12:62:5c:49:2b:c2:b9:73:21:46:45:01:10:81:f5:c8:
41:45:50:b9:e7:62:31:9d:ba:ea:d1:4c:b4:e8:03:e0:2b:5c:
6d:d1:80:27:87:39:df:8c:6c:dd:7e:19:50:bb:48:bb:52:17:
3d:86:cf:8f:af:57:fa:f8:1b:b4:1e:9c:97:0b:9d:61:60:cd:
ed:71:ee:46:7f:41:7e:64:9d:20:7c:35:20:b1:48:98:3e:57:
1f:5f:41:d1:92:e2:f2:5c:87:f8:f9:b2:e5:4c:62:f8:5c:ed:
fb:cb:54:34
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUJRsL06/P+LKubAhUFyxEJWbDB0IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUY2Qzk2NzkzNjYxREU0NjczRDYzRjlCNDY3Njk1M0U0
Q0VGREMzQTAeFw0yNjEwMjUxOTMxMjBaFw0yNjEwMjYxOTM2MjBaMDMxMTAvBgNV
BAMTKEFDNjFCQkFBQjc0RDMyRTgzM0Y4QTA4RDFGMzVGQTRENkIxQUQwMUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSeF29oOyYggLmFQU7a23Kukp+
CR1HtZTWo5KZc+KHfXIhhjALIDtWCd9U+n5ZTrsSyRRGulkZgGCtGaT6TUPEhQ8T
MN24srxySZ74lU3j0QCH3tg9jnNS1ca2f7YGaI51IdR2uTkvgzcKQDT5IZIeI9Z1
vgLUXfu4tE4KcY3uoFRgTCRzC2RP8SON95kK34VAuHGeBCL1JI4BHJyi5N/8KxeC
aaFahNn3zANKcyH2wAjNesI42LNJE0hvqGQVn5jujYb3V6p0L2OIrPr+A5x0erg1
X8B/3vxTF2Lt/90EJZcf/RRq8dEiX04OSB1mrBgKA3Tbq3bw/slOkBOLcc0LAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUrGG7qrdNMugz+KCNHzX6TWsa0BswHwYDVR0j
BBgwFoAUH2yWeTZh3kZz1j+bRnaVPkzv3DowDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NTNkZTUwMzUtODRlMS00NGM2LTljZjktNGVhMGJiYWEwOTNmLzAvMUY2Qzk2Nzkz
NjYxREU0NjczRDYzRjlCNDY3Njk1M0U0Q0VGREMzQS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8xRjZDOTY3OTM2NjFERTQ2NzNENjNGOUI0Njc2OTUzRTRDRUZE
QzNBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTNkZTUwMzUtODRlMS00NGM2LTlj
ZjktNGVhMGJiYWEwOTNmLzAvMUY2Qzk2NzkzNjYxREU0NjczRDYzRjlCNDY3Njk1
M0U0Q0VGREMzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEaL3A9BsSZl4Ih5gQryk+moWJqPoZUmnG9J
R68rWOSNMKGhLpTW4uafjoILAvv/7P7seuuiB4ejDuuGZG4sqrr4dcuDpKREMCBa
6adTXzaxCl7reCU1y/XUIQAZ6coz6h+Jpy9bpWS3EnbCrpqLM7aViy3zTKJ7F+Eu
c10uETHdt4jstp0jSP6QRnUIELsw6mVaEmJcSSvCuXMhRkUBEIH1yEFFULnnYjGd
uurRTLToA+ArXG3RgCeHOd+MbN1+GVC7SLtSFz2Gz4+vV/r4G7QenJcLnWFgze1x
7kZ/QX5knSB8NSCxSJg+Vx9fQdGS4vJch/j5suVMYvhc7fvLVDQ=
-----END CERTIFICATE-----
Generated at Mon Oct 26 12:40:51 2026 by rpki-client