
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5ce6ac01-8eac-46c5-9469-35efa36099fd/0/1B06933632B5A267F98A1716F3CB78EA840D6E65.mft
File: 1B06933632B5A267F98A1716F3CB78EA840D6E65.mft (raw, json)
Hash identifier: ka0x2YcV/cPvZxqC+y3cryQKiAgY7XBRzmtwCZdNymc=
Subject key identifier: D9:99:24:76:AD:6D:B8:07:3E:CC:6B:3C:07:FD:6A:75:86:2B:9A:BB
Authority key identifier: 1B:06:93:36:32:B5:A2:67:F9:8A:17:16:F3:CB:78:EA:84:0D:6E:65
Certificate issuer: /CN=1B06933632B5A267F98A1716F3CB78EA840D6E65
Certificate serial: 30FB860DA0573C4613EF89757A546747EA248533
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1B06933632B5A267F98A1716F3CB78EA840D6E65.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5ce6ac01-8eac-46c5-9469-35efa36099fd/0/1B06933632B5A267F98A1716F3CB78EA840D6E65.mft
Manifest number: A2
Signing time: Mon 31 Aug 2026 13:30:41 +0000
Manifest this update: Mon 31 Aug 2026 13:25:41 +0000
Manifest next update: Tue 01 Sep 2026 16:39:41 +0000
Files and hashes: 1: 3130332e3232352e34342e302f32332d3234203d3e2034383030.roa (hash: 0VVs/sIJ5MrPj5d4PmHdMp47XW+kiXnvAYhD29LsMwA=)
2: 1B06933632B5A267F98A1716F3CB78EA840D6E65.crl (hash: 732lg96K4mPdDF2pQg8m1eyevifTzQ4Ww9RoRb7zp7w=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5ce6ac01-8eac-46c5-9469-35efa36099fd/0/1B06933632B5A267F98A1716F3CB78EA840D6E65.crl
rsync://rpki-rsync.idnic.net/repo/5ce6ac01-8eac-46c5-9469-35efa36099fd/0/1B06933632B5A267F98A1716F3CB78EA840D6E65.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1B06933632B5A267F98A1716F3CB78EA840D6E65.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 01 Sep 2026 16:39:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:fb:86:0d:a0:57:3c:46:13:ef:89:75:7a:54:67:47:ea:24:85:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1B06933632B5A267F98A1716F3CB78EA840D6E65
Validity
Not Before: Aug 31 13:25:41 2026 GMT
Not After : Sep 1 16:39:41 2026 GMT
Subject: CN=D9992476AD6DB8073ECC6B3C07FD6A75862B9ABB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1c:f1:7e:76:51:ea:d6:15:e0:ca:cd:fc:49:
ec:3b:4a:85:96:3d:21:97:e8:9b:30:f3:d9:87:58:
b3:2c:ec:11:4e:f7:17:1c:57:ba:20:78:6c:79:a2:
65:15:16:03:22:61:70:1a:5b:c0:15:c4:26:db:ae:
08:55:a6:c6:08:5f:1a:ba:23:3c:f2:fb:47:69:36:
8b:1c:6c:74:eb:ca:ff:ea:44:83:b9:c4:7a:45:16:
14:c0:70:db:75:88:1c:5f:8b:f9:d0:3a:c0:01:16:
4d:c4:0c:ee:84:3a:dc:7e:8c:b3:88:37:a8:18:b2:
f4:28:46:98:ad:f6:1a:9c:13:47:bb:38:54:8d:6b:
4e:1b:5e:99:88:00:70:c1:e2:93:88:c2:f0:eb:9c:
ef:53:ef:6a:86:39:3d:b5:1b:08:ad:ea:80:9b:21:
c6:e3:bd:f4:c4:f6:39:f3:4d:3a:f4:cb:b6:00:8c:
da:52:49:57:9f:62:e5:34:be:15:71:82:da:05:91:
34:da:b9:7a:20:8e:8b:b0:d1:b7:31:2c:3f:dc:10:
fc:89:e3:f9:28:15:c8:f3:d2:a5:07:d7:fa:31:04:
5d:4b:7d:3a:cb:45:2a:11:6b:fe:ea:61:4a:5e:fe:
69:65:83:92:9c:4d:c9:cf:e4:a5:da:fc:4a:ca:c7:
b7:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:99:24:76:AD:6D:B8:07:3E:CC:6B:3C:07:FD:6A:75:86:2B:9A:BB
X509v3 Authority Key Identifier:
keyid:1B:06:93:36:32:B5:A2:67:F9:8A:17:16:F3:CB:78:EA:84:0D:6E:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5ce6ac01-8eac-46c5-9469-35efa36099fd/0/1B06933632B5A267F98A1716F3CB78EA840D6E65.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1B06933632B5A267F98A1716F3CB78EA840D6E65.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5ce6ac01-8eac-46c5-9469-35efa36099fd/0/1B06933632B5A267F98A1716F3CB78EA840D6E65.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:35:ab:be:d3:1f:25:f2:ed:c9:ed:7f:44:6a:d6:db:a4:4f:
9e:b0:28:d5:3b:34:06:d5:a1:47:13:57:17:20:64:01:65:13:
de:84:d2:90:bd:fb:bc:61:ee:28:c7:61:3f:e4:e5:39:f6:30:
b3:e8:11:10:9d:56:a6:5b:b1:95:2e:67:3b:32:5d:f5:7e:cb:
f7:bc:f0:33:be:a4:74:91:34:66:fc:46:1f:74:9c:87:7f:35:
bc:a4:8d:b5:d3:c1:68:4e:1b:8a:53:9c:6b:7a:8c:66:9f:9c:
e9:80:9b:6e:cf:45:fc:67:b6:0c:a2:4c:67:36:2e:4f:a0:05:
00:19:e6:aa:d5:ee:e1:31:af:7f:48:ca:b9:02:e6:91:52:c7:
68:5c:05:7f:68:f7:51:1b:87:cc:d6:64:53:b1:98:2f:83:ed:
ba:f0:36:aa:77:20:d4:ec:ff:0f:6a:07:30:31:53:7e:84:45:
51:37:13:eb:80:9d:13:1d:bf:7d:dc:a2:26:d2:5a:5c:4c:97:
57:3e:48:98:1d:19:e6:c1:a3:55:f9:db:16:a3:7b:cd:a6:45:
cc:92:1c:50:c3:20:3d:e4:32:04:eb:d9:61:3c:8e:c7:a2:e0:
21:1f:31:ab:45:28:99:a4:e0:3a:1e:a3:c1:c5:07:0c:b4:30:
1d:a4:ef:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 06:22:13 2026 by rpki-client