
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/C1D5CACB2869A45074AA2EEF0AAF440A043D578A.mft
File: C1D5CACB2869A45074AA2EEF0AAF440A043D578A.mft (raw, json)
Hash identifier: e9JV3/AedN5lBJNGKFqNmBwLxD38NCFhxTZ2J0kKI4c=
Subject key identifier: 9F:35:89:19:24:D0:E3:C0:45:3E:C6:8A:C1:0C:8F:32:CE:E1:BD:7D
Authority key identifier: C1:D5:CA:CB:28:69:A4:50:74:AA:2E:EF:0A:AF:44:0A:04:3D:57:8A
Certificate issuer: /CN=C1D5CACB2869A45074AA2EEF0AAF440A043D578A
Certificate serial: 5241F69A2A0F613B487DB55D0828ACAFFDA552B1
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1D5CACB2869A45074AA2EEF0AAF440A043D578A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/C1D5CACB2869A45074AA2EEF0AAF440A043D578A.mft
Manifest number: DE
Signing time: Wed 14 Oct 2026 22:53:23 +0000
Manifest this update: Wed 14 Oct 2026 22:48:23 +0000
Manifest next update: Fri 16 Oct 2026 02:36:23 +0000
Files and hashes: 1: 3130332e3138302e3139342e302f32342d3234203d3e2039333431.roa (hash: /H7mHY2xJ6jF9zjh/SzqcS82iVWznIKFIdaRtKBLuXI=)
2: 3130332e3138302e3139342e302f32332d3233203d3e2039333431.roa (hash: LmAAYXQDd7PTPcaMEiTttR5qd67toE25WQOCNYRTLdg=)
3: C1D5CACB2869A45074AA2EEF0AAF440A043D578A.crl (hash: lhrQ/cWUMWp9CLigxDKQ3maLoPfc+yWQVDhmhcdoBVk=)
4: 3130332e3138302e3139352e302f32342d3234203d3e2039333431.roa (hash: e/a2UZPUi40DIwFDiEkD+J2tqAc+iu6pnL0srTkWawk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/C1D5CACB2869A45074AA2EEF0AAF440A043D578A.crl
rsync://rpki-rsync.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/C1D5CACB2869A45074AA2EEF0AAF440A043D578A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1D5CACB2869A45074AA2EEF0AAF440A043D578A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 02:36:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:41:f6:9a:2a:0f:61:3b:48:7d:b5:5d:08:28:ac:af:fd:a5:52:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C1D5CACB2869A45074AA2EEF0AAF440A043D578A
Validity
Not Before: Oct 14 22:48:23 2026 GMT
Not After : Oct 16 02:36:23 2026 GMT
Subject: CN=9F35891924D0E3C0453EC68AC10C8F32CEE1BD7D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5a:d5:72:32:82:f5:5d:83:c8:eb:12:57:d7:
ca:96:7b:4d:57:86:08:f1:b4:3a:22:e1:5d:36:19:
67:3b:47:7a:ff:de:40:ed:be:06:7c:99:6b:7c:52:
ee:86:58:de:19:17:11:05:d0:1e:ab:21:9c:8f:9b:
b7:98:56:e3:03:bf:f2:2e:91:1d:35:7e:b8:c5:a9:
b0:10:e4:ae:51:ca:c6:92:0b:aa:c3:6f:a1:28:4f:
3f:01:fe:55:cf:53:de:62:a3:6c:b0:78:b7:27:fa:
18:7a:3c:a5:8e:89:fe:eb:45:3c:75:4f:c5:e3:40:
10:68:45:30:75:b6:a9:e6:80:09:5e:eb:29:50:61:
91:a0:9d:a8:98:1f:dc:b1:a4:27:89:32:89:d7:4f:
95:fa:a7:11:d4:7a:80:f6:c2:0a:95:62:a0:27:73:
d6:ef:86:1f:28:18:1d:42:eb:a3:d5:32:54:30:dd:
7a:cf:f0:5f:15:ae:32:10:3c:74:8f:1d:a7:df:e0:
10:d5:b9:d5:86:38:45:a2:02:4d:e7:54:83:76:c1:
41:c1:71:ea:8e:de:df:5c:69:e8:24:1c:f5:ab:74:
f7:a9:c5:ac:74:7e:14:de:48:5f:03:a2:93:42:04:
4b:c3:c9:3e:ca:1e:b6:16:b1:ac:15:2e:b2:d5:9d:
0f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:35:89:19:24:D0:E3:C0:45:3E:C6:8A:C1:0C:8F:32:CE:E1:BD:7D
X509v3 Authority Key Identifier:
keyid:C1:D5:CA:CB:28:69:A4:50:74:AA:2E:EF:0A:AF:44:0A:04:3D:57:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/C1D5CACB2869A45074AA2EEF0AAF440A043D578A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1D5CACB2869A45074AA2EEF0AAF440A043D578A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/C1D5CACB2869A45074AA2EEF0AAF440A043D578A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:f9:c5:d2:76:f7:49:8d:ad:a8:18:eb:35:7b:10:06:8d:07:
59:1a:1f:95:d2:05:1d:12:c5:ae:f4:a0:e0:f9:27:d7:40:8a:
8f:23:62:f9:50:18:af:03:a8:c8:26:6a:eb:58:fc:2d:24:74:
d3:47:ac:e2:56:0c:83:6a:d4:f9:f8:89:c0:52:b6:b6:14:de:
e3:3b:69:57:34:16:5c:9b:71:ce:a2:6d:2d:f8:53:bc:3a:54:
40:11:51:ae:f8:5c:99:fc:06:48:15:eb:6c:39:72:6d:05:93:
ff:72:90:40:ba:b3:4c:53:2a:22:cb:f2:d9:f7:0c:9e:81:22:
f2:5f:3d:3a:fb:51:14:53:41:60:b3:65:2f:a1:b2:52:90:4d:
1a:b9:70:af:85:35:7f:1e:6b:eb:45:89:b9:29:a5:d0:50:8a:
73:3c:de:63:93:c5:28:de:9f:39:6e:25:e1:36:0c:48:6a:bf:
a1:c4:63:5e:f1:11:e9:81:48:e5:77:7a:70:30:20:db:a9:f8:
52:17:e1:87:61:01:20:5d:1b:07:5e:09:de:90:b2:02:84:07:
b5:e3:df:30:6c:a4:4e:6c:8d:32:a6:4c:37:d2:eb:5e:b3:fc:
62:fd:b8:93:a8:5f:27:2f:83:13:9b:f3:b2:26:bc:ed:9c:e1:
2b:9f:bf:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 19:06:38 2026 by rpki-client