
$ rpki-client -vvf rpki-rsync.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/1D911706C9A5E8A4993B1AD519498DE9F609FD97.mft
File: 1D911706C9A5E8A4993B1AD519498DE9F609FD97.mft (raw, json)
Hash identifier: E8KzDeRKgnItQAdOu/teUfL8Gdd4wQV+fRAfgwFyPLM=
Subject key identifier: 6E:6D:4C:15:58:FA:8E:3D:9F:1B:EE:87:85:54:A0:90:0D:D8:D4:4B
Authority key identifier: 1D:91:17:06:C9:A5:E8:A4:99:3B:1A:D5:19:49:8D:E9:F6:09:FD:97
Certificate issuer: /CN=1D911706C9A5E8A4993B1AD519498DE9F609FD97
Certificate serial: 1D2659AC181325F9B5D2C571810327B964452DAB
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1D911706C9A5E8A4993B1AD519498DE9F609FD97.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/1D911706C9A5E8A4993B1AD519498DE9F609FD97.mft
Manifest number: 3F
Signing time: Thu 18 Jun 2026 02:04:23 +0000
Manifest this update: Thu 18 Jun 2026 01:59:23 +0000
Manifest next update: Fri 19 Jun 2026 05:56:23 +0000
Files and hashes: 1: 1D911706C9A5E8A4993B1AD519498DE9F609FD97.crl (hash: yodnFHi0h/jHVkYiUqXMZkPhm1H43LeLqVNAVFOO3Zo=)
2: 3135372e36362e35372e302f32342d3234203d3e20313530393835.roa (hash: F4rX5kdBMIK+q1JAnOl0J4l31YWcV9qdCJ59RuEth5I=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/1D911706C9A5E8A4993B1AD519498DE9F609FD97.crl
rsync://rpki-rsync.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/1D911706C9A5E8A4993B1AD519498DE9F609FD97.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1D911706C9A5E8A4993B1AD519498DE9F609FD97.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 05:56:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:26:59:ac:18:13:25:f9:b5:d2:c5:71:81:03:27:b9:64:45:2d:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1D911706C9A5E8A4993B1AD519498DE9F609FD97
Validity
Not Before: Jun 18 01:59:23 2026 GMT
Not After : Jun 19 05:56:23 2026 GMT
Subject: CN=6E6D4C1558FA8E3D9F1BEE878554A0900DD8D44B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cf:f6:07:b9:6c:bf:0f:cc:50:15:04:2a:f1:
ce:be:06:33:f3:9d:2d:4d:28:38:44:0f:55:11:4a:
b1:ce:fb:c6:f4:00:74:07:7b:15:cd:a9:40:1a:b8:
6b:77:ea:92:cf:2d:d8:fc:48:87:db:0a:44:d5:d9:
2d:5c:b2:77:dd:b2:ed:64:53:3a:7b:ea:99:1f:a2:
78:80:32:b1:95:e2:0f:c8:54:a8:f6:3e:fa:10:90:
09:d5:00:cd:e3:a0:42:d5:79:81:89:d0:fc:12:ae:
68:71:66:1a:5a:ad:45:41:b1:c8:93:e0:74:4d:18:
69:20:c6:02:34:d6:ca:91:06:4e:b6:f8:07:5a:ce:
0f:f0:ed:9c:e3:91:e9:43:c7:48:39:d7:27:5b:79:
86:94:be:2a:00:95:21:c9:27:e7:ca:91:a7:6d:ef:
87:4f:38:57:94:fc:00:6f:55:e4:7e:be:b6:64:54:
9f:47:51:4b:89:4c:60:42:d6:d8:9e:dc:f8:4b:ca:
45:cb:66:04:81:8c:8a:fd:9e:92:15:dd:17:4f:53:
65:23:c2:6f:d4:21:d2:3e:14:e7:5a:70:e7:e3:a1:
e8:55:d0:69:17:98:f2:01:85:14:4c:99:a6:36:4f:
80:cd:52:84:21:f7:2e:17:ac:35:f9:aa:09:5c:07:
f2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:6D:4C:15:58:FA:8E:3D:9F:1B:EE:87:85:54:A0:90:0D:D8:D4:4B
X509v3 Authority Key Identifier:
keyid:1D:91:17:06:C9:A5:E8:A4:99:3B:1A:D5:19:49:8D:E9:F6:09:FD:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/1D911706C9A5E8A4993B1AD519498DE9F609FD97.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1D911706C9A5E8A4993B1AD519498DE9F609FD97.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/1D911706C9A5E8A4993B1AD519498DE9F609FD97.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:e1:02:b2:17:9a:11:4f:f5:c4:1e:52:29:51:e3:18:db:ec:
d3:3d:78:f7:44:f4:77:94:3f:eb:e3:e7:ff:67:be:f1:21:b7:
21:94:9a:f3:8b:15:3b:42:d4:13:41:71:10:a3:39:27:73:0a:
72:0e:5c:2c:03:5c:8f:c0:e2:01:6e:d5:3d:fc:9c:21:d0:97:
5e:4e:f2:c0:9c:b5:91:bd:7e:8a:4a:05:76:91:4f:a5:5b:89:
73:45:2c:d7:24:60:89:fb:10:4e:33:9f:d8:fd:c6:6e:2d:6c:
49:b8:63:f1:dc:a4:d0:fe:e7:cc:03:dc:16:08:8f:d3:ba:52:
32:8a:00:b4:55:c1:c4:b1:c0:0c:6f:8a:57:6d:2b:89:1c:25:
39:0e:8b:17:fa:6e:99:db:61:5e:ce:19:90:cc:8a:c7:4e:d1:
9e:48:97:c0:90:42:3e:fa:81:6b:cf:88:03:17:f3:49:72:22:
66:bc:81:b2:42:f9:95:e3:d0:55:77:84:a5:b0:7f:2f:e3:c7:
ea:db:59:64:68:31:5f:86:47:13:dc:dd:1c:ac:e9:c5:06:a1:
5b:91:2e:f0:47:18:a1:6d:f8:ca:20:d8:2e:09:e5:ee:5e:49:
6e:e5:ee:0e:39:34:ef:a1:14:00:2d:fa:c1:43:9f:1f:55:36:
4e:59:4f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 18 17:15:50 2026 by rpki-client