
$ rpki-client -vvf rpki-rsync.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/1D911706C9A5E8A4993B1AD519498DE9F609FD97.mft
File: 1D911706C9A5E8A4993B1AD519498DE9F609FD97.mft (raw, json)
Hash identifier: 3dmQJSwJmT0tqI5eI/OXHPeN/33gIxM2EYU8PYnOY7I=
Subject key identifier: 63:18:92:6F:54:C3:8D:0A:32:C7:3C:D3:F0:DA:80:CF:20:F9:01:95
Authority key identifier: 1D:91:17:06:C9:A5:E8:A4:99:3B:1A:D5:19:49:8D:E9:F6:09:FD:97
Certificate issuer: /CN=1D911706C9A5E8A4993B1AD519498DE9F609FD97
Certificate serial: 1A39C053ECF8250D3EC1EE36CCBD39A3104E0132
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1D911706C9A5E8A4993B1AD519498DE9F609FD97.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/1D911706C9A5E8A4993B1AD519498DE9F609FD97.mft
Manifest number: 7C
Signing time: Sun 02 Aug 2026 06:20:10 +0000
Manifest this update: Sun 02 Aug 2026 06:15:10 +0000
Manifest next update: Mon 03 Aug 2026 09:11:10 +0000
Files and hashes: 1: 1D911706C9A5E8A4993B1AD519498DE9F609FD97.crl (hash: ciWV6HrVajVfMmvrO+XNSTDoyV5a7jxwmjOKj06hk1A=)
2: 3135372e36362e35372e302f32342d3234203d3e20313530393835.roa (hash: F4rX5kdBMIK+q1JAnOl0J4l31YWcV9qdCJ59RuEth5I=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/1D911706C9A5E8A4993B1AD519498DE9F609FD97.crl
rsync://rpki-rsync.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/1D911706C9A5E8A4993B1AD519498DE9F609FD97.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1D911706C9A5E8A4993B1AD519498DE9F609FD97.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 09:11:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:39:c0:53:ec:f8:25:0d:3e:c1:ee:36:cc:bd:39:a3:10:4e:01:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1D911706C9A5E8A4993B1AD519498DE9F609FD97
Validity
Not Before: Aug 2 06:15:10 2026 GMT
Not After : Aug 3 09:11:10 2026 GMT
Subject: CN=6318926F54C38D0A32C73CD3F0DA80CF20F90195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e3:f1:c8:66:a2:72:f2:57:02:fc:3e:af:c5:
7f:f2:11:7e:80:89:ea:2f:ec:cf:e6:dd:c7:49:df:
0e:f3:5d:14:65:1e:aa:6d:73:10:2b:be:da:9f:7f:
3a:b9:c1:2a:de:1b:83:1a:82:ab:ff:7a:8e:49:fd:
af:34:b5:a5:3a:47:c2:ef:d4:c4:a9:c0:6d:13:e0:
fd:41:06:e7:0f:2a:d8:fa:83:94:0b:3a:85:34:83:
bc:32:21:64:72:09:8f:5b:0f:03:52:6a:de:ea:e8:
25:5f:21:e9:7a:4a:2c:b8:76:80:9b:8b:64:bf:f7:
97:01:a9:5f:e8:9d:05:d6:4e:9e:97:8e:f9:11:09:
e4:ec:3e:02:0e:1a:93:3a:e4:40:ca:11:0a:87:01:
c2:fc:b2:75:b8:17:e8:64:af:c2:aa:a2:b9:73:4b:
a0:08:b8:33:36:2c:ef:91:a7:ae:c3:2b:c7:ce:8f:
a2:24:e8:3a:ea:ee:e9:91:be:cb:38:c2:5b:8b:26:
2e:f5:c6:6e:1c:3d:45:a8:4e:33:66:0d:70:8d:1e:
77:d5:d8:37:d9:70:47:2d:23:81:4d:d8:c6:6d:d1:
f4:bc:f0:bc:4e:dc:3f:59:ff:d4:65:89:7a:e3:e2:
b2:6c:a1:86:f7:71:34:be:1a:c6:6c:c9:ff:16:7a:
fa:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:18:92:6F:54:C3:8D:0A:32:C7:3C:D3:F0:DA:80:CF:20:F9:01:95
X509v3 Authority Key Identifier:
keyid:1D:91:17:06:C9:A5:E8:A4:99:3B:1A:D5:19:49:8D:E9:F6:09:FD:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/1D911706C9A5E8A4993B1AD519498DE9F609FD97.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1D911706C9A5E8A4993B1AD519498DE9F609FD97.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/1D911706C9A5E8A4993B1AD519498DE9F609FD97.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:63:02:fe:ed:01:f7:53:99:9b:22:0e:15:40:e8:9e:d3:33:
e2:92:cb:94:d1:f6:e2:ba:c3:96:ad:99:02:54:07:10:a4:4b:
5c:f0:0c:20:72:57:23:66:f1:64:54:d4:17:a0:68:4f:a0:22:
c3:0e:7d:22:89:6a:18:d2:8c:ab:cd:f8:ad:c2:6c:51:45:e8:
89:13:f8:70:9a:55:b4:4e:8f:49:e9:63:7c:de:05:34:5f:00:
68:2a:2f:e2:db:4a:e9:cd:e7:d8:2f:bc:3b:28:be:4d:40:c2:
d6:3b:73:fe:82:40:3b:95:35:54:3d:66:36:02:3d:76:42:44:
e9:12:1c:f9:47:c3:ca:93:b2:6b:7e:34:25:73:cb:5b:ee:7e:
7e:51:b5:6f:45:df:26:08:41:e6:18:9c:4a:af:3e:57:a0:07:
42:ef:e8:d5:74:77:66:b9:f0:30:3e:aa:09:a9:4a:1b:01:2e:
ed:12:a8:6c:8d:65:ae:ee:49:38:7a:5b:6b:17:8e:4a:5d:58:
14:69:c8:02:4e:e2:7f:34:e0:62:04:21:85:d8:46:7c:19:92:
27:1c:57:f9:a8:0b:da:18:cf:ba:69:fd:8e:b1:b5:43:57:f8:
2b:15:f4:de:f4:6b:38:8f:2f:03:e9:9b:88:0a:41:1e:2a:4c:
fd:87:e0:8c
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUGjnAU+z4JQ0+we42zL05oxBOATIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUQ5MTE3MDZDOUE1RThBNDk5M0IxQUQ1MTk0OThERTlG
NjA5RkQ5NzAeFw0yNjA4MDIwNjE1MTBaFw0yNjA4MDMwOTExMTBaMDMxMTAvBgNV
BAMTKDYzMTg5MjZGNTRDMzhEMEEzMkM3M0NEM0YwREE4MENGMjBGOTAxOTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI4/HIZqJy8lcC/D6vxX/yEX6A
ieov7M/m3cdJ3w7zXRRlHqptcxArvtqffzq5wSreG4Magqv/eo5J/a80taU6R8Lv
1MSpwG0T4P1BBucPKtj6g5QLOoU0g7wyIWRyCY9bDwNSat7q6CVfIel6Siy4doCb
i2S/95cBqV/onQXWTp6XjvkRCeTsPgIOGpM65EDKEQqHAcL8snW4F+hkr8Kqorlz
S6AIuDM2LO+Rp67DK8fOj6Ik6Drq7umRvss4wluLJi71xm4cPUWoTjNmDXCNHnfV
2DfZcEctI4FN2MZt0fS88LxO3D9Z/9RliXrj4rJsoYb3cTS+GsZsyf8WevqhAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUYxiSb1TDjQoyxzzT8NqAzyD5AZUwHwYDVR0j
BBgwFoAUHZEXBsml6KSZOxrVGUmN6fYJ/ZcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OTMyOTc5M2UtOGYxOC00MTE2LTkyNjgtYTEzM2RhZjExY2VmLzAvMUQ5MTE3MDZD
OUE1RThBNDk5M0IxQUQ1MTk0OThERTlGNjA5RkQ5Ny5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC8xRDkxMTcwNkM5QTVFOEE0OTkzQjFBRDUxOTQ5OERFOUY2MDlG
RDk3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTMyOTc5M2UtOGYxOC00MTE2LTky
NjgtYTEzM2RhZjExY2VmLzAvMUQ5MTE3MDZDOUE1RThBNDk5M0IxQUQ1MTk0OThE
RTlGNjA5RkQ5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBACpjAv7tAfdTmZsiDhVA6J7TM+KSy5TR9uK6
w5atmQJUBxCkS1zwDCByVyNm8WRU1BegaE+gIsMOfSKJahjSjKvN+K3CbFFF6IkT
+HCaVbROj0npY3zeBTRfAGgqL+LbSunN59gvvDsovk1AwtY7c/6CQDuVNVQ9ZjYC
PXZCROkSHPlHw8qTsmt+NCVzy1vufn5RtW9F3yYIQeYYnEqvPlegB0Lv6NV0d2a5
8DA+qgmpShsBLu0SqGyNZa7uSTh6W2sXjkpdWBRpyAJO4n804GIEIYXYRnwZkicc
V/moC9oYz7pp/Y6xtUNX+CsV9N70aziPLwPpm4gKQR4qTP2H4Iw=
-----END CERTIFICATE-----
Generated at Sun Aug 2 20:35:52 2026 by rpki-client