
$ rpki-client -vvf rpki-rsync.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/1/1D4E21B5B06FE9A04643A702C72B9616D450DE8E.mft
File: 1D4E21B5B06FE9A04643A702C72B9616D450DE8E.mft (raw, json)
Hash identifier: 4gw6a2PsPj1EEteOjGGtFqmCNqg91OXRp6dtjAiH59c=
Subject key identifier: 33:79:F2:8C:C3:EC:5F:15:1F:78:40:94:44:3A:5F:D2:23:88:D6:27
Authority key identifier: 1D:4E:21:B5:B0:6F:E9:A0:46:43:A7:02:C7:2B:96:16:D4:50:DE:8E
Certificate issuer: /CN=1D4E21B5B06FE9A04643A702C72B9616D450DE8E
Certificate serial: 1E826CB690E44BA24C4E48034A32CD4E3A1A5A20
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D4E21B5B06FE9A04643A702C72B9616D450DE8E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/1/1D4E21B5B06FE9A04643A702C72B9616D450DE8E.mft
Manifest number: 7C
Signing time: Sun 02 Aug 2026 21:28:20 +0000
Manifest this update: Sun 02 Aug 2026 21:23:20 +0000
Manifest next update: Mon 03 Aug 2026 22:55:20 +0000
Files and hashes: 1: 3130332e3232382e31382e302f32342d3234203d3e20313530393835.roa (hash: SYMIAQW6lQfm+rZplODVm3xwEprXIfjqtxhwRoNnM10=)
2: 1D4E21B5B06FE9A04643A702C72B9616D450DE8E.crl (hash: sjbrFFVyXcQ+OPXwrwVTkEVMGs3Zeq84NKtpRpQNUJc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/1/1D4E21B5B06FE9A04643A702C72B9616D450DE8E.crl
rsync://rpki-rsync.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/1/1D4E21B5B06FE9A04643A702C72B9616D450DE8E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D4E21B5B06FE9A04643A702C72B9616D450DE8E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 08:45:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:82:6c:b6:90:e4:4b:a2:4c:4e:48:03:4a:32:cd:4e:3a:1a:5a:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1D4E21B5B06FE9A04643A702C72B9616D450DE8E
Validity
Not Before: Aug 2 21:23:20 2026 GMT
Not After : Aug 3 22:55:20 2026 GMT
Subject: CN=3379F28CC3EC5F151F784094443A5FD22388D627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b9:51:57:ea:ef:ab:d9:e4:47:bf:79:cf:ce:
41:d6:da:13:1f:16:0f:60:a3:16:be:30:5c:4b:21:
b0:3e:02:1c:78:e1:6c:96:60:89:4e:95:24:00:a2:
27:45:96:6f:16:e3:69:ec:d6:35:b1:54:54:9c:4f:
be:6e:44:60:df:92:2d:c0:ba:e3:e6:68:e2:7f:1a:
29:ef:a5:0a:f9:a0:77:78:a3:12:e3:92:13:91:84:
9b:fd:37:89:9f:53:b7:b6:6c:52:b0:88:64:38:25:
a3:1d:e0:72:0d:3f:b9:bd:09:bf:0a:9b:44:46:b1:
a1:f1:7e:68:2a:1a:f6:db:44:d8:f9:18:6e:97:dc:
65:bd:f9:3a:94:57:56:a8:7e:2f:c2:ac:c2:f1:ff:
6d:46:2a:79:8e:ae:66:3f:b0:11:96:cd:8e:d1:99:
39:44:21:7f:8b:d3:c7:b9:8c:e2:2a:b1:b0:ce:da:
83:93:41:38:1e:b3:88:3f:9c:ec:ce:69:e0:8d:29:
d6:d3:4f:e9:41:a6:63:8b:64:49:db:19:85:86:fa:
cd:10:91:13:00:60:da:8c:ab:ec:0e:17:3e:3d:29:
cd:43:d8:76:bb:c1:ea:1a:81:f6:62:81:a3:8c:80:
90:be:f7:d5:a0:86:ad:63:b8:71:c4:0e:92:d7:10:
a5:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:79:F2:8C:C3:EC:5F:15:1F:78:40:94:44:3A:5F:D2:23:88:D6:27
X509v3 Authority Key Identifier:
keyid:1D:4E:21:B5:B0:6F:E9:A0:46:43:A7:02:C7:2B:96:16:D4:50:DE:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/1/1D4E21B5B06FE9A04643A702C72B9616D450DE8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D4E21B5B06FE9A04643A702C72B9616D450DE8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/1/1D4E21B5B06FE9A04643A702C72B9616D450DE8E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:9e:33:17:7d:b8:ad:c6:1f:ba:7c:9a:e0:67:18:a3:2f:6f:
d4:e7:8c:91:ac:31:90:ee:97:b3:f4:d0:86:15:4a:8a:6d:91:
9a:b5:53:6b:12:74:8d:83:d4:c2:6e:09:9f:b4:40:51:58:4f:
54:43:12:0b:08:a6:ed:f0:ed:0d:39:4c:6f:5f:85:46:ae:51:
01:ec:44:c2:79:be:56:cf:36:b0:9a:27:1e:66:c4:a9:74:2c:
05:27:97:af:53:e6:e5:0e:99:5c:12:dc:35:9b:87:02:1b:c8:
a2:56:60:10:75:8f:8c:49:9f:c8:b2:46:45:a5:8d:88:cb:d3:
a3:16:2d:f3:f2:98:e6:91:c7:73:12:b4:70:88:31:18:fe:5d:
07:a7:3f:41:82:b6:ed:22:62:e5:7e:51:5d:53:90:2a:12:7e:
f5:33:c3:a7:dc:2d:b1:7e:a5:f1:c4:5d:8d:9f:ce:11:1b:2e:
50:5c:72:b5:23:48:62:bd:92:2e:5d:c3:e9:ec:d6:5f:e9:64:
d9:a7:ba:80:48:9c:b1:ef:2b:10:58:d8:f2:87:97:32:6a:ee:
7c:b0:c4:36:1e:b7:fd:f9:92:3a:a8:fc:b9:02:b3:df:8f:7d:
90:c4:2a:af:a4:e5:93:4a:e4:20:c6:96:00:e9:24:14:82:de:
f0:fa:10:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 2 22:52:24 2026 by rpki-client