
$ rpki-client -vvf rpki-rsync.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/1/1D4E21B5B06FE9A04643A702C72B9616D450DE8E.mft
File: 1D4E21B5B06FE9A04643A702C72B9616D450DE8E.mft (raw, json)
Hash identifier: 6x5MmgE6FOUrjouAazMIsD58eTw2j/k8g+NwlxFHzY4=
Subject key identifier: 16:ED:BF:8E:8C:55:A7:DE:8F:74:37:43:A7:31:A5:6C:EA:8A:BC:F2
Authority key identifier: 1D:4E:21:B5:B0:6F:E9:A0:46:43:A7:02:C7:2B:96:16:D4:50:DE:8E
Certificate issuer: /CN=1D4E21B5B06FE9A04643A702C72B9616D450DE8E
Certificate serial: 0A9A6546689529602582710539745EBE0EF69C30
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D4E21B5B06FE9A04643A702C72B9616D450DE8E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/1/1D4E21B5B06FE9A04643A702C72B9616D450DE8E.mft
Manifest number: 3F
Signing time: Thu 18 Jun 2026 06:19:55 +0000
Manifest this update: Thu 18 Jun 2026 06:14:55 +0000
Manifest next update: Fri 19 Jun 2026 06:24:55 +0000
Files and hashes: 1: 3130332e3232382e31382e302f32342d3234203d3e20313530393835.roa (hash: SYMIAQW6lQfm+rZplODVm3xwEprXIfjqtxhwRoNnM10=)
2: 1D4E21B5B06FE9A04643A702C72B9616D450DE8E.crl (hash: SG/qPKTi5ujortzHdpn66o6fKQbzFPtSp7U4M60WwCw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/1/1D4E21B5B06FE9A04643A702C72B9616D450DE8E.crl
rsync://rpki-rsync.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/1/1D4E21B5B06FE9A04643A702C72B9616D450DE8E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D4E21B5B06FE9A04643A702C72B9616D450DE8E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 06:24:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:9a:65:46:68:95:29:60:25:82:71:05:39:74:5e:be:0e:f6:9c:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1D4E21B5B06FE9A04643A702C72B9616D450DE8E
Validity
Not Before: Jun 18 06:14:55 2026 GMT
Not After : Jun 19 06:24:55 2026 GMT
Subject: CN=16EDBF8E8C55A7DE8F743743A731A56CEA8ABCF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:dd:a9:12:a5:06:81:98:f5:ad:52:d0:17:a3:
28:f6:c6:5c:ca:c5:78:67:de:f3:f1:67:d6:7e:73:
f4:76:87:40:5a:14:c5:88:e6:47:cf:33:42:93:09:
aa:98:4c:c5:3c:2b:f5:6c:be:d5:4b:0c:44:50:a7:
4a:ab:6e:67:e9:d8:e0:57:45:87:1b:ca:f9:7a:3f:
73:bb:9a:5c:ac:8c:74:0a:12:d4:b6:ac:a9:70:26:
e3:71:34:36:5e:e8:a2:06:a8:d2:50:c5:01:cd:4d:
5f:65:b1:f6:47:3c:e7:52:ab:d7:20:22:59:9c:77:
86:50:d7:a1:62:2e:7f:76:c0:58:2d:13:5c:4d:89:
87:f9:39:5f:4b:2b:4e:1d:bd:67:ec:21:ef:3b:20:
a9:b5:c4:4c:05:fe:da:56:2e:7a:f1:6c:f9:67:c5:
85:8c:d8:e1:45:a4:4c:f9:ce:20:2c:81:e8:6b:9f:
3b:30:2e:1a:86:61:3a:1c:00:18:ec:b8:56:8f:8d:
11:90:60:05:60:6a:46:ce:8a:f9:08:40:27:89:f1:
72:15:06:ac:8d:34:9e:8c:c6:30:19:79:0e:45:9e:
2a:58:cc:22:7f:8a:e0:75:87:c4:20:e2:61:c1:c5:
8c:17:41:c3:67:78:22:da:ef:5e:91:cc:d3:2a:17:
79:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:ED:BF:8E:8C:55:A7:DE:8F:74:37:43:A7:31:A5:6C:EA:8A:BC:F2
X509v3 Authority Key Identifier:
keyid:1D:4E:21:B5:B0:6F:E9:A0:46:43:A7:02:C7:2B:96:16:D4:50:DE:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/1/1D4E21B5B06FE9A04643A702C72B9616D450DE8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D4E21B5B06FE9A04643A702C72B9616D450DE8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/1/1D4E21B5B06FE9A04643A702C72B9616D450DE8E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:04:e1:0b:07:07:1e:32:0d:7b:0c:3f:33:84:81:d7:5b:32:
f3:27:4a:46:0c:cb:08:fb:92:24:26:2a:07:06:fc:24:1a:6d:
30:82:ba:f9:03:95:0c:61:14:f8:58:df:2a:29:b9:42:47:6c:
76:4e:94:cd:55:b1:ec:36:18:38:88:61:16:9a:a2:18:82:eb:
9d:ff:9f:d4:0c:c3:ed:24:84:70:76:93:47:f1:fd:b4:54:90:
8e:b8:c1:cf:11:4d:91:35:55:4f:b4:c2:4a:f5:d3:b8:68:21:
00:93:c4:8a:f9:f2:8a:f0:71:7d:be:13:48:0d:fe:73:73:17:
76:02:8a:d6:a2:cd:42:51:10:8d:95:4b:79:4f:8c:48:69:e6:
91:d3:6b:b6:b8:5b:04:4c:f5:91:c3:26:08:5e:2c:18:a4:48:
90:bc:f3:38:3a:f8:0e:fc:20:8d:2f:03:e0:98:92:35:63:ff:
6e:67:87:20:a1:7f:c0:19:da:3d:16:c7:1d:94:9a:65:da:44:
b8:d3:89:20:8a:36:fd:a2:05:21:65:da:12:cf:55:e5:5a:2f:
4d:10:28:dc:17:a4:fd:d7:f4:6c:96:dc:cb:2d:31:e9:c4:33:
7f:2f:bc:e1:50:ae:49:34:4d:ed:fe:61:6a:a5:f8:4c:c9:a7:
cf:ab:00:de
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUCpplRmiVKWAlgnEFOXRevg72nDAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUQ0RTIxQjVCMDZGRTlBMDQ2NDNBNzAyQzcyQjk2MTZE
NDUwREU4RTAeFw0yNjA2MTgwNjE0NTVaFw0yNjA2MTkwNjI0NTVaMDMxMTAvBgNV
BAMTKDE2RURCRjhFOEM1NUE3REU4Rjc0Mzc0M0E3MzFBNTZDRUE4QUJDRjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd3akSpQaBmPWtUtAXoyj2xlzK
xXhn3vPxZ9Z+c/R2h0BaFMWI5kfPM0KTCaqYTMU8K/VsvtVLDERQp0qrbmfp2OBX
RYcbyvl6P3O7mlysjHQKEtS2rKlwJuNxNDZe6KIGqNJQxQHNTV9lsfZHPOdSq9cg
Ilmcd4ZQ16FiLn92wFgtE1xNiYf5OV9LK04dvWfsIe87IKm1xEwF/tpWLnrxbPln
xYWM2OFFpEz5ziAsgehrnzswLhqGYTocABjsuFaPjRGQYAVgakbOivkIQCeJ8XIV
BqyNNJ6MxjAZeQ5FnipYzCJ/iuB1h8Qg4mHBxYwXQcNneCLa716RzNMqF3mzAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUFu2/joxVp96PdDdDpzGlbOqKvPIwHwYDVR0j
BBgwFoAUHU4htbBv6aBGQ6cCxyuWFtRQ3o4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OTMyOTc5M2UtOGYxOC00MTE2LTkyNjgtYTEzM2RhZjExY2VmLzEvMUQ0RTIxQjVC
MDZGRTlBMDQ2NDNBNzAyQzcyQjk2MTZENDUwREU4RS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8xRDRFMjFCNUIwNkZFOUEwNDY0M0E3MDJDNzJCOTYxNkQ0NTBE
RThFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTMyOTc5M2UtOGYxOC00MTE2LTky
NjgtYTEzM2RhZjExY2VmLzEvMUQ0RTIxQjVCMDZGRTlBMDQ2NDNBNzAyQzcyQjk2
MTZENDUwREU4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABME4QsHBx4yDXsMPzOEgddbMvMnSkYMywj7
kiQmKgcG/CQabTCCuvkDlQxhFPhY3yopuUJHbHZOlM1Vsew2GDiIYRaaohiC653/
n9QMw+0khHB2k0fx/bRUkI64wc8RTZE1VU+0wkr107hoIQCTxIr58orwcX2+E0gN
/nNzF3YCitaizUJREI2VS3lPjEhp5pHTa7a4WwRM9ZHDJgheLBikSJC88zg6+A78
II0vA+CYkjVj/25nhyChf8AZ2j0Wxx2UmmXaRLjTiSCKNv2iBSFl2hLPVeVaL00Q
KNwXpP3X9GyW3MstMenEM38vvOFQrkk0Te3+YWql+EzJp8+rAN4=
-----END CERTIFICATE-----
Generated at Thu Jun 18 20:19:38 2026 by rpki-client