
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD.mft
File: 1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD.mft (raw, json)
Hash identifier: wuhU/Rqrd45nSj2H+JH3eF7dnmGNR7ONHIQZ2bFGbm8=
Subject key identifier: 9D:17:A4:A3:03:CA:EC:C2:DD:2C:60:63:83:9A:AE:43:D1:96:53:27
Authority key identifier: 1D:AC:DC:41:C2:8C:E5:C3:8F:42:51:C6:14:DE:10:0A:3F:1E:FC:AD
Certificate issuer: /CN=1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD
Certificate serial: 29A797D66BD879997E2FBB02F896A2ADB5468123
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD.mft
Manifest number: B8
Signing time: Wed 16 Sep 2026 16:39:38 +0000
Manifest this update: Wed 16 Sep 2026 16:34:38 +0000
Manifest next update: Thu 17 Sep 2026 20:04:38 +0000
Files and hashes: 1: 323430343a333930303a313939323a3a2f34382d3438203d3e203338333230.roa (hash: YLpNL78dS+hrdN7t5xzPdvLY1lNxrdFsxq9VzIbxRC4=)
2: 3132322e3134342e342e302f32322d3234203d3e203338333230.roa (hash: kPTHx+hWG+LDuE6CeeYUrKB6mmUM7VHlb/As0JV8R5Y=)
3: 3230332e3137332e38392e302f32342d3234203d3e203338333230.roa (hash: W4OxxH0PyquWwT3oVoi6TfL9I1tMai3D4cWcBmXRIg8=)
4: 3131392e3131302e37322e302f32322d3234203d3e203338333230.roa (hash: CuN94QnhhFu2NHfTipRrUMIPrCdOqqGtN3MEo0A8ZXk=)
5: 3137352e3130332e35332e302f32342d3234203d3e203338333230.roa (hash: pGgVnEQzqbPIt26vgoTmZkdvlEMdwjiT5NsiAgvS52I=)
6: 3230332e3137332e39302e302f32332d3234203d3e20313339343630.roa (hash: AyON9uU/2WhJhJicI2tnaqaN5CXoHp/HaUSy7Pc2unw=)
7: 3137352e3130332e34352e302f32342d3234203d3e203338333230.roa (hash: 6jdofG9Wtkc0Blm7BytpJS1luG4FVORdWSiFv1pRnGo=)
8: 3131392e3131302e36382e302f32322d3234203d3e203338333230.roa (hash: WvBKlshkFphXVWmpSdt/+evxZdbmBKGdDC7K6rMtEn8=)
9: 1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD.crl (hash: 9RBNTIXZ2PXW95I0gHHRyxOp4XtcBmYp4k3RpJ1RmdY=)
10: 3230332e3137332e38382e302f32342d3234203d3e20313339343630.roa (hash: Rpm98TP8lpn5L0MciL+HgBtsQPS4AoEpZ3E+uKifZME=)
11: 323430343a333930303a313a3a2f34382d3438203d3e203338333230.roa (hash: 5B5+pc329D1iQV3SlgDy544BDthefmzEqIq6UspEPv0=)
12: 3137352e3130332e35372e302f32342d3234203d3e203338333230.roa (hash: zQ39zo17bNTdHhQWmkLn9luFrVhzUw3k/+vmz2gMem8=)
13: 3131392e3131302e36342e302f32322d3234203d3e203338333230.roa (hash: ZERu879JSfInetFD6X8u09OHoVJYMOwx32bifQ58o0I=)
14: 3137352e3130332e33332e302f32342d3234203d3e203338333230.roa (hash: fH8oSgU7fmQVwzRayIdktJrCM/nMbyH0Ngj6vCl4r/k=)
15: 3130332e32392e3136342e302f32322d3234203d3e203338333230.roa (hash: NsGf/NKjXysT0NZWo8Ns+ZYja/LdeVhLVXCJP5P2m74=)
16: 3137352e3130332e33322e302f32342d3234203d3e203338333230.roa (hash: 6UH8eYTOp0aY/zXHw+l1TECmEHZ7Z5b3t8oyY92k670=)
17: 3137352e3130332e33342e302f32342d3234203d3e203338333230.roa (hash: 2n5/F9J9TnrohLmnHa9IVjRQNfO2Fv9UX/IHQLPC0cc=)
18: 34332e3234372e31322e302f32322d3234203d3e203338333230.roa (hash: SBWhEba9nbctUyFhfmHmCGJfJLFuvZIwVJb4MxQzTUY=)
19: 323430343a333930303a6139323a3a2f34382d3438203d3e203338333230.roa (hash: 8rfx5hsa0X1hhhAYAV+GnW9jNKRrSym9Qaq/7mxW1Sk=)
20: 3132322e3134342e302e302f32322d3234203d3e203338333230.roa (hash: 5ASXDenOep5Tt7YJZHbFIGXZ+8+G0rFlHOjdxQjS0ok=)
21: 3230332e3137332e39312e302f32342d3234203d3e20313339343630.roa (hash: NOo+o1xJtEt1kXlDwTIpF0OuzTUZnud5A2M0CHSRBk0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD.crl
rsync://rpki-rsync.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 20:04:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:a7:97:d6:6b:d8:79:99:7e:2f:bb:02:f8:96:a2:ad:b5:46:81:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD
Validity
Not Before: Sep 16 16:34:38 2026 GMT
Not After : Sep 17 20:04:38 2026 GMT
Subject: CN=9D17A4A303CAECC2DD2C6063839AAE43D1965327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:29:b1:ac:0d:5b:63:ca:da:8e:3c:50:9c:59:
d7:d7:3e:d2:c0:e3:61:b3:56:ee:06:7b:32:79:a7:
dc:1a:56:96:71:5d:17:b1:8e:92:6b:71:63:48:8c:
6f:8f:41:d1:bf:41:71:6f:1c:99:27:cd:da:b2:8e:
8b:51:70:19:3b:0d:52:98:bf:ad:f9:56:23:68:6e:
22:26:6c:b5:e3:a1:27:d1:f4:c0:4e:0a:2d:36:f4:
6a:ab:3c:18:e2:c8:52:ae:99:4f:ca:05:d4:79:f0:
1e:cf:0f:b7:f8:cb:56:0f:b5:e8:4b:46:27:6d:40:
11:26:09:19:59:51:28:14:2d:ea:be:c3:f9:b3:36:
78:e6:32:38:96:c6:c8:60:5b:27:48:84:ac:58:ac:
87:05:90:a9:3e:f5:d6:4a:b6:59:f6:0b:df:89:87:
44:c3:60:a2:42:f0:c9:8e:a6:8b:9b:00:78:27:4c:
26:04:37:2f:6f:8f:c7:17:f2:84:76:4b:ab:80:75:
c0:40:86:b5:bd:28:ad:8e:a3:5b:4c:77:fb:b8:d9:
6e:8b:30:9e:07:77:21:b0:2a:7c:d0:f6:74:42:e7:
2b:82:c3:ac:34:cc:72:1a:f4:f6:ac:88:b2:9e:3d:
cd:d2:2d:ab:80:22:e2:ab:2b:c0:61:9b:f0:34:be:
7a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:17:A4:A3:03:CA:EC:C2:DD:2C:60:63:83:9A:AE:43:D1:96:53:27
X509v3 Authority Key Identifier:
keyid:1D:AC:DC:41:C2:8C:E5:C3:8F:42:51:C6:14:DE:10:0A:3F:1E:FC:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:b7:2e:ae:a7:97:58:a3:05:8b:e1:f6:5b:c5:4a:6c:58:96:
f4:de:63:8b:ab:f5:62:40:0a:2c:cb:63:64:64:aa:6c:6d:20:
25:15:e2:cd:f4:18:30:45:ad:f7:cc:9f:aa:4f:7c:61:62:cd:
39:ab:13:ef:17:57:e1:39:4f:8d:db:77:61:73:af:c5:ff:a2:
61:0c:7f:1d:02:09:2a:04:f2:b1:da:e0:5b:f1:c9:3f:6a:ea:
0e:90:1b:b0:77:74:51:92:a9:52:c3:4a:07:68:6b:10:7e:57:
f0:a5:9b:8e:b4:a6:47:ee:dc:94:67:e8:8f:c8:42:18:16:dd:
b4:2e:07:1c:d2:f4:52:67:dc:67:c0:80:49:bb:43:18:6e:77:
2d:14:ab:c4:a7:81:8d:1f:4e:00:5d:bd:ae:5e:bc:de:25:d1:
f0:c9:f2:5c:65:38:93:a0:fc:1f:a7:ae:58:07:93:c2:ac:bf:
ab:6a:38:f7:ae:fd:07:4b:90:5b:0f:93:63:58:ae:fa:56:97:
87:06:2e:8e:7c:22:c5:37:4c:21:c1:38:3f:b8:2a:07:ce:39:
59:b4:98:78:46:8f:a6:6f:3c:da:6a:91:f5:1e:77:6c:67:b3:
1f:01:69:ff:2d:cd:95:f6:c2:b6:6e:fe:67:49:bc:f9:4c:0e:
76:80:19:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 14:40:04 2026 by rpki-client