
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/C1260A958F86F1FF20AE0F31E846BA1C4E9A24FA.mft
File: C1260A958F86F1FF20AE0F31E846BA1C4E9A24FA.mft (raw, json)
Hash identifier: aCbCO5YlQXP+tW/CNOjmaqkMeLFe12V+KNdCrKf4h24=
Subject key identifier: 7A:79:C7:A4:F3:F2:95:04:E6:BA:EB:3C:6F:8C:D2:E6:FC:9A:88:2C
Authority key identifier: C1:26:0A:95:8F:86:F1:FF:20:AE:0F:31:E8:46:BA:1C:4E:9A:24:FA
Certificate issuer: /CN=C1260A958F86F1FF20AE0F31E846BA1C4E9A24FA
Certificate serial: 43D9385E85FB8B433ABFA1651483C3979EC5A698
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1260A958F86F1FF20AE0F31E846BA1C4E9A24FA.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/C1260A958F86F1FF20AE0F31E846BA1C4E9A24FA.mft
Manifest number: EB
Signing time: Mon 26 Oct 2026 11:52:07 +0000
Manifest this update: Mon 26 Oct 2026 11:47:07 +0000
Manifest next update: Tue 27 Oct 2026 12:22:07 +0000
Files and hashes: 1: 3131362e3139332e3137322e302f32322d3232203d3e203535363939.roa (hash: c03wLpEzYg97ghhueJfI6BXVZd/aJ1GtQxycuxMHJK4=)
2: 3130332e32382e3131362e302f32322d3232203d3e203535363939.roa (hash: 9VPJuQ90qwdehcRd8MO9eyEcwL4yQF5FxdVlD4S3VMs=)
3: 3136302e31392e36342e302f32322d3232203d3e203535363939.roa (hash: N0IJVItqLdGXcfuM1pRtEZUOkPN6U39CHBDp9KbxnvE=)
4: 3130332e3235352e3135362e302f32332d3233203d3e203535363939.roa (hash: YQ+Y8UuZzN2YEC3oofbc4PTFQcZkS+muZOf6DD/xArQ=)
5: 3130332e32332e33322e302f32322d3232203d3e203535363939.roa (hash: Y1EVFuIwP2J3LGEmXO1ADmvKKygK86wXzAkR/y0dT8g=)
6: 3130332e3139332e3131362e302f32322d3232203d3e203535363939.roa (hash: jKiTXm/8vDyf2AvrZzGMw86IoRFu/5T1HNGWk6tq1HI=)
7: 323430343a613163303a3a2f33322d3332203d3e203535363939.roa (hash: VcOXgGCTB4NhXdLkb1b7zn46SySdcXjLhyphDA4ZnsM=)
8: 3132312e35322e3133362e302f32312d3231203d3e203535363939.roa (hash: bJ7AouFb4tIwAc54hXOpuyqA13UTgSDRT2nPRsM2jh0=)
9: 3230322e3135312e31322e302f32322d3232203d3e203535363939.roa (hash: SQDl0NMVHHhQkpG6yxh3VjuT52aZ+ScdAS6b47rIF4Y=)
10: 3131332e3139372e3130382e302f32322d3232203d3e203535363939.roa (hash: sJ/pnmphoKExlbrYzPDTgUL5xv4K3amVSnVGmlvFatg=)
11: 3230332e3230372e35362e302f32322d3232203d3e203535363939.roa (hash: mfv/AKDA5suUtEeKfRpWWbxh8T9aefWVFLYJyZgMkdg=)
12: 3230332e3231302e38342e302f32322d3232203d3e203535363939.roa (hash: cpOS+owQUlhThnbX4ZpGNAdhNpHzy2pOiSrU5Q5UTVY=)
13: 3136302e31392e3232342e302f32322d3232203d3e203535363939.roa (hash: lIhlMRIZLEBVMJXri3XJA/w3v0WW0NIWvRLNQvPmN24=)
14: C1260A958F86F1FF20AE0F31E846BA1C4E9A24FA.crl (hash: Rn3GUC/WHpqttKq9ag7D/LKFtLu9hGhKpIFDM2WIjHY=)
15: 3135302e3130372e3234342e302f32322d3232203d3e203535363939.roa (hash: p4Sr8FlFmUwj/pC6EPbP4Z4DB4YyU4S3h6AHeZD4KSk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/C1260A958F86F1FF20AE0F31E846BA1C4E9A24FA.crl
rsync://rpki-rsync.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/C1260A958F86F1FF20AE0F31E846BA1C4E9A24FA.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1260A958F86F1FF20AE0F31E846BA1C4E9A24FA.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Oct 2026 12:22:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:d9:38:5e:85:fb:8b:43:3a:bf:a1:65:14:83:c3:97:9e:c5:a6:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C1260A958F86F1FF20AE0F31E846BA1C4E9A24FA
Validity
Not Before: Oct 26 11:47:07 2026 GMT
Not After : Oct 27 12:22:07 2026 GMT
Subject: CN=7A79C7A4F3F29504E6BAEB3C6F8CD2E6FC9A882C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fb:71:fa:56:0f:59:8a:c0:15:1d:85:ce:66:
26:99:af:2b:da:ef:20:44:0d:e8:91:e4:f3:05:41:
9e:bf:f5:a8:b6:e9:2c:ea:83:fc:dd:10:05:6a:6d:
48:8d:31:40:d8:b9:a5:65:7e:7c:d7:9b:12:39:ea:
a5:34:38:3b:78:18:c2:c1:56:c0:63:10:76:cb:eb:
40:d2:d6:a4:df:c6:c7:7e:a5:fc:bc:ab:91:71:04:
93:ee:e7:15:ae:78:5a:5f:8a:72:06:71:af:58:f2:
ed:5f:42:56:b5:b4:2c:f7:d5:f3:c5:c4:45:9d:c9:
da:08:55:a1:65:cc:d2:08:ed:dc:3c:ea:9f:2b:c4:
2c:51:89:5e:0a:36:b5:12:d1:6c:90:db:db:95:ca:
43:f9:68:76:e0:a6:35:8f:23:43:61:16:22:56:3d:
e1:78:30:6c:df:04:1e:f6:62:24:e8:43:5c:1d:4e:
8b:55:fc:7b:4a:a7:31:6f:89:33:41:e6:24:2a:31:
3a:47:b9:31:25:11:2d:9e:fd:ed:a6:fc:89:02:31:
c7:53:a6:2d:ca:8e:29:38:8d:6b:72:8b:07:b7:aa:
30:34:b6:f1:13:7d:24:b0:26:fa:b9:5c:4f:ce:4f:
8b:16:01:f9:2e:55:52:47:f5:90:c2:5c:8e:70:24:
76:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:79:C7:A4:F3:F2:95:04:E6:BA:EB:3C:6F:8C:D2:E6:FC:9A:88:2C
X509v3 Authority Key Identifier:
keyid:C1:26:0A:95:8F:86:F1:FF:20:AE:0F:31:E8:46:BA:1C:4E:9A:24:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/C1260A958F86F1FF20AE0F31E846BA1C4E9A24FA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1260A958F86F1FF20AE0F31E846BA1C4E9A24FA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/C1260A958F86F1FF20AE0F31E846BA1C4E9A24FA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:ff:1e:09:3b:35:09:22:c9:86:a5:b9:79:37:db:69:18:70:
34:aa:17:d4:b3:b8:c1:85:ec:c9:65:71:e3:36:43:ca:f4:75:
2c:fe:96:8c:a1:5f:e2:88:f4:f5:0f:d6:04:cd:56:e9:7e:ea:
e4:95:45:d2:3c:57:f4:57:95:e1:a9:42:52:25:df:6f:0d:96:
71:08:7b:00:ad:15:61:7e:84:6b:b6:10:85:40:5a:41:6b:26:
b0:e0:e9:ea:9b:bc:9e:77:21:36:79:15:3b:2d:53:78:b5:19:
b7:3a:f0:b3:b6:c7:2f:7b:6c:ee:19:13:6b:c2:81:47:f9:e4:
91:80:67:93:2d:8b:ce:8b:00:07:99:81:5a:b7:a5:2f:74:64:
2f:5a:c3:80:97:28:11:99:dd:4b:1a:16:e1:cf:10:87:32:7d:
20:1a:50:64:cc:b4:4c:db:03:98:78:f1:1b:76:aa:7b:39:18:
cd:3b:8e:15:c9:df:6a:2f:6b:ed:3b:ee:0d:a1:40:84:3c:33:
14:86:7f:7d:61:3a:d0:bd:fa:2b:fb:d1:e5:ac:6f:a0:b0:0d:
94:ae:e7:79:93:51:c6:cb:0c:4b:f4:ba:06:36:57:1b:7c:55:
aa:67:af:27:a9:8f:a4:a6:3a:75:27:86:af:5a:7c:3e:16:01:
8c:f4:b5:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 22:59:27 2026 by rpki-client