
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/1F14849A30C98C1F01620E4C5ECBADDDF509992A.mft
File: 1F14849A30C98C1F01620E4C5ECBADDDF509992A.mft (raw, json)
Hash identifier: UL+JnHcsOhWOPq4DLRYTMxH9iSXOLOTuyfadlIsNwok=
Subject key identifier: 9E:C2:31:AF:AD:B5:50:6F:FC:F9:B9:DF:BD:62:50:B3:D6:D5:C8:C2
Authority key identifier: 1F:14:84:9A:30:C9:8C:1F:01:62:0E:4C:5E:CB:AD:DD:F5:09:99:2A
Certificate issuer: /CN=1F14849A30C98C1F01620E4C5ECBADDDF509992A
Certificate serial: 06C609238549F5CAC3227D18D92134ACE6250270
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1F14849A30C98C1F01620E4C5ECBADDDF509992A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/1F14849A30C98C1F01620E4C5ECBADDDF509992A.mft
Manifest number: B9
Signing time: Thu 17 Sep 2026 02:51:58 +0000
Manifest this update: Thu 17 Sep 2026 02:46:58 +0000
Manifest next update: Fri 18 Sep 2026 03:56:58 +0000
Files and hashes: 1: 3130332e3133332e36322e302f32342d3234203d3e20313338313334.roa (hash: /fa1hwZEt68IrXwKEonGaCZwd1oMYZDyXJq4KeJo86E=)
2: 3130332e3133332e36332e302f32342d3234203d3e20313338313334.roa (hash: KWc9OTSiXvMZVJYcyeDQq+tc4s6Lq68tyd9neBf4i2s=)
3: 3130332e3133332e36302e302f32342d3234203d3e20313338313334.roa (hash: a6L02/ltQd6+ySj9pYMUEWkvYU4L6ZYKU3OEQlZp5vg=)
4: 3130332e3133332e36302e302f32322d3232203d3e20313338313334.roa (hash: a4IK1VqkQFifgbVqGFjspnePVTV/YkKjfKoaIwFfqZw=)
5: 1F14849A30C98C1F01620E4C5ECBADDDF509992A.crl (hash: 16Np+2LUiu7BBO+RvYDhOlbvM4bgra7l3ocbXpsaSSI=)
6: 3130332e3133332e36312e302f32342d3234203d3e20313338313334.roa (hash: 3Pur9J/K8W30/vvGHGXc6KHgwQgQ4wEAxcFN1o16NNI=)
7: 323430343a343863303a3a2f33322d3332203d3e20313338313334.roa (hash: an5beHJBQCXe1O6nJramlD3hI7Qm5QXG3JLpnD/aNxM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/1F14849A30C98C1F01620E4C5ECBADDDF509992A.crl
rsync://rpki-rsync.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/1F14849A30C98C1F01620E4C5ECBADDDF509992A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1F14849A30C98C1F01620E4C5ECBADDDF509992A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 03:56:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:c6:09:23:85:49:f5:ca:c3:22:7d:18:d9:21:34:ac:e6:25:02:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1F14849A30C98C1F01620E4C5ECBADDDF509992A
Validity
Not Before: Sep 17 02:46:58 2026 GMT
Not After : Sep 18 03:56:58 2026 GMT
Subject: CN=9EC231AFADB5506FFCF9B9DFBD6250B3D6D5C8C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9b:40:4a:7b:bb:9e:a4:a8:3a:b1:4c:15:e3:
24:c7:3a:f5:b1:0c:50:3a:c3:64:d7:41:78:6b:be:
7c:ef:1c:6d:91:8b:4e:bb:db:53:7d:b2:90:c1:82:
17:c4:6a:3b:26:e7:43:4e:4e:8e:ef:9c:29:42:a7:
e3:f6:e5:a1:33:54:b2:94:5d:b9:46:1c:cf:87:28:
3f:82:c3:c0:3d:36:6f:0e:75:be:53:84:e1:f2:41:
10:5d:79:94:9d:ac:82:6a:e0:be:0a:c9:9d:f8:91:
52:64:b3:8a:ce:8a:f3:23:e6:5b:28:69:f8:dc:5b:
8a:91:55:1d:98:22:58:fc:19:da:15:7d:47:5a:1c:
43:b5:65:62:64:25:6a:83:5c:27:00:ae:9d:54:2f:
b9:56:6b:fe:2e:a3:3b:15:a7:5a:f4:59:4a:19:55:
48:f0:22:15:51:04:e8:7e:31:05:62:57:77:0b:cd:
fb:e0:5f:f6:35:fd:0e:a2:e4:45:a6:b9:a7:d7:a3:
0f:9e:cb:b1:d0:ed:b2:c5:65:74:1c:45:f5:b6:c8:
5f:13:8b:11:2e:15:71:13:68:5b:d4:ac:49:61:37:
ee:22:63:49:15:22:cf:0d:1a:b0:c3:01:d6:fc:57:
5a:7d:7a:d8:25:d2:4c:5c:ae:7d:9e:13:e5:75:7e:
ec:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C2:31:AF:AD:B5:50:6F:FC:F9:B9:DF:BD:62:50:B3:D6:D5:C8:C2
X509v3 Authority Key Identifier:
keyid:1F:14:84:9A:30:C9:8C:1F:01:62:0E:4C:5E:CB:AD:DD:F5:09:99:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/1F14849A30C98C1F01620E4C5ECBADDDF509992A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1F14849A30C98C1F01620E4C5ECBADDDF509992A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/1F14849A30C98C1F01620E4C5ECBADDDF509992A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:1d:a9:7b:2d:50:35:d1:50:1c:6e:0c:bd:cc:9b:83:3f:9c:
0a:fc:77:e4:3b:7e:d9:a8:05:38:36:a5:41:27:17:5a:29:c4:
91:2d:a0:83:95:d5:35:81:83:f0:0d:f0:67:fe:9d:21:38:cd:
d6:c6:16:91:a8:d8:ec:ff:bf:d8:db:e6:96:57:09:a7:62:90:
9a:7e:28:7c:99:01:89:a8:bb:25:b4:ad:f7:26:95:89:89:a1:
55:b2:f2:27:ca:42:93:8c:ae:ec:e3:94:ad:da:ad:86:a3:7d:
43:54:f4:4f:85:68:fc:b4:39:5d:4f:5d:60:0f:f5:0c:9c:db:
b7:84:0d:ec:fc:30:22:56:99:85:b4:12:a3:57:70:18:5d:88:
09:7d:2d:a0:7d:df:35:40:d8:7b:71:cd:72:af:3f:9d:1b:79:
31:0b:74:c5:5f:58:49:cd:e4:b8:90:e3:f6:39:a7:cb:60:ec:
87:b9:d1:b2:ea:77:2d:8a:81:48:81:06:a3:28:af:12:0b:d5:
f9:9a:6c:8b:2a:b5:fb:a7:5e:80:ab:f3:c9:9c:60:bc:dc:c6:
cf:7c:89:98:bb:5e:9c:2a:b9:ce:bb:bf:ca:6c:0e:22:1f:74:
09:a0:c5:1f:38:db:cc:9b:ad:77:3b:0c:99:0c:c7:e9:09:16:
f4:91:0a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 12:20:09 2026 by rpki-client