
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/1EA610CFADD727ADAA74FA9BFE8DDFAF27302467.mft
File: 1EA610CFADD727ADAA74FA9BFE8DDFAF27302467.mft (raw, json)
Hash identifier: kZnkyfz0MvdjyodUopEG4yQC3nOmabH1Ot+Nh0iDuVo=
Subject key identifier: 73:1C:C5:3F:CD:BA:BB:A3:78:06:F2:B7:39:8F:D2:81:84:AF:12:E2
Authority key identifier: 1E:A6:10:CF:AD:D7:27:AD:AA:74:FA:9B:FE:8D:DF:AF:27:30:24:67
Certificate issuer: /CN=1EA610CFADD727ADAA74FA9BFE8DDFAF27302467
Certificate serial: 56A0D33E7FD95B526023F37364B5662A9CA8AAD0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EA610CFADD727ADAA74FA9BFE8DDFAF27302467.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/1EA610CFADD727ADAA74FA9BFE8DDFAF27302467.mft
Manifest number: 42
Signing time: Sat 20 Jun 2026 03:54:28 +0000
Manifest this update: Sat 20 Jun 2026 03:49:28 +0000
Manifest next update: Sun 21 Jun 2026 07:02:28 +0000
Files and hashes: 1: 3130332e3138362e35382e302f32342d3234203d3e20313439373034.roa (hash: ZsJ/jB1I6GIvE0h8Rn6eqplhxHo0cL9KOhuXdGF4spA=)
2: 3130332e3138362e35392e302f32342d3234203d3e20313439373034.roa (hash: IOAwzQ73Cr2im/VcFN1TaAQYk3NUUawiD2oAPVCKSrc=)
3: 1EA610CFADD727ADAA74FA9BFE8DDFAF27302467.crl (hash: lVVdl08v/Qltp6bL+jglpExS4V7SfVp2xvpuowPS+aY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/1EA610CFADD727ADAA74FA9BFE8DDFAF27302467.crl
rsync://rpki-rsync.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/1EA610CFADD727ADAA74FA9BFE8DDFAF27302467.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EA610CFADD727ADAA74FA9BFE8DDFAF27302467.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 21 Jun 2026 07:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:a0:d3:3e:7f:d9:5b:52:60:23:f3:73:64:b5:66:2a:9c:a8:aa:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1EA610CFADD727ADAA74FA9BFE8DDFAF27302467
Validity
Not Before: Jun 20 03:49:28 2026 GMT
Not After : Jun 21 07:02:28 2026 GMT
Subject: CN=731CC53FCDBABBA37806F2B7398FD28184AF12E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f7:56:8d:14:ac:58:d3:cf:5e:c6:7a:a7:0c:
c3:c6:10:e7:f2:4b:25:82:a8:06:49:a3:76:bb:63:
13:2a:d5:1b:37:d3:74:43:63:8a:cb:57:48:f9:67:
ca:34:74:59:d0:d2:2f:3f:a5:20:56:51:6f:f3:ea:
71:7f:3b:89:d3:d8:23:94:0d:eb:e6:b7:be:16:a2:
0c:57:d9:d1:aa:13:a8:e6:6c:df:35:4f:45:0e:93:
6c:d1:81:ad:52:a5:98:d0:3a:7c:f0:df:03:ac:86:
d8:5f:10:ac:27:81:76:89:af:7b:84:9f:a4:87:ec:
aa:c7:9f:00:8b:f7:87:e3:9a:25:fa:c2:2f:72:cf:
1e:28:e7:3c:12:2f:4a:c4:ce:5d:ee:b7:45:5d:8a:
ef:09:9f:1c:7a:65:0c:5f:d5:0a:a5:11:6d:6f:8e:
b8:72:ba:46:cb:69:dd:09:e2:8e:8c:28:ed:96:ae:
1e:70:10:95:f4:8f:70:9f:76:56:1b:77:1a:4f:2c:
62:a1:40:7d:2f:93:cd:80:ec:ef:e8:56:01:53:e5:
c1:c2:9a:27:a0:62:f6:ce:a3:9d:fb:d4:65:12:56:
f0:11:a4:b3:18:45:23:ac:7f:b3:b4:6d:12:51:df:
d5:a1:15:3f:1c:a3:46:d2:63:fe:53:c7:0e:20:1c:
0f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:1C:C5:3F:CD:BA:BB:A3:78:06:F2:B7:39:8F:D2:81:84:AF:12:E2
X509v3 Authority Key Identifier:
keyid:1E:A6:10:CF:AD:D7:27:AD:AA:74:FA:9B:FE:8D:DF:AF:27:30:24:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/1EA610CFADD727ADAA74FA9BFE8DDFAF27302467.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EA610CFADD727ADAA74FA9BFE8DDFAF27302467.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/1EA610CFADD727ADAA74FA9BFE8DDFAF27302467.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:00:5c:8e:81:32:77:56:e3:d0:47:d8:91:8f:64:7e:95:37:
02:72:d7:fa:99:00:a3:35:fb:7e:0d:96:5e:3c:72:6b:fb:3e:
18:85:c8:3f:a6:06:4a:91:ad:43:4d:92:7e:85:11:e0:da:59:
4e:16:86:9c:1f:ff:56:54:40:d6:2b:9a:32:e3:62:65:6b:b5:
0f:09:36:ac:6a:91:6a:48:08:65:54:25:f7:d3:2a:23:f1:4f:
14:65:e7:40:39:6e:9e:be:f8:aa:10:13:24:95:a9:92:5c:4d:
32:25:cc:72:46:b4:a3:08:d5:51:15:c3:39:69:5d:f3:ab:09:
8e:01:08:26:12:d5:5d:6c:31:0c:b4:fa:fd:87:b6:a4:b1:75:
28:fe:98:8f:43:24:31:23:c8:03:60:35:ac:93:a8:79:82:79:
be:92:a3:5f:11:2a:15:98:ca:21:0d:fe:2e:47:ab:27:7c:0c:
cc:4b:e6:cd:d3:91:c8:e8:61:35:72:6d:c9:a6:3b:3e:1f:a9:
50:24:94:94:30:f4:db:10:43:4c:f2:7d:3b:74:47:77:21:68:
b2:b0:38:68:31:bb:ad:34:5e:ed:b9:bf:c7:eb:15:bc:64:72:
01:5a:87:0f:46:4b:b6:73:4a:20:92:77:6a:c9:85:ba:b6:8c:
fd:a1:25:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 08:58:53 2026 by rpki-client