
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/010fef48-1ee8-4342-a541-2510fb15b96b/0/F9E76265CB34B4EEC43D8EE049601C2FA861D304.mft
File: F9E76265CB34B4EEC43D8EE049601C2FA861D304.mft (raw, json)
Hash identifier: +TCudPqqpLnYSo74+MW/S0+6HlHdGNhSgFIbv4VY2h8=
Subject key identifier: 68:F4:6A:B0:F7:A1:3F:47:CF:0C:DF:44:1F:E5:6C:4A:C2:D1:63:BA
Authority key identifier: F9:E7:62:65:CB:34:B4:EE:C4:3D:8E:E0:49:60:1C:2F:A8:61:D3:04
Certificate issuer: /CN=F9E76265CB34B4EEC43D8EE049601C2FA861D304
Certificate serial: 4DEB84FA6CF9A9C341EFFBE446F78B977F59BF9B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F9E76265CB34B4EEC43D8EE049601C2FA861D304.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/010fef48-1ee8-4342-a541-2510fb15b96b/0/F9E76265CB34B4EEC43D8EE049601C2FA861D304.mft
Manifest number: C2
Signing time: Fri 25 Sep 2026 06:08:05 +0000
Manifest this update: Fri 25 Sep 2026 06:03:05 +0000
Manifest next update: Sat 26 Sep 2026 08:56:05 +0000
Files and hashes: 1: 3130332e3136362e36352e302f32342d3234203d3e20313431393333.roa (hash: 5cKt2GQ70RT9pJRr52o1J2ZJ8Szvc0mfOl2vwcEkNAw=)
2: 3130332e3136362e36342e302f32342d3234203d3e20313431393333.roa (hash: fNPzl5pgP5THqHKexY3+BO0XOu1eYuUYqBqSIA0oDIk=)
3: F9E76265CB34B4EEC43D8EE049601C2FA861D304.crl (hash: feth/xslU9pegrIfNu0AZ2PbU8wHorGEaMuP9LIn4oQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/010fef48-1ee8-4342-a541-2510fb15b96b/0/F9E76265CB34B4EEC43D8EE049601C2FA861D304.crl
rsync://rpki-rsync.idnic.net/repo/010fef48-1ee8-4342-a541-2510fb15b96b/0/F9E76265CB34B4EEC43D8EE049601C2FA861D304.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F9E76265CB34B4EEC43D8EE049601C2FA861D304.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 26 Sep 2026 08:56:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:eb:84:fa:6c:f9:a9:c3:41:ef:fb:e4:46:f7:8b:97:7f:59:bf:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F9E76265CB34B4EEC43D8EE049601C2FA861D304
Validity
Not Before: Sep 25 06:03:05 2026 GMT
Not After : Sep 26 08:56:05 2026 GMT
Subject: CN=68F46AB0F7A13F47CF0CDF441FE56C4AC2D163BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d1:10:cc:7e:fd:df:bb:5f:23:57:3e:a1:83:
85:ef:b9:2b:21:b1:55:43:5d:88:74:5c:28:8e:39:
f8:27:08:75:d2:b6:7f:bf:b7:59:f2:9a:0b:9a:7f:
01:3f:6a:2d:1f:1a:59:c2:51:c8:a0:d8:b4:64:8b:
8f:23:e9:55:21:50:ac:8e:ba:c1:42:1e:5d:c6:18:
3b:31:77:f0:d8:d1:f3:f9:a1:f9:41:e1:05:89:06:
7e:db:eb:d9:17:4f:6b:d3:87:ea:fd:f3:9d:1b:d6:
06:31:84:8c:ed:ef:9d:73:d5:98:e3:ad:a0:e1:48:
4e:45:37:18:71:90:79:7b:e7:7d:0d:e3:13:67:e2:
64:e2:bd:e9:94:e1:92:f1:57:2c:fb:43:38:ba:86:
11:49:49:fd:4f:24:fc:f0:36:73:c8:7b:25:99:2c:
49:a0:23:3c:3e:19:3a:24:b5:4a:32:a9:29:ad:63:
6c:5f:0f:3b:04:a7:18:a2:ed:9d:f5:b8:8e:ed:2c:
40:e1:47:eb:a0:32:77:9a:a0:29:15:6a:13:89:13:
98:6b:98:ca:ec:a6:cb:be:a2:6c:3b:b2:5c:d5:e2:
d5:c3:30:4b:e0:1b:9d:a6:31:be:c4:79:55:40:93:
1f:5b:ac:8f:14:1f:f5:23:ee:66:92:02:40:f4:43:
48:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:F4:6A:B0:F7:A1:3F:47:CF:0C:DF:44:1F:E5:6C:4A:C2:D1:63:BA
X509v3 Authority Key Identifier:
keyid:F9:E7:62:65:CB:34:B4:EE:C4:3D:8E:E0:49:60:1C:2F:A8:61:D3:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/010fef48-1ee8-4342-a541-2510fb15b96b/0/F9E76265CB34B4EEC43D8EE049601C2FA861D304.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F9E76265CB34B4EEC43D8EE049601C2FA861D304.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/010fef48-1ee8-4342-a541-2510fb15b96b/0/F9E76265CB34B4EEC43D8EE049601C2FA861D304.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:d5:74:e8:1a:a8:d8:48:5f:af:9c:b8:d7:aa:f3:bf:7d:67:
12:5c:b4:df:31:e7:f4:0c:76:48:f3:f1:02:97:d8:5e:cc:4e:
c7:77:ae:6c:95:a7:9d:b2:78:ea:d2:50:ab:35:02:e9:cf:36:
5a:33:4f:a8:0c:ef:d1:8a:6a:5e:ba:e1:00:d5:ab:c4:de:63:
2b:69:46:b4:fa:41:d1:2a:4a:47:88:45:f3:63:5a:dc:c0:43:
07:d3:d7:48:f9:39:1b:62:02:7a:8f:f7:13:12:9c:0d:db:c3:
da:cc:c7:eb:0a:85:df:1c:fe:be:0d:2f:7c:68:87:b4:ae:11:
f9:01:bc:f0:68:c3:13:ba:47:eb:8c:92:86:3c:24:af:35:95:
15:10:96:6e:38:b4:88:14:19:4a:5b:7d:ef:b6:6f:51:4b:d5:
7a:1b:ae:39:50:6d:81:21:5e:36:48:2b:1d:2a:db:bc:5d:13:
4c:18:2f:35:e1:0f:1e:f0:ae:72:2f:2b:39:37:ba:f5:55:b0:
05:cd:e0:a0:3d:48:e0:06:ac:2a:8e:a4:cf:1f:94:7d:64:11:
55:cb:12:dd:6f:f7:e5:fa:d8:d5:48:f6:86:93:d6:b3:ef:0f:
fd:50:ab:02:80:73:b5:09:8d:d8:73:86:5f:86:cf:ae:1a:1d:
a8:bd:b3:f7
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUTeuE+mz5qcNB7/vkRveLl39Zv5swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjlFNzYyNjVDQjM0QjRFRUM0M0Q4RUUwNDk2MDFDMkZB
ODYxRDMwNDAeFw0yNjA5MjUwNjAzMDVaFw0yNjA5MjYwODU2MDVaMDMxMTAvBgNV
BAMTKDY4RjQ2QUIwRjdBMTNGNDdDRjBDREY0NDFGRTU2QzRBQzJEMTYzQkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo0RDMfv3fu18jVz6hg4XvuSsh
sVVDXYh0XCiOOfgnCHXStn+/t1nymguafwE/ai0fGlnCUcig2LRki48j6VUhUKyO
usFCHl3GGDsxd/DY0fP5oflB4QWJBn7b69kXT2vTh+r9850b1gYxhIzt751z1Zjj
raDhSE5FNxhxkHl7530N4xNn4mTivemU4ZLxVyz7Qzi6hhFJSf1PJPzwNnPIeyWZ
LEmgIzw+GToktUoyqSmtY2xfDzsEpxii7Z31uI7tLEDhR+ugMneaoCkVahOJE5hr
mMrspsu+omw7slzV4tXDMEvgG52mMb7EeVVAkx9brI8UH/Uj7maSAkD0Q0gvAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUaPRqsPehP0fPDN9EH+VsSsLRY7owHwYDVR0j
BBgwFoAU+ediZcs0tO7EPY7gSWAcL6hh0wQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MDEwZmVmNDgtMWVlOC00MzQyLWE1NDEtMjUxMGZiMTViOTZiLzAvRjlFNzYyNjVD
QjM0QjRFRUM0M0Q4RUUwNDk2MDFDMkZBODYxRDMwNC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9GOUU3NjI2NUNCMzRCNEVFQzQzRDhFRTA0OTYwMUMyRkE4NjFE
MzA0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDEwZmVmNDgtMWVlOC00MzQyLWE1
NDEtMjUxMGZiMTViOTZiLzAvRjlFNzYyNjVDQjM0QjRFRUM0M0Q4RUUwNDk2MDFD
MkZBODYxRDMwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABrVdOgaqNhIX6+cuNeq8799ZxJctN8x5/QM
dkjz8QKX2F7MTsd3rmyVp52yeOrSUKs1AunPNlozT6gM79GKal664QDVq8TeYytp
RrT6QdEqSkeIRfNjWtzAQwfT10j5ORtiAnqP9xMSnA3bw9rMx+sKhd8c/r4NL3xo
h7SuEfkBvPBowxO6R+uMkoY8JK81lRUQlm44tIgUGUpbfe+2b1FL1XobrjlQbYEh
XjZIKx0q27xdE0wYLzXhDx7wrnIvKzk3uvVVsAXN4KA9SOAGrCqOpM8flH1kEVXL
Et1v9+X62NVI9oaT1rPvD/1QqwKAc7UJjdhzhl+Gz64aHai9s/c=
-----END CERTIFICATE-----
Generated at Fri Sep 25 19:54:25 2026 by rpki-client