
$ rpki-client -vvf rpki-rsync.idnic.net/repo/15521099-3ba1-4f91-b5bb-712c3bba6337/0/F8933926AE839DED729AFA2E0E4DCBFB0749DF1B.mft
File: F8933926AE839DED729AFA2E0E4DCBFB0749DF1B.mft (raw, json)
Hash identifier: 8H5ACqC3YdIp3NpEtZ3I6FjWU6cQcgkWzQRqzLJToek=
Subject key identifier: 64:5F:CD:0C:F1:5C:50:4C:60:8D:E2:37:83:41:7B:0C:5D:EB:73:3E
Authority key identifier: F8:93:39:26:AE:83:9D:ED:72:9A:FA:2E:0E:4D:CB:FB:07:49:DF:1B
Certificate issuer: /CN=F8933926AE839DED729AFA2E0E4DCBFB0749DF1B
Certificate serial: 30A1FA7B82AEBA12E796BD267C7D4B68041971DE
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8933926AE839DED729AFA2E0E4DCBFB0749DF1B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/15521099-3ba1-4f91-b5bb-712c3bba6337/0/F8933926AE839DED729AFA2E0E4DCBFB0749DF1B.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 22:25:45 +0000
Manifest this update: Tue 12 May 2026 22:20:45 +0000
Manifest next update: Wed 13 May 2026 22:47:45 +0000
Files and hashes: 1: 3130332e3139302e3130382e302f32342d3234203d3e20313439393033.roa (hash: 6UaquuTBkgXh3T9OTxZgNAGf5O5rLTrtkc8NLnoboV0=)
2: 3130332e3139302e3130392e302f32342d3234203d3e20313439393033.roa (hash: DA2FUhM7Kcld/ZOZCHHz4OC3AwFVi9D3hLd64lN6BR0=)
3: F8933926AE839DED729AFA2E0E4DCBFB0749DF1B.crl (hash: NrIHcpgyDVjYPyEcLf3JAqnWmIG4jQZMjVMVOnqjSic=)
4: 3130332e3139302e3130382e302f32332d3234203d3e20313439393033.roa (hash: Ko5U+LVnoFJ8wmSh7j4Nh6VXRGbHhjpdwU4CqrLXyts=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/15521099-3ba1-4f91-b5bb-712c3bba6337/0/F8933926AE839DED729AFA2E0E4DCBFB0749DF1B.crl
rsync://rpki-rsync.idnic.net/repo/15521099-3ba1-4f91-b5bb-712c3bba6337/0/F8933926AE839DED729AFA2E0E4DCBFB0749DF1B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8933926AE839DED729AFA2E0E4DCBFB0749DF1B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 22:47:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:a1:fa:7b:82:ae:ba:12:e7:96:bd:26:7c:7d:4b:68:04:19:71:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F8933926AE839DED729AFA2E0E4DCBFB0749DF1B
Validity
Not Before: May 12 22:20:45 2026 GMT
Not After : May 13 22:47:45 2026 GMT
Subject: CN=645FCD0CF15C504C608DE23783417B0C5DEB733E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:da:13:5f:5b:ad:7b:7c:7c:da:3e:f5:de:c6:
24:74:e1:fb:a8:a8:2c:21:f2:25:4a:46:3f:eb:a4:
cb:af:cb:7f:7a:8d:3c:97:24:f1:78:09:78:41:9c:
28:55:a3:a1:4b:19:29:3d:94:cb:e8:5a:e0:48:60:
dc:c9:46:ce:c9:dc:a9:2e:7c:cc:c1:df:83:0b:4f:
4a:97:a5:7a:eb:1a:a8:a0:36:bb:12:d4:0d:31:47:
d8:aa:36:da:1b:17:2c:19:53:ee:ba:22:80:4e:1e:
81:78:d5:de:cc:ee:34:50:f5:00:f6:45:70:11:86:
38:fc:51:f6:ca:6e:77:8f:fb:b8:30:52:18:2b:43:
05:19:c6:82:14:be:22:72:fa:b6:10:81:e5:69:fa:
6e:6c:ea:ab:bb:c1:4d:5e:91:61:2b:78:02:73:72:
42:91:82:bc:17:7d:41:f7:a2:f7:9f:18:2a:3d:85:
6c:8e:d5:5b:8b:f7:55:75:8d:c3:1b:07:a7:78:86:
cf:02:33:f0:53:58:f3:62:91:e7:91:69:6f:8e:09:
86:89:11:7f:30:a5:2e:2a:8e:70:f8:81:59:db:7d:
b1:fe:21:ef:bf:36:4c:88:65:80:f2:cf:e7:ef:66:
e9:11:49:d8:e4:7c:fc:28:b1:0a:5f:27:fc:ae:95:
81:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:5F:CD:0C:F1:5C:50:4C:60:8D:E2:37:83:41:7B:0C:5D:EB:73:3E
X509v3 Authority Key Identifier:
keyid:F8:93:39:26:AE:83:9D:ED:72:9A:FA:2E:0E:4D:CB:FB:07:49:DF:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/15521099-3ba1-4f91-b5bb-712c3bba6337/0/F8933926AE839DED729AFA2E0E4DCBFB0749DF1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8933926AE839DED729AFA2E0E4DCBFB0749DF1B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/15521099-3ba1-4f91-b5bb-712c3bba6337/0/F8933926AE839DED729AFA2E0E4DCBFB0749DF1B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:8e:7c:85:79:8a:c3:69:a7:0d:9a:ce:33:cc:35:e9:44:d1:
76:b7:c4:9d:4a:a5:a1:4f:6f:fc:b8:8d:3a:f2:d1:0c:ff:eb:
eb:d8:00:23:89:c0:eb:fb:cc:db:8d:a4:66:fd:c5:5b:77:91:
8c:a9:b3:89:f2:75:3b:5a:3a:de:b9:56:15:e5:9b:64:5d:77:
39:5c:bb:14:21:ce:a7:62:de:51:5e:f3:86:0a:ac:78:fa:53:
29:27:b9:5a:d5:1e:82:b1:49:b4:34:6a:bf:ba:4a:3e:7b:65:
ae:46:8d:a6:f3:1a:88:fd:0e:16:a7:82:96:91:84:47:81:9f:
b2:a6:c9:d1:59:ac:98:4b:82:26:20:c8:6e:ee:36:d0:f9:10:
9a:1f:92:c7:98:bd:47:e5:40:83:d9:22:f2:ff:58:dc:c9:10:
60:09:05:14:c8:e3:94:5c:38:b2:c9:d5:74:8c:f7:f3:48:10:
05:27:d2:9e:17:7d:74:1e:b8:d6:eb:e4:66:aa:2f:90:c6:ea:
6f:61:7f:e4:b5:17:ac:2b:07:42:3b:ca:a7:21:13:ea:9a:f5:
ab:31:8d:3b:74:89:a3:3f:7b:87:67:04:7e:aa:ee:a2:a6:41:
21:3a:a8:77:36:89:f0:1b:a7:cb:2a:5f:5a:94:7c:3a:e5:db:
f6:f7:f8:67
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUMKH6e4KuuhLnlr0mfH1LaAQZcd4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjg5MzM5MjZBRTgzOURFRDcyOUFGQTJFMEU0RENCRkIw
NzQ5REYxQjAeFw0yNjA1MTIyMjIwNDVaFw0yNjA1MTMyMjQ3NDVaMDMxMTAvBgNV
BAMTKDY0NUZDRDBDRjE1QzUwNEM2MDhERTIzNzgzNDE3QjBDNURFQjczM0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe2hNfW617fHzaPvXexiR04fuo
qCwh8iVKRj/rpMuvy396jTyXJPF4CXhBnChVo6FLGSk9lMvoWuBIYNzJRs7J3Kku
fMzB34MLT0qXpXrrGqigNrsS1A0xR9iqNtobFywZU+66IoBOHoF41d7M7jRQ9QD2
RXARhjj8UfbKbneP+7gwUhgrQwUZxoIUviJy+rYQgeVp+m5s6qu7wU1ekWEreAJz
ckKRgrwXfUH3ovefGCo9hWyO1VuL91V1jcMbB6d4hs8CM/BTWPNikeeRaW+OCYaJ
EX8wpS4qjnD4gVnbfbH+Ie+/NkyIZYDyz+fvZukRSdjkfPwosQpfJ/yulYHrAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUZF/NDPFcUExgjeI3g0F7DF3rcz4wHwYDVR0j
BBgwFoAU+JM5Jq6Dne1ymvouDk3L+wdJ3xswDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MTU1MjEwOTktM2JhMS00ZjkxLWI1YmItNzEyYzNiYmE2MzM3LzAvRjg5MzM5MjZB
RTgzOURFRDcyOUFGQTJFMEU0RENCRkIwNzQ5REYxQi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9GODkzMzkyNkFFODM5REVENzI5QUZBMkUwRTREQ0JGQjA3NDlE
RjFCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTU1MjEwOTktM2JhMS00ZjkxLWI1
YmItNzEyYzNiYmE2MzM3LzAvRjg5MzM5MjZBRTgzOURFRDcyOUFGQTJFMEU0RENC
RkIwNzQ5REYxQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHCOfIV5isNppw2azjPMNelE0Xa3xJ1KpaFP
b/y4jTry0Qz/6+vYACOJwOv7zNuNpGb9xVt3kYyps4nydTtaOt65VhXlm2Rddzlc
uxQhzqdi3lFe84YKrHj6UyknuVrVHoKxSbQ0ar+6Sj57Za5GjabzGoj9DhangpaR
hEeBn7KmydFZrJhLgiYgyG7uNtD5EJofkseYvUflQIPZIvL/WNzJEGAJBRTI45Rc
OLLJ1XSM9/NIEAUn0p4XfXQeuNbr5GaqL5DG6m9hf+S1F6wrB0I7yqchE+qa9asx
jTt0iaM/e4dnBH6q7qKmQSE6qHc2ifAbp8sqX1qUfDrl2/b3+Gc=
-----END CERTIFICATE-----
Generated at Wed May 13 04:26:41 2026 by rpki-client