
$ rpki-client -vvf rpki-rsync.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/F440C463790421765C0B198FBF82B80F70529E23.mft
File: F440C463790421765C0B198FBF82B80F70529E23.mft (raw, json)
Hash identifier: aJ9YLuXjeeYCnP8TzAPN4GvMklUp9PNiLBnL3L6FmU8=
Subject key identifier: C1:7D:17:90:31:03:33:04:A6:38:CB:50:2B:9D:CC:C2:10:83:17:82
Authority key identifier: F4:40:C4:63:79:04:21:76:5C:0B:19:8F:BF:82:B8:0F:70:52:9E:23
Certificate issuer: /CN=F440C463790421765C0B198FBF82B80F70529E23
Certificate serial: 1AB8C7CF9A480D4D82F815D6373E838CE8B5F627
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F440C463790421765C0B198FBF82B80F70529E23.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/F440C463790421765C0B198FBF82B80F70529E23.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 18:34:02 +0000
Manifest this update: Tue 12 May 2026 18:29:02 +0000
Manifest next update: Wed 13 May 2026 22:16:02 +0000
Files and hashes: 1: F440C463790421765C0B198FBF82B80F70529E23.crl (hash: UGHaqc1jS8aVhN8XEqv7dw7fXSbf7/bioEnMylQUVsg=)
2: 3130332e3137362e3232372e302f32342d3234203d3e20313437313534.roa (hash: vIUCd1IemIKCQ+NzE6xQfnpmhwQEajDU6BevZYDhd68=)
3: 323030313a6466303a376334303a3a2f34382d3438203d3e20313437313534.roa (hash: DUNSj4kP6eOZRckNiWJJBeXQEQuZewuUxpFimv6tinc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/F440C463790421765C0B198FBF82B80F70529E23.crl
rsync://rpki-rsync.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/F440C463790421765C0B198FBF82B80F70529E23.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F440C463790421765C0B198FBF82B80F70529E23.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 22:16:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:b8:c7:cf:9a:48:0d:4d:82:f8:15:d6:37:3e:83:8c:e8:b5:f6:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F440C463790421765C0B198FBF82B80F70529E23
Validity
Not Before: May 12 18:29:02 2026 GMT
Not After : May 13 22:16:02 2026 GMT
Subject: CN=C17D179031033304A638CB502B9DCCC210831782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8e:68:6b:1e:cb:4f:7a:78:19:b2:f9:26:fe:
eb:53:62:b6:b5:a7:a3:0a:8c:01:83:11:bf:85:aa:
4e:6d:79:79:6f:f0:cd:25:e5:3d:22:c2:db:a4:96:
ba:76:d4:ba:7d:aa:64:9c:48:ea:2f:d4:7f:df:d7:
b2:2d:8a:d7:79:19:8d:23:c4:df:13:5b:20:ca:a8:
36:cb:f6:23:ca:3f:14:ce:90:4d:20:20:fb:fc:ab:
60:62:0c:8e:b9:6f:05:0a:28:f1:c0:3d:a7:b3:5f:
9c:60:02:8d:db:0f:83:b6:f8:37:44:57:0b:36:12:
f7:36:03:34:db:64:52:fa:b5:66:4a:8c:57:02:1b:
95:81:fb:43:17:eb:0f:59:41:74:2f:76:03:ee:3b:
f6:7e:60:a9:e8:e4:c6:3c:54:f2:2d:63:a7:88:b3:
60:0a:0c:8f:81:84:8b:8f:c0:3b:6c:e1:5b:d6:8d:
23:d0:b0:6e:07:e0:57:7e:c6:94:ac:b8:4a:0e:c0:
dd:0b:b3:fe:09:80:a2:fb:f2:d7:67:53:6b:6a:62:
ca:2d:b1:03:4f:01:b6:9c:34:5e:f0:4c:ca:77:cf:
68:d7:05:52:30:24:71:73:8c:f7:50:43:a5:d8:77:
fb:7d:dd:70:15:2b:6a:48:b4:88:99:c4:65:3f:b7:
fb:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:7D:17:90:31:03:33:04:A6:38:CB:50:2B:9D:CC:C2:10:83:17:82
X509v3 Authority Key Identifier:
keyid:F4:40:C4:63:79:04:21:76:5C:0B:19:8F:BF:82:B8:0F:70:52:9E:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/F440C463790421765C0B198FBF82B80F70529E23.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F440C463790421765C0B198FBF82B80F70529E23.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/F440C463790421765C0B198FBF82B80F70529E23.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:a5:47:2e:ae:7e:d9:88:d4:c0:8b:0a:83:5c:2c:f2:72:e2:
ba:31:df:b8:76:4a:13:57:98:eb:44:24:33:77:c1:41:86:de:
2c:c8:fe:1f:bf:17:a0:11:22:d1:6b:92:cf:ba:fc:29:7b:35:
c6:9b:1f:1d:2a:71:02:39:65:50:bc:1b:53:11:61:17:2a:d1:
a7:8e:5b:41:89:5d:cb:85:da:09:98:fe:e5:d6:ca:81:4c:2e:
75:6a:18:0c:03:b1:7a:3d:8f:3f:3a:23:29:ae:2e:32:a2:50:
e0:5e:3d:f0:50:ac:a2:f0:34:7a:58:47:e4:32:4a:77:5b:6d:
2b:2f:54:f8:2b:57:75:ad:8a:14:07:80:99:b2:32:86:77:9e:
e8:b0:1d:d0:96:95:b8:db:bd:aa:bb:53:93:8e:56:13:94:97:
ff:42:34:84:b1:3d:22:1f:6c:b2:a5:8d:7a:c2:7c:57:38:ae:
27:12:f7:0a:82:cf:ac:44:cf:69:cd:f2:1a:eb:15:47:ab:4b:
c3:f5:af:52:1f:e0:19:cc:8f:8f:60:cf:6f:58:d8:29:96:87:
64:bb:52:2e:8e:44:9c:34:bf:a1:21:6a:9a:ae:de:15:cc:a8:
ed:c0:60:93:0c:1f:81:22:f6:c8:cd:90:06:a9:ee:8f:83:1b:
0c:72:4a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:38:03 2026 by rpki-client