
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/F440C463790421765C0B198FBF82B80F70529E23.mft
File: F440C463790421765C0B198FBF82B80F70529E23.mft (raw, json)
Hash identifier: OlsficaImzcFxmbl77xxGEGI9RWwKWUA0liPzUx0PxU=
Subject key identifier: 01:31:FC:3A:1F:08:F7:34:DF:65:69:7F:71:00:5C:BC:24:17:4F:A0
Authority key identifier: F4:40:C4:63:79:04:21:76:5C:0B:19:8F:BF:82:B8:0F:70:52:9E:23
Certificate issuer: /CN=F440C463790421765C0B198FBF82B80F70529E23
Certificate serial: 20C34B2E96B971CCA85F1A9DBAC8E260C276E134
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F440C463790421765C0B198FBF82B80F70529E23.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/F440C463790421765C0B198FBF82B80F70529E23.mft
Manifest number: C3
Signing time: Fri 25 Sep 2026 15:24:25 +0000
Manifest this update: Fri 25 Sep 2026 15:19:25 +0000
Manifest next update: Sat 26 Sep 2026 17:53:25 +0000
Files and hashes: 1: 3130332e3137362e3232372e302f32342d3234203d3e20313437313534.roa (hash: vIUCd1IemIKCQ+NzE6xQfnpmhwQEajDU6BevZYDhd68=)
2: 323030313a6466303a376334303a3a2f34382d3438203d3e20313437313534.roa (hash: DUNSj4kP6eOZRckNiWJJBeXQEQuZewuUxpFimv6tinc=)
3: F440C463790421765C0B198FBF82B80F70529E23.crl (hash: /yLS4vD4CeuDHCbPXvF9S4e4NUZTm8mxPHPVB62ohzw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/F440C463790421765C0B198FBF82B80F70529E23.crl
rsync://rpki-rsync.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/F440C463790421765C0B198FBF82B80F70529E23.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F440C463790421765C0B198FBF82B80F70529E23.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 26 Sep 2026 17:53:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:c3:4b:2e:96:b9:71:cc:a8:5f:1a:9d:ba:c8:e2:60:c2:76:e1:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F440C463790421765C0B198FBF82B80F70529E23
Validity
Not Before: Sep 25 15:19:25 2026 GMT
Not After : Sep 26 17:53:25 2026 GMT
Subject: CN=0131FC3A1F08F734DF65697F71005CBC24174FA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6e:5d:87:fc:6b:2f:ff:4e:1d:f3:84:64:2c:
5d:98:ea:d4:fb:6c:e3:73:6d:5b:70:9a:b7:9a:56:
22:72:27:70:cc:0f:06:a3:18:0c:78:37:95:48:fa:
2a:d4:c2:8c:40:e2:49:93:9f:d9:5e:d2:f7:ea:44:
84:22:7c:9b:a2:cb:a7:36:8a:54:ac:78:81:6d:7d:
b7:be:e6:9a:1e:28:47:24:a7:c8:b2:89:17:fa:29:
78:a7:b4:19:eb:b5:c0:46:8b:60:69:c3:d2:9f:1c:
b3:62:9b:b4:5c:74:91:08:dc:0b:3d:ae:33:10:00:
e3:d9:31:fc:3b:21:c8:c0:42:4f:f8:3c:8e:8f:db:
87:8a:ba:0f:af:06:95:f3:d9:06:0e:60:64:27:84:
6c:36:6d:53:89:ed:1d:93:f7:dc:85:d9:a1:82:8d:
03:20:f7:fd:ac:61:50:93:68:39:e4:7e:cf:78:0e:
35:62:3b:d5:09:7e:00:65:cc:ef:43:09:7e:bc:67:
f4:31:07:07:9b:05:bc:96:41:d2:bb:b0:1a:ec:3b:
b9:9c:1d:95:fd:13:8e:34:c0:2f:54:2e:66:da:7f:
3f:23:ed:55:92:4c:c6:d0:97:b9:98:95:95:f1:46:
28:7d:0f:e4:66:3a:5f:48:a0:7d:8a:20:af:ae:fd:
71:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:31:FC:3A:1F:08:F7:34:DF:65:69:7F:71:00:5C:BC:24:17:4F:A0
X509v3 Authority Key Identifier:
keyid:F4:40:C4:63:79:04:21:76:5C:0B:19:8F:BF:82:B8:0F:70:52:9E:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/F440C463790421765C0B198FBF82B80F70529E23.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F440C463790421765C0B198FBF82B80F70529E23.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/F440C463790421765C0B198FBF82B80F70529E23.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:13:0d:94:e4:03:e7:88:49:42:af:57:fb:0d:ca:d7:3a:5e:
a5:e8:52:2f:42:28:41:00:3c:69:9f:65:eb:33:a4:57:78:6d:
74:e7:e1:0d:45:aa:e2:c2:fa:34:b9:5a:78:8b:45:30:7e:ee:
39:5b:3b:cf:27:a5:2e:a2:45:ed:93:5d:ee:7a:f8:fe:d8:a4:
f2:18:a9:e2:2a:0f:41:f8:97:a5:1a:4c:3b:83:88:7b:c9:b8:
7a:36:1c:38:85:8e:0b:a1:72:97:16:32:26:f2:b8:52:18:48:
56:08:9f:b3:d0:81:4a:66:e3:4f:61:00:0e:2e:a2:5c:68:ce:
34:d8:a4:27:41:d6:98:3b:10:bc:cf:ec:1b:e6:33:00:13:75:
16:48:b0:42:4d:63:06:16:b8:49:5e:e2:7d:5d:b3:4d:2d:07:
18:13:48:42:c4:c1:d1:b0:d9:8b:fe:e9:07:c2:c1:ac:5f:bf:
3c:4e:dd:3b:0f:18:06:82:3d:19:50:87:64:0e:ab:88:34:cf:
35:f9:f0:89:d8:af:15:6b:63:c5:53:15:50:99:57:03:ff:fb:
18:d8:78:c1:3e:54:e2:b1:42:90:a8:3a:84:ea:cf:af:71:5d:
75:53:3b:60:65:09:25:dd:9e:f1:4a:2e:35:fa:3a:f4:50:05:
f4:68:a7:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:59:48 2026 by rpki-client