
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/700aed1d-94c9-49a6-a609-882e03cd07ba/0/F1D3A95017C5154231E294B063B353766A127193.mft
File: F1D3A95017C5154231E294B063B353766A127193.mft (raw, json)
Hash identifier: 5s+1w6PN+LnFSqNi8jQrLecXsWoXcI9oJGXFWDu9nLM=
Subject key identifier: 14:B7:38:ED:3E:4C:6F:37:19:6A:06:3E:02:AC:9F:18:8B:BD:C7:EA
Authority key identifier: F1:D3:A9:50:17:C5:15:42:31:E2:94:B0:63:B3:53:76:6A:12:71:93
Certificate issuer: /CN=F1D3A95017C5154231E294B063B353766A127193
Certificate serial: 2BF366791BEB340BCDDC714C7653A4D511D5BF7A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F1D3A95017C5154231E294B063B353766A127193.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/700aed1d-94c9-49a6-a609-882e03cd07ba/0/F1D3A95017C5154231E294B063B353766A127193.mft
Manifest number: C1
Signing time: Thu 24 Sep 2026 09:42:37 +0000
Manifest this update: Thu 24 Sep 2026 09:37:37 +0000
Manifest next update: Fri 25 Sep 2026 09:42:37 +0000
Files and hashes: 1: 3130332e3130362e3131362e302f32342d3234203d3e20313336383836.roa (hash: fFFO/k+PgY37k7qx7f15yGCXrtYu8NxYkgLNAXulmF8=)
2: F1D3A95017C5154231E294B063B353766A127193.crl (hash: 4T5neOWEw46e4WY5YKR3XBterfdKQvDvCYx3mWwQdj8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/700aed1d-94c9-49a6-a609-882e03cd07ba/0/F1D3A95017C5154231E294B063B353766A127193.crl
rsync://rpki-rsync.idnic.net/repo/700aed1d-94c9-49a6-a609-882e03cd07ba/0/F1D3A95017C5154231E294B063B353766A127193.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F1D3A95017C5154231E294B063B353766A127193.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 09:42:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:f3:66:79:1b:eb:34:0b:cd:dc:71:4c:76:53:a4:d5:11:d5:bf:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F1D3A95017C5154231E294B063B353766A127193
Validity
Not Before: Sep 24 09:37:37 2026 GMT
Not After : Sep 25 09:42:37 2026 GMT
Subject: CN=14B738ED3E4C6F37196A063E02AC9F188BBDC7EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a9:66:29:d6:b1:88:e5:08:af:91:44:d5:21:
90:dd:5a:a4:37:11:8c:bb:06:9c:96:d2:f0:5b:c7:
07:69:61:f3:c8:80:69:d9:fd:ee:5c:7e:a8:cf:94:
69:d2:c6:25:4d:7e:74:80:de:11:22:23:ba:51:97:
d6:86:02:9c:ac:66:e2:9d:1b:0a:34:8a:7b:b1:56:
c4:4b:37:66:e2:38:0f:8a:31:07:98:9b:e7:6c:be:
66:30:83:e5:ba:4b:4e:a2:9b:7f:67:e5:29:d7:c3:
92:59:0f:50:14:4d:81:d3:b0:23:d8:5f:f5:3a:0d:
cf:37:ba:0c:52:90:0b:27:45:c6:2d:e0:bf:90:0a:
3a:aa:bf:43:69:a5:a1:19:8f:1d:8f:31:8d:fc:a2:
bf:f9:2a:e7:7d:63:a8:ea:ab:93:3e:a5:8a:92:68:
89:c8:df:b4:d2:3d:68:e8:68:62:be:d6:d2:85:0f:
a1:29:73:7e:f7:8c:d1:2f:c0:52:34:58:46:6b:a0:
52:fd:8a:54:e6:cc:ed:80:88:14:92:f2:94:b7:2c:
07:77:80:8b:f5:af:03:eb:c2:67:12:29:a0:d2:e1:
24:66:2a:f8:9c:92:45:7e:92:25:46:62:5e:8c:b1:
c4:37:5c:aa:52:1b:cc:d8:b0:87:d4:8e:f2:10:49:
81:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:B7:38:ED:3E:4C:6F:37:19:6A:06:3E:02:AC:9F:18:8B:BD:C7:EA
X509v3 Authority Key Identifier:
keyid:F1:D3:A9:50:17:C5:15:42:31:E2:94:B0:63:B3:53:76:6A:12:71:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/700aed1d-94c9-49a6-a609-882e03cd07ba/0/F1D3A95017C5154231E294B063B353766A127193.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F1D3A95017C5154231E294B063B353766A127193.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/700aed1d-94c9-49a6-a609-882e03cd07ba/0/F1D3A95017C5154231E294B063B353766A127193.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:5e:fb:75:74:59:b3:18:8d:f7:72:42:d5:c9:86:67:1a:25:
c9:5b:27:3c:2f:31:b4:9c:7b:04:0c:ad:f7:f0:6a:2b:57:7f:
3e:07:1b:91:a3:b7:82:f4:1b:f4:32:0e:15:52:f8:e3:fc:e6:
a2:a2:d4:f4:34:70:c9:d4:ac:2e:46:c3:2d:92:b8:5b:ac:da:
f2:56:27:9b:c1:fd:dc:f0:27:77:8a:e1:32:5e:8d:d5:35:a0:
6a:e2:f6:ef:a7:c8:04:55:54:05:95:c3:46:d8:ca:56:93:24:
63:b0:a3:98:0e:3a:b8:f9:a6:89:45:46:49:24:8f:e9:f7:4d:
fe:0f:9d:18:42:57:77:01:32:bc:f7:8b:1a:7a:8e:dd:fe:61:
6b:44:7c:46:6b:62:96:06:7f:d4:50:8f:30:53:96:ac:8c:72:
0d:0a:c6:6b:78:8a:73:35:47:5c:d2:2d:f5:cb:7e:d6:c7:c4:
63:f6:a7:56:e5:b4:dc:89:4e:53:f4:9b:f9:63:1a:f7:7d:7c:
d0:bf:b0:31:7d:98:23:cd:6b:9a:68:0a:fa:ca:90:00:fd:16:
1f:01:a9:e1:f3:37:34:3a:0b:c5:0a:f7:5b:d9:cd:8a:ea:42:
92:fb:ca:81:d7:ce:17:89:71:e2:75:b1:02:8b:25:42:bf:e6:
d2:d0:47:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:47:45 2026 by rpki-client