
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/FF5E59BD445AE731E58ED471848043C324931D05.mft
File: FF5E59BD445AE731E58ED471848043C324931D05.mft (raw, json)
Hash identifier: FcQeFdHQc3oD5kLIRkPeFRvQI6DgRweHs0zy+ku8gmU=
Subject key identifier: AE:2B:35:01:22:AD:78:87:C6:0C:D5:07:D8:15:18:FA:F4:FC:49:0D
Authority key identifier: FF:5E:59:BD:44:5A:E7:31:E5:8E:D4:71:84:80:43:C3:24:93:1D:05
Certificate issuer: /CN=FF5E59BD445AE731E58ED471848043C324931D05
Certificate serial: 388F8265DEE4EF6D171407EC47A7D0ACBDAF6B9A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FF5E59BD445AE731E58ED471848043C324931D05.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/FF5E59BD445AE731E58ED471848043C324931D05.mft
Manifest number: C9
Signing time: Wed 30 Sep 2026 05:22:21 +0000
Manifest this update: Wed 30 Sep 2026 05:17:21 +0000
Manifest next update: Thu 01 Oct 2026 06:19:21 +0000
Files and hashes: 1: 3130332e3134332e3232342e302f32332d3233203d3e20313339343132.roa (hash: OeYZDJDnfFOrv0gLIl0BcG8+/dZQ9bC3jq7crp9LkMo=)
2: FF5E59BD445AE731E58ED471848043C324931D05.crl (hash: Jv+AEaf4f9rhv1ATBJahnO5Oaqcwriof39NBbmQV2a0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/FF5E59BD445AE731E58ED471848043C324931D05.crl
rsync://rpki-rsync.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/FF5E59BD445AE731E58ED471848043C324931D05.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FF5E59BD445AE731E58ED471848043C324931D05.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 06:19:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:8f:82:65:de:e4:ef:6d:17:14:07:ec:47:a7:d0:ac:bd:af:6b:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FF5E59BD445AE731E58ED471848043C324931D05
Validity
Not Before: Sep 30 05:17:21 2026 GMT
Not After : Oct 1 06:19:21 2026 GMT
Subject: CN=AE2B350122AD7887C60CD507D81518FAF4FC490D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6a:b5:15:da:c3:62:5f:bf:d2:22:f7:bd:57:
aa:b9:31:a3:ee:ac:03:e6:9b:52:12:7e:ab:4f:78:
12:82:06:17:51:49:73:cf:ff:f7:21:75:91:50:20:
fc:6d:25:17:9b:d3:50:3f:6d:92:52:1b:02:83:64:
57:30:7e:90:38:66:cc:4b:ac:63:f5:1b:fa:ca:25:
9e:e6:5b:69:91:9f:ac:a4:fc:f6:f4:7f:9c:18:1a:
a4:00:c2:e8:ef:f7:8c:52:f6:1a:fa:aa:28:77:28:
0c:b8:8a:cb:f6:9c:8e:67:76:46:2f:d9:ff:2b:3c:
2c:aa:00:97:34:18:d5:4e:d6:6b:26:38:37:c5:77:
a6:a2:63:1f:a7:fe:81:5b:d8:c3:a4:de:3e:2f:49:
53:bd:75:2c:3d:ed:16:30:ab:59:d6:67:99:ce:91:
da:c7:0f:6d:1e:10:16:c2:9b:0a:38:a5:24:b5:ef:
09:10:65:1f:09:9e:6a:b7:65:db:51:13:37:5a:f6:
18:c0:95:b4:bb:ca:79:ba:e9:43:af:86:05:3c:f0:
9f:f6:b8:e6:57:78:55:a6:3a:bd:05:64:b6:ce:cd:
91:ba:c6:1f:d4:c1:72:b3:7d:6a:c1:1d:af:b1:23:
b6:8e:9f:be:24:48:62:c5:3d:c0:a0:bb:13:71:58:
00:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:2B:35:01:22:AD:78:87:C6:0C:D5:07:D8:15:18:FA:F4:FC:49:0D
X509v3 Authority Key Identifier:
keyid:FF:5E:59:BD:44:5A:E7:31:E5:8E:D4:71:84:80:43:C3:24:93:1D:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/FF5E59BD445AE731E58ED471848043C324931D05.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FF5E59BD445AE731E58ED471848043C324931D05.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/FF5E59BD445AE731E58ED471848043C324931D05.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:01:4a:a7:3d:d9:e3:2b:ac:54:e5:e8:7b:36:fa:c2:af:48:
20:b9:82:ba:54:90:37:7e:cb:3e:5f:12:9a:5c:28:54:cc:b4:
fa:4f:7b:c0:56:3b:9a:f7:08:8f:50:68:b8:db:e5:b0:a8:a7:
1b:32:6d:12:c5:57:d0:4b:3a:a5:bd:a2:0a:43:d3:ef:a9:ae:
3c:d5:e2:48:aa:0b:52:4d:06:3d:54:1c:dd:a6:85:fe:9b:84:
e3:75:1f:87:b8:f6:ef:fe:b0:b1:cc:c4:c9:41:2e:10:39:92:
f7:a2:48:f0:77:c1:79:6f:67:02:26:af:b3:2c:99:ec:68:60:
11:f9:72:76:e1:57:34:55:28:af:2c:41:1a:91:ae:3c:46:82:
8e:62:01:e1:8c:81:42:ef:81:fb:10:27:f7:c1:1a:3e:b1:8c:
9d:74:2f:18:eb:bf:f5:4c:3e:72:ea:65:5a:29:ac:ce:71:f1:
85:00:69:7e:8a:0d:ac:64:e0:8e:bf:f8:a0:a0:52:1b:1f:a6:
4d:35:6e:67:61:2f:71:ce:bd:a2:c1:bf:85:df:f2:5a:17:64:
19:00:e7:ef:6a:5b:3a:2c:3e:38:8f:79:e9:7c:8e:3e:11:0b:
b7:b2:96:d5:b9:b6:fc:05:9c:e1:aa:3f:ee:03:1a:7e:1e:8b:
2d:b4:d3:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 20:08:02 2026 by rpki-client