
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.mft
File: F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.mft (raw, json)
Hash identifier: kivLdFPmsTNiPjxry+YZTh+Ntbek/+xSaoFaI5jOREM=
Subject key identifier: 34:B6:D8:F6:82:CB:0E:66:54:11:16:6A:1E:C9:EC:FE:BA:9E:9E:DF
Authority key identifier: F0:7D:E2:A6:04:1C:4C:CD:F4:24:D4:FE:29:9B:58:6D:AB:A2:2C:AF
Certificate issuer: /CN=F07DE2A6041C4CCDF424D4FE299B586DABA22CAF
Certificate serial: 13D1560B7D773D6A729F792BB33FAEB5F2071F0F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.mft
Manifest number: 010A
Signing time: Sat 14 Nov 2026 17:46:54 +0000
Manifest this update: Sat 14 Nov 2026 17:41:54 +0000
Manifest next update: Sun 15 Nov 2026 21:26:54 +0000
Files and hashes: 1: 3130332e39372e37392e302f32342d3234203d3e20313336313331.roa (hash: 64HGWL2CzebN7GmYL8lPadZ2nwJ3zX055oQRPQondo0=)
2: 323430313a383434303a3331313a3a2f34382d3438203d3e20313336313331.roa (hash: 5CWw2ztPAElFuqMvrZ+eExbk4B2mKb785wpbROO/cwI=)
3: 3130332e39372e37372e302f32342d3234203d3e20313339393832.roa (hash: kjVWGrmA+VHTqA4xjxSxUv9AEMKkgjRqk/NxzJQ1RzM=)
4: 323430313a383434303a3133313a3a2f34382d3438203d3e20313336313331.roa (hash: RCVkQO3x+P4RF48TeYaUmpS+R/Zp+Q7sEuYMIANrgmM=)
5: 3130332e39372e37382e302f32342d3234203d3e20313336313331.roa (hash: rEzu4P6oExwIZaANS5DV2R8BJmVkjCXI7g7sPguv5ho=)
6: 323430313a383434303a3a2f33322d3332203d3e20313336313331.roa (hash: PHP1IFXfqbi+BOlMH5y7xyleYHrhQYI+Lt+NZxh64LQ=)
7: 323430313a383434303a3233313a3a2f34382d3438203d3e20313336313331.roa (hash: c0E9xb18G6dDWSOYbp1L8pfGiJXjXDV9gaUGsFzHbYc=)
8: F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.crl (hash: SvESEsh33f1IfIdr0tWePXosgTATBfYDSskeUVhVpMY=)
9: 3130332e39372e37362e302f32342d3234203d3e20313532383036.roa (hash: +Asa2FE1R5Iij5c7rQ+dFjTY9Z+ABZa4nraHHa4SLi4=)
10: 323430313a383434303a33313a3a2f34382d3438203d3e20313336313331.roa (hash: JVzJjBAyxQLaPhKhqz1LXrJdrQUjLBthYVZyc/xVxg0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.crl
rsync://rpki-rsync.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 15 Nov 2026 17:49:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:d1:56:0b:7d:77:3d:6a:72:9f:79:2b:b3:3f:ae:b5:f2:07:1f:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F07DE2A6041C4CCDF424D4FE299B586DABA22CAF
Validity
Not Before: Nov 14 17:41:54 2026 GMT
Not After : Nov 15 21:26:54 2026 GMT
Subject: CN=34B6D8F682CB0E665411166A1EC9ECFEBA9E9EDF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:19:c1:bf:bf:33:27:47:77:65:55:8b:cd:09:
08:f9:d6:24:51:f9:18:6a:98:6b:e5:aa:09:f9:b5:
a5:f4:fd:57:2f:a6:1c:8b:ba:4f:0d:e0:fa:69:af:
6d:3d:43:54:18:b8:34:b3:ca:94:6a:b3:37:3d:59:
af:d3:d4:69:65:3c:c9:23:50:9f:83:fa:e3:27:d4:
89:b2:80:20:73:57:22:f4:3a:9a:65:c7:fa:22:d5:
a4:79:99:62:c6:6a:c9:a3:06:1e:b9:fc:17:c9:ec:
70:69:98:8f:44:94:40:f1:24:c3:e6:68:f3:f8:11:
bf:cf:b5:42:5b:6d:1e:3d:36:b6:b8:e3:a9:bd:49:
e7:97:7b:18:48:ea:fb:6c:39:70:65:fb:8f:38:63:
6f:9d:ef:00:1b:d4:2d:32:a5:84:c7:eb:e0:d3:af:
bf:ff:3d:4a:6e:a9:1d:a6:15:98:91:80:0e:6b:4b:
23:a1:06:3b:82:57:9d:78:db:45:53:07:e6:6b:c4:
64:01:77:62:ad:5d:cb:f9:45:d2:c9:81:c8:4d:39:
64:3c:25:42:65:41:ac:b0:01:1c:16:dc:24:11:2a:
0d:f7:23:a7:ba:37:eb:1b:a1:76:29:44:ec:82:5b:
ed:fa:cc:cc:05:69:5b:25:cf:13:f4:b9:b5:13:ff:
0a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:B6:D8:F6:82:CB:0E:66:54:11:16:6A:1E:C9:EC:FE:BA:9E:9E:DF
X509v3 Authority Key Identifier:
keyid:F0:7D:E2:A6:04:1C:4C:CD:F4:24:D4:FE:29:9B:58:6D:AB:A2:2C:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:fa:8f:f5:27:21:b3:d6:ea:17:27:7c:a2:30:5d:c1:0e:93:
96:e2:bc:b7:e4:f2:9b:23:80:de:a7:9b:1c:40:c0:3e:58:07:
8b:28:f7:28:40:10:9a:9a:17:ff:13:a6:b2:6b:a0:d2:2a:39:
b4:fa:c2:37:43:5a:2f:02:40:20:cc:85:75:7b:3c:80:1b:f8:
e2:ef:f3:60:8c:bc:e7:3e:04:1f:38:2f:dc:70:68:41:4f:8a:
7d:37:b0:67:aa:99:e7:62:79:bd:1e:95:5d:99:66:37:a6:7f:
d0:1f:58:c2:0d:f1:f2:5f:73:29:94:cf:1e:9d:2e:a6:06:e8:
b0:8e:37:aa:f5:d5:ae:5a:c7:9f:f5:db:73:6f:bf:a8:ab:83:
89:95:3c:50:82:62:fa:e5:53:1b:41:1d:32:10:3b:7d:d1:a6:
c9:f4:14:4b:fa:97:b6:2f:85:38:6e:a9:0c:5a:29:0e:cb:56:
23:1a:c7:7e:25:1a:e7:54:57:49:71:39:32:bb:ef:b4:f7:ce:
20:2d:d6:8f:e8:84:99:f1:3f:a1:53:9c:be:ca:43:78:ad:89:
b9:b4:fc:7b:91:27:cf:d7:e0:a3:27:e6:d2:15:07:b0:64:84:
ac:97:25:50:d0:a8:66:29:6a:fe:84:08:17:fb:c0:df:92:8b:
2a:6b:cd:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 01:32:06 2026 by rpki-client