
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.mft
File: 219A09E5E307286A0EACA587C1B82AD67AAA76E3.mft (raw, json)
Hash identifier: 2NxqxZcmsq4Hr9nPtku6eBLVurYyhKMEgtOAhLfJnu0=
Subject key identifier: B6:40:52:B2:9B:19:C3:E4:A0:78:29:30:D0:E9:6C:5F:42:BF:79:CC
Authority key identifier: 21:9A:09:E5:E3:07:28:6A:0E:AC:A5:87:C1:B8:2A:D6:7A:AA:76:E3
Certificate issuer: /CN=219A09E5E307286A0EACA587C1B82AD67AAA76E3
Certificate serial: 0C9E5A9FBB6F7F6234DD4D37768972C23D5D0ABF
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.mft
Manifest number: C4
Signing time: Fri 25 Sep 2026 09:22:17 +0000
Manifest this update: Fri 25 Sep 2026 09:17:17 +0000
Manifest next update: Sat 26 Sep 2026 11:54:17 +0000
Files and hashes: 1: 3135372e31302e302e302f32332d3233203d3e20313532303739.roa (hash: L8w6kahZ2grS4kSAhgTEPOSgOOJA2842GakagbKlsJM=)
2: 219A09E5E307286A0EACA587C1B82AD67AAA76E3.crl (hash: vBAm4tBwbYHoQN7YGve2rlO4UGIExjt2JmxRBnK0540=)
3: 3135372e31302e302e302f32342d3234203d3e20313532303739.roa (hash: bOwhqsRdU2z4t+zScIcD9uS9UewO9FSu5iy5ahd23Rg=)
4: 3135372e31302e312e302f32342d3234203d3e20313532303739.roa (hash: Kz5hnZVq/K186z6qssglPHGkqEQOWNb/p+k3bONz3g8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.crl
rsync://rpki-rsync.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 26 Sep 2026 11:54:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:9e:5a:9f:bb:6f:7f:62:34:dd:4d:37:76:89:72:c2:3d:5d:0a:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=219A09E5E307286A0EACA587C1B82AD67AAA76E3
Validity
Not Before: Sep 25 09:17:17 2026 GMT
Not After : Sep 26 11:54:17 2026 GMT
Subject: CN=B64052B29B19C3E4A0782930D0E96C5F42BF79CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:87:07:9a:0c:d7:6b:56:25:64:75:4c:9b:be:
fa:7c:2c:9f:12:29:24:ac:34:1c:93:91:af:af:e0:
ef:8b:ec:37:c1:07:2c:86:1a:63:d8:ef:9b:57:72:
87:6d:1a:86:62:e4:c0:16:4b:55:7c:31:af:2b:c4:
14:c5:e2:ec:42:e1:41:26:6c:7a:58:3f:65:c2:09:
d6:68:dc:38:e6:c8:b9:e5:42:a5:17:8e:b1:58:d2:
fe:01:c1:ab:41:e9:2f:f6:bf:5a:63:a3:4e:6d:09:
1e:0f:93:27:a2:6b:56:b8:e7:0f:0a:8e:23:d6:60:
5e:c2:b2:a4:5a:6f:78:58:0a:bc:5c:ca:28:13:38:
0c:91:4a:48:dc:19:0d:e3:8e:ed:18:59:f7:0c:8e:
fc:f8:d2:aa:c2:e5:9b:05:32:a3:c3:2e:90:8f:52:
02:23:9e:9f:f0:a3:d3:35:36:88:16:4a:d5:00:eb:
fc:32:d3:a0:99:27:ac:05:f5:d7:fd:f9:bd:2d:21:
fa:85:c0:ec:6b:75:54:7c:f2:b9:df:c0:bd:db:92:
ed:e2:38:05:6d:39:55:91:96:0e:ef:82:dc:e0:8f:
30:d3:12:b0:99:1a:3f:57:ba:65:80:c7:6e:3c:7c:
cd:f9:c8:93:8f:61:31:92:0a:c2:94:74:76:b3:36:
ab:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:40:52:B2:9B:19:C3:E4:A0:78:29:30:D0:E9:6C:5F:42:BF:79:CC
X509v3 Authority Key Identifier:
keyid:21:9A:09:E5:E3:07:28:6A:0E:AC:A5:87:C1:B8:2A:D6:7A:AA:76:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:dc:bf:a3:4e:ef:8d:0f:cd:4d:45:86:23:20:ef:07:e7:42:
4d:c5:67:6f:05:ef:23:82:4e:d4:4a:62:57:e1:9f:02:c2:df:
6e:ff:11:d9:06:bf:b9:e3:61:b7:be:7c:17:83:82:41:0a:85:
af:9e:f1:87:39:a9:66:a6:dc:f9:63:3f:8b:24:4f:03:7f:00:
4c:9c:59:d9:99:68:85:ed:c2:a0:b5:d6:13:75:0a:4e:2f:f2:
7c:23:b1:bc:7d:d4:55:76:63:9e:c2:70:f0:19:0b:4f:d5:0a:
49:b3:56:eb:3e:e7:96:2f:85:77:fc:65:df:57:c7:b7:25:0f:
71:d7:8d:55:20:ea:03:f9:5a:1d:ac:34:ea:76:9a:30:44:ac:
18:81:e9:69:50:8a:5a:e2:a9:2b:df:8c:cb:bf:07:6e:5b:f5:
48:ff:49:31:2e:3e:e0:1d:39:76:ff:5f:c3:c5:66:1c:b0:5d:
0e:5e:27:9c:65:65:d0:6a:e1:70:68:f7:f1:92:99:8d:2b:5c:
f9:bd:7d:ae:43:8f:fb:19:a6:a4:3d:97:51:aa:ae:88:8b:68:
34:8a:a7:29:d8:fc:05:5a:d3:c1:26:7c:1a:f7:53:d5:c1:71:
03:3c:8e:5b:1f:d6:8a:86:fc:7c:b7:81:b7:82:0a:cb:f6:0c:
08:a0:22:4a
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUDJ5an7tvf2I03U03dolywj1dCr8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE5QTA5RTVFMzA3Mjg2QTBFQUNBNTg3QzFCODJBRDY3
QUFBNzZFMzAeFw0yNjA5MjUwOTE3MTdaFw0yNjA5MjYxMTU0MTdaMDMxMTAvBgNV
BAMTKEI2NDA1MkIyOUIxOUMzRTRBMDc4MjkzMEQwRTk2QzVGNDJCRjc5Q0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3hweaDNdrViVkdUybvvp8LJ8S
KSSsNByTka+v4O+L7DfBByyGGmPY75tXcodtGoZi5MAWS1V8Ma8rxBTF4uxC4UEm
bHpYP2XCCdZo3DjmyLnlQqUXjrFY0v4BwatB6S/2v1pjo05tCR4Pkyeia1a45w8K
jiPWYF7CsqRab3hYCrxcyigTOAyRSkjcGQ3jju0YWfcMjvz40qrC5ZsFMqPDLpCP
UgIjnp/wo9M1NogWStUA6/wy06CZJ6wF9df9+b0tIfqFwOxrdVR88rnfwL3bku3i
OAVtOVWRlg7vgtzgjzDTErCZGj9XumWAx248fM35yJOPYTGSCsKUdHazNqvjAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUtkBSspsZw+SgeCkw0OlsX0K/ecwwHwYDVR0j
BBgwFoAUIZoJ5eMHKGoOrKWHwbgq1nqqduMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OTk0ZDFmNjItODQ4OC00MDg2LThkNGMtZjJkZTVjNzZkYTNkLzAvMjE5QTA5RTVF
MzA3Mjg2QTBFQUNBNTg3QzFCODJBRDY3QUFBNzZFMy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC8yMTlBMDlFNUUzMDcyODZBMEVBQ0E1ODdDMUI4MkFENjdBQUE3
NkUzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTk0ZDFmNjItODQ4OC00MDg2LThk
NGMtZjJkZTVjNzZkYTNkLzAvMjE5QTA5RTVFMzA3Mjg2QTBFQUNBNTg3QzFCODJB
RDY3QUFBNzZFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAG3cv6NO740PzU1FhiMg7wfnQk3FZ28F7yOC
TtRKYlfhnwLC327/EdkGv7njYbe+fBeDgkEKha+e8Yc5qWam3PljP4skTwN/AEyc
WdmZaIXtwqC11hN1Ck4v8nwjsbx91FV2Y57CcPAZC0/VCkmzVus+55YvhXf8Zd9X
x7clD3HXjVUg6gP5Wh2sNOp2mjBErBiB6WlQilriqSvfjMu/B25b9Uj/STEuPuAd
OXb/X8PFZhywXQ5eJ5xlZdBq4XBo9/GSmY0rXPm9fa5Dj/sZpqQ9l1GqroiLaDSK
pynY/AVa08EmfBr3U9XBcQM8jlsf1oqG/Hy3gbeCCsv2DAigIko=
-----END CERTIFICATE-----
Generated at Sat Sep 26 02:04:18 2026 by rpki-client