
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/F1A3DAB9001212D9FD6F8463049F312D727BFF2C.mft
File: F1A3DAB9001212D9FD6F8463049F312D727BFF2C.mft (raw, json)
Hash identifier: 1l6Yb2Uq3Ba0VJcxu3dVo+VglcUQuir1xjSv83WhO9A=
Subject key identifier: 9E:F8:8C:CA:F9:35:3A:4E:CE:DB:50:DA:09:AB:C3:90:20:9A:AC:58
Authority key identifier: F1:A3:DA:B9:00:12:12:D9:FD:6F:84:63:04:9F:31:2D:72:7B:FF:2C
Certificate issuer: /CN=F1A3DAB9001212D9FD6F8463049F312D727BFF2C
Certificate serial: 4C692C679EF451C2D6713CBD50CD7AB2D6FD14B6
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F1A3DAB9001212D9FD6F8463049F312D727BFF2C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/F1A3DAB9001212D9FD6F8463049F312D727BFF2C.mft
Manifest number: C6
Signing time: Sun 27 Sep 2026 00:55:29 +0000
Manifest this update: Sun 27 Sep 2026 00:50:29 +0000
Manifest next update: Mon 28 Sep 2026 04:44:29 +0000
Files and hashes: 1: 323430353a386363303a3a2f33322d3332203d3e20313339343530.roa (hash: rJ/og/iKUK3xac6RdgdlO70UvsZ6axJQZfH2pg1L5Gs=)
2: 3130332e3134352e3230302e302f32332d3234203d3e20313339343530.roa (hash: X3tra53AFKAkL1Puu4ERpsixqEIRbM+P2BtQPxdqKUw=)
3: F1A3DAB9001212D9FD6F8463049F312D727BFF2C.crl (hash: DEA7iNAfM5LdhP3I4gtyRn5Fx3Du4culnVC3yW0HOrw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/F1A3DAB9001212D9FD6F8463049F312D727BFF2C.crl
rsync://rpki-rsync.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/F1A3DAB9001212D9FD6F8463049F312D727BFF2C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F1A3DAB9001212D9FD6F8463049F312D727BFF2C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 04:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:69:2c:67:9e:f4:51:c2:d6:71:3c:bd:50:cd:7a:b2:d6:fd:14:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F1A3DAB9001212D9FD6F8463049F312D727BFF2C
Validity
Not Before: Sep 27 00:50:29 2026 GMT
Not After : Sep 28 04:44:29 2026 GMT
Subject: CN=9EF88CCAF9353A4ECEDB50DA09ABC390209AAC58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ed:94:47:3d:a6:9a:cc:f7:c1:92:ca:23:68:
b0:7b:e6:24:98:47:66:26:16:8f:2a:03:72:fa:6e:
20:48:2e:f1:03:ad:4d:07:3f:e2:6c:df:7c:26:c9:
91:87:02:fd:6a:0e:22:7b:1e:5b:e1:e6:43:9c:89:
ef:b4:dc:bd:e1:7b:ff:48:89:16:61:02:69:cd:46:
db:bc:b6:dc:2f:c9:7d:d0:f0:2b:cc:75:6a:b8:d8:
02:fa:b5:ee:1a:58:24:93:24:c1:55:ae:5e:80:38:
c8:01:9c:46:e1:3b:66:16:83:6d:bc:5f:ad:60:57:
8e:ed:1c:d1:72:ef:07:25:1a:0c:30:be:45:e3:ff:
4f:c0:92:5d:3a:d2:6e:87:d7:98:75:b8:8f:2a:e5:
7b:6a:3f:a6:1d:84:da:3d:52:46:be:ba:a6:f4:d6:
6a:34:0c:51:11:2c:0a:3e:fe:77:d5:07:99:3b:3c:
9f:81:cb:da:e8:08:a7:50:97:2f:78:85:01:29:e4:
d9:d1:b3:a4:95:e1:88:0a:9c:f9:09:b2:de:a2:42:
c8:ab:3f:53:cd:db:40:7a:19:38:6f:2e:8a:d8:ae:
76:64:6b:3b:d6:22:5f:87:18:f7:77:d4:ce:ca:86:
6b:f1:c6:2d:70:de:0a:e9:99:59:5d:c6:14:dd:f3:
0b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:F8:8C:CA:F9:35:3A:4E:CE:DB:50:DA:09:AB:C3:90:20:9A:AC:58
X509v3 Authority Key Identifier:
keyid:F1:A3:DA:B9:00:12:12:D9:FD:6F:84:63:04:9F:31:2D:72:7B:FF:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/F1A3DAB9001212D9FD6F8463049F312D727BFF2C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F1A3DAB9001212D9FD6F8463049F312D727BFF2C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/F1A3DAB9001212D9FD6F8463049F312D727BFF2C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:dc:26:f4:38:2f:db:20:25:ff:78:f4:d7:54:60:0e:87:1b:
b7:aa:f8:4a:c4:2c:a8:57:94:91:f9:ab:67:d5:b5:4a:c7:b6:
37:6b:a6:5d:f3:0c:5f:76:d5:2e:5b:a9:b3:83:86:ad:0c:87:
e7:47:c6:c3:c6:b8:c5:90:0e:a6:c2:7c:16:e3:11:3a:71:02:
09:12:7a:16:b3:8f:f5:72:b8:b7:2c:d2:86:9f:8f:13:7a:d7:
eb:a5:94:c8:65:9d:6d:f6:60:ef:c6:b5:78:5e:18:92:61:05:
38:6b:29:2e:40:62:f5:46:a8:e0:17:d5:71:d6:39:01:64:62:
52:b3:66:5b:8b:ea:0b:a4:88:c9:1b:27:e1:99:50:ef:0f:77:
78:e0:00:b3:3a:22:43:13:e8:c0:74:82:38:3b:65:6c:0e:2f:
10:6e:39:f6:34:66:9c:66:39:12:eb:8b:7d:dc:ef:09:0d:5f:
b9:39:56:d6:0f:d9:a3:f9:ef:00:62:03:de:b0:ff:37:32:3c:
3d:8c:d1:cf:20:f1:20:1f:98:0d:8d:b2:84:a5:05:a2:cb:30:
c1:bc:64:d5:f2:fe:62:24:be:05:5d:46:3a:93:76:1d:8b:9b:
37:05:7a:4a:3d:66:1a:30:8c:8c:f1:15:9a:88:31:aa:b1:db:
b9:7f:ef:22
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUTGksZ570UcLWcTy9UM16stb9FLYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjFBM0RBQjkwMDEyMTJEOUZENkY4NDYzMDQ5RjMxMkQ3
MjdCRkYyQzAeFw0yNjA5MjcwMDUwMjlaFw0yNjA5MjgwNDQ0MjlaMDMxMTAvBgNV
BAMTKDlFRjg4Q0NBRjkzNTNBNEVDRURCNTBEQTA5QUJDMzkwMjA5QUFDNTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi7ZRHPaaazPfBksojaLB75iSY
R2YmFo8qA3L6biBILvEDrU0HP+Js33wmyZGHAv1qDiJ7Hlvh5kOcie+03L3he/9I
iRZhAmnNRtu8ttwvyX3Q8CvMdWq42AL6te4aWCSTJMFVrl6AOMgBnEbhO2YWg228
X61gV47tHNFy7wclGgwwvkXj/0/Akl060m6H15h1uI8q5XtqP6YdhNo9Uka+uqb0
1mo0DFERLAo+/nfVB5k7PJ+By9roCKdQly94hQEp5NnRs6SV4YgKnPkJst6iQsir
P1PN20B6GThvLorYrnZkazvWIl+HGPd31M7Khmvxxi1w3grpmVldxhTd8ws5AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUnviMyvk1Ok7O21DaCavDkCCarFgwHwYDVR0j
BBgwFoAU8aPauQASEtn9b4RjBJ8xLXJ7/ywwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
Y2NmMTcwNmItNmMxNy00Nzg2LWFiZDktNDdhMzg0NGRhOGY4LzAvRjFBM0RBQjkw
MDEyMTJEOUZENkY4NDYzMDQ5RjMxMkQ3MjdCRkYyQy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9GMUEzREFCOTAwMTIxMkQ5RkQ2Rjg0NjMwNDlGMzEyRDcyN0JG
RjJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2NmMTcwNmItNmMxNy00Nzg2LWFi
ZDktNDdhMzg0NGRhOGY4LzAvRjFBM0RBQjkwMDEyMTJEOUZENkY4NDYzMDQ5RjMx
MkQ3MjdCRkYyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJncJvQ4L9sgJf949NdUYA6HG7eq+ErELKhX
lJH5q2fVtUrHtjdrpl3zDF921S5bqbODhq0Mh+dHxsPGuMWQDqbCfBbjETpxAgkS
ehazj/VyuLcs0oafjxN61+ullMhlnW32YO/GtXheGJJhBThrKS5AYvVGqOAX1XHW
OQFkYlKzZluL6gukiMkbJ+GZUO8Pd3jgALM6IkMT6MB0gjg7ZWwOLxBuOfY0Zpxm
ORLri33c7wkNX7k5VtYP2aP57wBiA96w/zcyPD2M0c8g8SAfmA2NsoSlBaLLMMG8
ZNXy/mIkvgVdRjqTdh2LmzcFeko9ZhowjIzxFZqIMaqx27l/7yI=
-----END CERTIFICATE-----
Generated at Sun Sep 27 08:41:17 2026 by rpki-client