
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/F2404BD69B9873B31DD80EA1E3F54A8C42D71F17.mft
File: F2404BD69B9873B31DD80EA1E3F54A8C42D71F17.mft (raw, json)
Hash identifier: lD0J58D2FCQlXA5xcVTANJ4TC8KdSuTdS3o8omT/hlw=
Subject key identifier: 6C:8B:E0:AF:20:F9:9E:93:5A:4C:D9:17:34:C5:22:CA:D7:C3:D1:A5
Authority key identifier: F2:40:4B:D6:9B:98:73:B3:1D:D8:0E:A1:E3:F5:4A:8C:42:D7:1F:17
Certificate issuer: /CN=F2404BD69B9873B31DD80EA1E3F54A8C42D71F17
Certificate serial: 0B9634FA25D898D231A1A833598638B0E1D9226A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2404BD69B9873B31DD80EA1E3F54A8C42D71F17.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/F2404BD69B9873B31DD80EA1E3F54A8C42D71F17.mft
Manifest number: C1
Signing time: Wed 23 Sep 2026 00:16:32 +0000
Manifest this update: Wed 23 Sep 2026 00:11:32 +0000
Manifest next update: Thu 24 Sep 2026 02:28:32 +0000
Files and hashes: 1: 323030313a6466333a356263303a3a2f34382d3438203d3e20313532303832.roa (hash: eW2jjvdvI19U+UGpZwOooilR+jDpj7dTH79DXIcMLCo=)
2: F2404BD69B9873B31DD80EA1E3F54A8C42D71F17.crl (hash: 3MRLwr8PPKVW3GFLHzB38VNWwVHHOZQYq5yVXBTzK8Y=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/F2404BD69B9873B31DD80EA1E3F54A8C42D71F17.crl
rsync://rpki-rsync.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/F2404BD69B9873B31DD80EA1E3F54A8C42D71F17.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2404BD69B9873B31DD80EA1E3F54A8C42D71F17.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 02:28:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:96:34:fa:25:d8:98:d2:31:a1:a8:33:59:86:38:b0:e1:d9:22:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F2404BD69B9873B31DD80EA1E3F54A8C42D71F17
Validity
Not Before: Sep 23 00:11:32 2026 GMT
Not After : Sep 24 02:28:32 2026 GMT
Subject: CN=6C8BE0AF20F99E935A4CD91734C522CAD7C3D1A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d3:72:79:ac:0e:b5:9b:26:03:31:04:04:a4:
c5:93:2b:98:49:ed:85:f2:f7:58:17:f4:a3:36:d5:
4f:a7:9c:f6:d1:66:15:bc:d1:a5:73:bd:df:c3:e1:
a5:7d:6d:6e:d9:d9:eb:8c:b1:29:ac:c8:bf:cc:ae:
90:16:95:c1:35:0c:5b:86:c8:4f:8f:33:ad:66:73:
5b:28:55:20:6a:91:69:42:f8:1d:b5:19:00:09:20:
25:75:8b:6e:e7:5e:29:43:ed:de:dd:a5:81:d4:54:
24:75:f4:de:0b:88:4d:8d:e1:66:80:0e:1c:bd:7b:
1c:09:a7:d3:89:c9:59:8f:9a:0d:f9:94:42:1e:24:
42:8e:85:57:c6:3a:c8:7b:4e:1e:ee:bb:2c:ea:85:
fd:38:e6:65:77:eb:1c:26:76:06:73:92:08:1c:72:
44:d6:9f:c2:cd:9b:1d:84:1c:6c:dc:5e:dd:ff:ed:
03:8b:7f:97:08:b5:91:9e:c2:2b:bd:a0:90:97:2c:
3c:01:41:9b:6f:b6:13:70:ac:cf:4b:12:ba:7c:f0:
3b:0e:5b:ec:a4:db:56:b8:2f:94:58:5f:4d:56:5b:
00:f2:72:c1:18:fb:a3:4e:01:6c:cd:3a:62:08:2d:
a6:39:28:75:1f:cc:a1:3b:3d:52:1f:4c:e9:89:a5:
5c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:8B:E0:AF:20:F9:9E:93:5A:4C:D9:17:34:C5:22:CA:D7:C3:D1:A5
X509v3 Authority Key Identifier:
keyid:F2:40:4B:D6:9B:98:73:B3:1D:D8:0E:A1:E3:F5:4A:8C:42:D7:1F:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/F2404BD69B9873B31DD80EA1E3F54A8C42D71F17.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2404BD69B9873B31DD80EA1E3F54A8C42D71F17.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/F2404BD69B9873B31DD80EA1E3F54A8C42D71F17.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:3d:9b:a9:8b:39:6d:76:6a:4b:6b:73:ba:25:f2:57:dc:c6:
31:aa:f6:23:1c:cd:3f:9d:5f:2b:f9:d6:7f:cd:9e:94:d5:49:
4a:9d:75:7b:c4:35:7e:9d:91:d2:10:ec:8a:ba:fc:89:18:72:
85:67:dc:2e:00:53:a1:64:30:16:fd:45:6d:e2:6c:7d:83:62:
8e:23:01:43:38:26:b9:bc:33:e5:1b:0f:3d:10:57:d2:3a:ad:
b5:95:99:8e:04:74:04:cf:37:7b:3e:bc:8d:dd:0d:dc:d0:0e:
e6:8f:ec:49:dd:43:94:17:43:6b:c8:04:89:a0:9f:88:23:36:
66:7a:03:7b:45:2b:80:b5:01:94:2a:36:0b:92:21:64:64:5f:
89:bd:7f:f5:03:01:3a:c8:0c:f9:ed:f1:10:cc:d2:14:01:77:
6b:0d:87:1b:3a:2f:bd:35:e7:dd:11:9d:4e:fb:47:0e:46:92:
05:40:35:54:2c:36:ab:db:b2:d0:e7:bf:b3:81:b5:e0:6d:e9:
b5:59:38:05:03:b9:fe:fb:99:0e:41:5e:77:c3:f9:43:b4:01:
66:d9:47:b0:34:89:78:96:90:5d:cc:79:25:a6:93:7b:a9:81:
a7:03:a6:15:55:7f:b0:ab:a6:53:71:90:e6:4d:fe:a4:22:81:
e9:4b:a5:a2
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUC5Y0+iXYmNIxoagzWYY4sOHZImowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjI0MDRCRDY5Qjk4NzNCMzFERDgwRUExRTNGNTRBOEM0
MkQ3MUYxNzAeFw0yNjA5MjMwMDExMzJaFw0yNjA5MjQwMjI4MzJaMDMxMTAvBgNV
BAMTKDZDOEJFMEFGMjBGOTlFOTM1QTRDRDkxNzM0QzUyMkNBRDdDM0QxQTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT03J5rA61myYDMQQEpMWTK5hJ
7YXy91gX9KM21U+nnPbRZhW80aVzvd/D4aV9bW7Z2euMsSmsyL/MrpAWlcE1DFuG
yE+PM61mc1soVSBqkWlC+B21GQAJICV1i27nXilD7d7dpYHUVCR19N4LiE2N4WaA
Dhy9exwJp9OJyVmPmg35lEIeJEKOhVfGOsh7Th7uuyzqhf045mV36xwmdgZzkggc
ckTWn8LNmx2EHGzcXt3/7QOLf5cItZGewiu9oJCXLDwBQZtvthNwrM9LErp88DsO
W+yk21a4L5RYX01WWwDycsEY+6NOAWzNOmIILaY5KHUfzKE7PVIfTOmJpVwBAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUbIvgryD5npNaTNkXNMUiytfD0aUwHwYDVR0j
BBgwFoAU8kBL1puYc7Md2A6h4/VKjELXHxcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZTQ3Y2Q1YTItYTc0Mi00NTBjLWIxOTAtNTAwZTc1NDUyMGRlLzEvRjI0MDRCRDY5
Qjk4NzNCMzFERDgwRUExRTNGNTRBOEM0MkQ3MUYxNy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9GMjQwNEJENjlCOTg3M0IzMUREODBFQTFFM0Y1NEE4QzQyRDcx
RjE3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTQ3Y2Q1YTItYTc0Mi00NTBjLWIx
OTAtNTAwZTc1NDUyMGRlLzEvRjI0MDRCRDY5Qjk4NzNCMzFERDgwRUExRTNGNTRB
OEM0MkQ3MUYxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAAE9m6mLOW12aktrc7ol8lfcxjGq9iMczT+d
Xyv51n/NnpTVSUqddXvENX6dkdIQ7Iq6/IkYcoVn3C4AU6FkMBb9RW3ibH2DYo4j
AUM4Jrm8M+UbDz0QV9I6rbWVmY4EdATPN3s+vI3dDdzQDuaP7EndQ5QXQ2vIBImg
n4gjNmZ6A3tFK4C1AZQqNguSIWRkX4m9f/UDATrIDPnt8RDM0hQBd2sNhxs6L701
590RnU77Rw5GkgVANVQsNqvbstDnv7OBteBt6bVZOAUDuf77mQ5BXnfD+UO0AWbZ
R7A0iXiWkF3MeSWmk3upgacDphVVf7CrplNxkOZN/qQigelLpaI=
-----END CERTIFICATE-----
Generated at Wed Sep 23 19:44:20 2026 by rpki-client