
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/4242BEFAB7FD9E772FB16847C540331384EE1024.mft
File: 4242BEFAB7FD9E772FB16847C540331384EE1024.mft (raw, json)
Hash identifier: Y7M875/6QjDJ485NwJvcoHEwY8sDqMK0UgRkryT5mNw=
Subject key identifier: 2B:6F:7B:D7:25:71:79:DD:BE:42:27:BE:8C:53:F4:70:BC:D9:F8:CE
Authority key identifier: 42:42:BE:FA:B7:FD:9E:77:2F:B1:68:47:C5:40:33:13:84:EE:10:24
Certificate issuer: /CN=4242BEFAB7FD9E772FB16847C540331384EE1024
Certificate serial: 0F71229326FC26CDECFF03DA710B2F66B845E97E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4242BEFAB7FD9E772FB16847C540331384EE1024.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/4242BEFAB7FD9E772FB16847C540331384EE1024.mft
Manifest number: C1
Signing time: Wed 23 Sep 2026 18:03:22 +0000
Manifest this update: Wed 23 Sep 2026 17:58:22 +0000
Manifest next update: Thu 24 Sep 2026 18:48:22 +0000
Files and hashes: 1: 3230322e3138322e3136302e302f31392d3234203d3e2039383735.roa (hash: ZoyEeEkhjYB7kmWXbankgfqmtUA/RIwDGWmG85rq3MM=)
2: 323030313a6632303a663030303a3a2f33362d3438203d3e203338313534.roa (hash: yBBw20MUl3ywel5nMkYQ+sxWLo0uKsXTdelznoPGQgw=)
3: 3230332e38332e32362e302f32332d3234203d3e203538333738.roa (hash: Cw/pDcSCd6i3ij4/wfpHGGndxOrkB5cRBItVY3wwyXY=)
4: 323030313a6632303a313030303a3a2f33362d3438203d3e2039383735.roa (hash: tIIyaOJKHjPPuva/q/Aqc1Qh+BSiqDBH0wmDFkgmMzY=)
5: 3230322e39352e3132382e302f31392d3234203d3e2039383735.roa (hash: 8HTV0U7VPfbofWQktj6RT5pn5RIkHHJ7XlxCG7/lIR4=)
6: 3130332e37312e3232342e302f32322d3234203d3e2039383735.roa (hash: C/tjvABwEX3e3XuDh6lRQ/cpU/5HYFGHpATqucNO6pQ=)
7: 3230332e38332e32382e302f32332d3234203d3e203538333738.roa (hash: PfMnHFIZGrnZM82g+rsBwK7aW3WScriYgqF0KRQ2e7o=)
8: 323030313a6632303a323030303a3a2f33362d3438203d3e2039383735.roa (hash: df7n82FEObULXOysxP6bG6yjwPocx8D3thReHoveLMI=)
9: 3230322e3138322e3137342e302f32342d3234203d3e203538343738.roa (hash: ENboBx8oAXnbGQ10S7i2zUMk/RdQE6cutileOuH+d/M=)
10: 3230322e3138322e3137372e302f32342d3234203d3e203538343738.roa (hash: 5cRboxzFOLvbyc9aSM3Coqx837mIFEIAXFoJ+a6/PqQ=)
11: 323030313a6632303a343030303a3a2f33362d3438203d3e2039383735.roa (hash: HZhaUoMvo6PbB0DDiHNG1KzdNqQKbOCBQCGJxhRr7TU=)
12: 323030313a6632303a333030303a3a2f33362d3438203d3e2039383735.roa (hash: nXrFney4rm86RaxvLz8FHxrD0eDVyhHMOFWuNh0v780=)
13: 4242BEFAB7FD9E772FB16847C540331384EE1024.crl (hash: S99XYqgiomzfyWuCCiFS5Hu6gvcaPxf1ZcWy1056mv4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/4242BEFAB7FD9E772FB16847C540331384EE1024.crl
rsync://rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/4242BEFAB7FD9E772FB16847C540331384EE1024.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4242BEFAB7FD9E772FB16847C540331384EE1024.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 18:48:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:71:22:93:26:fc:26:cd:ec:ff:03:da:71:0b:2f:66:b8:45:e9:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4242BEFAB7FD9E772FB16847C540331384EE1024
Validity
Not Before: Sep 23 17:58:22 2026 GMT
Not After : Sep 24 18:48:22 2026 GMT
Subject: CN=2B6F7BD7257179DDBE4227BE8C53F470BCD9F8CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:99:14:36:b1:d1:87:86:35:3b:fb:c3:11:84:
2a:be:cd:56:69:a1:2c:ad:d6:b7:35:58:ee:2c:43:
0c:3d:91:0e:ca:b3:b6:3b:dc:d2:33:7e:bd:22:3b:
10:25:83:b6:24:98:a4:c6:e6:91:72:0c:f7:ae:ce:
28:2e:2a:87:a1:6d:7e:bb:58:25:09:60:41:13:1d:
ab:cd:f3:84:f3:25:22:80:57:4c:50:bf:af:9f:d7:
07:9e:90:1c:03:88:d9:e5:08:97:6f:1a:d1:90:9a:
62:c9:1d:c4:d2:05:d8:84:e3:5e:f9:32:ab:42:9f:
d8:70:c8:d1:67:04:93:17:cb:8d:a7:79:56:d0:9f:
86:73:3e:d8:00:43:ad:d7:bf:25:f4:77:25:ca:1a:
f4:1f:3a:ed:2a:05:53:c7:70:79:77:cc:8f:01:ed:
7e:fc:ae:49:07:19:f6:e4:65:d7:61:f2:38:bd:dc:
c9:ad:e8:ee:01:da:b6:d8:cd:aa:02:3b:fc:98:70:
7f:f6:71:2c:cf:ad:1d:40:27:dc:55:60:3c:a4:51:
94:9c:04:05:cc:18:f2:31:f2:e6:64:5f:d9:49:18:
eb:66:77:8c:74:3e:85:15:f1:70:f1:27:13:c9:aa:
af:53:19:24:d3:55:5e:5f:d8:78:8c:8e:01:0f:b5:
e6:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:6F:7B:D7:25:71:79:DD:BE:42:27:BE:8C:53:F4:70:BC:D9:F8:CE
X509v3 Authority Key Identifier:
keyid:42:42:BE:FA:B7:FD:9E:77:2F:B1:68:47:C5:40:33:13:84:EE:10:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/4242BEFAB7FD9E772FB16847C540331384EE1024.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4242BEFAB7FD9E772FB16847C540331384EE1024.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/4242BEFAB7FD9E772FB16847C540331384EE1024.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:64:da:64:78:45:97:61:f4:1c:aa:3e:45:e9:a2:a8:e9:d4:
09:c6:a1:5c:40:1f:15:91:3d:70:5a:e3:4a:50:37:06:c5:c1:
c9:91:47:a8:3d:5b:7b:24:9a:f0:0e:94:ff:95:75:e1:84:b7:
4b:82:81:41:8d:18:04:be:b1:e8:a7:1d:b2:fe:5a:c5:42:ba:
62:5f:d4:e6:08:9a:e6:e0:dd:56:cd:60:53:1a:23:25:c6:9e:
0c:33:ed:ad:b3:a7:57:62:48:87:29:03:8e:a2:b7:14:e6:be:
b7:b3:ef:a0:d9:15:76:ab:40:3f:26:23:1b:59:3b:8b:fd:d1:
ca:d6:74:07:3a:3a:9d:b3:08:63:56:5c:20:07:72:35:c7:2e:
0c:96:a7:f1:90:3a:c9:53:fe:de:fd:56:69:de:7d:67:c1:b5:
bf:58:86:93:6c:94:e6:34:b4:07:ea:42:0b:67:64:ab:9a:66:
e5:60:54:65:04:a0:ef:81:22:17:8d:ab:22:ef:0e:0e:74:ac:
1a:84:96:3e:a6:6d:3e:3d:de:54:7b:8e:43:bc:62:6c:ef:bd:
01:ae:04:6f:ed:8b:bc:81:41:17:1e:1e:af:07:47:fe:f2:8d:
1d:b8:a8:29:77:06:10:45:ec:2c:b6:ec:db:8d:47:0d:6d:89:
91:3c:cf:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:34:19 2026 by rpki-client