
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/A9BFA348A050E46482F4E00C605FF9961247FC64.mft
File: A9BFA348A050E46482F4E00C605FF9961247FC64.mft (raw, json)
Hash identifier: VbGRbfHxcdMnRp1r7n3zkuoncvnypBTcMxdv4lOcz3M=
Subject key identifier: 4A:3E:E3:8B:51:D5:85:28:C8:1F:47:7F:11:27:92:38:9A:4D:11:D2
Authority key identifier: A9:BF:A3:48:A0:50:E4:64:82:F4:E0:0C:60:5F:F9:96:12:47:FC:64
Certificate issuer: /CN=A9BFA348A050E46482F4E00C605FF9961247FC64
Certificate serial: 637DFA35179FA42302B413850F353155374AE53B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9BFA348A050E46482F4E00C605FF9961247FC64.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/A9BFA348A050E46482F4E00C605FF9961247FC64.mft
Manifest number: C3
Signing time: Fri 25 Sep 2026 04:00:14 +0000
Manifest this update: Fri 25 Sep 2026 03:55:14 +0000
Manifest next update: Sat 26 Sep 2026 05:04:14 +0000
Files and hashes: 1: 3131312e39322e3136342e302f32342d3234203d3e203233363731.roa (hash: wNQ3Qkv9biOpVvnJgROiOoJs/1gZSgV49b5TXX2+3Z4=)
2: 323430333a623230303a3a2f33322d3438203d3e203233363731.roa (hash: 2aLawRYLy3KCYufu2NaJ3HYybrz6F8WpwigQMHaYOu8=)
3: 3230322e3136392e3232342e302f32302d3234203d3e203233363731.roa (hash: 4ByDuJtt3A8/OMYgUMLRW5zT+7DYjf2+SVe78YDt8J8=)
4: 3131312e39322e3137342e302f32332d3234203d3e203233363731.roa (hash: w12lGkVliS3y+76XSl6gzHQHimzilNFu+hS9Qt8ntF0=)
5: 3131312e39322e3136352e302f32342d3234203d3e203233363731.roa (hash: H7aX+6aTRF1Nj4kzc1OuSxt8gZOvC6ixFR9qSLZfj6Q=)
6: A9BFA348A050E46482F4E00C605FF9961247FC64.crl (hash: 8viF4XheBXKQfnaLTjiIEaMNYXkOTB0Go2jHFawTtJE=)
7: 3131312e39322e3136322e302f32342d3234203d3e203338353036.roa (hash: 2dlHVfZFD/szRhd8hUNYHiAVCewx+xASxFEiirRYGTg=)
8: 3131312e39322e3137312e302f32342d3234203d3e203233363731.roa (hash: LSQJykz8Xa8OUBE1CJt+TyLaezRgkEysTciohkEfAhc=)
9: 3131312e39322e3137302e302f32342d3234203d3e203233363731.roa (hash: UwBVAcKHZ4f4hQBOzL0Sd4Fm5LmC4c+ionV2pYmo7/o=)
10: 323430333a623230303a3166653a3a2f34382d3438203d3e203233363731.roa (hash: r6fMNtgJIoHgjV3DFpNsgQ1H8cmQbjMCcbKig24MDXk=)
11: 323430333a623230303a3233303a3a2f34382d3438203d3e203233363731.roa (hash: GGTpraPioXOfseSGJKXessD1JJQRRiypizczW1Hzdy0=)
12: 3131312e39322e3137342e302f32342d3234203d3e203233363731.roa (hash: GuV6Rg2wTEoGKg9NRtGF/nlE2uCUCHsreSMW9u/k6bA=)
13: 323430333a623230303a3233373a3a2f34382d3438203d3e203233363731.roa (hash: S+jEWzFEnfshlynIM2/L8ivR0r7b8KQ+/HC/tf13JGI=)
14: 3131312e39322e3136372e302f32342d3234203d3e203233363731.roa (hash: 7eo+DUwzfso/gGHNjcQAtGfgWMCxkON/A6PVQqojzIw=)
15: 323430333a623230303a613939633a3a2f34382d3438203d3e203338353036.roa (hash: XAeIzu631fi3CwuOFGNDoY933yMIfsvYuPPKWulTcYM=)
16: 3131312e39322e3136362e302f32342d3234203d3e203233363731.roa (hash: ZVviuvnexquFN2F18kLTWUBNgOrAM1n1Wa8GZF9ayTM=)
17: 3131312e39322e3136382e302f32342d3234203d3e203233363731.roa (hash: Zs7TRnZe5BNsoAw7Vlg7d8WTD6Yej6D1y1DZK+qwGSo=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/A9BFA348A050E46482F4E00C605FF9961247FC64.crl
rsync://rpki-rsync.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/A9BFA348A050E46482F4E00C605FF9961247FC64.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9BFA348A050E46482F4E00C605FF9961247FC64.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 26 Sep 2026 05:04:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:7d:fa:35:17:9f:a4:23:02:b4:13:85:0f:35:31:55:37:4a:e5:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9BFA348A050E46482F4E00C605FF9961247FC64
Validity
Not Before: Sep 25 03:55:14 2026 GMT
Not After : Sep 26 05:04:14 2026 GMT
Subject: CN=4A3EE38B51D58528C81F477F112792389A4D11D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:27:8b:f0:b6:2c:59:43:03:87:20:fb:89:82:
2c:d3:39:39:33:23:39:cf:d9:92:10:3a:bd:d1:b7:
51:51:01:2f:de:3e:17:91:d9:a9:16:27:65:df:79:
b6:e9:80:e4:a0:b2:db:73:06:3b:26:4e:19:d2:aa:
0b:88:75:61:63:9d:90:02:98:f5:6c:c0:53:d1:a3:
6d:33:85:4f:56:3b:b2:9f:82:fb:22:01:ef:e1:23:
7f:58:6d:e5:da:15:c2:dc:cc:4b:80:76:7e:87:1e:
fa:f1:6d:7f:13:db:ed:a2:6c:3a:b9:ca:a8:8c:5f:
53:24:41:4a:0b:4d:45:c2:bc:ff:62:30:d3:26:22:
81:9d:5f:4c:07:e4:86:21:1f:7e:b8:95:21:90:e7:
9a:83:61:63:42:c3:71:18:5e:fa:54:4d:aa:c3:0f:
8c:8d:67:18:4c:69:71:72:c6:c3:22:e1:fa:8e:a5:
7d:97:6c:e6:db:68:e7:b5:60:3f:31:e8:5b:30:e8:
2f:11:a1:48:2d:ac:45:21:e1:75:85:41:22:ee:bd:
f8:b9:b6:d6:56:93:cf:a9:3f:2e:a7:b7:be:58:99:
7a:86:80:9a:58:54:02:75:88:f5:7d:00:41:39:32:
14:5b:34:ac:39:a5:2b:ed:f2:96:7a:35:30:a5:ed:
ba:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:3E:E3:8B:51:D5:85:28:C8:1F:47:7F:11:27:92:38:9A:4D:11:D2
X509v3 Authority Key Identifier:
keyid:A9:BF:A3:48:A0:50:E4:64:82:F4:E0:0C:60:5F:F9:96:12:47:FC:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/A9BFA348A050E46482F4E00C605FF9961247FC64.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9BFA348A050E46482F4E00C605FF9961247FC64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/A9BFA348A050E46482F4E00C605FF9961247FC64.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:31:a2:af:c6:38:4f:97:59:ee:c7:3d:65:9d:35:46:7f:b5:
e0:ba:e9:50:a5:43:de:1c:ae:dd:58:73:50:80:bb:c7:f1:4a:
e7:fe:a0:85:23:51:99:a3:05:58:54:d8:5b:b1:42:58:34:24:
9b:e2:f4:b0:1c:13:b5:e1:fb:12:a4:09:bb:47:81:68:48:7d:
a3:48:16:e2:17:fc:75:c1:6d:94:bf:0f:25:45:54:4d:73:0c:
4e:d0:97:b9:6f:44:7c:dd:07:1b:03:91:dd:2a:1c:ee:72:73:
28:06:60:ed:89:04:e5:3f:30:e4:fa:b3:9d:48:24:f9:87:4c:
75:4d:9e:5f:12:74:d8:26:ae:b3:ba:96:f9:16:c9:c9:49:6e:
3a:a2:2d:44:27:cf:66:57:d5:ce:5d:65:b4:38:23:60:6e:4a:
8d:70:51:0f:ba:d1:64:da:67:26:63:52:3e:27:28:4b:77:85:
35:74:c4:7e:8e:8b:7f:b3:5a:00:d3:e7:02:bc:8e:b3:e2:d5:
f3:80:cd:c1:f2:13:c0:0b:41:01:0c:30:f8:97:dd:1a:ba:ff:
4d:7c:82:86:b5:2d:d3:23:33:45:13:62:36:8d:9b:3f:7a:07:
82:a1:7c:91:65:1a:cd:ce:61:c8:3f:05:66:8f:38:8c:d5:0a:
10:99:10:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:09:38 2026 by rpki-client