
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/A9DFB6024D05A37CA0C756EC747E898140885BC9.mft
File: A9DFB6024D05A37CA0C756EC747E898140885BC9.mft (raw, json)
Hash identifier: F2t1Z+PZzS4tg3zLjJ9HpW4Fgawc6o3H2oxkty3Pa+U=
Subject key identifier: 40:C1:C0:DE:98:CF:74:B3:29:F1:40:2B:71:E5:C3:92:D0:53:95:F5
Authority key identifier: A9:DF:B6:02:4D:05:A3:7C:A0:C7:56:EC:74:7E:89:81:40:88:5B:C9
Certificate issuer: /CN=A9DFB6024D05A37CA0C756EC747E898140885BC9
Certificate serial: 6C1A1F77F94A2297C52559EF769C421DAD010B36
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9DFB6024D05A37CA0C756EC747E898140885BC9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/A9DFB6024D05A37CA0C756EC747E898140885BC9.mft
Manifest number: 6F
Signing time: Fri 24 Jul 2026 03:02:59 +0000
Manifest this update: Fri 24 Jul 2026 02:57:59 +0000
Manifest next update: Sat 25 Jul 2026 03:50:59 +0000
Files and hashes: 1: 3130332e3234372e31362e302f32332d3234203d3e203338313635.roa (hash: X2L0BGiTvmgLJtgSEYwPB9xF12na1ku6hIINh+wHP14=)
2: 3131362e31322e34322e302f32342d3234203d3e203338313635.roa (hash: Tzz51V+z7G+M0amuU470kd9KxBTkAYh2VanJBe/CIik=)
3: 3131342e33302e38392e302f32342d3234203d3e203338313635.roa (hash: maWh9CwQAwSd/hgh31AypikUc85sBDX5Qkb/wXAwqQ4=)
4: 3130332e38332e3134322e302f32342d3234203d3e203338313635.roa (hash: YrZIFaqaTChjnkZ/BX+Yt+LiIgZZAfEd+7+0eXA8anQ=)
5: 3130332e38332e3134312e302f32342d3234203d3e203338313635.roa (hash: caorMzAk2rhKrHkZPEylYGbz3q7q/4kgUFG0ZpSaKuk=)
6: 3130332e3234372e31362e302f32342d3234203d3e203338313635.roa (hash: glySjVWaeYKKJGdVLX98kL01SxrrhC2o5DvZ/OFZzes=)
7: 3131342e33302e39302e302f32342d3234203d3e203338313635.roa (hash: sDSoeXLG7m9Vd+TPJvOtkj0D0bh9+lF74Y6p0yHJT2w=)
8: 3131342e33302e38382e302f32342d3234203d3e203338313635.roa (hash: TYxvOObRiApVHdygkcJ79px01l2EeTEanmBRk9sEhU8=)
9: A9DFB6024D05A37CA0C756EC747E898140885BC9.crl (hash: +hkgRYF7RMyTVYcsLLhepD0iyCLn9i7aJatAXL18xHI=)
10: 3131362e31322e34342e302f32342d3234203d3e203338313635.roa (hash: 4eVsgYjQx/GwRQGHLYtsEEdD640KhW1jdNg/AXAmGj8=)
11: 3131362e31322e34362e302f32342d3234203d3e203338313635.roa (hash: VdZyujauditCo5BInDzGT86RLe022tUhB8aqRECGwWM=)
12: 3131342e33302e39312e302f32342d3234203d3e203338313635.roa (hash: hwrp8oltXPCRSuxrHgsojYMMFzDn1UCIz4HCYehypeU=)
13: 323430313a646363303a3a2f33322d3438203d3e203338313635.roa (hash: 2ylo3HpAhVkvHZhTyyQa6+TpBddihUGH17bMztGMO8Y=)
14: 3130332e38332e3134302e302f32322d3234203d3e203338313635.roa (hash: Ik3fxLSlXA2Xnh23AevRPdy9KUS+oUVTjYCiGIABhYM=)
15: 3130332e38332e3134332e302f32342d3234203d3e203338313635.roa (hash: PzK9iamlsHrrCIK36AFek4huEos9vJO/Mb+qJmCN8TU=)
16: 3131362e31322e34302e302f32312d3234203d3e203338313635.roa (hash: XG2kEfirxjj/sDq/rblsGtFwcedIIKGdVI/XxKks4EQ=)
17: 3131342e33302e39342e302f32342d3234203d3e203338313635.roa (hash: G8aUIjts1s/SyprhduUQ7undoZSDOgnTsSv1h0ZIPBI=)
18: 3130332e38332e3134302e302f32342d3234203d3e203338313635.roa (hash: fksrul4lMZ1/XL5r5cu/WNsWpdzw6wwNzqAHD2IefPw=)
19: 3131362e31322e34352e302f32342d3234203d3e203338313635.roa (hash: /Qbizla9Rd9j7hntYwBfkRjqiwhDVjGQMjdVjta/V4o=)
20: 3131362e31322e34302e302f32342d3234203d3e203338313635.roa (hash: solCgiJ0IBXmILHhdk+WcwssrUHzmifkTZH0iCFde94=)
21: 3131342e33302e39322e302f32342d3234203d3e203338313635.roa (hash: XxFeX4bK2Dh55oFKthxbGwYO1QPL6JkUjpiac/LGmFc=)
22: 3131362e31322e34332e302f32342d3234203d3e203338313635.roa (hash: vuNc4l/9yLIs4KyCpx5p6F1jMwXXBMM4BQHYhbheraI=)
23: 3131362e31322e34372e302f32342d3234203d3e203338313635.roa (hash: ls6pClLibFG+ZtAvlvA5DPGIjVB65RJG/A/2js2edZI=)
24: 3131362e31322e34312e302f32342d3234203d3e203338313635.roa (hash: F7W3l45HCPDJENu+RobZMG7HgvBdxexYhGm3GKsDUsc=)
25: 3131342e33302e38382e302f32312d3234203d3e203338313635.roa (hash: PbHEb+XaCGRxOonc9+PyBhvmLickz9HVhiTfl0wL8wY=)
26: 3130332e3234372e31372e302f32342d3234203d3e203338313635.roa (hash: 5amtZ+LM77tqz27nu3gKgm99BvgZZy43q/i93530bY0=)
27: 3131342e33302e39332e302f32342d3234203d3e203338313635.roa (hash: Y4OQkQ+6pCKwFE7J9SktmKY2Oia99e7uSzB1cyzK/sw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/A9DFB6024D05A37CA0C756EC747E898140885BC9.crl
rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/A9DFB6024D05A37CA0C756EC747E898140885BC9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9DFB6024D05A37CA0C756EC747E898140885BC9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 03:50:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:1a:1f:77:f9:4a:22:97:c5:25:59:ef:76:9c:42:1d:ad:01:0b:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9DFB6024D05A37CA0C756EC747E898140885BC9
Validity
Not Before: Jul 24 02:57:59 2026 GMT
Not After : Jul 25 03:50:59 2026 GMT
Subject: CN=40C1C0DE98CF74B329F1402B71E5C392D05395F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:5c:38:82:b1:44:a6:c3:73:f8:3f:26:24:46:
2b:e5:b6:25:7a:e6:04:50:cd:ba:ba:a3:6a:b9:88:
14:a1:59:bb:6b:b4:09:68:9b:54:b5:09:5a:b7:f7:
9d:e9:65:6e:6e:45:de:3a:a6:0d:5b:86:02:a9:b1:
36:19:16:9e:59:de:e0:14:35:eb:ea:24:53:7c:da:
e8:8a:8b:ce:53:6f:56:cf:61:c7:33:71:f4:57:22:
0c:c7:e9:41:e2:3e:1d:47:c7:ae:7d:f6:82:85:e1:
ce:a6:8f:a3:69:a6:c6:48:eb:f8:a2:58:79:a5:11:
03:0b:e4:61:03:e0:53:51:44:fd:8f:7a:31:47:a7:
b7:8b:52:a7:62:c9:c9:ed:cd:7a:8c:01:35:89:65:
18:01:24:ca:4e:45:8b:fc:5e:b9:c0:d4:c0:d9:a6:
63:3a:fc:df:78:8d:d2:9c:bf:12:a4:52:1a:81:e5:
04:88:b5:86:27:05:5a:f5:04:a6:cd:8a:71:b2:4a:
d0:8f:74:65:40:42:3c:6d:63:2b:db:0c:52:1d:17:
33:16:b8:b9:c4:79:67:05:09:26:6a:7d:e3:ae:e7:
9b:85:d0:e4:97:24:88:38:74:85:fc:8f:a9:bc:81:
e2:21:2b:64:a8:b3:7d:31:b4:05:60:a9:1d:42:8f:
fc:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:C1:C0:DE:98:CF:74:B3:29:F1:40:2B:71:E5:C3:92:D0:53:95:F5
X509v3 Authority Key Identifier:
keyid:A9:DF:B6:02:4D:05:A3:7C:A0:C7:56:EC:74:7E:89:81:40:88:5B:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/A9DFB6024D05A37CA0C756EC747E898140885BC9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9DFB6024D05A37CA0C756EC747E898140885BC9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/A9DFB6024D05A37CA0C756EC747E898140885BC9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:b6:98:af:d2:3a:5c:58:f2:99:87:1f:e4:f9:22:06:cf:a6:
8f:d6:00:ee:07:dd:69:53:01:4f:a4:21:71:35:32:a0:b1:d2:
cc:3d:06:25:e3:5e:39:a5:e9:d2:53:c7:9e:88:e1:c1:d3:7c:
5d:4c:3b:d1:ec:37:85:8c:d6:2c:e8:cd:a8:38:c0:fc:c5:c9:
59:d8:b6:e5:33:b1:b4:1d:dc:c1:75:64:18:bf:44:ba:03:78:
ad:44:11:7a:fa:5c:64:ab:3e:df:45:4c:d4:25:1e:68:c5:e9:
88:f9:54:75:b2:f0:d3:2c:92:ff:ca:20:e4:7c:2a:d1:7c:00:
e3:05:af:93:f7:40:c3:60:94:13:e9:7d:89:95:a0:ee:6d:76:
11:95:07:60:02:44:14:33:9b:ca:78:08:c2:45:31:91:d7:4c:
26:8f:54:84:35:1f:60:e4:69:43:c8:99:d5:d6:0f:7b:d3:e8:
1f:b6:80:c9:dd:eb:e3:82:9a:50:e3:c8:f3:ff:b4:8c:82:f5:
af:cf:85:85:72:80:c3:5a:01:04:9c:28:5d:dd:cc:30:9f:64:
d8:d1:47:46:2d:9c:4a:d6:dd:51:ed:09:b3:cb:9b:e9:c3:85:
46:44:28:f1:32:db:8a:07:74:11:4d:c9:84:d2:5e:ee:55:4a:
54:01:23:31
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUbBofd/lKIpfFJVnvdpxCHa0BCzYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTlERkI2MDI0RDA1QTM3Q0EwQzc1NkVDNzQ3RTg5ODE0
MDg4NUJDOTAeFw0yNjA3MjQwMjU3NTlaFw0yNjA3MjUwMzUwNTlaMDMxMTAvBgNV
BAMTKDQwQzFDMERFOThDRjc0QjMyOUYxNDAyQjcxRTVDMzkyRDA1Mzk1RjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpXDiCsUSmw3P4PyYkRivltiV6
5gRQzbq6o2q5iBShWbtrtAlom1S1CVq3953pZW5uRd46pg1bhgKpsTYZFp5Z3uAU
NevqJFN82uiKi85Tb1bPYcczcfRXIgzH6UHiPh1Hx6599oKF4c6mj6NppsZI6/ii
WHmlEQML5GED4FNRRP2PejFHp7eLUqdiycntzXqMATWJZRgBJMpORYv8XrnA1MDZ
pmM6/N94jdKcvxKkUhqB5QSItYYnBVr1BKbNinGyStCPdGVAQjxtYyvbDFIdFzMW
uLnEeWcFCSZqfeOu55uF0OSXJIg4dIX8j6m8geIhK2Sos30xtAVgqR1Cj/wtAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUQMHA3pjPdLMp8UArceXDktBTlfUwHwYDVR0j
BBgwFoAUqd+2Ak0Fo3ygx1bsdH6JgUCIW8kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
Zjc0NDhjMTEtZjhkMy00NTdkLThlMjItODQ4ODdhYjIyYTMwLzAvQTlERkI2MDI0
RDA1QTM3Q0EwQzc1NkVDNzQ3RTg5ODE0MDg4NUJDOS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9BOURGQjYwMjREMDVBMzdDQTBDNzU2RUM3NDdFODk4MTQwODg1
QkM5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjc0NDhjMTEtZjhkMy00NTdkLThl
MjItODQ4ODdhYjIyYTMwLzAvQTlERkI2MDI0RDA1QTM3Q0EwQzc1NkVDNzQ3RTg5
ODE0MDg4NUJDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAB+2mK/SOlxY8pmHH+T5IgbPpo/WAO4H3WlT
AU+kIXE1MqCx0sw9BiXjXjml6dJTx56I4cHTfF1MO9HsN4WM1izozag4wPzFyVnY
tuUzsbQd3MF1ZBi/RLoDeK1EEXr6XGSrPt9FTNQlHmjF6Yj5VHWy8NMskv/KIOR8
KtF8AOMFr5P3QMNglBPpfYmVoO5tdhGVB2ACRBQzm8p4CMJFMZHXTCaPVIQ1H2Dk
aUPImdXWD3vT6B+2gMnd6+OCmlDjyPP/tIyC9a/PhYVygMNaAQScKF3dzDCfZNjR
R0YtnErW3VHtCbPLm+nDhUZEKPEy24oHdBFNyYTSXu5VSlQBIzE=
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:57:58 2026 by rpki-client