
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/A9DFB6024D05A37CA0C756EC747E898140885BC9.mft
File: A9DFB6024D05A37CA0C756EC747E898140885BC9.mft (raw, json)
Hash identifier: 9NonH6QJeJjvye5R6FchXfQKYMY9PGCkm2nKM/4/L9k=
Subject key identifier: 91:F4:E3:B5:91:81:D7:54:B6:70:DA:EF:4E:CD:5A:82:B2:DA:36:99
Authority key identifier: A9:DF:B6:02:4D:05:A3:7C:A0:C7:56:EC:74:7E:89:81:40:88:5B:C9
Certificate issuer: /CN=A9DFB6024D05A37CA0C756EC747E898140885BC9
Certificate serial: 4D50730E54EE0C1D2F9777C446B2451DE801AF3E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9DFB6024D05A37CA0C756EC747E898140885BC9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/A9DFB6024D05A37CA0C756EC747E898140885BC9.mft
Manifest number: 0F
Signing time: Wed 13 May 2026 01:35:26 +0000
Manifest this update: Wed 13 May 2026 01:30:26 +0000
Manifest next update: Thu 14 May 2026 03:04:26 +0000
Files and hashes: 1: 3130332e38332e3134312e302f32342d3234203d3e203338313635.roa (hash: caorMzAk2rhKrHkZPEylYGbz3q7q/4kgUFG0ZpSaKuk=)
2: 3131342e33302e39312e302f32342d3234203d3e203338313635.roa (hash: hwrp8oltXPCRSuxrHgsojYMMFzDn1UCIz4HCYehypeU=)
3: 3131342e33302e39322e302f32342d3234203d3e203338313635.roa (hash: XxFeX4bK2Dh55oFKthxbGwYO1QPL6JkUjpiac/LGmFc=)
4: 3131342e33302e38392e302f32342d3234203d3e203338313635.roa (hash: maWh9CwQAwSd/hgh31AypikUc85sBDX5Qkb/wXAwqQ4=)
5: 3131342e33302e39332e302f32342d3234203d3e203338313635.roa (hash: Y4OQkQ+6pCKwFE7J9SktmKY2Oia99e7uSzB1cyzK/sw=)
6: 3131342e33302e39302e302f32342d3234203d3e203338313635.roa (hash: sDSoeXLG7m9Vd+TPJvOtkj0D0bh9+lF74Y6p0yHJT2w=)
7: 3131362e31322e34302e302f32342d3234203d3e203338313635.roa (hash: solCgiJ0IBXmILHhdk+WcwssrUHzmifkTZH0iCFde94=)
8: 3130332e38332e3134322e302f32342d3234203d3e203338313635.roa (hash: YrZIFaqaTChjnkZ/BX+Yt+LiIgZZAfEd+7+0eXA8anQ=)
9: 3130332e38332e3134302e302f32322d3234203d3e203338313635.roa (hash: Ik3fxLSlXA2Xnh23AevRPdy9KUS+oUVTjYCiGIABhYM=)
10: 3131362e31322e34342e302f32342d3234203d3e203338313635.roa (hash: 4eVsgYjQx/GwRQGHLYtsEEdD640KhW1jdNg/AXAmGj8=)
11: 3131342e33302e39342e302f32342d3234203d3e203338313635.roa (hash: G8aUIjts1s/SyprhduUQ7undoZSDOgnTsSv1h0ZIPBI=)
12: 3131362e31322e34362e302f32342d3234203d3e203338313635.roa (hash: VdZyujauditCo5BInDzGT86RLe022tUhB8aqRECGwWM=)
13: 3130332e3234372e31372e302f32342d3234203d3e203338313635.roa (hash: 5amtZ+LM77tqz27nu3gKgm99BvgZZy43q/i93530bY0=)
14: 3131362e31322e34302e302f32312d3234203d3e203338313635.roa (hash: XG2kEfirxjj/sDq/rblsGtFwcedIIKGdVI/XxKks4EQ=)
15: 3131362e31322e34352e302f32342d3234203d3e203338313635.roa (hash: /Qbizla9Rd9j7hntYwBfkRjqiwhDVjGQMjdVjta/V4o=)
16: 3130332e3234372e31362e302f32342d3234203d3e203338313635.roa (hash: glySjVWaeYKKJGdVLX98kL01SxrrhC2o5DvZ/OFZzes=)
17: 3130332e38332e3134302e302f32342d3234203d3e203338313635.roa (hash: fksrul4lMZ1/XL5r5cu/WNsWpdzw6wwNzqAHD2IefPw=)
18: 3131342e33302e38382e302f32312d3234203d3e203338313635.roa (hash: PbHEb+XaCGRxOonc9+PyBhvmLickz9HVhiTfl0wL8wY=)
19: 3130332e38332e3134332e302f32342d3234203d3e203338313635.roa (hash: PzK9iamlsHrrCIK36AFek4huEos9vJO/Mb+qJmCN8TU=)
20: 3131362e31322e34372e302f32342d3234203d3e203338313635.roa (hash: ls6pClLibFG+ZtAvlvA5DPGIjVB65RJG/A/2js2edZI=)
21: 3131362e31322e34332e302f32342d3234203d3e203338313635.roa (hash: vuNc4l/9yLIs4KyCpx5p6F1jMwXXBMM4BQHYhbheraI=)
22: 3131342e33302e38382e302f32342d3234203d3e203338313635.roa (hash: TYxvOObRiApVHdygkcJ79px01l2EeTEanmBRk9sEhU8=)
23: A9DFB6024D05A37CA0C756EC747E898140885BC9.crl (hash: LbRcoh0kNw2v8sKNh2sewSfHdHxujUuEnbFDwnNiAWY=)
24: 323430313a646363303a3a2f33322d3438203d3e203338313635.roa (hash: 2ylo3HpAhVkvHZhTyyQa6+TpBddihUGH17bMztGMO8Y=)
25: 3131362e31322e34322e302f32342d3234203d3e203338313635.roa (hash: Tzz51V+z7G+M0amuU470kd9KxBTkAYh2VanJBe/CIik=)
26: 3131362e31322e34312e302f32342d3234203d3e203338313635.roa (hash: F7W3l45HCPDJENu+RobZMG7HgvBdxexYhGm3GKsDUsc=)
27: 3130332e3234372e31362e302f32332d3234203d3e203338313635.roa (hash: X2L0BGiTvmgLJtgSEYwPB9xF12na1ku6hIINh+wHP14=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/A9DFB6024D05A37CA0C756EC747E898140885BC9.crl
rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/A9DFB6024D05A37CA0C756EC747E898140885BC9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9DFB6024D05A37CA0C756EC747E898140885BC9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 03:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:50:73:0e:54:ee:0c:1d:2f:97:77:c4:46:b2:45:1d:e8:01:af:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9DFB6024D05A37CA0C756EC747E898140885BC9
Validity
Not Before: May 13 01:30:26 2026 GMT
Not After : May 14 03:04:26 2026 GMT
Subject: CN=91F4E3B59181D754B670DAEF4ECD5A82B2DA3699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:65:71:8f:48:06:d4:c4:45:70:93:14:dc:ff:
93:90:33:4a:cd:5f:a7:8c:b7:8b:2f:d8:51:25:af:
5e:74:e8:8a:82:a2:74:79:df:38:4c:35:79:56:a0:
2f:53:c6:83:fa:f1:97:b1:dc:2f:4a:13:00:ce:fa:
54:11:f0:08:e6:5d:8b:55:1f:93:4b:5c:aa:75:50:
5e:56:53:5d:1d:66:46:56:e5:5c:8a:eb:ec:13:79:
92:4a:c6:29:18:1d:dd:4d:f9:62:1b:0c:7f:52:8e:
e0:dc:7f:b8:c7:e4:49:be:ad:54:0c:fa:52:78:97:
4d:88:31:d8:70:3a:ec:22:dc:0f:b0:a2:c7:5d:36:
b9:85:60:05:fb:9f:a3:20:34:69:02:8c:3b:83:cc:
b0:cf:fe:2f:c0:31:65:db:30:8b:ae:c4:e3:51:ed:
4b:0c:7a:2e:1d:1e:27:7b:31:3f:99:b3:ca:14:e0:
7f:c0:91:c1:db:e5:ce:15:85:6d:00:38:d7:9a:34:
d2:db:03:a9:14:24:43:97:1b:e7:c5:a3:be:04:73:
35:1c:03:04:0e:c4:e7:ec:7c:79:c4:35:aa:74:10:
19:20:e0:52:de:81:97:26:f5:d8:ae:6f:4e:09:b8:
cf:ee:ef:7a:4c:b0:4c:1c:4b:54:81:3f:5c:58:87:
2c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:F4:E3:B5:91:81:D7:54:B6:70:DA:EF:4E:CD:5A:82:B2:DA:36:99
X509v3 Authority Key Identifier:
keyid:A9:DF:B6:02:4D:05:A3:7C:A0:C7:56:EC:74:7E:89:81:40:88:5B:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/A9DFB6024D05A37CA0C756EC747E898140885BC9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9DFB6024D05A37CA0C756EC747E898140885BC9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/A9DFB6024D05A37CA0C756EC747E898140885BC9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:26:b7:d4:ee:49:5a:fe:1e:58:f1:c6:22:65:ce:3c:24:1f:
56:22:52:c0:24:b8:6e:cf:dc:5c:4f:b0:cb:70:bd:79:f1:41:
39:4a:2d:27:91:27:07:26:15:6f:53:7e:3b:9d:b9:bd:e6:14:
f3:65:90:6d:ef:69:76:2a:2d:90:d5:e4:31:b8:e1:b6:e7:77:
0e:b8:1a:1d:2e:13:3a:fa:67:ec:46:0c:5e:9f:72:c9:d6:57:
d6:c7:d3:3e:8f:1e:ac:fe:ad:13:95:01:63:34:4f:45:89:d4:
2e:67:8b:0c:ae:e7:3e:ec:05:cb:8b:6a:64:32:77:07:2b:f6:
00:49:30:a4:e9:3b:12:57:43:57:6c:36:28:44:91:27:af:bf:
4a:4b:21:b5:dc:49:cd:62:62:39:94:5c:f3:35:df:01:dc:02:
30:75:32:4d:91:02:d3:48:5f:e2:e4:94:6d:b0:fc:95:0f:3b:
88:c7:91:5c:80:50:0d:e0:54:a7:d5:64:63:47:a0:00:11:67:
c1:ea:f5:b3:36:0e:c9:ef:3b:03:25:4a:3b:a6:73:78:15:f0:
99:f1:50:4b:6e:84:b3:31:3d:45:2d:64:24:c7:c9:65:4f:0c:
88:7c:dc:67:8a:e1:31:65:d0:43:42:62:14:fe:f9:06:a4:82:
22:66:bb:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:57:31 2026 by rpki-client