
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/26ead2f5-8b65-4829-884b-d7c06dd0f83a/0/9FD513B00492057DD702CBFFF2619D407373BD86.mft
File: 9FD513B00492057DD702CBFFF2619D407373BD86.mft (raw, json)
Hash identifier: K6YbG1hVs806wAhEIn5EmPHS6uXLtSk0othRrQpKWSk=
Subject key identifier: CD:FB:FF:DB:9C:72:5B:2D:37:4F:03:B1:26:34:96:8B:16:5E:13:1D
Authority key identifier: 9F:D5:13:B0:04:92:05:7D:D7:02:CB:FF:F2:61:9D:40:73:73:BD:86
Certificate issuer: /CN=9FD513B00492057DD702CBFFF2619D407373BD86
Certificate serial: 5FFA89D3CCE74C455B732F7359A966F547253C8A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FD513B00492057DD702CBFFF2619D407373BD86.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/26ead2f5-8b65-4829-884b-d7c06dd0f83a/0/9FD513B00492057DD702CBFFF2619D407373BD86.mft
Manifest number: F8
Signing time: Wed 04 Nov 2026 01:29:51 +0000
Manifest this update: Wed 04 Nov 2026 01:24:51 +0000
Manifest next update: Thu 05 Nov 2026 04:16:51 +0000
Files and hashes: 1: 323430353a366134303a3a2f33322d3332203d3e20313339343235.roa (hash: eiHGmlk5Da29v1+JFkHNmGCFNi5qVnXuS1BVyS7zdCk=)
2: 3130332e3134342e39302e302f32332d3234203d3e20313339343235.roa (hash: gfPHybU8BlyaLvVhDLsLmDJFHRHXBA3/OIAjSx7yG6o=)
3: 9FD513B00492057DD702CBFFF2619D407373BD86.crl (hash: 15bxc6kLRd4SdiWxWLwVzi3LJt3ppCbe3qdG55wcl9I=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/26ead2f5-8b65-4829-884b-d7c06dd0f83a/0/9FD513B00492057DD702CBFFF2619D407373BD86.crl
rsync://rpki-rsync.idnic.net/repo/26ead2f5-8b65-4829-884b-d7c06dd0f83a/0/9FD513B00492057DD702CBFFF2619D407373BD86.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FD513B00492057DD702CBFFF2619D407373BD86.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Nov 2026 04:16:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:fa:89:d3:cc:e7:4c:45:5b:73:2f:73:59:a9:66:f5:47:25:3c:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9FD513B00492057DD702CBFFF2619D407373BD86
Validity
Not Before: Nov 4 01:24:51 2026 GMT
Not After : Nov 5 04:16:51 2026 GMT
Subject: CN=CDFBFFDB9C725B2D374F03B12634968B165E131D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b7:2b:98:cc:b9:ce:f3:b2:e3:6a:b0:04:f1:
40:cb:33:c7:9b:47:1c:68:b2:72:99:df:03:5f:20:
75:49:b8:a0:f7:d4:b9:bd:d2:4e:1b:98:d8:15:b3:
25:14:5f:2a:01:4d:9c:b6:ed:39:b6:7c:05:66:c7:
98:66:dd:a1:fe:30:ba:49:3b:95:b4:53:17:bb:d6:
69:7c:9e:a9:d8:4e:c4:56:e7:c9:f3:b3:6b:c5:08:
3e:4b:59:df:f2:52:04:ee:76:79:ef:21:37:fd:d6:
90:49:38:6f:08:05:a7:c0:00:8f:11:02:8f:84:00:
73:20:b4:c9:e5:81:13:f3:64:bb:39:f4:55:8d:8a:
a7:16:27:24:9f:11:ef:41:80:e5:93:73:10:da:44:
6f:52:84:5b:5e:13:c6:9a:81:26:91:c0:39:75:5a:
82:35:2b:fe:b8:4c:ca:09:b2:f9:14:9d:3f:40:ed:
9c:5e:81:9f:f6:5e:a8:16:ba:98:52:17:cf:9c:12:
b0:83:23:f9:14:0a:cd:3f:f0:85:10:01:36:f8:ce:
c1:ac:e0:d0:43:01:e9:f9:28:c1:b6:6b:f0:a6:d2:
5d:87:3c:47:68:9c:9c:ef:4f:b8:37:36:1e:88:d8:
12:85:45:d2:f0:77:e0:65:fc:31:0d:16:52:4e:80:
d5:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:FB:FF:DB:9C:72:5B:2D:37:4F:03:B1:26:34:96:8B:16:5E:13:1D
X509v3 Authority Key Identifier:
keyid:9F:D5:13:B0:04:92:05:7D:D7:02:CB:FF:F2:61:9D:40:73:73:BD:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/26ead2f5-8b65-4829-884b-d7c06dd0f83a/0/9FD513B00492057DD702CBFFF2619D407373BD86.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FD513B00492057DD702CBFFF2619D407373BD86.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/26ead2f5-8b65-4829-884b-d7c06dd0f83a/0/9FD513B00492057DD702CBFFF2619D407373BD86.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:e3:d1:11:3f:a1:e2:0a:17:08:92:5c:68:c4:9b:4b:c3:8c:
c7:0a:5a:6a:5e:ae:48:c4:8a:04:08:c2:b4:4e:21:fc:a3:52:
17:2e:68:79:8f:a1:65:9a:d3:e4:97:d4:fa:0e:d5:b0:25:97:
5a:fe:8d:fd:58:82:83:0a:68:80:a8:1f:d6:b7:f7:76:ec:9f:
2a:70:d3:55:eb:73:d6:07:34:ec:0f:1d:e4:f0:d8:76:bd:89:
af:5a:b5:30:7d:77:df:d1:1d:92:c0:4e:2e:8b:a7:1d:a5:2d:
be:47:ba:22:d7:33:6a:f4:6d:11:48:05:3d:ee:f9:55:9f:f6:
2c:0e:2f:4c:4a:af:a4:29:a2:da:28:0c:2e:7b:dd:07:32:4c:
c9:7b:a7:eb:0d:60:0c:8d:9f:14:4b:88:cf:8c:7d:fa:15:c1:
99:14:f5:08:76:6f:49:96:11:5f:4f:7f:51:fb:49:11:4d:03:
a9:17:c6:ab:1b:9a:fa:58:cd:33:99:47:f4:44:45:d3:b3:10:
ac:67:3f:97:7c:12:02:9a:92:a7:99:c0:fe:08:b1:c3:9c:59:
2e:60:75:f3:0c:6a:1c:39:d0:ac:cb:b1:5f:21:ad:83:72:42:
6c:7e:49:01:b6:3b:b7:2d:70:c3:27:be:40:a5:31:0f:41:c8:
b1:18:5c:90
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUX/qJ08znTEVbcy9zWalm9UclPIowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUZENTEzQjAwNDkyMDU3REQ3MDJDQkZGRjI2MTlENDA3
MzczQkQ4NjAeFw0yNjExMDQwMTI0NTFaFw0yNjExMDUwNDE2NTFaMDMxMTAvBgNV
BAMTKENERkJGRkRCOUM3MjVCMkQzNzRGMDNCMTI2MzQ5NjhCMTY1RTEzMUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCltyuYzLnO87LjarAE8UDLM8eb
RxxosnKZ3wNfIHVJuKD31Lm90k4bmNgVsyUUXyoBTZy27Tm2fAVmx5hm3aH+MLpJ
O5W0Uxe71ml8nqnYTsRW58nzs2vFCD5LWd/yUgTudnnvITf91pBJOG8IBafAAI8R
Ao+EAHMgtMnlgRPzZLs59FWNiqcWJySfEe9BgOWTcxDaRG9ShFteE8aagSaRwDl1
WoI1K/64TMoJsvkUnT9A7ZxegZ/2XqgWuphSF8+cErCDI/kUCs0/8IUQATb4zsGs
4NBDAen5KMG2a/Cm0l2HPEdonJzvT7g3Nh6I2BKFRdLwd+Bl/DENFlJOgNWBAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUzfv/25xyWy03TwOxJjSWixZeEx0wHwYDVR0j
BBgwFoAUn9UTsASSBX3XAsv/8mGdQHNzvYYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MjZlYWQyZjUtOGI2NS00ODI5LTg4NGItZDdjMDZkZDBmODNhLzAvOUZENTEzQjAw
NDkyMDU3REQ3MDJDQkZGRjI2MTlENDA3MzczQkQ4Ni5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85RkQ1MTNCMDA0OTIwNTdERDcwMkNCRkZGMjYxOUQ0MDczNzNC
RDg2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjZlYWQyZjUtOGI2NS00ODI5LTg4
NGItZDdjMDZkZDBmODNhLzAvOUZENTEzQjAwNDkyMDU3REQ3MDJDQkZGRjI2MTlE
NDA3MzczQkQ4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABvj0RE/oeIKFwiSXGjEm0vDjMcKWmperkjE
igQIwrROIfyjUhcuaHmPoWWa0+SX1PoO1bAll1r+jf1YgoMKaICoH9a393bsnypw
01Xrc9YHNOwPHeTw2Ha9ia9atTB9d9/RHZLATi6Lpx2lLb5HuiLXM2r0bRFIBT3u
+VWf9iwOL0xKr6QpotooDC573QcyTMl7p+sNYAyNnxRLiM+MffoVwZkU9Qh2b0mW
EV9Pf1H7SRFNA6kXxqsbmvpYzTOZR/RERdOzEKxnP5d8EgKakqeZwP4IscOcWS5g
dfMMahw50KzLsV8hrYNyQmx+SQG2O7ctcMMnvkClMQ9ByLEYXJA=
-----END CERTIFICATE-----
Generated at Wed Nov 4 05:39:05 2026 by rpki-client