
$ rpki-client -vvf rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.mft
File: F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.mft (raw, json)
Hash identifier: rvnuk8VP3+o257+jsC4wlkruJLguVGmAR+e0XuvsFsA=
Subject key identifier: 64:BE:65:7D:D3:94:60:C3:8F:9B:F7:42:1D:82:E9:2E:A2:90:43:0D
Authority key identifier: F8:EB:6F:4E:91:DD:D4:7F:A8:E0:48:1B:60:D4:C1:80:86:A8:32:C9
Certificate issuer: /CN=F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9
Certificate serial: 04524AE92DBB2E8CDAF6424EB5FC098D056AF4F3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.mft
Manifest number: 09
Signing time: Fri 08 May 2026 05:56:47 +0000
Manifest this update: Fri 08 May 2026 05:51:47 +0000
Manifest next update: Sat 09 May 2026 08:21:47 +0000
Files and hashes: 1: 323430323a626538303a383030303a3a2f33332d3333203d3e20313331373439.roa (hash: BS5YihTbZaw+pKOipVulLJrh9jJr2QhVUAXi4IwAkiI=)
2: 323430323a626538303a633030303a3a2f33352d3335203d3e20313331373439.roa (hash: CnBcLvoSDxEWtZrVDvNMamVH18oi4O/jyEx1Mt/oRO8=)
3: 323430323a626538303a643961623a3a2f34382d3438203d3e20313331373439.roa (hash: svAi0R5XEu9X4Ys1yfCbCgtQxluGGulsPQVUUn8ta/o=)
4: 323430323a626538303a633030303a3a2f33342d3334203d3e20313331373439.roa (hash: v5Ut+HnAU8B++keMYhHXiHiE6JJw8p9vB3wAUzitQ/s=)
5: 323430323a626538303a323030303a3a2f33352d3335203d3e20313331373439.roa (hash: X24eGimplx9OKKA54SDn3PccRcDMInDYSFbqOhNXsRk=)
6: 3130332e33312e3133352e302f32342d3234203d3e20313331373439.roa (hash: kKPyA87cBNNbll+wZXw03s3L6LbkLTPgrzdBootFsHQ=)
7: 323430323a626538303a3a2f33322d3332203d3e20313331373439.roa (hash: Fg6XcYLXwzdBTEEbtVqZPj3EQucOEbeogJk1AzgGxAQ=)
8: F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.crl (hash: sXg7eZHOgq9P/wBS3N7gy52B3381n03WoyFYQ1FLxe0=)
9: 323430323a626538303a3a2f33342d3334203d3e20313331373439.roa (hash: XYH3WtUdslBTF725L3cOP4xs8XuxcDg3daKQgahU/wE=)
10: 3130332e33312e3133322e302f32342d3234203d3e20313331373439.roa (hash: zrBSW8GC94FsmSWPx82P8/uTVF2HgCkoo/2hN3b+4hM=)
11: 3130332e33312e3133322e302f32332d3233203d3e20313331373439.roa (hash: TN3/E7Y5c/nedOyTgYgff8HK90H5iShgi5mk+WZX5nw=)
12: 323430323a626538303a343030303a3a2f33342d3334203d3e20313331373439.roa (hash: Q18y495vHxKdcsVM96pc/tUI9Fl6GfmbLs035wir/JU=)
13: 3130332e33312e3133342e302f32342d3234203d3e20313331373439.roa (hash: OvSsEeapnu+/oiKYJIcMYudEmuSdyI2NmSImX5jHoH4=)
14: 323430323a626538303a653030303a3a2f33352d3335203d3e20313331373439.roa (hash: apqtipmn5kmXtB7pKv4YlNHER/Ifv3+XPDXaeex3R9k=)
15: 3130332e33312e3133342e302f32332d3233203d3e20313331373439.roa (hash: iFasMrZpPZhCJqBPOEUsMWSE1IL6XiDkC/rJS8HVQTo=)
16: 323430323a626538303a613030303a3a2f33352d3335203d3e20313331373439.roa (hash: esq0SPO+hAIrG7YQPAU2RMpBG0FEhngieVqoN2H1Z00=)
17: 3130332e33312e3133322e302f32322d3232203d3e20313331373439.roa (hash: hVG5QJJlsbYPr5L1RCfsG/I/X2H5aI8Xq7RBOYv0G3o=)
18: 323430323a626538303a383030303a3a2f33352d3335203d3e20313331373439.roa (hash: bcUDOpCB0dNiYwZx7hB9TNsT/6Q2Z4ktB8wuICtWZXQ=)
19: 323430323a626538303a363030303a3a2f33352d3335203d3e20313331373439.roa (hash: bS5P/W+hj7so9J/fGjANaNnPonvylnMwWx29PNvc6E4=)
20: 323430323a626538303a3a2f33352d3335203d3e20313331373439.roa (hash: ZWNoTl3f/QBfpXE45HAww//4eS88vFgydiSHbe0zdhA=)
21: 3130332e33312e3133332e302f32342d3234203d3e20313331373439.roa (hash: /XQUhdaX/lnH/4pSzymUR8gU8PBZoGnTr2RxGh6dJJI=)
22: 323430323a626538303a343030303a3a2f33352d3335203d3e20313331373439.roa (hash: ZMKJ6qvXBCnIGQclOHQhPWyyMM8hgD3nw2GXMro25Y4=)
23: 323430323a626538303a383030303a3a2f33342d3334203d3e20313331373439.roa (hash: V8AjpSzdxp8GDyMCHA7YtvW4QSVvG85ynWbgCsAEXEs=)
24: 323430323a626538303a3a2f33332d3333203d3e20313331373439.roa (hash: t5lI2fSBgF1Qk+xi/wexkm174c0g31j+0DtjwN72lnc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.crl
rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 09 May 2026 05:34:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:52:4a:e9:2d:bb:2e:8c:da:f6:42:4e:b5:fc:09:8d:05:6a:f4:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9
Validity
Not Before: May 8 05:51:47 2026 GMT
Not After : May 9 08:21:47 2026 GMT
Subject: CN=64BE657DD39460C38F9BF7421D82E92EA290430D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:55:8f:89:a1:23:4a:7f:31:a2:e7:b1:01:34:
56:22:88:8f:fb:8d:8f:6c:59:a7:73:a6:2a:d8:dd:
78:8e:7e:3b:db:82:c0:c8:1b:8f:fb:75:97:31:88:
d4:b3:c9:59:88:14:54:4d:89:e2:92:98:3b:ab:c9:
e1:e4:08:3b:ec:44:87:28:7a:29:b8:0f:6d:01:84:
12:25:c1:cf:ef:f9:db:1c:d5:bc:b7:f6:4f:0d:ae:
c7:a6:bf:8e:96:4f:32:e8:57:24:2d:71:3b:3b:91:
c0:77:da:23:ad:d7:a3:66:fa:78:10:79:d6:b7:59:
51:84:55:38:84:7e:cc:1e:f4:3c:54:f5:9c:14:b5:
0b:04:69:2c:0b:23:de:07:96:43:0f:37:03:f1:84:
ab:70:ba:26:47:a5:b6:e4:81:08:96:e1:fe:44:98:
06:2b:5f:21:41:bf:9c:e6:65:27:ab:b7:3b:df:f5:
23:c3:fa:45:98:06:a3:ea:2f:2d:47:83:79:95:2e:
59:5e:ce:8f:35:37:42:1d:4d:87:c9:ad:28:3f:e2:
2f:a0:2a:19:d0:29:45:33:8f:6d:67:cf:4b:db:2e:
be:e3:52:48:c6:66:32:d9:a8:db:7a:38:3f:cd:90:
9a:ad:18:4c:6c:d0:13:4f:eb:c2:af:59:83:f0:bf:
e2:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:BE:65:7D:D3:94:60:C3:8F:9B:F7:42:1D:82:E9:2E:A2:90:43:0D
X509v3 Authority Key Identifier:
keyid:F8:EB:6F:4E:91:DD:D4:7F:A8:E0:48:1B:60:D4:C1:80:86:A8:32:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:73:e6:b9:a1:96:f6:d2:33:e7:5e:d0:8c:e5:49:e1:41:2f:
68:88:cf:36:ba:1f:f3:86:bb:c4:ce:e9:0a:03:37:fe:97:f4:
49:f1:1b:38:64:76:2d:78:48:1c:f0:fa:8b:a1:2a:04:24:09:
82:b8:3c:e6:13:ef:d5:7a:fc:a2:79:ea:1a:1f:c8:22:91:ad:
03:63:d8:d4:be:b5:90:f9:b6:29:ff:82:20:0d:63:38:a6:cf:
87:68:90:07:56:0f:d4:d7:6f:7c:60:8b:33:a2:80:d4:b1:5a:
fa:52:f2:9f:fb:0f:a3:c8:c5:2b:d6:79:ab:80:31:be:0d:aa:
52:14:a7:26:c6:33:05:e8:76:36:25:af:80:39:b2:19:8f:68:
aa:ea:35:69:b5:34:dc:ba:e0:9c:0e:a3:47:3b:ce:b3:39:f0:
74:67:3c:b2:56:e4:57:af:3a:be:2c:37:0e:8f:e7:32:0b:33:
51:3e:99:b4:4f:66:71:8e:ef:07:f2:48:75:40:44:35:ef:d0:
c0:e4:f8:aa:37:78:7e:a5:89:b7:63:77:22:1e:06:c3:68:1c:
99:14:9a:24:97:10:d1:bd:b1:ab:be:33:76:49:04:4d:17:f5:
93:dc:40:66:e0:a4:14:2a:5d:94:41:b5:26:67:a6:a5:34:ec:
56:7e:ae:93
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUBFJK6S27Loza9kJOtfwJjQVq9PMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjhFQjZGNEU5MURERDQ3RkE4RTA0ODFCNjBENEMxODA4
NkE4MzJDOTAeFw0yNjA1MDgwNTUxNDdaFw0yNjA1MDkwODIxNDdaMDMxMTAvBgNV
BAMTKDY0QkU2NTdERDM5NDYwQzM4RjlCRjc0MjFEODJFOTJFQTI5MDQzMEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvVY+JoSNKfzGi57EBNFYiiI/7
jY9sWadzpirY3XiOfjvbgsDIG4/7dZcxiNSzyVmIFFRNieKSmDuryeHkCDvsRIco
eim4D20BhBIlwc/v+dsc1by39k8Nrsemv46WTzLoVyQtcTs7kcB32iOt16Nm+ngQ
eda3WVGEVTiEfswe9DxU9ZwUtQsEaSwLI94HlkMPNwPxhKtwuiZHpbbkgQiW4f5E
mAYrXyFBv5zmZSertzvf9SPD+kWYBqPqLy1Hg3mVLllezo81N0IdTYfJrSg/4i+g
KhnQKUUzj21nz0vbLr7jUkjGZjLZqNt6OD/NkJqtGExs0BNP68KvWYPwv+K5AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUZL5lfdOUYMOPm/dCHYLpLqKQQw0wHwYDVR0j
BBgwFoAU+OtvTpHd1H+o4EgbYNTBgIaoMskwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MzAwZjRmMzctYzdmYi00N2QwLThhODUtZWNmZDEyYjkxNWY1LzAvRjhFQjZGNEU5
MURERDQ3RkE4RTA0ODFCNjBENEMxODA4NkE4MzJDOS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9GOEVCNkY0RTkxRERENDdGQThFMDQ4MUI2MEQ0QzE4MDg2QTgz
MkM5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzAwZjRmMzctYzdmYi00N2QwLThh
ODUtZWNmZDEyYjkxNWY1LzAvRjhFQjZGNEU5MURERDQ3RkE4RTA0ODFCNjBENEMx
ODA4NkE4MzJDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJ1z5rmhlvbSM+de0IzlSeFBL2iIzza6H/OG
u8TO6QoDN/6X9EnxGzhkdi14SBzw+ouhKgQkCYK4POYT79V6/KJ56hofyCKRrQNj
2NS+tZD5tin/giANYzimz4dokAdWD9TXb3xgizOigNSxWvpS8p/7D6PIxSvWeauA
Mb4NqlIUpybGMwXodjYlr4A5shmPaKrqNWm1NNy64JwOo0c7zrM58HRnPLJW5Fev
Or4sNw6P5zILM1E+mbRPZnGO7wfySHVARDXv0MDk+Ko3eH6libdjdyIeBsNoHJkU
miSXENG9sau+M3ZJBE0X9ZPcQGbgpBQqXZRBtSZnpqU07FZ+rpM=
-----END CERTIFICATE-----
Generated at Fri May 8 07:52:46 2026 by rpki-client