
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/F5448F6C1F44810CF394690F1B2831B9E6E4A92E.mft
File: F5448F6C1F44810CF394690F1B2831B9E6E4A92E.mft (raw, json)
Hash identifier: OzZEey+48bSzT6GxxuXFGEvGAH5vmWzs98lvynyS1N0=
Subject key identifier: 95:8E:A2:02:20:49:CD:19:EB:EF:2A:F3:9E:A2:DE:2D:B9:CF:4D:18
Authority key identifier: F5:44:8F:6C:1F:44:81:0C:F3:94:69:0F:1B:28:31:B9:E6:E4:A9:2E
Certificate issuer: /CN=F5448F6C1F44810CF394690F1B2831B9E6E4A92E
Certificate serial: 68839F99090C6260116FE149A1FF9294E35092CE
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5448F6C1F44810CF394690F1B2831B9E6E4A92E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/F5448F6C1F44810CF394690F1B2831B9E6E4A92E.mft
Manifest number: 0112
Signing time: Thu 15 Oct 2026 11:59:38 +0000
Manifest this update: Thu 15 Oct 2026 11:54:38 +0000
Manifest next update: Fri 16 Oct 2026 12:37:38 +0000
Files and hashes: 1: AS38060.roa (hash: qvbxBcZLMrul+/C8ge5Rqq/SgdUQF+sMZQ876hwVAos=)
2: AS38482.roa (hash: w8pwA89FWHV5EX9UPgiOH2znfZMlzEjMKW8mwnkiCb8=)
3: F5448F6C1F44810CF394690F1B2831B9E6E4A92E.crl (hash: M7z9Aqa/B2rSMGVH5wJoTZGq21OIrc9+bQufH+oXryM=)
4: AS45493.roa (hash: JFF0dBU20PveLMjEby6Gyb1xZkghp5FhZDVpNjyb37Q=)
5: AS17451.roa (hash: eVZR/o4iRD+2mhyCwlF+uhu6AWIkezfGHeLEtN8GsAo=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/F5448F6C1F44810CF394690F1B2831B9E6E4A92E.crl
rsync://rpki-rsync.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/F5448F6C1F44810CF394690F1B2831B9E6E4A92E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5448F6C1F44810CF394690F1B2831B9E6E4A92E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 10:07:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:83:9f:99:09:0c:62:60:11:6f:e1:49:a1:ff:92:94:e3:50:92:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F5448F6C1F44810CF394690F1B2831B9E6E4A92E
Validity
Not Before: Oct 15 11:54:38 2026 GMT
Not After : Oct 16 12:37:38 2026 GMT
Subject: CN=958EA2022049CD19EBEF2AF39EA2DE2DB9CF4D18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4f:dc:e2:c9:b9:b6:fb:28:9c:fe:14:c1:b2:
56:91:a8:b8:33:88:ac:d2:31:b1:5e:46:43:4a:ac:
39:ae:f0:0b:84:b5:b6:cd:de:b0:26:66:b2:76:86:
a1:1c:30:29:31:b5:f9:26:5c:57:0c:85:8d:78:16:
0a:d7:46:07:e1:3f:6d:08:cc:f9:07:4d:a3:5a:14:
e5:d7:3f:b6:18:ef:23:bf:c1:38:84:f7:d7:29:b6:
bf:a0:01:37:66:26:68:be:28:ca:ae:b9:2d:65:33:
6f:63:81:b2:d3:24:bc:31:6f:35:d6:f7:4b:4a:f4:
ac:f8:9b:99:0f:a9:1c:c9:f1:8c:27:32:21:08:0f:
50:77:4d:95:8e:6f:05:49:74:e1:3a:f1:cb:38:a1:
3c:2a:d1:2d:5d:7c:59:26:bb:58:54:2b:4e:ed:f1:
a8:ee:e0:45:97:68:5a:3f:d5:60:4f:44:b9:00:a0:
28:8a:35:fd:cf:4d:7a:86:a6:92:c4:01:1f:9f:44:
45:cc:e3:ef:5a:8e:f4:20:0b:92:66:70:55:39:8b:
9c:46:23:79:e3:a6:53:3b:0c:bc:c5:4e:be:34:04:
ea:51:6e:a1:69:0f:84:28:e3:90:e4:80:6a:2d:46:
6d:62:3c:3e:b2:2e:5c:b3:a8:a4:3d:46:a5:b7:41:
c0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:8E:A2:02:20:49:CD:19:EB:EF:2A:F3:9E:A2:DE:2D:B9:CF:4D:18
X509v3 Authority Key Identifier:
keyid:F5:44:8F:6C:1F:44:81:0C:F3:94:69:0F:1B:28:31:B9:E6:E4:A9:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/F5448F6C1F44810CF394690F1B2831B9E6E4A92E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5448F6C1F44810CF394690F1B2831B9E6E4A92E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/F5448F6C1F44810CF394690F1B2831B9E6E4A92E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:8a:0f:e8:7f:c6:4e:5f:8e:13:27:8f:7f:ca:72:a9:5d:94:
04:4b:36:11:5a:f0:e7:a8:74:bf:0f:9a:4a:6e:fe:a3:ab:34:
1c:0e:66:0a:c9:3f:e8:52:77:a5:2a:a0:f4:e6:ff:a7:4a:dd:
91:94:35:c0:29:12:9d:5f:8c:35:24:cd:76:cb:19:7c:98:31:
04:93:f0:a7:1f:11:ea:9d:de:60:f1:77:7b:2f:1f:d9:79:54:
3d:93:05:b2:b8:7f:9d:70:d7:40:6a:8f:a1:8c:b2:fb:cb:fc:
6e:55:28:47:ce:ef:90:49:8e:37:a3:c6:a6:e1:a1:c4:f8:68:
01:a4:3a:ee:06:aa:98:4e:eb:90:5f:9f:46:94:99:b1:15:1e:
c7:19:6b:bd:99:c8:ae:18:18:9f:62:6f:55:87:98:61:f6:71:
c2:ca:c9:45:4a:4a:a2:bd:bf:d7:7d:4d:c6:18:18:86:78:65:
c0:80:cc:a0:66:1b:cc:ae:2d:84:91:65:c9:d1:2d:f5:54:93:
fc:91:80:9d:34:1a:9d:d9:22:a3:7e:e9:f9:c7:18:14:e7:04:
21:47:df:44:2c:e3:d1:bb:d9:21:c3:62:91:92:55:01:12:ba:
53:64:64:c0:3b:ca:d8:2a:ec:b6:9c:71:e5:74:44:ee:dc:48:
7d:cb:3b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:05:14 2026 by rpki-client