
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/F908019F3DDAFD79BB1C8B63809C31742646ED94.mft
File: F908019F3DDAFD79BB1C8B63809C31742646ED94.mft (raw, json)
Hash identifier: oa2R6Q9Ne+iZ1Lj53nX4UJw4jmz8bGuX9+iB2sC1zKE=
Subject key identifier: F2:08:2B:07:8C:8D:0B:F3:29:9A:CE:F0:6A:58:CB:53:5B:D4:C7:2C
Authority key identifier: F9:08:01:9F:3D:DA:FD:79:BB:1C:8B:63:80:9C:31:74:26:46:ED:94
Certificate issuer: /CN=F908019F3DDAFD79BB1C8B63809C31742646ED94
Certificate serial: 0BBB1C8C13B953971B6AFE1A50CEBBBEAAB9EE1B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F908019F3DDAFD79BB1C8B63809C31742646ED94.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/F908019F3DDAFD79BB1C8B63809C31742646ED94.mft
Manifest number: F9
Signing time: Thu 05 Nov 2026 00:55:10 +0000
Manifest this update: Thu 05 Nov 2026 00:50:10 +0000
Manifest next update: Fri 06 Nov 2026 01:19:10 +0000
Files and hashes: 1: 3135302e3234322e3137362e302f32332d3233203d3e20313532303639.roa (hash: I26dPICHNbNpOEaAeWFDJjc3y6XbZTVJydnD33XIwu0=)
2: 3135302e3234322e3137362e302f32342d3234203d3e20313532303639.roa (hash: cjE8N8SonYXudiNgGVS0p3xIfvw3WuGivTObtGkKRTg=)
3: 3135302e3234322e3137372e302f32342d3234203d3e20313532303639.roa (hash: g30Ubr5lnHY7RgPz4sO/yn/hRSs7dTdCi43T+BO8StE=)
4: F908019F3DDAFD79BB1C8B63809C31742646ED94.crl (hash: lzLH4QMVpDfIFo/x/1I0bNI/tAFFUlN5jrnBf4lX1pY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/F908019F3DDAFD79BB1C8B63809C31742646ED94.crl
rsync://rpki-rsync.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/F908019F3DDAFD79BB1C8B63809C31742646ED94.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F908019F3DDAFD79BB1C8B63809C31742646ED94.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 06 Nov 2026 01:16:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:bb:1c:8c:13:b9:53:97:1b:6a:fe:1a:50:ce:bb:be:aa:b9:ee:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F908019F3DDAFD79BB1C8B63809C31742646ED94
Validity
Not Before: Nov 5 00:50:10 2026 GMT
Not After : Nov 6 01:19:10 2026 GMT
Subject: CN=F2082B078C8D0BF3299ACEF06A58CB535BD4C72C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e8:85:11:36:bc:03:34:49:6f:2b:0b:37:da:
2f:4b:ff:bc:05:77:79:49:5f:4c:57:38:a9:12:df:
59:bc:a6:90:16:4a:21:f7:0d:83:27:d7:70:4a:a1:
9e:22:5c:d0:88:3c:f5:34:98:db:18:f7:15:59:b6:
8f:df:6c:3f:be:ea:89:2c:b6:d3:56:6d:47:ba:f2:
d0:07:6a:58:71:7f:a2:f0:07:89:29:bb:ae:a4:ca:
18:dd:c6:b4:21:f8:c2:23:7b:1e:28:b6:d8:21:f2:
d8:27:65:92:15:e6:db:68:10:86:33:b1:61:89:83:
f7:b2:03:e4:52:59:f1:86:f1:f8:02:0e:2a:13:bd:
c4:d9:45:d9:3d:73:4e:18:c0:4b:07:11:d4:23:61:
e5:e5:ff:f2:02:5e:0c:97:7b:5d:0c:4b:1d:d1:40:
6b:df:99:ab:81:5c:34:39:07:6f:4d:68:17:d5:e6:
64:57:12:fa:af:c4:1c:81:e9:03:6a:84:6d:4e:f3:
76:00:c8:03:d1:0b:ae:be:4d:fd:d6:96:bd:76:58:
bc:60:e0:28:59:dc:6e:26:ad:31:fc:ac:e4:53:24:
1b:71:e7:a1:33:e4:c4:8c:fc:c5:5d:5a:f5:47:6e:
5e:37:5b:f2:30:c2:f0:72:7a:7b:77:ba:7c:7f:cc:
16:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:08:2B:07:8C:8D:0B:F3:29:9A:CE:F0:6A:58:CB:53:5B:D4:C7:2C
X509v3 Authority Key Identifier:
keyid:F9:08:01:9F:3D:DA:FD:79:BB:1C:8B:63:80:9C:31:74:26:46:ED:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/F908019F3DDAFD79BB1C8B63809C31742646ED94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F908019F3DDAFD79BB1C8B63809C31742646ED94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/F908019F3DDAFD79BB1C8B63809C31742646ED94.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:89:6e:ed:19:f2:5f:c0:18:60:0d:9d:4e:b8:da:f3:79:fe:
91:19:f6:56:93:4c:71:ff:45:b3:fd:65:3d:1d:4c:3d:22:7e:
2c:a5:f1:11:da:65:d1:97:d4:bf:6b:a1:e4:c3:c2:9f:56:c5:
80:51:b9:73:ea:ba:15:41:13:7c:28:3a:0f:eb:5e:2a:74:9b:
fd:32:67:f8:dc:99:9b:6d:71:f9:e9:cd:2b:3d:5a:a7:69:eb:
a6:31:3b:2f:e5:7e:79:49:f5:06:77:07:36:fd:9f:bd:bf:41:
4d:1d:1e:16:af:7e:89:9f:46:ed:26:1d:3f:6f:d7:d8:14:2d:
b5:e9:cf:d1:f3:93:bf:2f:2b:c6:a9:c4:b6:4f:72:d3:4e:2e:
da:27:fd:13:73:79:d8:23:ca:57:94:f2:e5:79:c8:d7:89:5d:
35:1d:0c:b0:86:1a:81:2b:31:71:24:88:02:05:a9:91:43:c2:
24:1f:a9:7f:e7:54:69:5e:3f:9c:f7:c8:c7:5f:d7:32:c7:3e:
2f:be:ba:ea:bd:51:0a:3b:1f:a4:e0:74:17:db:d7:d6:1f:1c:
7e:0d:36:37:2c:e2:41:99:7a:74:a1:92:12:21:3c:f6:02:87:
c4:63:0d:eb:2b:f5:d3:44:71:b7:6f:be:e0:fb:c2:af:42:0b:
cc:40:d7:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 05:24:17 2026 by rpki-client