
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d7b64c3e-b13d-427a-b982-4394073e5cf5/0/94918BAD18C4E8526B528C0028361F609CC48B62.mft
File: 94918BAD18C4E8526B528C0028361F609CC48B62.mft (raw, json)
Hash identifier: 90whsEBXjIGz/+Quds6FKU3AaKTWP2qI6Zl2kzsxJN8=
Subject key identifier: 68:64:CE:4E:B5:3A:81:CE:11:D0:30:96:38:A3:86:6E:A9:24:DE:4A
Authority key identifier: 94:91:8B:AD:18:C4:E8:52:6B:52:8C:00:28:36:1F:60:9C:C4:8B:62
Certificate issuer: /CN=94918BAD18C4E8526B528C0028361F609CC48B62
Certificate serial: 74AFD1DC251F41CD5B0CAA404B7CD8CA1ACD388C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/94918BAD18C4E8526B528C0028361F609CC48B62.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d7b64c3e-b13d-427a-b982-4394073e5cf5/0/94918BAD18C4E8526B528C0028361F609CC48B62.mft
Manifest number: F5
Signing time: Sun 01 Nov 2026 10:10:10 +0000
Manifest this update: Sun 01 Nov 2026 10:05:10 +0000
Manifest next update: Mon 02 Nov 2026 13:11:10 +0000
Files and hashes: 1: 3130332e3138362e3136372e302f32342d3234203d3e20313439373033.roa (hash: luIF4e8AEEwqBc8g6JUpuDzn6v1Z4Rk3K0OUF6pYqjc=)
2: 94918BAD18C4E8526B528C0028361F609CC48B62.crl (hash: sBATQ6lLsSd+mT904u155hZN+7WU+B/uHPdfJ+Pv/bo=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d7b64c3e-b13d-427a-b982-4394073e5cf5/0/94918BAD18C4E8526B528C0028361F609CC48B62.crl
rsync://rpki-rsync.idnic.net/repo/d7b64c3e-b13d-427a-b982-4394073e5cf5/0/94918BAD18C4E8526B528C0028361F609CC48B62.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/94918BAD18C4E8526B528C0028361F609CC48B62.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 13:11:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:af:d1:dc:25:1f:41:cd:5b:0c:aa:40:4b:7c:d8:ca:1a:cd:38:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94918BAD18C4E8526B528C0028361F609CC48B62
Validity
Not Before: Nov 1 10:05:10 2026 GMT
Not After : Nov 2 13:11:10 2026 GMT
Subject: CN=6864CE4EB53A81CE11D0309638A3866EA924DE4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:96:b1:bd:5c:21:1a:17:66:47:ad:01:09:aa:
7c:a1:c7:8c:4b:45:99:68:9d:0b:c0:b7:4d:1c:c6:
47:1f:00:24:7f:5b:01:85:ae:eb:66:2a:15:de:d9:
36:b7:db:47:6c:4b:76:73:26:f3:2b:71:6b:01:bb:
44:78:f1:12:8e:81:a5:00:9a:cb:4e:91:7a:c5:c9:
03:a1:f7:8d:95:64:ec:08:17:fa:e4:32:e8:d7:ac:
d0:ab:8a:01:fd:80:d1:16:12:2a:3f:56:67:91:a7:
74:f9:18:48:c2:aa:d4:20:b0:ee:74:75:2e:bf:a9:
69:8f:11:49:3d:f7:0c:5f:8d:52:b4:27:95:3e:41:
81:49:40:2e:df:58:12:ce:6e:3c:ab:54:64:35:86:
d3:06:77:ac:b3:f8:0b:85:72:f2:f5:68:c5:79:ed:
b1:77:f1:ec:73:87:ba:d9:5b:85:81:fa:f5:16:24:
bc:dc:ed:9d:86:f5:19:5f:86:13:b8:73:49:d2:ab:
cf:40:84:a5:ba:fb:38:51:69:d2:88:7f:52:a9:1c:
fa:46:e8:99:44:55:4d:03:ee:0b:40:f9:4b:62:38:
75:a7:92:c9:73:0f:44:66:ca:34:53:a1:7c:b0:55:
0d:2f:0f:1b:ab:74:a8:3c:c7:49:2d:38:13:9b:82:
56:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:64:CE:4E:B5:3A:81:CE:11:D0:30:96:38:A3:86:6E:A9:24:DE:4A
X509v3 Authority Key Identifier:
keyid:94:91:8B:AD:18:C4:E8:52:6B:52:8C:00:28:36:1F:60:9C:C4:8B:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d7b64c3e-b13d-427a-b982-4394073e5cf5/0/94918BAD18C4E8526B528C0028361F609CC48B62.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/94918BAD18C4E8526B528C0028361F609CC48B62.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d7b64c3e-b13d-427a-b982-4394073e5cf5/0/94918BAD18C4E8526B528C0028361F609CC48B62.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:84:cf:10:18:20:2a:c9:31:6f:ab:50:f8:45:86:25:69:80:
35:c9:33:a7:df:c8:b3:ba:91:86:d6:1f:3a:63:d8:7a:1a:c5:
82:16:44:65:b9:12:a6:94:8b:65:c5:78:9c:c8:e4:8a:c3:73:
08:cb:a1:20:c4:63:17:71:64:36:94:19:c9:34:84:a0:fa:5b:
aa:45:d4:73:55:88:68:4d:15:3e:9a:8d:d7:4c:7a:d6:ec:8e:
fc:b0:a8:ce:db:96:00:1a:af:2a:ff:61:af:2c:64:0e:7b:df:
fb:b3:87:4a:16:7d:88:be:7b:75:1a:1a:b7:a2:53:7f:49:38:
5b:af:06:db:d0:d3:2b:ac:f1:ec:62:13:3e:70:57:ec:65:cd:
6b:30:ae:1d:3a:15:c6:08:3f:c1:3f:89:9a:4b:ef:a1:94:ba:
69:81:df:c9:9c:52:e9:dd:c6:52:51:07:ed:c9:15:aa:1b:2e:
02:07:02:8d:58:36:9a:c1:b7:c4:81:36:a2:7e:1f:d4:ef:bd:
ba:a1:c0:12:c1:8e:69:c8:fa:d5:dc:b4:d3:a0:f7:20:84:51:
e0:b2:8e:78:74:0f:9a:ed:d9:4c:45:0d:7e:eb:f9:e8:98:c0:
a4:ab:28:e3:58:d0:40:24:6f:a3:8b:1d:e0:7a:e7:22:5a:0a:
4d:05:10:34
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUdK/R3CUfQc1bDKpAS3zYyhrNOIwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTQ5MThCQUQxOEM0RTg1MjZCNTI4QzAwMjgzNjFGNjA5
Q0M0OEI2MjAeFw0yNjExMDExMDA1MTBaFw0yNjExMDIxMzExMTBaMDMxMTAvBgNV
BAMTKDY4NjRDRTRFQjUzQTgxQ0UxMUQwMzA5NjM4QTM4NjZFQTkyNERFNEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxlrG9XCEaF2ZHrQEJqnyhx4xL
RZlonQvAt00cxkcfACR/WwGFrutmKhXe2Ta320dsS3ZzJvMrcWsBu0R48RKOgaUA
mstOkXrFyQOh942VZOwIF/rkMujXrNCrigH9gNEWEio/VmeRp3T5GEjCqtQgsO50
dS6/qWmPEUk99wxfjVK0J5U+QYFJQC7fWBLObjyrVGQ1htMGd6yz+AuFcvL1aMV5
7bF38exzh7rZW4WB+vUWJLzc7Z2G9RlfhhO4c0nSq89AhKW6+zhRadKIf1KpHPpG
6JlEVU0D7gtA+UtiOHWnkslzD0RmyjRToXywVQ0vDxurdKg8x0ktOBObglbnAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUaGTOTrU6gc4R0DCWOKOGbqkk3kowHwYDVR0j
BBgwFoAUlJGLrRjE6FJrUowAKDYfYJzEi2IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZDdiNjRjM2UtYjEzZC00MjdhLWI5ODItNDM5NDA3M2U1Y2Y1LzAvOTQ5MThCQUQx
OEM0RTg1MjZCNTI4QzAwMjgzNjFGNjA5Q0M0OEI2Mi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85NDkxOEJBRDE4QzRFODUyNkI1MjhDMDAyODM2MUY2MDlDQzQ4
QjYyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDdiNjRjM2UtYjEzZC00MjdhLWI5
ODItNDM5NDA3M2U1Y2Y1LzAvOTQ5MThCQUQxOEM0RTg1MjZCNTI4QzAwMjgzNjFG
NjA5Q0M0OEI2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADyEzxAYICrJMW+rUPhFhiVpgDXJM6ffyLO6
kYbWHzpj2HoaxYIWRGW5EqaUi2XFeJzI5IrDcwjLoSDEYxdxZDaUGck0hKD6W6pF
1HNViGhNFT6ajddMetbsjvywqM7blgAaryr/Ya8sZA573/uzh0oWfYi+e3UaGrei
U39JOFuvBtvQ0yus8exiEz5wV+xlzWswrh06FcYIP8E/iZpL76GUummB38mcUund
xlJRB+3JFaobLgIHAo1YNprBt8SBNqJ+H9TvvbqhwBLBjmnI+tXctNOg9yCEUeCy
jnh0D5rt2UxFDX7r+eiYwKSrKONY0EAkb6OLHeB65yJaCk0FEDQ=
-----END CERTIFICATE-----
Generated at Mon Nov 2 05:55:21 2026 by rpki-client