
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/15521099-3ba1-4f91-b5bb-712c3bba6337/0/F8933926AE839DED729AFA2E0E4DCBFB0749DF1B.mft
File: F8933926AE839DED729AFA2E0E4DCBFB0749DF1B.mft (raw, json)
Hash identifier: /TbuYxu3m9BRNowEcVlqmXKTcabdqx7QwPrMvaOMOrs=
Subject key identifier: 8A:24:7C:83:7A:15:96:D5:F9:D0:C0:62:21:8A:67:AE:BA:FB:4C:D0
Authority key identifier: F8:93:39:26:AE:83:9D:ED:72:9A:FA:2E:0E:4D:CB:FB:07:49:DF:1B
Certificate issuer: /CN=F8933926AE839DED729AFA2E0E4DCBFB0749DF1B
Certificate serial: 576B07F35F619A055BFDAB4AF32115AD5C1F2C21
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8933926AE839DED729AFA2E0E4DCBFB0749DF1B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/15521099-3ba1-4f91-b5bb-712c3bba6337/0/F8933926AE839DED729AFA2E0E4DCBFB0749DF1B.mft
Manifest number: EB
Signing time: Sat 24 Oct 2026 21:20:43 +0000
Manifest this update: Sat 24 Oct 2026 21:15:43 +0000
Manifest next update: Mon 26 Oct 2026 00:16:43 +0000
Files and hashes: 1: F8933926AE839DED729AFA2E0E4DCBFB0749DF1B.crl (hash: 3CfZ744wM+unrbqoghqazAxYU8e5NB09FEqpv5Kugho=)
2: 3130332e3139302e3130382e302f32342d3234203d3e20313439393033.roa (hash: 6UaquuTBkgXh3T9OTxZgNAGf5O5rLTrtkc8NLnoboV0=)
3: 3130332e3139302e3130382e302f32332d3234203d3e20313439393033.roa (hash: Ko5U+LVnoFJ8wmSh7j4Nh6VXRGbHhjpdwU4CqrLXyts=)
4: 3130332e3139302e3130392e302f32342d3234203d3e20313439393033.roa (hash: DA2FUhM7Kcld/ZOZCHHz4OC3AwFVi9D3hLd64lN6BR0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/15521099-3ba1-4f91-b5bb-712c3bba6337/0/F8933926AE839DED729AFA2E0E4DCBFB0749DF1B.crl
rsync://rpki-rsync.idnic.net/repo/15521099-3ba1-4f91-b5bb-712c3bba6337/0/F8933926AE839DED729AFA2E0E4DCBFB0749DF1B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8933926AE839DED729AFA2E0E4DCBFB0749DF1B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Oct 2026 19:21:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:6b:07:f3:5f:61:9a:05:5b:fd:ab:4a:f3:21:15:ad:5c:1f:2c:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F8933926AE839DED729AFA2E0E4DCBFB0749DF1B
Validity
Not Before: Oct 24 21:15:43 2026 GMT
Not After : Oct 26 00:16:43 2026 GMT
Subject: CN=8A247C837A1596D5F9D0C062218A67AEBAFB4CD0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3f:2c:26:ac:a0:9b:03:3b:80:fe:db:16:68:
6c:35:a9:ab:4a:5e:19:ce:1e:e4:85:5f:2a:32:8b:
a2:fe:3b:7a:ea:49:03:21:49:83:23:d8:36:95:68:
6f:41:8f:f7:85:d8:b9:af:9a:a6:cf:c3:ee:68:42:
70:5e:3d:27:35:8e:a3:2b:f3:dc:c1:48:e3:59:ce:
a4:a4:6b:09:07:60:80:47:e6:db:47:c9:00:aa:cd:
94:18:d6:df:64:61:0a:c0:55:2f:18:c8:15:b6:3e:
46:3c:5b:f0:5d:53:43:48:57:57:11:74:ee:65:00:
db:f3:04:cd:dd:7a:95:db:df:e8:84:d6:24:67:f5:
eb:14:32:2a:4a:78:ba:4e:d7:e7:21:19:b0:c2:09:
4c:69:04:c5:1e:54:3d:1b:f1:97:e4:4e:3e:ac:aa:
f4:ad:4a:bb:9d:60:15:c7:ac:d0:1e:65:f7:bd:43:
d8:09:e4:af:ab:23:1a:aa:61:cd:40:49:a7:bd:1f:
5a:df:c8:db:75:43:ad:79:3a:6a:03:15:25:c0:17:
07:55:8a:7d:db:41:43:06:16:df:0e:56:ba:9c:16:
01:65:6e:0e:0d:27:22:e5:45:7c:d6:d8:23:5d:20:
1a:44:67:32:2a:93:09:30:9b:e3:e0:5a:99:5b:ae:
e2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:24:7C:83:7A:15:96:D5:F9:D0:C0:62:21:8A:67:AE:BA:FB:4C:D0
X509v3 Authority Key Identifier:
keyid:F8:93:39:26:AE:83:9D:ED:72:9A:FA:2E:0E:4D:CB:FB:07:49:DF:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/15521099-3ba1-4f91-b5bb-712c3bba6337/0/F8933926AE839DED729AFA2E0E4DCBFB0749DF1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8933926AE839DED729AFA2E0E4DCBFB0749DF1B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/15521099-3ba1-4f91-b5bb-712c3bba6337/0/F8933926AE839DED729AFA2E0E4DCBFB0749DF1B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:77:c7:90:b9:3c:c9:81:6d:e4:d0:ba:2d:f4:a8:58:f2:09:
f0:a7:18:eb:71:00:ac:46:77:8f:75:03:04:d3:4a:e3:3f:e9:
ac:f9:de:b6:68:92:82:b2:37:03:d7:c2:83:93:e9:3b:8d:e9:
c2:99:8f:31:e0:05:4b:46:49:b6:8b:9e:fc:9a:d1:15:b4:f2:
ed:47:0a:17:bb:ea:21:d9:7a:10:fa:17:5b:a7:8f:63:13:78:
9f:d8:c8:49:19:74:78:fd:c2:58:25:51:a7:b5:80:b5:8b:67:
6d:0c:b5:22:3a:a7:63:0f:00:1b:fc:5f:d6:7d:19:34:96:f7:
c0:42:99:9f:48:91:d1:f3:7d:18:e3:d8:f9:90:61:f3:da:fd:
d8:34:0a:db:b4:fb:75:61:06:6f:f3:c5:3b:a9:54:a8:c8:cf:
31:06:3c:d2:95:2f:65:9a:5b:c1:09:8e:22:be:7b:a4:ff:70:
f1:82:73:a5:78:85:dd:a4:8b:54:1a:0a:fd:d8:54:f2:95:47:
e1:03:02:da:a7:fc:7f:22:b4:af:b7:49:3e:33:33:c0:c3:2d:
31:f3:2e:5d:2b:57:ec:3e:10:60:bb:c9:13:92:e3:b4:6b:5c:
e4:63:85:4b:4c:ab:29:50:92:27:56:4e:41:7d:6f:7e:bd:97:
0d:ae:4a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 07:09:59 2026 by rpki-client