
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/10553E9FBD62D012FC01AA60343F1431B2A6A334.mft
File: 10553E9FBD62D012FC01AA60343F1431B2A6A334.mft (raw, json)
Hash identifier: lbzHggEafkM8n4445fWyufe1TPVcFAIRey81IhA+bQY=
Subject key identifier: EB:DE:8F:DD:A9:35:FF:DB:C3:21:AD:EB:56:39:91:E4:15:6E:F4:23
Authority key identifier: 10:55:3E:9F:BD:62:D0:12:FC:01:AA:60:34:3F:14:31:B2:A6:A3:34
Certificate issuer: /CN=10553E9FBD62D012FC01AA60343F1431B2A6A334
Certificate serial: 5B28AFF0689BE0201ABC975A78AF6B4E5FA40388
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10553E9FBD62D012FC01AA60343F1431B2A6A334.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/10553E9FBD62D012FC01AA60343F1431B2A6A334.mft
Manifest number: E9
Signing time: Sat 24 Oct 2026 16:24:42 +0000
Manifest this update: Sat 24 Oct 2026 16:19:42 +0000
Manifest next update: Sun 25 Oct 2026 18:09:42 +0000
Files and hashes: 1: 3130332e3137362e39382e302f32332d3234203d3e20313439333434.roa (hash: k9nD44XinJnJpBwRMmDV5yfpMBTjz+PYwIGe6HEFz9s=)
2: 3130332e3137362e39392e302f32342d3234203d3e20313439333434.roa (hash: tbo+ssCZ1GgyC2ZlsuUJYvzfgqZD9OlbY8lym/UKgpA=)
3: 10553E9FBD62D012FC01AA60343F1431B2A6A334.crl (hash: FnC2s0AmetI2DhBA9HyLyYzAcJFLzu7vrnNiwVyV1WY=)
4: 3130332e3137362e39382e302f32342d3234203d3e20313439333434.roa (hash: CzpBmVwagEtnKqxKjT1pUSrqGuU3xrwBdruiL5NCJ14=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/10553E9FBD62D012FC01AA60343F1431B2A6A334.crl
rsync://rpki-rsync.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/10553E9FBD62D012FC01AA60343F1431B2A6A334.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10553E9FBD62D012FC01AA60343F1431B2A6A334.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Oct 2026 18:09:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:28:af:f0:68:9b:e0:20:1a:bc:97:5a:78:af:6b:4e:5f:a4:03:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10553E9FBD62D012FC01AA60343F1431B2A6A334
Validity
Not Before: Oct 24 16:19:42 2026 GMT
Not After : Oct 25 18:09:42 2026 GMT
Subject: CN=EBDE8FDDA935FFDBC321ADEB563991E4156EF423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:90:f4:59:37:3b:94:d7:27:33:a4:99:d1:2d:
7b:04:81:5b:96:18:14:ee:36:34:33:f1:08:fd:be:
3f:e8:aa:35:6a:2b:33:26:10:79:84:66:cc:6e:68:
a0:82:97:6c:3d:33:04:dd:65:b8:e9:25:db:4c:b5:
5d:87:44:87:cd:47:6b:9a:54:68:cc:03:3e:18:08:
bf:6c:75:bd:30:bc:ec:09:9f:35:3f:83:de:07:4d:
13:e3:04:44:41:ae:b5:72:6f:2b:3e:fe:39:75:61:
97:15:c5:47:70:62:1d:fc:53:6a:9e:ce:d3:21:b1:
4d:d6:7e:f2:5e:5f:c2:76:4f:af:dd:ac:13:93:a9:
c0:4d:88:b8:1f:4e:d2:6a:b9:ac:38:d7:22:ef:0c:
67:2e:29:5b:fc:91:a0:6a:18:02:9c:8f:28:42:54:
1f:a1:0d:0e:58:ed:5f:9c:28:e2:15:85:7e:6d:7e:
be:40:85:07:d9:29:95:ca:a5:df:91:4e:5c:9e:91:
da:5c:0f:91:60:8f:24:51:00:25:ec:18:ae:ff:7d:
84:6d:71:1d:4a:48:47:10:6b:dc:1b:83:22:cf:43:
82:79:8e:c0:e8:b6:76:47:8e:1c:e0:ba:fd:3e:71:
ff:e0:f9:fb:6a:5e:39:ad:4b:62:a9:21:83:5f:5f:
22:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:DE:8F:DD:A9:35:FF:DB:C3:21:AD:EB:56:39:91:E4:15:6E:F4:23
X509v3 Authority Key Identifier:
keyid:10:55:3E:9F:BD:62:D0:12:FC:01:AA:60:34:3F:14:31:B2:A6:A3:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/10553E9FBD62D012FC01AA60343F1431B2A6A334.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10553E9FBD62D012FC01AA60343F1431B2A6A334.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/10553E9FBD62D012FC01AA60343F1431B2A6A334.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:19:ba:ed:0b:74:49:89:f5:e9:0b:6c:c6:d5:11:2c:e9:e8:
6a:7b:48:a8:73:61:02:92:bb:bd:7a:61:1f:b9:87:4f:87:06:
90:23:5a:81:87:f1:a5:5e:4d:88:68:de:64:1e:cd:13:1d:f3:
25:e6:04:75:86:01:29:af:d0:87:8e:81:6f:89:56:8a:71:a9:
7c:0a:b5:63:3a:34:8f:4b:9d:aa:49:e3:9e:b3:7d:03:7d:aa:
22:54:98:ed:ad:b0:af:96:83:01:ce:83:b3:4f:64:eb:7b:6b:
25:7d:9f:23:3f:d9:62:2d:a5:d8:9b:65:92:dd:d9:05:4c:5d:
61:20:cb:a9:6f:a2:3c:38:29:02:f3:0d:81:76:14:aa:d4:8d:
3d:50:68:91:19:da:71:46:1a:b0:37:5f:0f:32:7a:e9:42:56:
31:43:2a:18:9b:b5:ae:2f:a9:d4:c8:be:bb:a1:cb:b0:db:e7:
32:ea:97:93:2b:ff:4e:02:0e:9c:7f:82:dd:40:74:8e:80:e3:
18:6b:34:b4:c4:7e:a0:df:42:4c:ba:57:44:16:6b:e3:cc:9f:
1e:32:6c:c9:4a:f5:14:4c:99:18:a7:16:47:3a:af:d3:dd:37:
89:bf:f5:9a:ef:bd:e6:47:63:7e:e5:13:c2:b6:ff:25:30:3a:
f9:b5:90:c1
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUWyiv8Gib4CAavJdaeK9rTl+kA4gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTA1NTNFOUZCRDYyRDAxMkZDMDFBQTYwMzQzRjE0MzFC
MkE2QTMzNDAeFw0yNjEwMjQxNjE5NDJaFw0yNjEwMjUxODA5NDJaMDMxMTAvBgNV
BAMTKEVCREU4RkREQTkzNUZGREJDMzIxQURFQjU2Mzk5MUU0MTU2RUY0MjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClkPRZNzuU1yczpJnRLXsEgVuW
GBTuNjQz8Qj9vj/oqjVqKzMmEHmEZsxuaKCCl2w9MwTdZbjpJdtMtV2HRIfNR2ua
VGjMAz4YCL9sdb0wvOwJnzU/g94HTRPjBERBrrVybys+/jl1YZcVxUdwYh38U2qe
ztMhsU3WfvJeX8J2T6/drBOTqcBNiLgfTtJquaw41yLvDGcuKVv8kaBqGAKcjyhC
VB+hDQ5Y7V+cKOIVhX5tfr5AhQfZKZXKpd+RTlyekdpcD5FgjyRRACXsGK7/fYRt
cR1KSEcQa9wbgyLPQ4J5jsDotnZHjhzguv0+cf/g+ftqXjmtS2KpIYNfXyIZAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU696P3ak1/9vDIa3rVjmR5BVu9CMwHwYDVR0j
BBgwFoAUEFU+n71i0BL8AapgND8UMbKmozQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MTcyMTY0MjUtNmFhMy00NDI5LWIxNzUtODY5MDFiYjBjYjFmLzAvMTA1NTNFOUZC
RDYyRDAxMkZDMDFBQTYwMzQzRjE0MzFCMkE2QTMzNC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8xMDU1M0U5RkJENjJEMDEyRkMwMUFBNjAzNDNGMTQzMUIyQTZB
MzM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTcyMTY0MjUtNmFhMy00NDI5LWIx
NzUtODY5MDFiYjBjYjFmLzAvMTA1NTNFOUZCRDYyRDAxMkZDMDFBQTYwMzQzRjE0
MzFCMkE2QTMzNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAAwZuu0LdEmJ9ekLbMbVESzp6Gp7SKhzYQKS
u716YR+5h0+HBpAjWoGH8aVeTYho3mQezRMd8yXmBHWGASmv0IeOgW+JVopxqXwK
tWM6NI9LnapJ456zfQN9qiJUmO2tsK+WgwHOg7NPZOt7ayV9nyM/2WItpdibZZLd
2QVMXWEgy6lvojw4KQLzDYF2FKrUjT1QaJEZ2nFGGrA3Xw8yeulCVjFDKhibta4v
qdTIvruhy7Db5zLql5Mr/04CDpx/gt1AdI6A4xhrNLTEfqDfQky6V0QWa+PMnx4y
bMlK9RRMmRinFkc6r9PdN4m/9ZrvveZHY37lE8K2/yUwOvm1kME=
-----END CERTIFICATE-----
Generated at Sun Oct 25 01:18:53 2026 by rpki-client