
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/176607ea-add7-4ca5-8f2d-da8b791a3b42/0/F95181B95098159C2587D2AE64AA15ECF6F7BA45.mft
File: F95181B95098159C2587D2AE64AA15ECF6F7BA45.mft (raw, json)
Hash identifier: j6DEzbpdm1FRuY2WOQK/bQVpy6uEqnlIBhSM33Cx4m8=
Subject key identifier: 87:BE:1C:D6:0B:71:0B:8E:4B:0E:84:17:9E:E1:4C:AA:BA:EB:82:61
Authority key identifier: F9:51:81:B9:50:98:15:9C:25:87:D2:AE:64:AA:15:EC:F6:F7:BA:45
Certificate issuer: /CN=F95181B95098159C2587D2AE64AA15ECF6F7BA45
Certificate serial: 550CBBD704A38621FBEEEE0817EA3EB29B4474A5
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F95181B95098159C2587D2AE64AA15ECF6F7BA45.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/176607ea-add7-4ca5-8f2d-da8b791a3b42/0/F95181B95098159C2587D2AE64AA15ECF6F7BA45.mft
Manifest number: E7
Signing time: Thu 22 Oct 2026 03:28:06 +0000
Manifest this update: Thu 22 Oct 2026 03:23:06 +0000
Manifest next update: Fri 23 Oct 2026 07:07:06 +0000
Files and hashes: 1: 3130332e3230332e3233322e302f32332d3233203d3e20313531363030.roa (hash: QrZG0rd0H2oMRYUrnP7wml3+LX+uV/9SDTxjs0PrJoU=)
2: 323030313a6466333a643663303a3a2f34382d3438203d3e20313531363030.roa (hash: pgEEArXd9XP8zXa/DdMQKaPdRhF2qiIImHSr7qGevFs=)
3: F95181B95098159C2587D2AE64AA15ECF6F7BA45.crl (hash: frckW01L4ystDp4w+w43sdHGaVLmfoPQWhxpTW+J3iw=)
4: 3130332e3230332e3233332e302f32342d3234203d3e20313531363030.roa (hash: z7iqZjlXVRMDIQEXZKf98grHsnfTgjJWLqwQCjq3co8=)
5: 3130332e3230332e3233322e302f32342d3234203d3e20313531363030.roa (hash: IGQZppCH5Ww/fn6QSsHdhxefkfkyI2QhhtmZkcnBVVk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/176607ea-add7-4ca5-8f2d-da8b791a3b42/0/F95181B95098159C2587D2AE64AA15ECF6F7BA45.crl
rsync://rpki-rsync.idnic.net/repo/176607ea-add7-4ca5-8f2d-da8b791a3b42/0/F95181B95098159C2587D2AE64AA15ECF6F7BA45.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F95181B95098159C2587D2AE64AA15ECF6F7BA45.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 23 Oct 2026 07:07:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:0c:bb:d7:04:a3:86:21:fb:ee:ee:08:17:ea:3e:b2:9b:44:74:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F95181B95098159C2587D2AE64AA15ECF6F7BA45
Validity
Not Before: Oct 22 03:23:06 2026 GMT
Not After : Oct 23 07:07:06 2026 GMT
Subject: CN=87BE1CD60B710B8E4B0E84179EE14CAABAEB8261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e5:0a:35:c2:33:3a:a8:fc:f6:cf:93:f1:bc:
a3:17:f3:63:1f:bd:e3:3e:f4:72:f7:5b:29:2c:80:
eb:e9:a7:47:84:4d:01:df:bf:02:b1:85:c8:4c:96:
e2:04:ae:6a:68:01:b5:48:9f:a8:1e:83:f5:5f:fd:
41:30:6e:8d:14:0a:a8:5d:82:06:b9:9f:32:44:4e:
71:0a:87:7e:d4:2b:d8:55:45:90:66:70:53:11:87:
6b:95:a5:d9:6b:3f:dd:4e:53:7e:62:2c:57:f1:5a:
14:73:5b:72:5c:f1:d1:b0:82:00:12:2f:d3:da:39:
89:95:19:5d:05:4e:6a:eb:e1:35:f7:82:d6:81:20:
ee:79:8c:be:11:61:d6:fb:0e:09:22:fd:3f:7f:83:
47:4d:51:8c:9c:75:99:b3:19:ac:2b:a2:33:3f:b0:
64:0f:06:3a:1b:02:78:77:34:cb:c8:8e:c6:3f:ee:
79:5f:1a:62:90:f2:a4:bb:0a:c5:0f:4a:21:11:e3:
1a:5e:93:28:86:be:3f:91:97:12:0d:f5:da:e2:78:
4f:42:56:48:6f:ce:2a:64:55:6a:e3:e4:92:22:8f:
bb:b3:08:34:f1:a4:79:da:00:44:ff:1a:17:c5:8b:
ef:f9:f2:84:60:8a:78:5e:35:e2:5d:19:20:15:69:
8a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:BE:1C:D6:0B:71:0B:8E:4B:0E:84:17:9E:E1:4C:AA:BA:EB:82:61
X509v3 Authority Key Identifier:
keyid:F9:51:81:B9:50:98:15:9C:25:87:D2:AE:64:AA:15:EC:F6:F7:BA:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/176607ea-add7-4ca5-8f2d-da8b791a3b42/0/F95181B95098159C2587D2AE64AA15ECF6F7BA45.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F95181B95098159C2587D2AE64AA15ECF6F7BA45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/176607ea-add7-4ca5-8f2d-da8b791a3b42/0/F95181B95098159C2587D2AE64AA15ECF6F7BA45.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:02:84:ca:fb:e6:55:63:4f:41:86:18:99:94:e5:55:bd:6b:
50:e9:49:b0:9b:d1:52:1d:ef:5a:15:e7:8e:06:38:5c:eb:a3:
f4:a5:7f:0b:3f:4e:2d:6e:5f:01:8f:86:2b:eb:6d:0e:d3:c2:
a0:50:59:59:ab:d2:5a:5b:4c:83:f9:88:bb:82:7d:2c:db:b2:
28:a0:61:f4:6a:ed:07:d3:e4:9f:7c:e9:d3:36:75:27:5c:fa:
f0:6f:f9:3b:82:cd:2b:a5:40:65:db:87:af:32:c0:9e:0c:28:
e7:46:c3:2c:65:fb:eb:48:c3:d0:9e:f0:65:c1:d0:f9:85:4d:
7a:2f:c2:d4:75:63:02:e9:a1:62:d2:f8:30:c1:d9:b7:94:cc:
a0:a3:b1:bf:55:4d:d3:e9:07:08:34:ac:58:72:ee:c4:80:69:
e1:ee:c9:02:a6:9f:bb:2c:fe:bd:2f:aa:bc:ef:3b:46:cd:86:
42:1e:57:9e:07:98:45:96:de:b7:9a:e0:3e:5c:1f:d5:44:16:
5f:82:72:c2:7e:93:3a:eb:50:4b:30:fc:8d:87:17:1f:9a:b7:
bf:73:47:80:02:41:7d:c0:12:97:70:73:47:3b:06:79:c0:0b:
19:36:9e:c6:1b:5c:32:29:39:f0:25:08:78:47:fa:40:1d:8f:
4f:4a:de:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 00:23:21 2026 by rpki-client