
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/176607ea-add7-4ca5-8f2d-da8b791a3b42/0/F95181B95098159C2587D2AE64AA15ECF6F7BA45.mft
File: F95181B95098159C2587D2AE64AA15ECF6F7BA45.mft (raw, json)
Hash identifier: OI15VCwlTxQHQMltdzATWy/gIrS5q82IwDb3RaKvjH8=
Subject key identifier: 8B:EB:F9:A9:4D:2A:3A:08:01:C8:95:FD:47:3C:59:27:08:AA:E4:3D
Authority key identifier: F9:51:81:B9:50:98:15:9C:25:87:D2:AE:64:AA:15:EC:F6:F7:BA:45
Certificate issuer: /CN=F95181B95098159C2587D2AE64AA15ECF6F7BA45
Certificate serial: 56B94AA1CC71AD3790D3354C5FFF051B357774F8
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F95181B95098159C2587D2AE64AA15ECF6F7BA45.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/176607ea-add7-4ca5-8f2d-da8b791a3b42/0/F95181B95098159C2587D2AE64AA15ECF6F7BA45.mft
Manifest number: EA
Signing time: Sat 24 Oct 2026 10:11:43 +0000
Manifest this update: Sat 24 Oct 2026 10:06:43 +0000
Manifest next update: Sun 25 Oct 2026 13:49:43 +0000
Files and hashes: 1: 3130332e3230332e3233322e302f32342d3234203d3e20313531363030.roa (hash: IGQZppCH5Ww/fn6QSsHdhxefkfkyI2QhhtmZkcnBVVk=)
2: 3130332e3230332e3233322e302f32332d3233203d3e20313531363030.roa (hash: QrZG0rd0H2oMRYUrnP7wml3+LX+uV/9SDTxjs0PrJoU=)
3: 323030313a6466333a643663303a3a2f34382d3438203d3e20313531363030.roa (hash: pgEEArXd9XP8zXa/DdMQKaPdRhF2qiIImHSr7qGevFs=)
4: F95181B95098159C2587D2AE64AA15ECF6F7BA45.crl (hash: Ssf5GM2QW0rjSZeCeNUKK49pwP7+nBnbBtLaM0yc7Jg=)
5: 3130332e3230332e3233332e302f32342d3234203d3e20313531363030.roa (hash: z7iqZjlXVRMDIQEXZKf98grHsnfTgjJWLqwQCjq3co8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/176607ea-add7-4ca5-8f2d-da8b791a3b42/0/F95181B95098159C2587D2AE64AA15ECF6F7BA45.crl
rsync://rpki-rsync.idnic.net/repo/176607ea-add7-4ca5-8f2d-da8b791a3b42/0/F95181B95098159C2587D2AE64AA15ECF6F7BA45.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F95181B95098159C2587D2AE64AA15ECF6F7BA45.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Oct 2026 13:49:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:b9:4a:a1:cc:71:ad:37:90:d3:35:4c:5f:ff:05:1b:35:77:74:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F95181B95098159C2587D2AE64AA15ECF6F7BA45
Validity
Not Before: Oct 24 10:06:43 2026 GMT
Not After : Oct 25 13:49:43 2026 GMT
Subject: CN=8BEBF9A94D2A3A0801C895FD473C592708AAE43D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:16:40:49:7d:51:73:c4:dc:3c:cb:16:c7:cd:
b3:15:f4:3f:a4:6e:2a:59:b4:52:98:c6:07:dc:7f:
f5:10:66:9b:15:1c:25:5f:fb:63:9c:4b:86:8d:d7:
c3:ae:f1:30:82:62:04:52:ba:0e:f2:10:21:20:1c:
a1:dd:b4:59:49:54:cd:89:02:98:d3:26:c5:f4:16:
77:93:4c:e1:3f:92:82:a0:e2:79:d8:9d:4a:c8:ac:
f7:ed:3c:f7:44:77:e5:43:d2:b9:bd:c6:56:42:16:
ce:bd:ef:8f:b4:58:8f:ba:51:a6:9b:ec:2e:20:7d:
9a:38:b4:9e:85:98:b7:67:0d:66:63:7d:36:3b:62:
56:78:4d:ce:86:10:e8:2f:ea:0a:28:5e:aa:f4:96:
f4:cc:fc:5c:01:9b:63:3b:b7:14:11:d7:01:eb:12:
c0:89:05:ee:f7:d7:71:72:39:79:22:a7:2e:8e:fe:
0d:0e:84:31:e2:c7:72:13:c7:47:8b:bb:b0:10:01:
c7:84:34:ce:7c:b4:45:0a:5c:95:18:f2:42:22:f1:
c7:ec:28:65:de:0a:eb:fb:92:8c:fb:e9:1b:a9:3d:
55:41:30:d8:9d:1f:f9:de:51:47:03:1a:30:4e:d9:
fc:e5:fd:c7:b1:11:70:bf:1b:21:32:1e:02:14:a5:
15:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:EB:F9:A9:4D:2A:3A:08:01:C8:95:FD:47:3C:59:27:08:AA:E4:3D
X509v3 Authority Key Identifier:
keyid:F9:51:81:B9:50:98:15:9C:25:87:D2:AE:64:AA:15:EC:F6:F7:BA:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/176607ea-add7-4ca5-8f2d-da8b791a3b42/0/F95181B95098159C2587D2AE64AA15ECF6F7BA45.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F95181B95098159C2587D2AE64AA15ECF6F7BA45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/176607ea-add7-4ca5-8f2d-da8b791a3b42/0/F95181B95098159C2587D2AE64AA15ECF6F7BA45.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:89:72:6e:26:b0:40:79:63:b7:9d:c1:32:80:80:44:00:cb:
0e:ef:e5:c5:89:eb:34:bb:e7:aa:1b:7a:11:45:59:76:c4:52:
6e:29:ee:76:32:95:6d:6b:9b:c9:5b:69:80:90:de:7d:c9:a9:
79:42:ef:11:22:34:b2:6f:d5:cd:a2:f5:4a:ae:5b:44:73:95:
f8:c7:d1:0e:76:f8:9c:be:05:9c:9b:f4:e5:2a:54:17:ca:e6:
a7:53:2b:6c:2a:8a:8e:ff:07:25:91:72:38:19:38:b6:3c:41:
06:b2:a2:70:01:b7:91:ab:94:03:d5:e5:74:21:63:59:00:c3:
08:6f:95:cf:dd:63:d7:06:e5:7a:d5:8c:24:0b:b0:fa:34:1f:
5e:fe:ab:35:c2:f7:4e:18:66:cd:41:d7:f6:36:93:d2:37:1e:
a7:fd:47:66:e0:72:b0:35:68:d0:89:08:79:da:28:80:1e:3d:
84:b8:bd:34:b0:ce:c5:80:7d:85:67:59:3d:6a:d7:59:43:e2:
7c:aa:82:ab:9c:aa:f9:a7:01:ed:df:36:81:30:5f:8f:f1:5f:
b9:f1:7a:ce:ca:f8:5f:f3:0e:40:f4:62:d2:c8:85:42:65:4b:
85:90:53:d0:11:91:d7:77:1b:dd:ca:1d:5d:71:93:98:88:60:
5b:86:37:f2
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUVrlKocxxrTeQ0zVMX/8FGzV3dPgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjk1MTgxQjk1MDk4MTU5QzI1ODdEMkFFNjRBQTE1RUNG
NkY3QkE0NTAeFw0yNjEwMjQxMDA2NDNaFw0yNjEwMjUxMzQ5NDNaMDMxMTAvBgNV
BAMTKDhCRUJGOUE5NEQyQTNBMDgwMUM4OTVGRDQ3M0M1OTI3MDhBQUU0M0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyFkBJfVFzxNw8yxbHzbMV9D+k
bipZtFKYxgfcf/UQZpsVHCVf+2OcS4aN18Ou8TCCYgRSug7yECEgHKHdtFlJVM2J
ApjTJsX0FneTTOE/koKg4nnYnUrIrPftPPdEd+VD0rm9xlZCFs6974+0WI+6Uaab
7C4gfZo4tJ6FmLdnDWZjfTY7YlZ4Tc6GEOgv6gooXqr0lvTM/FwBm2M7txQR1wHr
EsCJBe7313FyOXkipy6O/g0OhDHix3ITx0eLu7AQAceENM58tEUKXJUY8kIi8cfs
KGXeCuv7koz76RupPVVBMNidH/neUUcDGjBO2fzl/cexEXC/GyEyHgIUpRU3AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUi+v5qU0qOggByJX9RzxZJwiq5D0wHwYDVR0j
BBgwFoAU+VGBuVCYFZwlh9KuZKoV7Pb3ukUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MTc2NjA3ZWEtYWRkNy00Y2E1LThmMmQtZGE4Yjc5MWEzYjQyLzAvRjk1MTgxQjk1
MDk4MTU5QzI1ODdEMkFFNjRBQTE1RUNGNkY3QkE0NS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9GOTUxODFCOTUwOTgxNTlDMjU4N0QyQUU2NEFBMTVFQ0Y2RjdC
QTQ1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTc2NjA3ZWEtYWRkNy00Y2E1LThm
MmQtZGE4Yjc5MWEzYjQyLzAvRjk1MTgxQjk1MDk4MTU5QzI1ODdEMkFFNjRBQTE1
RUNGNkY3QkE0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHuJcm4msEB5Y7edwTKAgEQAyw7v5cWJ6zS7
56obehFFWXbEUm4p7nYylW1rm8lbaYCQ3n3JqXlC7xEiNLJv1c2i9UquW0RzlfjH
0Q52+Jy+BZyb9OUqVBfK5qdTK2wqio7/ByWRcjgZOLY8QQayonABt5GrlAPV5XQh
Y1kAwwhvlc/dY9cG5XrVjCQLsPo0H17+qzXC904YZs1B1/Y2k9I3Hqf9R2bgcrA1
aNCJCHnaKIAePYS4vTSwzsWAfYVnWT1q11lD4nyqgqucqvmnAe3fNoEwX4/xX7nx
es7K+F/zDkD0YtLIhUJlS4WQU9ARkdd3G93KHV1xk5iIYFuGN/I=
-----END CERTIFICATE-----
Generated at Sun Oct 25 01:27:40 2026 by rpki-client