
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.mft
File: D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.mft (raw, json)
Hash identifier: A0AAxh1DX1QsQ8AKnIT240c1+ANxU9OxB4cdE4EJsaQ=
Subject key identifier: 5A:14:47:47:0C:56:0D:D9:0B:46:E7:51:5D:DB:B5:1E:C6:4A:3D:67
Authority key identifier: D1:F9:BE:E6:CF:09:00:BE:61:0D:2D:AC:AD:F3:EE:47:13:5C:0F:06
Certificate issuer: /CN=D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06
Certificate serial: 5317C1FC9EC491B4CF4B5BFA76CDE4936925BFC8
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.mft
Manifest number: 9A
Signing time: Tue 25 Aug 2026 22:04:16 +0000
Manifest this update: Tue 25 Aug 2026 21:59:16 +0000
Manifest next update: Thu 27 Aug 2026 00:58:16 +0000
Files and hashes: 1: D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.crl (hash: P8e816a+qPZzb4c/dClAsfKLyOFg5LOw2v7XW9WUYU8=)
2: 3130332e3133392e3137352e302f32342d3234203d3e20313331373435.roa (hash: KRDZJxi0FxgUIEi2fP8SirXZmXhHmW7JJ3jDoLiPW4M=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.crl
rsync://rpki-rsync.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 27 Aug 2026 00:58:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:17:c1:fc:9e:c4:91:b4:cf:4b:5b:fa:76:cd:e4:93:69:25:bf:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06
Validity
Not Before: Aug 25 21:59:16 2026 GMT
Not After : Aug 27 00:58:16 2026 GMT
Subject: CN=5A1447470C560DD90B46E7515DDBB51EC64A3D67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:64:be:95:c4:fd:55:92:9e:e8:b6:3b:37:00:
c9:b8:ee:c1:7d:e5:81:61:86:34:c3:99:80:50:cd:
51:47:fa:53:ca:18:1b:b3:23:f1:8b:8e:17:3c:e3:
c6:6c:fe:8c:77:4f:6b:25:05:94:45:82:fe:b9:0d:
df:e7:b0:04:ae:5c:83:5a:8e:0a:ab:68:8a:d5:25:
1f:4f:46:df:77:27:57:d4:3c:26:b3:a8:45:99:2f:
ab:83:28:9d:06:f2:69:42:02:ff:41:4f:28:89:85:
b3:15:d4:0d:20:c9:e5:46:1a:48:9e:46:99:96:a5:
5b:ed:bd:7f:13:a5:ce:0d:14:c6:a2:27:06:9a:7e:
c2:e1:6b:59:da:d4:f8:ff:12:70:7f:78:ba:2b:39:
a7:4e:55:4e:4b:8c:f5:4c:d9:92:c3:56:91:60:25:
ce:16:8c:10:bd:02:a8:27:6a:bf:7d:6d:28:08:88:
eb:70:2d:59:c4:79:08:b5:05:14:00:8e:45:bb:bf:
4a:b9:0f:c6:fd:be:53:52:f4:48:42:ce:f6:59:ec:
d8:9e:16:38:af:23:8b:53:9e:6c:a2:f7:15:7b:64:
d6:22:1a:9a:50:b8:9a:a7:80:c6:63:4c:16:a7:c8:
2d:07:74:a4:de:ee:6b:b5:94:eb:38:c6:1a:61:49:
a4:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:14:47:47:0C:56:0D:D9:0B:46:E7:51:5D:DB:B5:1E:C6:4A:3D:67
X509v3 Authority Key Identifier:
keyid:D1:F9:BE:E6:CF:09:00:BE:61:0D:2D:AC:AD:F3:EE:47:13:5C:0F:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:f2:a9:0b:a5:2d:3e:cf:c7:98:65:68:74:37:44:32:cc:45:
27:0d:58:5a:a0:9a:a8:71:91:3f:d5:ba:3a:b0:58:d0:ee:e3:
c4:20:f8:01:75:36:6d:ef:54:83:74:7b:4a:df:68:06:94:b0:
67:70:b3:98:9b:fc:45:70:b4:03:be:06:55:31:59:c9:ed:a9:
8b:7f:ab:a9:06:33:a8:8f:97:b1:6e:47:1e:69:c1:4d:b6:f1:
ae:f1:de:fe:df:20:1f:a0:0d:4e:7e:82:a1:2f:26:bb:0a:b2:
a9:24:99:6b:55:46:99:68:07:ed:fc:c3:e9:4e:27:6d:a8:c5:
ed:7a:de:a6:ac:7f:ff:85:9e:7a:33:a7:7a:47:b9:e1:07:a1:
c0:9e:f1:18:2b:96:e0:26:32:19:05:5a:78:d1:77:cc:ba:c3:
01:b9:66:57:39:40:ee:80:a3:63:6e:da:ac:d7:10:0b:b1:17:
d2:35:3c:a7:50:c4:31:d9:87:05:3a:77:cf:04:8a:1f:64:11:
b3:6b:bf:13:75:76:e8:a5:12:a8:11:89:3a:1d:2e:86:07:0d:
99:6d:5c:17:c4:6f:03:fb:9b:91:e4:a3:7d:0a:4e:b6:54:09:
6c:f4:f8:3e:3e:31:15:3b:56:2a:c4:a4:0a:22:fc:0d:be:73:
eb:d4:c0:20
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUUxfB/J7EkbTPS1v6ds3kk2klv8gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDFGOUJFRTZDRjA5MDBCRTYxMEQyREFDQURGM0VFNDcx
MzVDMEYwNjAeFw0yNjA4MjUyMTU5MTZaFw0yNjA4MjcwMDU4MTZaMDMxMTAvBgNV
BAMTKDVBMTQ0NzQ3MEM1NjBERDkwQjQ2RTc1MTVEREJCNTFFQzY0QTNENjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYZL6VxP1Vkp7otjs3AMm47sF9
5YFhhjTDmYBQzVFH+lPKGBuzI/GLjhc848Zs/ox3T2slBZRFgv65Dd/nsASuXINa
jgqraIrVJR9PRt93J1fUPCazqEWZL6uDKJ0G8mlCAv9BTyiJhbMV1A0gyeVGGkie
RpmWpVvtvX8Tpc4NFMaiJwaafsLha1na1Pj/EnB/eLorOadOVU5LjPVM2ZLDVpFg
Jc4WjBC9Aqgnar99bSgIiOtwLVnEeQi1BRQAjkW7v0q5D8b9vlNS9EhCzvZZ7Nie
FjivI4tTnmyi9xV7ZNYiGppQuJqngMZjTBanyC0HdKTe7mu1lOs4xhphSaRzAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUWhRHRwxWDdkLRudRXdu1HsZKPWcwHwYDVR0j
BBgwFoAU0fm+5s8JAL5hDS2srfPuRxNcDwYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MzkwMDIwOGItMzJhYy00YTI2LTlkOTItNjA5YWQ3NjE4M2MxLzAvRDFGOUJFRTZD
RjA5MDBCRTYxMEQyREFDQURGM0VFNDcxMzVDMEYwNi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9EMUY5QkVFNkNGMDkwMEJFNjEwRDJEQUNBREYzRUU0NzEzNUMw
RjA2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzkwMDIwOGItMzJhYy00YTI2LTlk
OTItNjA5YWQ3NjE4M2MxLzAvRDFGOUJFRTZDRjA5MDBCRTYxMEQyREFDQURGM0VF
NDcxMzVDMEYwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHPyqQulLT7Px5hlaHQ3RDLMRScNWFqgmqhx
kT/VujqwWNDu48Qg+AF1Nm3vVIN0e0rfaAaUsGdws5ib/EVwtAO+BlUxWcntqYt/
q6kGM6iPl7FuRx5pwU228a7x3v7fIB+gDU5+gqEvJrsKsqkkmWtVRploB+38w+lO
J22oxe163qasf/+Fnnozp3pHueEHocCe8RgrluAmMhkFWnjRd8y6wwG5Zlc5QO6A
o2Nu2qzXEAuxF9I1PKdQxDHZhwU6d88Eih9kEbNrvxN1duilEqgRiTodLoYHDZlt
XBfEbwP7m5Hko30KTrZUCWz0+D4+MRU7VirEpAoi/A2+c+vUwCA=
-----END CERTIFICATE-----
Generated at Wed Aug 26 16:10:00 2026 by rpki-client