
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/F440C463790421765C0B198FBF82B80F70529E23.mft
File: F440C463790421765C0B198FBF82B80F70529E23.mft (raw, json)
Hash identifier: VCRPcQB/VCadN4oeg5iIc89ODp0IoZtQNxeyfm9OQpA=
Subject key identifier: 8D:08:8E:3F:DA:4D:89:65:90:60:23:66:19:F6:77:48:0D:58:91:D2
Authority key identifier: F4:40:C4:63:79:04:21:76:5C:0B:19:8F:BF:82:B8:0F:70:52:9E:23
Certificate issuer: /CN=F440C463790421765C0B198FBF82B80F70529E23
Certificate serial: 4750760E21EC022AE2F81A445480F19D194F7AB6
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F440C463790421765C0B198FBF82B80F70529E23.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/F440C463790421765C0B198FBF82B80F70529E23.mft
Manifest number: EA
Signing time: Sun 25 Oct 2026 11:20:39 +0000
Manifest this update: Sun 25 Oct 2026 11:15:39 +0000
Manifest next update: Mon 26 Oct 2026 13:30:39 +0000
Files and hashes: 1: 323030313a6466303a376334303a3a2f34382d3438203d3e20313437313534.roa (hash: DUNSj4kP6eOZRckNiWJJBeXQEQuZewuUxpFimv6tinc=)
2: F440C463790421765C0B198FBF82B80F70529E23.crl (hash: 6/Iy2YaUaJfdVwpbySR/p2RwQwUG4iuj2Zbgfj6fv8Y=)
3: 3130332e3137362e3232372e302f32342d3234203d3e20313437313534.roa (hash: vIUCd1IemIKCQ+NzE6xQfnpmhwQEajDU6BevZYDhd68=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/F440C463790421765C0B198FBF82B80F70529E23.crl
rsync://rpki-rsync.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/F440C463790421765C0B198FBF82B80F70529E23.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F440C463790421765C0B198FBF82B80F70529E23.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 12:34:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:50:76:0e:21:ec:02:2a:e2:f8:1a:44:54:80:f1:9d:19:4f:7a:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F440C463790421765C0B198FBF82B80F70529E23
Validity
Not Before: Oct 25 11:15:39 2026 GMT
Not After : Oct 26 13:30:39 2026 GMT
Subject: CN=8D088E3FDA4D89659060236619F677480D5891D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:22:9a:c3:81:17:4b:36:b2:66:df:f2:0c:ae:
c5:08:c1:bb:9f:5d:86:4a:0d:2f:54:4a:29:28:e5:
c5:4b:d2:6e:bc:3e:2f:66:7c:d5:6d:66:3f:77:29:
68:f8:02:fe:da:61:ab:02:c2:1d:85:71:2e:41:d4:
13:26:03:f3:3c:34:cf:cf:9a:52:f9:5c:a7:18:70:
9e:ed:35:a2:38:dc:3e:b7:7b:5b:4f:9e:cc:5f:df:
fb:44:5b:5b:dc:77:99:f2:2f:c7:d2:20:d1:a7:3f:
53:2e:ce:f2:4f:20:bc:ac:42:b5:7f:9f:1d:1c:37:
7e:4a:d2:d6:93:fc:ca:a5:5e:3f:8f:cc:55:ac:8e:
88:94:02:b6:0f:ef:c5:36:22:fb:4d:6a:ca:dd:40:
c2:43:88:6d:3e:90:44:97:10:a7:06:11:45:4b:dd:
71:53:2d:cb:0d:b9:16:40:0d:a8:4f:97:f2:fb:f4:
78:46:a6:b1:7c:58:f1:41:93:6a:de:e4:9e:c4:c9:
9a:5e:8c:3e:e7:08:78:34:e4:1a:3a:b3:8a:b7:9b:
c6:6b:e9:fd:f1:c5:a8:61:89:ae:1c:93:06:56:59:
46:79:a8:5b:99:05:6a:ae:41:1f:b5:b1:c2:dc:a6:
4d:aa:3e:f0:c4:de:a3:d1:90:23:2a:47:52:fb:6a:
7a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:08:8E:3F:DA:4D:89:65:90:60:23:66:19:F6:77:48:0D:58:91:D2
X509v3 Authority Key Identifier:
keyid:F4:40:C4:63:79:04:21:76:5C:0B:19:8F:BF:82:B8:0F:70:52:9E:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/F440C463790421765C0B198FBF82B80F70529E23.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F440C463790421765C0B198FBF82B80F70529E23.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/F440C463790421765C0B198FBF82B80F70529E23.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:35:c8:39:12:57:a7:4e:8d:34:d7:73:6b:bc:40:11:9f:5a:
58:43:2b:ce:39:60:79:36:2e:68:3b:5c:21:6c:34:19:c9:41:
33:61:d0:93:17:76:1d:cb:04:c5:f5:c9:70:8f:f4:a8:9c:fb:
15:9c:bc:1a:8a:ca:e3:e0:62:f3:20:80:92:ee:d3:ff:48:1d:
5f:6a:40:0a:ee:22:cb:c8:0a:00:69:00:82:e5:ae:5f:aa:2a:
f3:d5:2e:ba:b4:b9:d1:2d:7b:19:29:7f:70:2e:a2:19:c5:e5:
c2:a9:ea:55:09:35:21:90:a6:4f:41:e0:38:4a:e1:bb:94:97:
df:de:98:ed:c9:40:74:63:42:76:89:15:d2:0d:18:43:a1:00:
0c:d0:74:76:3c:0f:9a:83:09:2a:4c:da:0a:e2:f0:a6:f1:a2:
d4:df:76:73:51:a5:e4:21:09:73:d8:77:d6:53:49:e0:08:c2:
83:59:3e:43:9b:90:d7:db:0a:c0:0d:1b:b3:cb:14:27:98:36:
04:16:33:0f:ac:e8:8c:be:4f:11:97:f2:59:fe:bd:ab:bb:03:
70:b5:d8:2a:1a:55:27:60:b0:6f:51:b1:c4:a2:19:85:07:73:
3b:f0:11:48:52:6e:3c:22:ed:6a:e8:34:98:10:07:85:6a:95:
40:b1:50:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 20:07:46 2026 by rpki-client