
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD.mft
File: 9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD.mft (raw, json)
Hash identifier: h4F6whKzIOkKBxeAzFDZa/4c8n5bbjVB+6V4IuA7Z+A=
Subject key identifier: ED:C7:FC:A9:00:FF:DB:E4:58:B2:0F:29:F0:3D:FC:84:D6:80:97:F3
Authority key identifier: 9F:2D:47:C2:7A:04:66:64:7C:9A:8F:AF:24:6A:C8:5A:9F:2B:1F:BD
Certificate issuer: /CN=9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD
Certificate serial: 75B3304F8E532FDA9E9AAE775960FAFDCCDC1120
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD.mft
Manifest number: EA
Signing time: Sat 24 Oct 2026 02:47:35 +0000
Manifest this update: Sat 24 Oct 2026 02:42:35 +0000
Manifest next update: Sun 25 Oct 2026 03:52:35 +0000
Files and hashes: 1: 3130332e3132322e3135322e302f32332d3233203d3e20313430343037.roa (hash: wjQlJjUfkbt1n7Rc6SHSm1K1dY+H6SCMIIZnXPYbFUQ=)
2: 3130332e3132322e3135322e302f32342d3234203d3e20313430343037.roa (hash: 7UHUG49KeSvdqIfX5Q2/sjN4aSqQC/7iFrJSNv+5Ax4=)
3: 3130332e3132322e3135342e302f32332d3233203d3e20313430343037.roa (hash: bTctqXrHoddHLmiHRZEAbvepwDnyNZuBmN3yjSF/QUg=)
4: 323430333a393063303a3a2f33322d3430203d3e20313430343037.roa (hash: Yg7MUDs8e7RtjcON84BP67HQDd4RbJW/QQRbIefF+fk=)
5: 3130332e3132322e3135322e302f32322d3232203d3e20313430343037.roa (hash: eE9KfhHZMD39d40KbY7oSEFpRtTmkSjOZgjX7V3PP3E=)
6: 323430333a393063303a3a2f33322d3332203d3e20313430343037.roa (hash: evwEHBL+Efz58EUm4jU4ct9sLmawRVLDyaUcdYukI+g=)
7: 3130332e3132322e3135352e302f32342d3234203d3e20313430343037.roa (hash: XHc5XJ3BNfkaI/lsgwiIo3VZ/lOhS7oABSPc/TOM6ZY=)
8: 3130332e3132322e3135342e302f32342d3234203d3e20313430343037.roa (hash: 38Xm9PyU4xIsiex90hJwlQrnnXy77AnXzl8H3OHJdtc=)
9: 9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD.crl (hash: fMG7/XZx7W2JUOq5ueYM4Sv8kvs25Pafym6Dfqma+xU=)
10: 3130332e3132322e3135332e302f32342d3234203d3e20313430343037.roa (hash: ueytpOIHoXmrHTRXDms0z+mkyIFFMatKweHFitzqnbY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD.crl
rsync://rpki-rsync.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Oct 2026 03:52:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:b3:30:4f:8e:53:2f:da:9e:9a:ae:77:59:60:fa:fd:cc:dc:11:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD
Validity
Not Before: Oct 24 02:42:35 2026 GMT
Not After : Oct 25 03:52:35 2026 GMT
Subject: CN=EDC7FCA900FFDBE458B20F29F03DFC84D68097F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c3:ae:d4:73:69:9f:b8:95:5d:68:df:bc:c6:
3b:eb:27:a7:8e:3d:a0:c9:7d:aa:08:d8:25:59:0f:
da:8a:2e:94:16:e8:eb:4d:cc:d0:eb:45:b6:a1:dd:
ea:6c:6d:d2:c4:f2:89:78:be:c1:f0:fd:e2:78:fe:
5d:b6:e6:eb:2f:ac:20:4e:c5:e0:b5:5c:fc:1b:30:
3c:e7:2c:1b:b5:e4:6a:86:cc:29:8d:6e:e9:20:56:
50:93:2a:3f:79:ed:79:65:a1:51:7b:81:7c:cf:53:
c8:17:78:fb:a7:c9:86:8c:2b:49:db:dc:88:0d:de:
5d:72:f8:27:84:19:97:46:82:79:2b:1c:f5:c2:b0:
56:48:0a:5f:fa:4e:bc:74:f9:0d:9b:40:71:bd:39:
f1:5f:f1:38:49:db:40:7f:0c:7b:d1:b4:ec:d0:06:
51:a8:10:ab:17:1f:07:b7:c0:31:7e:2b:95:e6:fd:
51:2f:93:9c:02:5c:5e:7c:ad:94:ef:67:b8:ab:f8:
64:1a:8f:59:ff:c9:fa:1d:15:73:a8:81:00:a4:69:
a2:a8:a5:2e:5f:f0:8a:64:71:54:a3:10:46:69:93:
09:90:9b:11:82:4a:f0:d5:c9:e9:05:bb:6e:b1:57:
1c:ce:ab:95:69:9d:48:7e:59:f5:60:b8:81:47:31:
55:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:C7:FC:A9:00:FF:DB:E4:58:B2:0F:29:F0:3D:FC:84:D6:80:97:F3
X509v3 Authority Key Identifier:
keyid:9F:2D:47:C2:7A:04:66:64:7C:9A:8F:AF:24:6A:C8:5A:9F:2B:1F:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:3f:b2:7d:21:2b:20:4e:bc:db:f4:d9:13:07:31:58:53:9e:
77:a8:d1:fa:3c:86:18:51:fd:16:6f:cd:87:c3:40:6b:bf:f2:
0a:61:f2:18:bd:31:b7:72:d2:e5:56:3d:24:99:0a:36:c4:e1:
92:32:71:0d:6d:73:98:29:03:38:ee:43:60:e2:28:7b:38:68:
87:4f:d1:25:3a:9a:3e:a7:ed:ca:b2:96:cb:0c:98:06:b5:36:
81:c7:19:55:f1:da:f5:58:5f:47:34:77:e8:f4:70:4a:27:2a:
56:8a:10:f4:ba:1c:ce:78:77:97:18:f9:d4:7e:13:ab:b0:d9:
04:10:c7:c3:2f:74:2a:42:ff:80:99:04:bf:31:49:96:ab:a3:
fe:14:0b:7b:6d:c9:5a:2d:47:10:2a:b8:8b:dc:cb:dc:d6:91:
50:40:3f:67:36:40:8f:50:75:00:d2:84:82:4d:de:85:af:94:
2f:2e:69:bf:32:69:ef:c4:56:cf:40:f6:30:e1:b3:7f:60:03:
3b:98:e5:fc:5a:7d:25:e5:88:b9:6c:a4:f2:a6:61:7e:7d:68:
76:04:4a:46:b7:2d:82:29:f4:d8:67:a6:28:65:a6:7a:30:9c:
2d:b5:d8:8c:09:94:8d:81:68:05:01:5f:ef:3a:c9:e4:e1:70:
e2:be:2d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:44:41 2026 by rpki-client