
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.mft
File: 12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.mft (raw, json)
Hash identifier: LWPr7BG2FgYN7KERRnLaBIbeC6XpOLr3vZSvnaTVeA8=
Subject key identifier: B9:82:52:57:04:6E:D3:0E:27:31:D9:93:43:E4:D1:3C:A7:C2:1D:A1
Authority key identifier: 12:BD:5F:3F:6C:5A:B1:A9:F4:E3:12:A7:DA:FA:AC:BC:22:22:94:6D
Certificate issuer: /CN=12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D
Certificate serial: 24868FCE8796C88B66CD6D19D4DE4AA5A8BD13C5
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.mft
Manifest number: E9
Signing time: Sat 24 Oct 2026 00:55:12 +0000
Manifest this update: Sat 24 Oct 2026 00:50:12 +0000
Manifest next update: Sun 25 Oct 2026 04:23:12 +0000
Files and hashes: 1: 3230332e39392e3130382e302f32342d3234203d3e203130313337.roa (hash: OU86nZYQrz1f0zZsfAKDY29WgpGVg/0ubhimI1XnObE=)
2: 3230332e39392e3131312e302f32342d3234203d3e203130313337.roa (hash: by6bVuVjvD6SHS/RSc1MKPNjclAKxLlvShxlE0Ivay8=)
3: 12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.crl (hash: 1+Wd+G9wvtrnzY30g2+7WuYu5i222iCWbhi3nLRnwgU=)
4: 3130332e33372e3232372e302f32342d3234203d3e203536323431.roa (hash: Wx7ZMhfu3QmD55ls7OXnHTLI9Lf1rMbERV/S++9hKS0=)
5: 3230332e39392e39372e302f32342d3234203d3e203130313337.roa (hash: iv2uySioSu/LP3pkRp7Yqlhu3HDQ0VTi7eqjw18RcDM=)
6: 3130332e33372e3232362e302f32342d3234203d3e203536323431.roa (hash: 2s3lWabzD50sQ0ixmB15BHbTU/1RTqhE4LdKo/MqXUU=)
7: 3130332e33372e3232352e302f32342d3234203d3e203536323431.roa (hash: M54jxmbu4YqiH5X9dKoh0g3u0CXxxc0mduMC1QC7i/M=)
8: 3230332e39392e3130312e302f32342d3234203d3e203536323431.roa (hash: P7oRDyeMFp3GGVH+xItLcQl5cfAi5+V0YTxFNRF2C0E=)
9: 3230332e39392e39362e302f32342d3234203d3e203536323431.roa (hash: p1nXgf4HFcxW2Y4PUtsAhVWmj9aD2WMQQIgpZQnsekc=)
10: 3130332e33372e3232342e302f32342d3234203d3e203536323431.roa (hash: 5iKsngZjg/l5di0MQ+AlFhBsTwnY2MGxKfhU9yL6oXQ=)
11: 3230332e39392e3130342e302f32342d3234203d3e203130313337.roa (hash: jn+GzuAFdRGnqz/8h2QUcRukZQjtYixsBnGXWuK3nO4=)
12: 3230332e39392e3132332e302f32342d3234203d3e203130313337.roa (hash: U/FMi72YlD8fNIhbb89qQOjcqCNZEMwjeIPmXn3ZWgc=)
13: 3230332e39392e3130322e302f32342d3234203d3e203130313337.roa (hash: MAg0dVjN/VisS1hFmLJD+dd3x6Va1gOOR658nswBpQU=)
14: 3230332e39392e3130332e302f32342d3234203d3e203536323431.roa (hash: rRunzg5grI5Ndu/SnsBkpVbfTxQjQL07FKaDwNl7X7E=)
15: 3230332e39392e3130302e302f32342d3234203d3e203130313337.roa (hash: vuwCjebAC0K8psv6+IDrny1yHZ/N79DOq7lCZjfajGI=)
16: 3230332e39392e3131322e302f32342d3234203d3e203536323431.roa (hash: yNSswNu7I5mxAU9hq/xHGawbAp2gMK9dl+S56V1qrxg=)
17: 3230332e39392e3131302e302f32342d3234203d3e203130313337.roa (hash: 8vjkp3sLrVBHiAgyH56aiCnbINXIhcUYHhrNLKFnaHI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.crl
rsync://rpki-rsync.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Oct 2026 03:03:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:86:8f:ce:87:96:c8:8b:66:cd:6d:19:d4:de:4a:a5:a8:bd:13:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D
Validity
Not Before: Oct 24 00:50:12 2026 GMT
Not After : Oct 25 04:23:12 2026 GMT
Subject: CN=B9825257046ED30E2731D99343E4D13CA7C21DA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e6:77:8a:9c:3b:6f:7b:b0:66:ac:73:6e:ff:
d5:44:1a:e0:19:71:59:b2:f4:38:8e:60:42:c4:25:
96:88:f6:4f:18:2f:96:76:1f:73:bd:00:c5:12:38:
7d:1f:33:2a:6e:d9:ec:0d:c0:2a:68:b2:f8:fb:6f:
97:74:43:0a:4d:c5:78:b9:0b:23:ad:40:b1:37:f9:
20:4a:1f:0a:b5:9d:32:4e:7f:04:68:8a:5c:75:8b:
c4:16:12:11:a4:6e:1a:6a:72:b6:fe:2e:d8:ff:01:
c9:8d:c7:38:f1:26:a5:e0:12:02:f3:b5:33:34:05:
73:85:d0:95:09:d4:8a:13:bf:75:83:93:c5:36:db:
fc:6a:19:a0:7e:2a:72:a5:9e:05:22:b9:0a:41:fe:
e3:19:2c:b6:41:ed:70:c5:05:63:4e:f8:d1:9f:c1:
c3:0b:af:f4:c6:18:8d:45:46:b6:08:f1:c2:00:78:
78:bf:52:77:76:03:8a:ef:39:f3:96:25:3b:a6:72:
24:eb:db:81:e7:75:76:0c:85:b2:ab:76:d5:ce:82:
c0:8b:f0:b5:30:16:85:29:ee:56:98:42:c8:26:13:
72:ae:7f:d8:aa:94:4f:bc:89:87:d9:c3:92:0b:bb:
f5:bd:ed:18:0b:df:f0:c0:cc:a0:1a:49:2e:34:0b:
f5:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:82:52:57:04:6E:D3:0E:27:31:D9:93:43:E4:D1:3C:A7:C2:1D:A1
X509v3 Authority Key Identifier:
keyid:12:BD:5F:3F:6C:5A:B1:A9:F4:E3:12:A7:DA:FA:AC:BC:22:22:94:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:34:9a:db:a1:99:d8:76:30:c8:96:c5:79:e1:97:5b:2e:6c:
f0:19:17:9c:33:32:f6:04:b4:e2:4f:83:6d:93:d2:12:19:90:
8d:e8:d1:cc:25:33:f2:bf:a4:6d:52:df:60:03:04:a5:67:82:
7b:c7:23:c1:fa:53:89:e5:69:d7:da:1d:ce:03:07:6b:53:71:
08:fb:b4:e1:83:ae:6f:28:2a:bb:fd:6d:7f:b8:5d:36:d1:61:
15:87:c8:5e:89:09:e0:19:e5:e5:a0:b4:3d:24:36:25:fa:22:
2a:92:39:a0:4d:31:14:da:4a:52:f9:09:45:57:b4:eb:a5:74:
c3:8e:d8:f2:9a:b5:bc:0f:f6:ea:0a:6e:a5:22:fd:21:0e:9a:
11:bd:c9:84:05:18:7d:2d:01:5e:eb:0d:aa:16:90:15:97:39:
f0:fd:f7:83:8c:dc:1b:0f:76:40:4c:74:7e:e9:f0:4a:b8:fc:
40:28:00:f3:7a:6d:bc:6f:66:17:06:c3:f7:2d:f0:66:c0:9a:
2a:e3:8f:ca:ce:f8:d6:68:5e:85:7c:d9:3f:36:ef:bc:77:2c:
12:3d:71:df:8c:16:be:5e:79:81:94:5c:0a:38:b3:c4:c3:5b:
fb:2d:38:16:2c:95:7a:2a:22:95:53:8e:98:4a:66:16:75:75:
db:fd:45:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 09:50:31 2026 by rpki-client