
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.mft
File: F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.mft (raw, json)
Hash identifier: Ozh9fUQlsxAnZ86iYvBCJK6DopS+2PftGZOiUQUsvGo=
Subject key identifier: 07:FA:1B:2D:F9:75:B5:52:AE:5A:58:EA:21:50:98:A7:20:7E:D7:4E
Authority key identifier: F2:F6:B0:5A:5D:9D:56:C4:7D:15:03:91:1B:2C:C0:F0:4A:BF:A5:5E
Certificate issuer: /CN=F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E
Certificate serial: 2BC78C7F9FEB58727C70CCE9EAA066E2C1058246
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.mft
Manifest number: B9
Signing time: Thu 17 Sep 2026 11:38:03 +0000
Manifest this update: Thu 17 Sep 2026 11:33:03 +0000
Manifest next update: Fri 18 Sep 2026 11:58:03 +0000
Files and hashes: 1: 323430313a663938303a3a2f33322d3332203d3e203633383632.roa (hash: DBKvW9NxqaLL8RHuYyc+b3LPNUUrC7Hwp8Qyq6M4iN0=)
2: 323430313a663938303a643030303a3a2f33362d3336203d3e203633383632.roa (hash: dQ0LTq0QuS8FxqZD/SqB4MlcMzsUyUSMHylX8gcVxQI=)
3: 323430313a663938303a313030303a3a2f33362d3336203d3e203633383632.roa (hash: FyYMB40kDwpjCvWN+TSVBf46H3DhYilIANCtvHDsagI=)
4: 323430313a663938303a333030303a3a2f33362d3336203d3e203633383632.roa (hash: ImkuzGgdshM6qrGvNWPcvXA2U/OhWZTyq0kx6i7Y0vo=)
5: F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.crl (hash: /2K1g8TTdgS3a+5esOIdsioJAPEIe2+tp1fMmIXy0Oo=)
6: 323430313a663938303a353030303a3a2f33362d3336203d3e203633383632.roa (hash: gx4l1RClNVMIicd/OFhkIDB2zi0aLeUfQl4uYWjAKfI=)
7: 323430313a663938303a663030303a3a2f33362d3336203d3e203633383632.roa (hash: e4DmCvjrwHyT7r3+k79q2aF3Szs2g3FJzTfH2C7ERr0=)
8: 3130332e34392e32392e302f32342d3234203d3e203633383632.roa (hash: jymQxIodNK96y3uCKc9HAkpGHF4gay+EOqO/ZQMQfCc=)
9: 3130332e34392e33312e302f32342d3234203d3e203633383632.roa (hash: qdY1qEnMzrOMN6qPgYkSjiZrgYyzVV6DpcwDNKx+tzM=)
10: 323430313a663938303a383030303a3a2f33362d3336203d3e203633383632.roa (hash: xBuVDFknIKocW5PCReZ6kwYrsbAP9yAUXV608PwI7kc=)
11: 3130332e34392e32382e302f32332d3233203d3e203633383632.roa (hash: 00W7ni+GkGcQM0VVSCT1HddEcXw1sIY406K+a7D7bz4=)
12: 3130332e34392e32382e302f32322d3232203d3e203633383632.roa (hash: iI74X3sladmzau4MBHsjwwPESmiR9DW2VEnZxuUovw4=)
13: 323430313a663938303a633030303a3a2f33362d3336203d3e203633383632.roa (hash: 9owZN+SGixSRv5paln4ebqIe0QfV06FiQxst/eJe3DU=)
14: 323430313a663938303a613030303a3a2f33362d3336203d3e203633383632.roa (hash: zHdIBVS0XR/c8iQ3ecyXV97YNC4K/MzxZJeB0bWu9pM=)
15: 323430313a663938303a373030303a3a2f33362d3336203d3e203633383632.roa (hash: rU/VCfOcmioGmVK72orlaC2seYco9bFHexowAk81BN4=)
16: 323430313a663938303a393030303a3a2f33362d3336203d3e203633383632.roa (hash: u5GTISKareluIOuRlJCcyd5lT161QC2aLw11DfKTlGQ=)
17: 323430313a663938303a323030303a3a2f33362d3336203d3e203633383632.roa (hash: m4R9NZih4vbFiWk/oapYLtzrrHyjwTP8TnZiW2TIsYQ=)
18: 323430313a663938303a343030303a3a2f33362d3336203d3e203633383632.roa (hash: FmE6EgtaiTdvHmSv4NYOkhmIVErFQ56Arw5rq6qu5sc=)
19: 3130332e34392e33302e302f32332d3233203d3e203633383632.roa (hash: XTYnRt9z2ZfmnVz7ZmT7O89jA08YspVmr19Q3ReJvHk=)
20: 323430313a663938303a623030303a3a2f33362d3336203d3e203633383632.roa (hash: bPcyFOp3Vx7C20HhMoZKMLWt5nkpzrt8bNAH4/4hnmA=)
21: 323430313a663938303a363030303a3a2f33362d3336203d3e203633383632.roa (hash: FG4YqxC2Q73IfOAJ8VlqlbH+o++S2tHH9i7KG5m04js=)
22: 323430313a663938303a653030303a3a2f33362d3336203d3e203633383632.roa (hash: 188nUZpWLjC5I5E2PwrEZNz+ZoqJ97KrIMhNsQpTeds=)
23: 323430313a663938303a3a2f33362d3336203d3e203633383632.roa (hash: Yio/Y/6sVq/GkVsFsKOZtlUHd35vO5YLp03zhopVfiI=)
24: 3130332e34392e32382e302f32342d3234203d3e203633383632.roa (hash: 3YXWMM41Pq4tpTkJcAa/g/i/xwLMU1IDNTLSp+AdGWk=)
25: 3130332e34392e33302e302f32342d3234203d3e203633383632.roa (hash: +pjc1foIJ9rbBMQG2IfKQY7Dn9Qqy0Sm/AbZle88apI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.crl
rsync://rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 09:57:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:c7:8c:7f:9f:eb:58:72:7c:70:cc:e9:ea:a0:66:e2:c1:05:82:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E
Validity
Not Before: Sep 17 11:33:03 2026 GMT
Not After : Sep 18 11:58:03 2026 GMT
Subject: CN=07FA1B2DF975B552AE5A58EA215098A7207ED74E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f2:7d:45:8c:c4:5a:fa:c8:43:5c:af:1f:e2:
98:c5:07:d4:ed:3b:b0:b8:78:b7:8b:4b:f4:83:81:
af:73:97:a6:c1:b2:e7:fa:ea:36:89:51:5b:8e:b4:
66:ee:77:96:77:54:fa:53:36:ed:09:96:34:1a:f4:
16:8f:b1:6b:d1:16:60:4a:61:9f:fe:20:11:a2:5d:
f5:66:e2:81:d0:4c:13:c0:7b:23:bb:4b:8b:ec:92:
2c:82:3c:2d:84:c5:f5:28:de:b2:e3:8c:7c:f6:27:
00:00:8f:4f:40:8f:84:77:88:1e:dd:d3:ea:62:e5:
30:8e:9d:d0:21:02:b4:fc:b8:54:d8:32:10:76:f4:
fd:92:7c:75:17:9c:85:b1:84:66:27:46:7b:34:28:
e1:84:25:1f:ce:74:30:16:ff:71:9a:aa:99:0f:dc:
0b:b0:4c:e4:97:8a:c3:de:23:a8:6d:28:5e:6f:8d:
04:90:85:b3:23:9e:cf:8e:09:23:09:3b:8a:2c:e3:
dc:03:28:fc:3e:ba:b1:85:f7:4d:9a:ac:5a:18:2d:
9d:42:37:82:10:85:52:dd:a2:00:c6:14:dc:b6:eb:
e4:70:14:0a:94:a4:62:cb:dc:88:e5:70:d1:5f:e0:
54:bb:4b:5a:2f:d7:32:b6:d5:cb:c0:88:b0:db:5e:
a1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:FA:1B:2D:F9:75:B5:52:AE:5A:58:EA:21:50:98:A7:20:7E:D7:4E
X509v3 Authority Key Identifier:
keyid:F2:F6:B0:5A:5D:9D:56:C4:7D:15:03:91:1B:2C:C0:F0:4A:BF:A5:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:d9:b5:a8:43:11:9f:96:2d:21:c8:b7:e9:d1:cf:8d:d2:b7:
a3:df:87:33:bb:3e:02:f8:77:5a:9a:b1:78:31:1b:4e:e7:c0:
be:01:fb:aa:7d:61:ac:06:3d:cc:05:38:9f:ca:db:35:3a:fb:
7f:31:ad:84:85:4d:0b:cc:9a:37:54:87:db:23:d2:db:cc:92:
b2:82:3d:a3:3b:41:3e:a4:be:d0:2f:ed:1a:b8:3b:d7:a6:9a:
68:b1:4c:21:25:4a:92:95:5f:e6:2e:e8:16:f0:a2:27:26:1f:
b4:80:6d:48:5a:2b:8d:ab:60:75:a1:9a:b2:14:8b:79:96:40:
1a:8b:c5:5c:f4:4b:df:8d:34:45:10:76:33:79:d6:ed:ee:c3:
85:d3:c0:eb:0d:95:a1:0e:9a:a2:e0:83:29:c7:8b:a1:92:4b:
1f:04:c6:b4:d9:2d:7c:7b:cd:3b:c9:21:da:71:da:bf:c0:1b:
d8:ae:b7:36:6d:59:1c:5b:eb:f1:9d:df:aa:87:e5:af:9a:9e:
b4:41:fa:a6:44:f2:de:73:c4:97:eb:85:10:be:e7:a6:27:02:
1d:15:36:27:a6:e4:08:a2:77:03:a3:b5:19:6e:1a:f7:c5:b1:
b8:b2:af:c5:27:fc:c3:b0:9a:30:ac:9a:28:94:2e:cc:4c:9d:
1e:3b:10:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 14:39:32 2026 by rpki-client