
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.mft
File: 906CD1832E095FD864326D9340C3360CE2E04D88.mft (raw, json)
Hash identifier: 8AiPo+McKIsawBu4uLXB2AELgPy5JiQaqlx0SPnBVK8=
Subject key identifier: 2F:65:2F:52:1F:FB:2E:4A:3E:46:5B:2B:BC:79:9A:CA:6A:AD:27:0D
Authority key identifier: 90:6C:D1:83:2E:09:5F:D8:64:32:6D:93:40:C3:36:0C:E2:E0:4D:88
Certificate issuer: /CN=906CD1832E095FD864326D9340C3360CE2E04D88
Certificate serial: 0DA1E6A730908AF19D6D270932E6335C007F05CB
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.mft
Manifest number: B9
Signing time: Thu 17 Sep 2026 10:00:59 +0000
Manifest this update: Thu 17 Sep 2026 09:55:59 +0000
Manifest next update: Fri 18 Sep 2026 13:02:59 +0000
Files and hashes: 1: 3138322e34382e3136322e302f32342d3234203d3e203436303330.roa (hash: ZqAYiu/koAeNsoyjhjEI/IMs3ALOlSSQoYQ1BRd+P1g=)
2: 3138322e34382e3138322e302f32342d3234203d3e203436303330.roa (hash: /3/1RjKyrZlHVoTiW/tcRKdAaD1qr1a2KPJUdaqHdzc=)
3: 3138322e34382e3138362e302f32342d3234203d3e203436303330.roa (hash: 0jFA4bTcIReYiFePWq4UpaLmoZT+NXzEuKJPz4tjPhs=)
4: 3131362e3231322e37372e302f32342d3234203d3e203436303330.roa (hash: F6CH1xWOW04b9AWH9hOzpC9sPtP3FUKuSlUMhrOcMFU=)
5: 3138322e34382e3138302e302f32342d3234203d3e203436303330.roa (hash: hj8RfWuHMvR3IOUvRxyV2D2ELgKW3xEoS/ad7SVLqpU=)
6: 3138322e34382e3136342e302f32342d3234203d3e203436303330.roa (hash: ZoVbl1Ej5vOkXGYFcM3GgFWF5vBfmm2YepIHJBqDbQM=)
7: 3138322e34382e3137352e302f32342d3234203d3e203436303330.roa (hash: 5T8Tor9uEyt7xupZTf9YjNdQa3WiJhFlyyfkYzVReeM=)
8: 3138322e34382e3136382e302f32342d3234203d3e203436303330.roa (hash: zas81XYAzKm/epSWBwoKOUmYW9ltga5JFRl4SlgFNYQ=)
9: 3138322e34382e3138312e302f32342d3234203d3e203436303330.roa (hash: 2Ix9NBX4ryTwqueIaz6deDkrg5ibNpli+8/f+eL7h/o=)
10: 3131362e3231322e37362e302f32342d3234203d3e203436303330.roa (hash: J+EGvFPD67LFXGQZEHfVWDkOrWmqXhH9UPZC8CcEyic=)
11: 3138322e34382e3138392e302f32342d3234203d3e203436303330.roa (hash: JelzHvBp0OxgIxm8Nd0pErRqQIE2QVfU6EWcp42vk6c=)
12: 3138322e34382e3138382e302f32342d3234203d3e203436303330.roa (hash: CTAc5TKDYG8jWJrPFMAEsp+Pffmom314/f31IgCyWSY=)
13: 3138322e34382e3136392e302f32342d3234203d3e203436303330.roa (hash: 4YrgDfVD0BXsVITQ1qM6LdwihWuqC7JjlQdVH1myE2c=)
14: 3138322e34382e3137362e302f32342d3234203d3e203436303330.roa (hash: 4anjPKb7dXOuM/Ubgl9czTBsQlokGVQ9YcUxyhwp+mc=)
15: 906CD1832E095FD864326D9340C3360CE2E04D88.crl (hash: s6ynxorvoz7gJYINQqFB+QRx+lsMc5rLzoduTcAzJaU=)
16: 3138322e34382e3136302e302f32342d3234203d3e203436303330.roa (hash: hDks4xSZEu4ylfv9eeFQE9ITujGlv6mJTmcyl6KcPEA=)
17: 3138322e34382e3136352e302f32342d3234203d3e203436303330.roa (hash: Ztfsn5PM55Asy7cf5oKAtrKPTWkPp+IkS2IEf6RTR1I=)
18: 3138322e34382e3136372e302f32342d3234203d3e203436303330.roa (hash: d6Y5uYZP91y+eB3UDXZIOMOBcAWU0tFndBdXQKLT93k=)
19: 3131362e3231322e37332e302f32342d3234203d3e203436303330.roa (hash: IJ1gl0sL1RWrdcu45xJfEOPZ3S24w9hNHw27+5W3EfU=)
20: 3138322e34382e3137342e302f32342d3234203d3e203436303330.roa (hash: 9EIhETWWjW1dZSmzJuION9agY2xrl3P3+FsQS+Eeaz0=)
21: 3138322e34382e3137332e302f32342d3234203d3e203436303330.roa (hash: Ng7waYdDe1Dfj8ZChcOrErxA2un9U810Hwr4zNlkzaw=)
22: 3138322e34382e3137322e302f32342d3234203d3e203436303330.roa (hash: Yai10k7mfc36oSbam/+tt3MhIgvsdyGdsbNufFy+++s=)
23: 3138322e34382e3137372e302f32342d3234203d3e203436303330.roa (hash: AB/+vqxGjG+WUGNrWInFpg+QqvDIp89T4SFZCCScCf4=)
24: 3138322e34382e3137392e302f32342d3234203d3e203436303330.roa (hash: tPLdls9+EYZXd6ZrhIRMSY3IobhJMxdyCJJTVoTUXQ8=)
25: 3131362e3231322e37322e302f32312d3234203d3e203436303330.roa (hash: 58v6IS1MSPKg2yYeVDyyuTvIzqpTnW0JbX79eRAkar4=)
26: 3138322e34382e3137312e302f32342d3234203d3e203436303330.roa (hash: nIA/3S+EQWlw4ZuLmZhS5zgcudA5d4PuWSKtEk22u0A=)
27: 3138322e34382e3136332e302f32342d3234203d3e203436303330.roa (hash: ewmkkTzxhOGyo6MzFFyyoH5/Y+VapDFv9s96w13qA+g=)
28: 3138322e34382e3136302e302f31392d3234203d3e203436303330.roa (hash: o9EKVmFR1SvOj9uTbB2OlxRWlCxTxBe1nFco2QLJ8gE=)
29: 3138322e34382e3137382e302f32342d3234203d3e203436303330.roa (hash: 18ON4ArCTP+lfrAOcIUbJ7NgSJlxjIjAeKAx8615vRA=)
30: 3138322e34382e3138352e302f32342d3234203d3e203436303330.roa (hash: B/kblNkQ3ms1SzQMO/SpWc7KjkRSnbXvWp8KTyp1kwA=)
31: 3131362e3231322e37322e302f32342d3234203d3e203436303330.roa (hash: 1gQP1KipyggAd+ZWxNv0xkFTvLsvr+/k6WShmO+e4Iw=)
32: 3138322e34382e3138342e302f32342d3234203d3e203436303330.roa (hash: DZQzCrIgtUXS6Vb+eF76haovEcz46KiCQaKT5Azbp5Y=)
33: 3138322e34382e3139302e302f32342d3234203d3e203436303330.roa (hash: wwLLX5QwOXj8WIt4dR7Y6UuHuuR7pT2z8l/3xL/x9i0=)
34: 3138322e34382e3137302e302f32342d3234203d3e203436303330.roa (hash: NjGWi/sX/azA4LSsxWgygXlT2qGazE96SDmeU5APEvg=)
35: 3138322e34382e3136362e302f32342d3234203d3e203436303330.roa (hash: 2D0T0jFXIOTwpKsYTX89X6+Gi1/+sOAN5iJ3Wcaskhg=)
36: 3138322e34382e3138372e302f32342d3234203d3e203436303330.roa (hash: 2snhbL2/LyEOsVO40C/SJRnBQy8yVpoiYYd3VX7I0Dk=)
37: 3138322e34382e3138332e302f32342d3234203d3e203436303330.roa (hash: UGbDMfBesxO5/EEF+JrapKZzclHkwuQF79qZ/AxYM8I=)
38: 3138322e34382e3139312e302f32342d3234203d3e203436303330.roa (hash: PCggWZ4S0cmAIvlQ9OKIUJbBVOoSGkwzhD1/wRPVPCQ=)
39: 3131362e3231322e37382e302f32342d3234203d3e203436303330.roa (hash: df8xcJtq0OjCMROhoKXLPGgNOi+tmSvnEinNpF80Ac0=)
40: 3138322e34382e3136312e302f32342d3234203d3e203436303330.roa (hash: aA2PRrfzpM7G6vMr09KAyWMRPmTA4TQcAHLLZIN3rO4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.crl
rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 09:57:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:a1:e6:a7:30:90:8a:f1:9d:6d:27:09:32:e6:33:5c:00:7f:05:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=906CD1832E095FD864326D9340C3360CE2E04D88
Validity
Not Before: Sep 17 09:55:59 2026 GMT
Not After : Sep 18 13:02:59 2026 GMT
Subject: CN=2F652F521FFB2E4A3E465B2BBC799ACA6AAD270D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c5:85:37:29:ad:f9:1b:c8:15:a5:98:24:eb:
7c:15:c9:fc:a8:21:43:54:00:2d:5e:ed:67:a0:3c:
9b:e1:4e:ce:ad:1e:b6:62:56:3d:10:59:34:65:1d:
53:f5:c2:e2:12:65:88:61:7c:0b:26:0d:1c:43:fe:
95:bb:70:3b:7e:4a:73:f1:e6:cf:88:f3:3a:3a:0f:
43:22:89:46:cf:13:88:96:e5:82:50:40:1d:05:32:
e0:a4:cf:f1:13:fe:4e:f5:c8:dd:86:22:6d:2b:9a:
9d:e0:4b:a7:99:eb:36:e2:d0:e3:e7:9f:95:27:fd:
4d:0c:cf:68:f2:30:fa:57:00:92:1c:4c:7f:66:2b:
8d:53:fd:fd:ba:27:84:bb:ac:1c:6b:eb:03:16:59:
2a:99:f2:14:96:be:36:a9:2a:f5:6b:df:d0:2c:cf:
bf:02:f5:3e:73:d9:3a:e1:7b:f9:c8:56:5f:4c:e6:
ae:d2:7e:f4:f4:e6:e2:0b:fc:74:3c:a3:e8:b7:67:
64:2a:ec:5e:bc:d6:ef:08:2e:22:61:43:62:69:35:
58:41:eb:21:03:aa:0a:fb:17:ff:6d:c1:3d:ec:42:
f7:88:6c:48:b7:72:a4:d5:60:eb:7a:fd:9d:22:93:
5d:d4:df:f4:2b:88:a2:67:37:ac:1a:3c:13:89:d0:
ca:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:65:2F:52:1F:FB:2E:4A:3E:46:5B:2B:BC:79:9A:CA:6A:AD:27:0D
X509v3 Authority Key Identifier:
keyid:90:6C:D1:83:2E:09:5F:D8:64:32:6D:93:40:C3:36:0C:E2:E0:4D:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:0a:f0:d1:cd:e9:73:ef:a3:e1:01:5f:98:7c:aa:20:57:ca:
1d:d0:f7:4c:d9:7b:c7:07:6b:ea:03:b7:8d:54:16:d8:35:0a:
e4:72:45:e8:b6:ec:93:e2:b3:7c:b3:db:fc:c6:3a:1c:dc:9e:
b0:a4:bd:d3:89:f5:1e:0c:26:c2:88:ae:11:08:b9:c2:e4:7d:
53:21:d2:b4:23:7b:ce:90:05:bf:2c:8d:cc:79:cb:80:35:f8:
e1:1f:a1:95:ee:bf:b0:7e:ef:c5:25:02:8a:61:af:86:63:59:
f7:77:2e:d0:85:c0:00:46:52:dc:e6:7e:41:aa:9d:bb:0f:dd:
ca:c2:81:26:b8:03:fb:2f:38:4b:dd:e6:24:b8:99:8a:74:0b:
ff:80:3c:ac:3c:7c:30:f3:fa:5a:3a:2f:28:0b:1f:6b:93:c2:
d3:06:72:64:35:78:52:a2:b3:43:47:82:c4:d6:b6:d7:90:07:
6b:ea:60:38:a5:95:1c:23:ff:10:00:b5:58:7c:c5:dd:a2:31:
15:82:c7:7f:a3:b6:4a:84:30:44:b9:ef:5f:e7:83:08:b8:3b:
1a:58:b9:91:86:9a:bc:ce:df:26:76:59:a3:2f:f4:d8:39:85:
23:a4:17:6b:c3:23:53:a8:55:34:2a:23:04:33:d2:5a:83:b3:
e4:84:f7:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 14:39:43 2026 by rpki-client