
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/19F593FB6094A53D2F567FA23EBD00CEE6BD7F63.mft
File: 19F593FB6094A53D2F567FA23EBD00CEE6BD7F63.mft (raw, json)
Hash identifier: hqPBn4F7TYlqPjK9pLC7AyNIdVrTYE592o94DZBY0EU=
Subject key identifier: F9:A2:22:D0:B2:63:60:49:7E:E7:8A:4D:42:15:34:A1:CA:87:8D:47
Authority key identifier: 19:F5:93:FB:60:94:A5:3D:2F:56:7F:A2:3E:BD:00:CE:E6:BD:7F:63
Certificate issuer: /CN=19F593FB6094A53D2F567FA23EBD00CEE6BD7F63
Certificate serial: 1F977F460470428E11B99A652AF62D2146F751DF
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19F593FB6094A53D2F567FA23EBD00CEE6BD7F63.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/19F593FB6094A53D2F567FA23EBD00CEE6BD7F63.mft
Manifest number: EF
Signing time: Wed 28 Oct 2026 12:25:36 +0000
Manifest this update: Wed 28 Oct 2026 12:20:36 +0000
Manifest next update: Thu 29 Oct 2026 12:48:36 +0000
Files and hashes: 1: 3135302e3132392e35362e302f32322d3234203d3e203435323837.roa (hash: wbDwlUlyFrGZQKl0gY5JTi07kDW91OicmcdUSy58sFE=)
2: 3130332e33312e3131302e302f32332d3234203d3e203435323837.roa (hash: 35qG3cZsKTQr56CXE5ASWwkKMND8Y/J6/M9bysYMszM=)
3: 3137352e3137362e3136302e302f32312d3234203d3e203435323837.roa (hash: htKH4YuWIU36Hbp8yo72kjRU4hOcfi7XM5LsdSWMbvg=)
4: 3230332e39392e3133302e302f32332d3234203d3e203435323837.roa (hash: 6osBaVpCEcyr4sPNLrXGO9OphhAYx5PHHXLqmm632lw=)
5: 19F593FB6094A53D2F567FA23EBD00CEE6BD7F63.crl (hash: HM77JYZFcpv9bopMROHuIsW1ManEd4K6ciU3sviVwUo=)
6: 3130332e32332e3230302e302f32322d3234203d3e203435323837.roa (hash: 8HqeGnG6uWiDbhlaJ6tLdsHXeZ7XmeYJjtOP51aVtq4=)
7: 3230322e35362e3136302e302f32322d3234203d3e203435323837.roa (hash: QiGX1QkZSjLaMXHZar4XrbmTjiSd8XSa/Ltq8nabR1Q=)
8: 323430363a323430303a3a2f33322d3438203d3e203435323837.roa (hash: wUweDGGeMnbb7IWcYNeBY1oGGX+HDZ7VecKq2px9zPo=)
9: 3131312e36382e3131322e302f32302d3234203d3e203435323837.roa (hash: HunPJtEqs/fqqsfQUOtU9B9wzUHewY8exb3L7KPploo=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/19F593FB6094A53D2F567FA23EBD00CEE6BD7F63.crl
rsync://rpki-rsync.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/19F593FB6094A53D2F567FA23EBD00CEE6BD7F63.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19F593FB6094A53D2F567FA23EBD00CEE6BD7F63.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 29 Oct 2026 07:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:97:7f:46:04:70:42:8e:11:b9:9a:65:2a:f6:2d:21:46:f7:51:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19F593FB6094A53D2F567FA23EBD00CEE6BD7F63
Validity
Not Before: Oct 28 12:20:36 2026 GMT
Not After : Oct 29 12:48:36 2026 GMT
Subject: CN=F9A222D0B26360497EE78A4D421534A1CA878D47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0f:f0:94:80:a8:ac:d5:40:c2:20:74:62:19:
05:3e:57:3d:34:bb:4e:9c:8c:99:78:24:45:b9:a7:
d7:ff:e9:46:2c:cf:86:f8:5d:9d:c5:76:8d:7d:83:
f3:01:1b:9c:9f:dc:ee:4b:dc:ae:e4:97:a8:c8:75:
a5:b0:2c:b7:ed:b4:64:6e:6c:f5:0d:5e:44:81:6e:
1a:8c:21:f3:c3:88:06:bb:50:4d:0b:85:2e:36:e8:
01:e9:93:5d:40:af:af:2b:db:ed:5f:3d:50:23:9f:
6b:92:e5:35:4e:2d:bb:3a:14:db:66:ba:f8:9d:73:
77:32:e8:5a:08:37:3e:e5:66:a4:4e:0e:e3:31:97:
a0:ec:56:e2:ef:3a:8a:2d:4c:3a:5d:17:a4:46:53:
85:16:32:71:9c:64:5d:a6:e0:03:3b:e0:ca:5e:9c:
d2:51:51:db:b1:1e:5d:a1:a2:f3:fa:e0:fb:0f:0e:
8d:ff:2e:d2:14:4e:b9:12:40:62:e1:06:48:aa:fd:
70:e1:0e:71:01:ed:ba:8b:6a:59:46:6d:b5:6c:d7:
36:d2:aa:84:97:b7:13:be:4a:84:67:67:84:5d:02:
5c:58:b7:54:d3:ab:03:79:aa:65:cf:c9:75:f0:cf:
8c:bc:4d:44:de:61:40:13:53:0f:16:d4:0f:38:de:
44:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:A2:22:D0:B2:63:60:49:7E:E7:8A:4D:42:15:34:A1:CA:87:8D:47
X509v3 Authority Key Identifier:
keyid:19:F5:93:FB:60:94:A5:3D:2F:56:7F:A2:3E:BD:00:CE:E6:BD:7F:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/19F593FB6094A53D2F567FA23EBD00CEE6BD7F63.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19F593FB6094A53D2F567FA23EBD00CEE6BD7F63.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/19F593FB6094A53D2F567FA23EBD00CEE6BD7F63.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:ce:28:ff:8c:5f:c3:1b:55:61:b7:85:41:e4:81:b9:b5:2f:
54:2d:2e:4d:2b:e3:e0:08:39:84:f2:51:95:ba:83:b7:ad:42:
fb:a9:2e:bb:53:bf:a4:a6:54:1e:b3:0a:bd:b8:12:80:a1:21:
fc:64:d3:f6:c4:d9:97:70:33:82:eb:96:c4:d5:fd:e7:9c:78:
c5:cc:f6:6c:45:db:5f:57:d3:34:1f:78:84:72:49:e5:91:9c:
8b:66:8d:43:19:dc:7a:4c:c9:a0:af:59:ab:81:0a:e2:55:63:
db:67:0d:87:a7:3d:69:d6:4e:5a:fa:64:14:8b:12:a0:f4:87:
ca:cf:b0:5e:ec:db:1b:64:56:fe:8e:22:32:28:30:97:92:d7:
c4:04:eb:48:1f:cd:7f:b5:bf:1b:19:4b:4b:e8:b0:3d:66:f2:
56:87:e9:5a:30:8c:75:16:ba:b9:2a:97:19:fe:87:7b:9e:5d:
98:0d:20:38:35:91:85:bb:21:71:b4:ab:8a:ce:d6:c4:04:3d:
a3:46:38:33:12:c1:dd:5d:91:5c:45:50:7c:e9:55:11:6e:33:
9b:31:f6:a1:4b:da:10:29:9d:5e:e0:01:52:2f:d4:01:c1:04:
01:e2:9c:ff:cf:3e:64:db:b4:56:3e:6e:80:3e:4d:54:3a:e4:
af:c4:41:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 16:32:40 2026 by rpki-client