
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/F99FBCC0D7C1AA4794D95D70641B9011ABA2979A.mft
File: F99FBCC0D7C1AA4794D95D70641B9011ABA2979A.mft (raw, json)
Hash identifier: eW7ULgOlqMGV4Xs6JCK7VZ0VUXnDpsiX4RcWqdSqytc=
Subject key identifier: AB:6F:B2:B8:F9:D1:8A:E0:69:1D:D8:84:12:13:13:93:45:98:D3:1A
Authority key identifier: F9:9F:BC:C0:D7:C1:AA:47:94:D9:5D:70:64:1B:90:11:AB:A2:97:9A
Certificate issuer: /CN=F99FBCC0D7C1AA4794D95D70641B9011ABA2979A
Certificate serial: 6C2279A2177D45DB61083E2DF06A8B81ECEC3FFD
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F99FBCC0D7C1AA4794D95D70641B9011ABA2979A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/F99FBCC0D7C1AA4794D95D70641B9011ABA2979A.mft
Manifest number: B8
Signing time: Wed 16 Sep 2026 18:37:17 +0000
Manifest this update: Wed 16 Sep 2026 18:32:17 +0000
Manifest next update: Thu 17 Sep 2026 22:03:17 +0000
Files and hashes: 1: 3130332e3133352e32342e302f32332d3234203d3e20313331363939.roa (hash: 07viVR7x7xC+LRLwxX1MyeHpdtbWCRULeR9H9eZeyfE=)
2: F99FBCC0D7C1AA4794D95D70641B9011ABA2979A.crl (hash: //vcgrTiBcOMbba6lcpH6SX6ra4pSw2aByqDXWXSfHQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/F99FBCC0D7C1AA4794D95D70641B9011ABA2979A.crl
rsync://rpki-rsync.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/F99FBCC0D7C1AA4794D95D70641B9011ABA2979A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F99FBCC0D7C1AA4794D95D70641B9011ABA2979A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 22:03:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:22:79:a2:17:7d:45:db:61:08:3e:2d:f0:6a:8b:81:ec:ec:3f:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F99FBCC0D7C1AA4794D95D70641B9011ABA2979A
Validity
Not Before: Sep 16 18:32:17 2026 GMT
Not After : Sep 17 22:03:17 2026 GMT
Subject: CN=AB6FB2B8F9D18AE0691DD884121313934598D31A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3c:ea:4e:44:9e:23:c4:60:ef:bc:e1:7f:47:
9c:28:ae:d8:7b:f4:55:0b:81:ce:98:61:52:38:7b:
d5:e7:e7:f2:a5:d6:b1:fd:2c:f8:94:bb:f2:5a:c0:
35:c5:94:f8:3c:e0:56:13:14:59:3f:68:11:b1:c9:
4f:34:31:99:57:72:5d:6b:a8:f9:d5:54:1c:c5:19:
28:08:ab:da:d4:d3:b7:e1:5d:bc:15:45:18:62:b5:
f2:9f:73:2c:11:55:03:26:d0:20:71:9f:1c:76:2d:
cb:4a:9e:d4:f3:4a:2a:48:11:24:2d:bc:a4:18:6c:
3c:40:48:c4:bf:72:1c:2b:2f:f2:6b:09:76:a4:56:
9e:a9:72:8b:fb:14:4c:36:98:78:50:d5:c8:c8:35:
44:41:df:62:1a:9c:fb:3d:57:35:91:ed:2d:38:53:
3a:c9:f3:a4:03:55:fd:3c:b1:37:1f:9b:0d:27:75:
4f:d8:43:1d:0d:2b:d8:8c:9f:b5:7d:c2:6a:3f:cd:
15:e5:d5:b6:9a:dc:a0:75:db:1c:8f:dc:fe:3e:91:
48:27:bf:34:e8:6d:8b:33:43:08:93:0f:5c:ae:a2:
e1:20:1e:ee:ee:89:a2:ef:96:7e:5e:30:62:41:b4:
56:b8:2d:89:79:77:77:5b:00:c3:95:a9:f6:be:e7:
c2:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:6F:B2:B8:F9:D1:8A:E0:69:1D:D8:84:12:13:13:93:45:98:D3:1A
X509v3 Authority Key Identifier:
keyid:F9:9F:BC:C0:D7:C1:AA:47:94:D9:5D:70:64:1B:90:11:AB:A2:97:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/F99FBCC0D7C1AA4794D95D70641B9011ABA2979A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F99FBCC0D7C1AA4794D95D70641B9011ABA2979A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/F99FBCC0D7C1AA4794D95D70641B9011ABA2979A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:d9:a2:5f:72:2b:87:18:8e:f8:de:94:e9:76:c9:b3:5e:61:
f7:65:1a:4d:65:28:62:ec:d6:b5:fc:1f:6e:fe:f0:46:70:3c:
67:8e:30:0c:3c:27:86:c9:ac:cf:46:f7:01:1a:5f:7f:db:37:
f3:31:34:5d:a8:54:10:1a:45:f3:a3:7d:f7:a0:d7:c5:67:45:
fd:5f:4b:bd:b5:0f:81:6f:52:a1:fd:9c:ef:b0:f6:6f:c2:e9:
6f:91:af:5b:a8:20:3c:d9:1b:98:cc:a3:71:2c:e1:6b:ef:2a:
6b:c9:27:08:1f:80:14:e0:d3:40:ec:33:4c:4d:a3:00:99:cc:
8b:7c:db:c9:e9:da:7b:bd:e8:1a:3d:4a:d9:37:63:7b:b0:49:
6f:50:4d:38:81:34:b3:71:ee:70:42:9e:11:44:2e:99:fd:52:
35:35:01:c5:f9:d0:29:c2:7c:08:0a:99:0a:13:c6:52:f8:5d:
42:56:ac:5d:34:58:7b:ea:ad:5d:54:09:f8:d9:dd:d5:71:ff:
12:a0:f9:47:d1:4d:ee:36:e9:7a:1f:ed:9a:7a:b8:c2:fe:d7:
f0:03:0b:6e:0b:50:95:34:3a:00:36:12:c3:bf:fe:00:5f:73:
c3:7e:fd:ae:28:68:a2:49:44:54:4d:db:42:44:ee:bd:f1:fb:
0a:59:5c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 15:53:51 2026 by rpki-client