
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/F04BCF29E8A4983A7C61456338904B1D12249EF1.mft
File: F04BCF29E8A4983A7C61456338904B1D12249EF1.mft (raw, json)
Hash identifier: yEkcwGyCbyOBnj4G0X9TnDYrNzpqFazhCo6llCGibD8=
Subject key identifier: 94:08:4E:6C:92:19:C9:57:58:9D:57:71:51:69:82:54:DF:79:BB:FE
Authority key identifier: F0:4B:CF:29:E8:A4:98:3A:7C:61:45:63:38:90:4B:1D:12:24:9E:F1
Certificate issuer: /CN=F04BCF29E8A4983A7C61456338904B1D12249EF1
Certificate serial: 786EE9134F4D0261F4B2177561AC29EE6CE70E33
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F04BCF29E8A4983A7C61456338904B1D12249EF1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/F04BCF29E8A4983A7C61456338904B1D12249EF1.mft
Manifest number: B9
Signing time: Thu 17 Sep 2026 00:08:42 +0000
Manifest this update: Thu 17 Sep 2026 00:03:42 +0000
Manifest next update: Fri 18 Sep 2026 01:41:42 +0000
Files and hashes: 1: 3135372e32302e33372e302f32342d3234203d3e20313430343730.roa (hash: LMBHCsJkYSf+3QotxJzINazyD8/H6U50nZHKQJfkTg8=)
2: F04BCF29E8A4983A7C61456338904B1D12249EF1.crl (hash: 8GIsUPr68UXp6BeYMXsi9l+sAuFDDua7mMsKELxvZ0o=)
3: 3135372e32302e33362e302f32332d3233203d3e20313430343730.roa (hash: 0cd+8qm0U1tfI3VsNlW2b6PTClHG9WiUWDTJUpKm65E=)
4: 3135372e32302e33362e302f32342d3234203d3e20313430343730.roa (hash: dsheODTWGHgEtYMTRu3FdjV0KqJJ4H5IlLGKFzm1e00=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/F04BCF29E8A4983A7C61456338904B1D12249EF1.crl
rsync://rpki-rsync.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/F04BCF29E8A4983A7C61456338904B1D12249EF1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F04BCF29E8A4983A7C61456338904B1D12249EF1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 01:41:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:6e:e9:13:4f:4d:02:61:f4:b2:17:75:61:ac:29:ee:6c:e7:0e:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F04BCF29E8A4983A7C61456338904B1D12249EF1
Validity
Not Before: Sep 17 00:03:42 2026 GMT
Not After : Sep 18 01:41:42 2026 GMT
Subject: CN=94084E6C9219C957589D577151698254DF79BBFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:28:93:a2:a0:f2:08:4b:b0:bb:c6:30:93:c4:
30:9f:55:1e:88:f7:ef:66:16:70:71:2a:3a:e5:0c:
3c:f9:d3:40:68:22:18:c4:36:b0:ba:43:0c:5a:57:
07:c8:0e:30:95:c7:aa:61:60:05:cc:75:cd:cb:99:
60:48:0e:f0:86:6b:c6:fd:02:c0:94:07:78:cb:79:
a5:ef:6a:cc:45:19:02:5a:e2:0f:cd:81:ff:17:25:
3b:df:e4:9a:40:9d:11:d3:e7:02:2d:c1:2f:c4:35:
5d:87:41:28:71:d6:3d:cc:e4:70:4a:8c:0d:af:99:
84:c9:c3:26:43:6b:78:51:89:ca:a2:7a:1e:2c:dd:
c9:32:2d:9a:0f:e2:96:ea:f3:41:60:03:d5:f6:a8:
57:7a:a8:11:49:fd:43:9b:dd:ba:83:02:3e:6c:f3:
8a:9f:5d:e5:08:e9:92:4f:75:35:6a:4f:13:ee:48:
97:31:30:c2:0f:84:ff:2f:0d:f6:61:f3:fc:14:c0:
13:fd:55:4d:aa:fc:94:32:dc:8f:10:9d:9e:b1:8b:
61:75:20:44:52:7f:8e:5f:32:c7:e3:d3:e7:91:70:
8e:0f:79:6b:41:ba:02:89:46:e6:31:71:fc:62:45:
bf:36:1f:1b:2a:e2:c6:e5:55:4f:53:f6:1d:96:e2:
0a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:08:4E:6C:92:19:C9:57:58:9D:57:71:51:69:82:54:DF:79:BB:FE
X509v3 Authority Key Identifier:
keyid:F0:4B:CF:29:E8:A4:98:3A:7C:61:45:63:38:90:4B:1D:12:24:9E:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/F04BCF29E8A4983A7C61456338904B1D12249EF1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F04BCF29E8A4983A7C61456338904B1D12249EF1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/F04BCF29E8A4983A7C61456338904B1D12249EF1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:2b:78:0e:05:6d:93:75:18:5c:d2:48:40:b3:d6:87:e7:5c:
e3:bf:43:fa:b7:54:c3:8d:af:86:af:d8:03:b6:3a:17:bf:e6:
04:f2:73:56:e1:bc:00:e2:52:6c:21:98:1d:35:9c:86:bb:88:
21:b5:7c:67:07:fa:ea:19:1b:d9:ff:cb:8f:bb:ad:15:1c:20:
72:24:39:63:14:50:de:db:61:ff:7b:da:bc:20:ee:28:2f:2f:
13:d2:64:62:85:69:89:da:9e:2e:88:3d:b6:61:9d:06:8f:b5:
83:a1:05:f7:c7:74:89:de:a3:6c:6f:f6:9c:94:b5:e0:d8:54:
c9:92:ad:cd:f9:97:92:e5:07:fe:88:96:3a:ef:cc:e8:ad:52:
68:87:c1:fb:67:40:4e:e3:a6:d5:e8:90:b1:6d:b4:6e:2d:d9:
70:ef:72:ad:90:72:d3:37:43:72:2f:0d:47:a0:b6:c8:ac:0c:
da:14:25:ca:00:8e:81:cf:e8:e4:7c:cc:0d:34:c1:56:b0:0b:
cc:6f:81:6f:af:e0:78:b7:fb:cc:a6:eb:ba:b0:02:1f:03:59:
10:7c:10:e1:06:0f:f3:e0:3a:88:c4:d7:6a:6b:97:2b:cb:97:
91:89:e6:9b:19:99:74:c9:72:cb:b6:61:e9:73:e3:f2:e4:8b:
d3:4e:d4:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 11:46:40 2026 by rpki-client