
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/F94811DCC5101F1CC6264D691A7E2FEE8D88678A.mft
File: F94811DCC5101F1CC6264D691A7E2FEE8D88678A.mft (raw, json)
Hash identifier: muptuI5C3GLjbwL3JdwdG4cQZUTFXF64YQS3JfTExHc=
Subject key identifier: E9:BB:8B:77:73:76:6C:EF:67:1D:86:CB:85:2A:F7:93:9B:5B:53:C0
Authority key identifier: F9:48:11:DC:C5:10:1F:1C:C6:26:4D:69:1A:7E:2F:EE:8D:88:67:8A
Certificate issuer: /CN=F94811DCC5101F1CC6264D691A7E2FEE8D88678A
Certificate serial: 0F4A7159BE70D026C2AB02DC05E6C19D2B9B9B5B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F94811DCC5101F1CC6264D691A7E2FEE8D88678A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/F94811DCC5101F1CC6264D691A7E2FEE8D88678A.mft
Manifest number: BA
Signing time: Thu 17 Sep 2026 03:02:14 +0000
Manifest this update: Thu 17 Sep 2026 02:57:14 +0000
Manifest next update: Fri 18 Sep 2026 06:51:14 +0000
Files and hashes: 1: 3130332e3134352e3234322e302f32332d3234203d3e20313339343534.roa (hash: 5uk1HERYDmQXBZLbJ/kJf/ZrrSlNSnryrEUcrC7gRb0=)
2: F94811DCC5101F1CC6264D691A7E2FEE8D88678A.crl (hash: be6fvmDxGXCmbT/M4CUsyT8GF4lyd0hCAFtS5YCWSt8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/F94811DCC5101F1CC6264D691A7E2FEE8D88678A.crl
rsync://rpki-rsync.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/F94811DCC5101F1CC6264D691A7E2FEE8D88678A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F94811DCC5101F1CC6264D691A7E2FEE8D88678A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 04:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:4a:71:59:be:70:d0:26:c2:ab:02:dc:05:e6:c1:9d:2b:9b:9b:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F94811DCC5101F1CC6264D691A7E2FEE8D88678A
Validity
Not Before: Sep 17 02:57:14 2026 GMT
Not After : Sep 18 06:51:14 2026 GMT
Subject: CN=E9BB8B7773766CEF671D86CB852AF7939B5B53C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:72:81:33:cc:44:a1:41:6c:41:e0:cf:0e:15:
f8:42:8a:1c:fc:7b:57:d2:28:dc:29:8c:39:9d:cf:
3a:0e:d3:0b:e6:83:32:f1:81:42:8d:64:cb:9a:fc:
e3:08:ff:35:e2:ff:f1:ea:3c:f8:85:53:16:5c:41:
c7:87:cd:a1:fc:90:34:26:31:50:6d:00:11:df:ee:
94:bd:e3:ad:e8:26:a4:2a:9d:28:a4:86:59:cb:7d:
b0:4b:bb:8e:93:54:79:fb:ad:42:67:1f:f3:eb:de:
67:f2:8c:b1:f0:95:3d:1f:69:d9:b9:6f:0a:ef:f9:
dd:74:16:81:08:85:39:4e:93:b3:ad:6d:38:ec:c0:
4c:d3:e5:e1:e3:d9:c2:74:0a:2e:2a:ff:e2:c8:47:
d3:dc:0d:c8:db:be:db:c2:8f:dc:71:af:c3:b2:20:
dc:ce:39:cd:81:17:b0:8c:6c:16:4a:91:5d:9e:a6:
bf:b3:61:a1:62:a5:2d:48:a5:34:a0:eb:42:87:ee:
83:12:53:bc:f2:94:1e:b8:ae:fe:e5:77:db:28:91:
c8:47:c6:b1:b2:75:cc:e0:ba:c5:e6:06:8f:ef:86:
65:39:1c:35:30:2e:8c:fe:5a:7f:99:ff:96:45:bf:
c3:0f:47:6c:f4:ea:df:be:6b:44:db:eb:e7:01:92:
f6:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:BB:8B:77:73:76:6C:EF:67:1D:86:CB:85:2A:F7:93:9B:5B:53:C0
X509v3 Authority Key Identifier:
keyid:F9:48:11:DC:C5:10:1F:1C:C6:26:4D:69:1A:7E:2F:EE:8D:88:67:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/F94811DCC5101F1CC6264D691A7E2FEE8D88678A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F94811DCC5101F1CC6264D691A7E2FEE8D88678A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/F94811DCC5101F1CC6264D691A7E2FEE8D88678A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:7a:5a:18:3c:71:d0:09:37:0c:50:9e:b6:55:67:5c:43:45:
56:74:a7:53:0c:19:a2:97:fa:7a:e2:ae:8f:f7:e5:42:4e:95:
01:a0:11:46:a1:b2:0c:ab:47:62:e1:9e:51:da:eb:87:72:4e:
ac:ce:3a:7f:5f:82:1a:35:6a:73:ba:08:92:c7:91:b9:96:a7:
a2:7a:81:85:30:b4:fc:e6:f4:d6:ab:ae:ee:a2:47:cd:a9:9e:
1a:69:69:4b:b3:b9:ea:b0:db:cc:81:67:ce:f5:2f:8a:b0:74:
1f:85:73:c2:97:f2:51:72:5b:63:e2:ae:41:19:90:95:4c:3f:
ba:a1:b4:38:e0:b9:b5:d2:08:78:b3:23:b0:ca:76:69:b9:07:
44:68:7a:a1:9a:11:df:e3:b6:f6:14:28:c5:c4:01:a5:33:6e:
9c:38:9d:85:30:53:10:36:70:a2:14:38:f6:bb:fc:63:5f:ad:
40:3a:b4:1c:5a:5a:6d:31:ed:71:88:7d:e0:c3:8a:d0:e6:0e:
46:f3:dd:a6:f4:85:a1:5b:72:02:65:15:2f:3c:d2:ba:3f:9c:
57:38:63:5d:75:8b:53:ea:9c:38:7f:06:44:29:12:e1:9e:ec:
18:81:11:7d:70:30:7c:06:e9:74:71:f2:44:70:a5:84:f5:c1:
17:32:46:8e
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUD0pxWb5w0CbCqwLcBebBnSubm1swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjk0ODExRENDNTEwMUYxQ0M2MjY0RDY5MUE3RTJGRUU4
RDg4Njc4QTAeFw0yNjA5MTcwMjU3MTRaFw0yNjA5MTgwNjUxMTRaMDMxMTAvBgNV
BAMTKEU5QkI4Qjc3NzM3NjZDRUY2NzFEODZDQjg1MkFGNzkzOUI1QjUzQzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCFcoEzzEShQWxB4M8OFfhCihz8
e1fSKNwpjDmdzzoO0wvmgzLxgUKNZMua/OMI/zXi//HqPPiFUxZcQceHzaH8kDQm
MVBtABHf7pS9463oJqQqnSikhlnLfbBLu46TVHn7rUJnH/Pr3mfyjLHwlT0fadm5
bwrv+d10FoEIhTlOk7OtbTjswEzT5eHj2cJ0Ci4q/+LIR9PcDcjbvtvCj9xxr8Oy
INzOOc2BF7CMbBZKkV2epr+zYaFipS1IpTSg60KH7oMSU7zylB64rv7ld9sokchH
xrGydczgusXmBo/vhmU5HDUwLoz+Wn+Z/5ZFv8MPR2z06t++a0Tb6+cBkvYJAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU6buLd3N2bO9nHYbLhSr3k5tbU8AwHwYDVR0j
BBgwFoAU+UgR3MUQHxzGJk1pGn4v7o2IZ4owDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZDc1MGE2NTEtMWExYS00NTAxLWE4YmMtOTU5MWUxMTA5YTI3LzAvRjk0ODExREND
NTEwMUYxQ0M2MjY0RDY5MUE3RTJGRUU4RDg4Njc4QS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9GOTQ4MTFEQ0M1MTAxRjFDQzYyNjRENjkxQTdFMkZFRThEODg2
NzhBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDc1MGE2NTEtMWExYS00NTAxLWE4
YmMtOTU5MWUxMTA5YTI3LzAvRjk0ODExRENDNTEwMUYxQ0M2MjY0RDY5MUE3RTJG
RUU4RDg4Njc4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFl6Whg8cdAJNwxQnrZVZ1xDRVZ0p1MMGaKX
+nriro/35UJOlQGgEUahsgyrR2LhnlHa64dyTqzOOn9fgho1anO6CJLHkbmWp6J6
gYUwtPzm9Narru6iR82pnhppaUuzueqw28yBZ871L4qwdB+Fc8KX8lFyW2PirkEZ
kJVMP7qhtDjgubXSCHizI7DKdmm5B0RoeqGaEd/jtvYUKMXEAaUzbpw4nYUwUxA2
cKIUOPa7/GNfrUA6tBxaWm0x7XGIfeDDitDmDkbz3ab0haFbcgJlFS880ro/nFc4
Y111i1PqnDh/BkQpEuGe7BiBEX1wMHwG6XRx8kRwpYT1wRcyRo4=
-----END CERTIFICATE-----
Generated at Thu Sep 17 09:29:59 2026 by rpki-client