
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.mft
File: 08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.mft (raw, json)
Hash identifier: apR+ntrccHG8mLkzKcqiISSXWSeHHBlqSmZjkhnx76o=
Subject key identifier: AA:ED:83:CF:51:DB:B1:6B:FC:0F:27:CC:89:2E:24:11:8A:51:12:A3
Authority key identifier: 08:15:1F:D6:2F:A1:8C:9E:C2:F5:B9:DB:5D:4A:03:11:DF:50:90:BB
Certificate issuer: /CN=08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB
Certificate serial: 291522A098B5D6EE9CA5CDC3888DBFBB051D15AC
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.mft
Manifest number: B9
Signing time: Thu 17 Sep 2026 01:10:02 +0000
Manifest this update: Thu 17 Sep 2026 01:05:02 +0000
Manifest next update: Fri 18 Sep 2026 03:36:02 +0000
Files and hashes: 1: 3135372e36362e3233382e302f32342d3234203d3e20313532373538.roa (hash: M2ft8YBsrZNHxT1qFC2d2ksNAchdYmEdnx+ruXyh3Bc=)
2: 08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.crl (hash: M6wEVW9CqR8e7GMcNpCHK+WOYVei5MTkepnl0OfH/0s=)
3: 3135372e36362e3233392e302f32342d3234203d3e20313532373538.roa (hash: tmjFjqEkGuahidtuLOdd3vjYKqdvzowGWZPOwb/+IMI=)
4: 3135372e36362e3233382e302f32332d3233203d3e20313532373538.roa (hash: jUIsiSJsjPDf0Krk/AfybK3xD1mWMXMOgk6ke4wG6/A=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.crl
rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 03:36:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:15:22:a0:98:b5:d6:ee:9c:a5:cd:c3:88:8d:bf:bb:05:1d:15:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB
Validity
Not Before: Sep 17 01:05:02 2026 GMT
Not After : Sep 18 03:36:02 2026 GMT
Subject: CN=AAED83CF51DBB16BFC0F27CC892E24118A5112A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:1d:ba:d1:ed:fc:0f:c3:12:ba:3d:52:cf:41:
83:0f:90:b6:68:a4:f2:33:0e:a1:2e:c0:27:b5:37:
b6:c5:a5:bf:42:e4:f4:6a:9e:62:e1:22:99:f9:99:
72:49:d9:84:ba:d3:8a:dc:44:42:94:b9:14:9c:c3:
1c:c2:77:54:50:66:2c:03:7d:13:a1:63:0b:91:7e:
fa:f9:fb:ef:e1:3c:7c:67:8d:e2:42:d3:17:02:27:
8b:d6:6a:97:98:82:b9:a8:8a:b8:a6:cc:12:c8:9c:
e6:49:7a:5d:f7:35:5f:e3:b5:b5:fc:54:2c:01:83:
f1:ce:21:bd:f5:9b:6b:b2:45:08:be:3d:80:a3:d9:
0a:d0:43:96:19:87:3d:8c:16:72:74:6c:b3:3d:04:
71:1d:22:cd:ed:85:de:57:9f:cb:1b:30:13:8c:d0:
cf:16:06:8b:32:7d:b5:16:32:db:0d:f8:1c:65:34:
ce:38:8b:95:a4:c4:48:8c:0a:17:2f:b3:21:9e:f9:
31:92:79:4d:40:6a:ee:dd:73:4c:ce:08:69:50:80:
27:19:a4:65:a2:2b:45:41:31:2a:ba:b2:45:28:81:
39:75:84:be:33:ba:82:3f:0e:4c:ef:62:6f:25:ad:
22:ab:80:44:d1:cd:51:29:77:2d:83:96:d7:15:54:
f4:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:ED:83:CF:51:DB:B1:6B:FC:0F:27:CC:89:2E:24:11:8A:51:12:A3
X509v3 Authority Key Identifier:
keyid:08:15:1F:D6:2F:A1:8C:9E:C2:F5:B9:DB:5D:4A:03:11:DF:50:90:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:57:75:6e:54:e6:43:eb:93:22:e5:c6:b1:b3:67:e1:d4:45:
4e:43:45:d8:7f:ab:6d:47:64:bc:e3:b5:da:fe:23:28:01:4e:
58:86:36:73:4c:cd:0c:d7:aa:d7:69:cf:d0:4a:54:3e:4d:c2:
9a:42:c8:0b:aa:b1:26:3f:7b:52:d8:fe:e0:f8:3a:be:68:63:
96:92:10:0b:c0:c3:57:11:e6:d0:f4:60:58:0c:8a:bf:32:eb:
df:bc:0b:a8:6f:42:41:52:26:b1:41:b8:3a:c2:41:26:a3:89:
22:d7:a1:4f:96:7a:3c:94:c6:04:6c:8c:a1:d8:f6:e8:96:a0:
ca:88:11:36:9e:dd:94:4a:c9:05:b5:26:db:b4:76:22:66:84:
16:39:9a:85:18:48:1f:c6:0a:80:75:61:dc:26:b9:46:d5:b8:
3a:da:18:f2:68:6e:f4:a5:ba:9e:37:d2:7c:cf:53:5b:24:ea:
c9:52:83:1b:34:b9:9d:d2:0e:01:69:51:8d:9c:d9:12:4c:b2:
b1:3e:d5:04:ed:a3:e5:7b:f5:75:64:ec:4d:7c:aa:f1:f6:e1:
85:2a:f6:5b:6d:cf:40:25:e1:71:58:92:11:7f:3d:77:f7:50:
52:09:e5:f4:30:63:de:d5:84:97:29:b3:29:b0:7d:95:90:b7:
4e:b7:ff:34
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUKRUioJi11u6cpc3DiI2/uwUdFawwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDgxNTFGRDYyRkExOEM5RUMyRjVCOURCNUQ0QTAzMTFE
RjUwOTBCQjAeFw0yNjA5MTcwMTA1MDJaFw0yNjA5MTgwMzM2MDJaMDMxMTAvBgNV
BAMTKEFBRUQ4M0NGNTFEQkIxNkJGQzBGMjdDQzg5MkUyNDExOEE1MTEyQTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdHbrR7fwPwxK6PVLPQYMPkLZo
pPIzDqEuwCe1N7bFpb9C5PRqnmLhIpn5mXJJ2YS604rcREKUuRScwxzCd1RQZiwD
fROhYwuRfvr5++/hPHxnjeJC0xcCJ4vWapeYgrmoirimzBLInOZJel33NV/jtbX8
VCwBg/HOIb31m2uyRQi+PYCj2QrQQ5YZhz2MFnJ0bLM9BHEdIs3thd5Xn8sbMBOM
0M8WBosyfbUWMtsN+BxlNM44i5WkxEiMChcvsyGe+TGSeU1Aau7dc0zOCGlQgCcZ
pGWiK0VBMSq6skUogTl1hL4zuoI/DkzvYm8lrSKrgETRzVEpdy2DltcVVPRZAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUqu2Dz1HbsWv8DyfMiS4kEYpREqMwHwYDVR0j
BBgwFoAUCBUf1i+hjJ7C9bnbXUoDEd9QkLswDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZDdkZDI1MTktMzA3OC00N2QzLTllODYtNDhmZDNiZGU3NmM4LzAvMDgxNTFGRDYy
RkExOEM5RUMyRjVCOURCNUQ0QTAzMTFERjUwOTBCQi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC8wODE1MUZENjJGQTE4QzlFQzJGNUI5REI1RDRBMDMxMURGNTA5
MEJCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDdkZDI1MTktMzA3OC00N2QzLTll
ODYtNDhmZDNiZGU3NmM4LzAvMDgxNTFGRDYyRkExOEM5RUMyRjVCOURCNUQ0QTAz
MTFERjUwOTBCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJNXdW5U5kPrkyLlxrGzZ+HURU5DRdh/q21H
ZLzjtdr+IygBTliGNnNMzQzXqtdpz9BKVD5NwppCyAuqsSY/e1LY/uD4Or5oY5aS
EAvAw1cR5tD0YFgMir8y69+8C6hvQkFSJrFBuDrCQSajiSLXoU+WejyUxgRsjKHY
9uiWoMqIETae3ZRKyQW1Jtu0diJmhBY5moUYSB/GCoB1YdwmuUbVuDraGPJobvSl
up430nzPU1sk6slSgxs0uZ3SDgFpUY2c2RJMsrE+1QTto+V79XVk7E18qvH24YUq
9lttz0Al4XFYkhF/PXf3UFIJ5fQwY97VhJcpsymwfZWQt063/zQ=
-----END CERTIFICATE-----
Generated at Thu Sep 17 09:27:47 2026 by rpki-client