
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/A9BFA348A050E46482F4E00C605FF9961247FC64.mft
File: A9BFA348A050E46482F4E00C605FF9961247FC64.mft (raw, json)
Hash identifier: dUeas8DtVP8AlCU+NqceVJAvBx4osZYzXWBaTG6Jfb4=
Subject key identifier: E1:67:94:16:AE:89:89:4A:05:E7:9C:9D:2F:60:BF:1A:CE:6A:AF:36
Authority key identifier: A9:BF:A3:48:A0:50:E4:64:82:F4:E0:0C:60:5F:F9:96:12:47:FC:64
Certificate issuer: /CN=A9BFA348A050E46482F4E00C605FF9961247FC64
Certificate serial: 2373428B0FD73479EBC1B57AF5C9CFEF8783A61F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9BFA348A050E46482F4E00C605FF9961247FC64.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/A9BFA348A050E46482F4E00C605FF9961247FC64.mft
Manifest number: F4
Signing time: Sat 31 Oct 2026 14:25:26 +0000
Manifest this update: Sat 31 Oct 2026 14:20:26 +0000
Manifest next update: Sun 01 Nov 2026 17:39:26 +0000
Files and hashes: 1: 3131312e39322e3136382e302f32342d3234203d3e203233363731.roa (hash: Zs7TRnZe5BNsoAw7Vlg7d8WTD6Yej6D1y1DZK+qwGSo=)
2: 3131312e39322e3137332e302f32342d3234203d3e203233363731.roa (hash: JzeyrcIWczG07/iu68N92WBW54nszZcMxGHdpqBVFgo=)
3: 3131312e39322e3137302e302f32342d3234203d3e203233363731.roa (hash: UwBVAcKHZ4f4hQBOzL0Sd4Fm5LmC4c+ionV2pYmo7/o=)
4: 3131312e39322e3137312e302f32342d3234203d3e203233363731.roa (hash: LSQJykz8Xa8OUBE1CJt+TyLaezRgkEysTciohkEfAhc=)
5: 3131312e39322e3136322e302f32342d3234203d3e203338353036.roa (hash: 2dlHVfZFD/szRhd8hUNYHiAVCewx+xASxFEiirRYGTg=)
6: A9BFA348A050E46482F4E00C605FF9961247FC64.crl (hash: yrH7R4IO3EbW9AAv4IfWkNMO8HZJet1PV1E/DnHhZE4=)
7: 3131312e39322e3137342e302f32342d3234203d3e203233363731.roa (hash: GuV6Rg2wTEoGKg9NRtGF/nlE2uCUCHsreSMW9u/k6bA=)
8: 323430333a623230303a613939633a3a2f34382d3438203d3e203338353036.roa (hash: XAeIzu631fi3CwuOFGNDoY933yMIfsvYuPPKWulTcYM=)
9: 3131312e39322e3136372e302f32342d3234203d3e203233363731.roa (hash: 7eo+DUwzfso/gGHNjcQAtGfgWMCxkON/A6PVQqojzIw=)
10: 3131312e39322e3136362e302f32342d3234203d3e203233363731.roa (hash: ZVviuvnexquFN2F18kLTWUBNgOrAM1n1Wa8GZF9ayTM=)
11: 323430333a623230303a3a2f33322d3438203d3e203233363731.roa (hash: 2aLawRYLy3KCYufu2NaJ3HYybrz6F8WpwigQMHaYOu8=)
12: 3131312e39322e3136352e302f32342d3234203d3e203233363731.roa (hash: H7aX+6aTRF1Nj4kzc1OuSxt8gZOvC6ixFR9qSLZfj6Q=)
13: 323430333a623230303a3166653a3a2f34382d3438203d3e203233363731.roa (hash: r6fMNtgJIoHgjV3DFpNsgQ1H8cmQbjMCcbKig24MDXk=)
14: 323430333a623230303a3233303a3a2f34382d3438203d3e203233363731.roa (hash: GGTpraPioXOfseSGJKXessD1JJQRRiypizczW1Hzdy0=)
15: 323430333a623230303a3233373a3a2f34382d3438203d3e203233363731.roa (hash: S+jEWzFEnfshlynIM2/L8ivR0r7b8KQ+/HC/tf13JGI=)
16: 3230322e3136392e3232342e302f32302d3234203d3e203233363731.roa (hash: 4ByDuJtt3A8/OMYgUMLRW5zT+7DYjf2+SVe78YDt8J8=)
17: 3131312e39322e3136342e302f32342d3234203d3e203233363731.roa (hash: wNQ3Qkv9biOpVvnJgROiOoJs/1gZSgV49b5TXX2+3Z4=)
18: 3131312e39322e3137342e302f32332d3234203d3e203233363731.roa (hash: w12lGkVliS3y+76XSl6gzHQHimzilNFu+hS9Qt8ntF0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/A9BFA348A050E46482F4E00C605FF9961247FC64.crl
rsync://rpki-rsync.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/A9BFA348A050E46482F4E00C605FF9961247FC64.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9BFA348A050E46482F4E00C605FF9961247FC64.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Nov 2026 17:39:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:73:42:8b:0f:d7:34:79:eb:c1:b5:7a:f5:c9:cf:ef:87:83:a6:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9BFA348A050E46482F4E00C605FF9961247FC64
Validity
Not Before: Oct 31 14:20:26 2026 GMT
Not After : Nov 1 17:39:26 2026 GMT
Subject: CN=E1679416AE89894A05E79C9D2F60BF1ACE6AAF36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:41:4c:f5:f8:81:ca:81:15:4a:29:44:da:0f:
75:c8:04:22:4c:de:98:60:5c:26:37:4d:7f:80:0b:
17:9d:0a:b3:8e:48:5f:49:a2:92:6b:6c:68:9d:f7:
ee:b8:a3:d8:14:75:f4:f0:f2:65:f1:35:7b:c3:36:
52:fc:18:74:22:c3:d9:2b:70:53:80:3a:e9:a8:09:
5c:42:81:02:73:44:74:17:7f:1c:81:2b:90:96:58:
0b:b8:8b:a0:fe:7a:c9:20:35:d8:e6:99:fd:3e:0a:
d2:fb:5f:ba:3c:0e:ff:4d:f5:f9:7e:f0:8c:8c:ac:
8b:63:45:9f:e4:b0:4b:62:e9:f5:b2:e7:d2:e7:44:
62:c4:9d:9d:a6:45:bc:04:66:0c:a4:70:bc:51:e9:
76:b6:41:b2:fc:53:cb:d9:7e:d6:ea:3a:30:77:85:
1e:8b:f6:22:0d:4f:ea:84:52:81:75:da:80:c1:f6:
d7:1c:d7:5b:56:87:2e:93:7f:7f:30:ad:a4:09:a3:
e8:86:56:33:a5:cf:12:62:c4:99:9f:91:25:5f:db:
60:f4:01:88:ed:7d:7d:5f:73:e2:39:11:8f:c5:80:
ff:ab:52:6b:89:74:d5:3f:de:0a:9b:bf:e7:c7:71:
7b:bf:07:85:41:ee:30:89:87:2f:2b:04:06:35:58:
7f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:67:94:16:AE:89:89:4A:05:E7:9C:9D:2F:60:BF:1A:CE:6A:AF:36
X509v3 Authority Key Identifier:
keyid:A9:BF:A3:48:A0:50:E4:64:82:F4:E0:0C:60:5F:F9:96:12:47:FC:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/A9BFA348A050E46482F4E00C605FF9961247FC64.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9BFA348A050E46482F4E00C605FF9961247FC64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/A9BFA348A050E46482F4E00C605FF9961247FC64.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:4d:75:63:71:0b:38:e6:38:a7:89:69:88:bf:eb:71:0f:92:
c8:f2:58:d0:e5:0a:b8:7a:80:80:25:5f:29:34:ff:5a:e4:9a:
7b:c7:8f:9e:52:49:ba:04:2a:4d:2a:bd:2c:69:98:69:f3:63:
29:a8:c0:ba:8c:c9:40:92:04:2f:7e:aa:cc:5c:38:19:4c:d1:
94:f2:eb:b0:2c:d1:1e:98:27:89:13:65:ca:9a:2c:cc:ca:fa:
6e:3a:5d:96:73:7a:56:f9:d2:72:62:e4:27:57:94:fe:66:cc:
73:b7:b8:50:00:32:8f:39:89:e8:f9:b1:2e:aa:8a:e0:bb:d3:
01:35:fa:bc:93:a4:9e:32:58:08:6e:c7:05:b8:8f:81:74:ae:
63:fd:bb:8c:80:4c:f8:92:d7:a1:be:46:df:e5:a4:ba:e6:7e:
d0:53:1b:9e:db:c8:46:0b:c0:bb:fb:41:d3:65:ba:69:60:df:
4b:59:d5:14:bd:26:86:34:97:ef:9f:bf:63:80:7f:68:48:9b:
66:8a:b6:c2:89:e4:5a:71:3d:7e:24:6b:fe:7b:44:97:f8:41:
55:b7:68:65:db:ed:a0:04:20:8a:69:77:f2:62:c2:d1:df:41:
dc:b0:99:66:25:74:11:12:22:18:68:d2:56:bf:5f:a6:bd:11:
cf:1a:21:22
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUI3NCiw/XNHnrwbV69cnP74eDph8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTlCRkEzNDhBMDUwRTQ2NDgyRjRFMDBDNjA1RkY5OTYx
MjQ3RkM2NDAeFw0yNjEwMzExNDIwMjZaFw0yNjExMDExNzM5MjZaMDMxMTAvBgNV
BAMTKEUxNjc5NDE2QUU4OTg5NEEwNUU3OUM5RDJGNjBCRjFBQ0U2QUFGMzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvQUz1+IHKgRVKKUTaD3XIBCJM
3phgXCY3TX+ACxedCrOOSF9JopJrbGid9+64o9gUdfTw8mXxNXvDNlL8GHQiw9kr
cFOAOumoCVxCgQJzRHQXfxyBK5CWWAu4i6D+eskgNdjmmf0+CtL7X7o8Dv9N9fl+
8IyMrItjRZ/ksEti6fWy59LnRGLEnZ2mRbwEZgykcLxR6Xa2QbL8U8vZftbqOjB3
hR6L9iINT+qEUoF12oDB9tcc11tWhy6Tf38wraQJo+iGVjOlzxJixJmfkSVf22D0
AYjtfX1fc+I5EY/FgP+rUmuJdNU/3gqbv+fHcXu/B4VB7jCJhy8rBAY1WH/1AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU4WeUFq6JiUoF55ydL2C/Gs5qrzYwHwYDVR0j
BBgwFoAUqb+jSKBQ5GSC9OAMYF/5lhJH/GQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZWQ5YmE5NTMtODQ4OS00NTBlLWJiZGYtNzY0NTcxZmJhY2U3LzAvQTlCRkEzNDhB
MDUwRTQ2NDgyRjRFMDBDNjA1RkY5OTYxMjQ3RkM2NC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9BOUJGQTM0OEEwNTBFNDY0ODJGNEUwMEM2MDVGRjk5NjEyNDdG
QzY0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWQ5YmE5NTMtODQ4OS00NTBlLWJi
ZGYtNzY0NTcxZmJhY2U3LzAvQTlCRkEzNDhBMDUwRTQ2NDgyRjRFMDBDNjA1RkY5
OTYxMjQ3RkM2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEJNdWNxCzjmOKeJaYi/63EPksjyWNDlCrh6
gIAlXyk0/1rkmnvHj55SSboEKk0qvSxpmGnzYymowLqMyUCSBC9+qsxcOBlM0ZTy
67As0R6YJ4kTZcqaLMzK+m46XZZzelb50nJi5CdXlP5mzHO3uFAAMo85iej5sS6q
iuC70wE1+ryTpJ4yWAhuxwW4j4F0rmP9u4yATPiS16G+Rt/lpLrmftBTG57byEYL
wLv7QdNlumlg30tZ1RS9JoY0l++fv2OAf2hIm2aKtsKJ5FpxPX4ka/57RJf4QVW3
aGXb7aAEIIppd/JiwtHfQdywmWYldBESIhho0la/X6a9Ec8aISI=
-----END CERTIFICATE-----
Generated at Sat Oct 31 23:54:16 2026 by rpki-client