
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/489207A82A4F1A3B6758139186A867CE751999B7.mft
File: 489207A82A4F1A3B6758139186A867CE751999B7.mft (raw, json)
Hash identifier: DFUFwGxjzVgaW0PdBDBtxJ7IbaAx1zd9XpPxNj3nd3U=
Subject key identifier: 16:F8:2B:F1:0F:17:0C:96:57:ED:12:D6:BE:4E:DA:F4:7D:63:9B:A3
Authority key identifier: 48:92:07:A8:2A:4F:1A:3B:67:58:13:91:86:A8:67:CE:75:19:99:B7
Certificate issuer: /CN=489207A82A4F1A3B6758139186A867CE751999B7
Certificate serial: 7CF751762D80B6C4C57B87CC12FA62B606F63445
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/489207A82A4F1A3B6758139186A867CE751999B7.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/489207A82A4F1A3B6758139186A867CE751999B7.mft
Manifest number: B9
Signing time: Thu 17 Sep 2026 01:55:58 +0000
Manifest this update: Thu 17 Sep 2026 01:50:58 +0000
Manifest next update: Fri 18 Sep 2026 05:50:58 +0000
Files and hashes: 1: 489207A82A4F1A3B6758139186A867CE751999B7.crl (hash: YCR4MCWj4bXT68U/JT9CgW5aNTSPsOYwdeaDZDcntOc=)
2: 3135372e32302e3231322e302f32332d3234203d3e20313532343135.roa (hash: FB472ElcOvg/ylc+xiayFIvGK9fHP8MxdL79QVbGvdA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/489207A82A4F1A3B6758139186A867CE751999B7.crl
rsync://rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/489207A82A4F1A3B6758139186A867CE751999B7.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/489207A82A4F1A3B6758139186A867CE751999B7.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 05:50:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:f7:51:76:2d:80:b6:c4:c5:7b:87:cc:12:fa:62:b6:06:f6:34:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=489207A82A4F1A3B6758139186A867CE751999B7
Validity
Not Before: Sep 17 01:50:58 2026 GMT
Not After : Sep 18 05:50:58 2026 GMT
Subject: CN=16F82BF10F170C9657ED12D6BE4EDAF47D639BA3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:51:ed:e7:97:65:f8:b5:4b:72:cb:44:93:e0:
6c:37:cd:9b:52:be:71:c2:e8:54:33:9e:a3:c4:b7:
e1:f2:c1:3d:e3:55:b6:a6:14:cb:23:39:b1:88:aa:
f1:87:23:bd:d1:62:79:0c:34:3a:9b:e1:cc:f0:e3:
58:9c:50:2e:e5:02:7a:4f:85:96:9c:e1:76:93:50:
a7:ad:ee:8c:fb:87:40:9d:14:b3:c9:8e:fb:12:68:
67:28:2e:5a:4e:78:25:43:53:b6:17:18:4d:f2:aa:
61:fc:f4:37:09:62:25:aa:ee:3b:cb:90:7a:42:4a:
7b:62:3f:3a:a0:fd:ae:f5:ac:b5:71:e1:12:9d:2b:
66:14:7d:58:6f:87:9e:c9:36:25:60:37:f5:58:56:
89:e0:36:8f:cb:ed:20:6b:49:a8:a2:3a:c3:a7:c2:
a0:00:eb:aa:5d:8f:db:9e:a2:0c:c5:61:52:3b:11:
9b:18:47:f4:33:ae:99:cb:b7:38:6c:d8:0a:93:49:
e8:a6:b9:36:bb:fd:b0:a0:6f:6b:8e:ef:2c:65:e3:
ab:57:09:47:e6:72:35:38:40:28:df:b2:f4:67:a2:
ee:f2:c9:8a:62:35:7a:fe:5a:b6:c0:6b:6a:0d:56:
75:63:b0:c1:04:bd:7e:a7:1e:52:6d:b5:8c:b3:03:
2a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:F8:2B:F1:0F:17:0C:96:57:ED:12:D6:BE:4E:DA:F4:7D:63:9B:A3
X509v3 Authority Key Identifier:
keyid:48:92:07:A8:2A:4F:1A:3B:67:58:13:91:86:A8:67:CE:75:19:99:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/489207A82A4F1A3B6758139186A867CE751999B7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/489207A82A4F1A3B6758139186A867CE751999B7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/489207A82A4F1A3B6758139186A867CE751999B7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:3d:a7:54:ba:fe:49:c9:19:7b:6e:ff:2a:1f:c2:0a:f8:72:
0d:76:47:9e:a7:59:0f:15:a9:d6:d6:c9:33:ec:a2:86:7b:1c:
cf:68:93:4a:f4:3c:78:0e:81:ac:fb:72:58:ea:0b:08:d1:34:
f6:c9:6b:bf:a5:1b:6e:83:d2:ab:75:88:69:15:3b:49:46:dc:
e5:41:a9:21:b4:25:af:de:7d:90:12:96:3b:04:71:35:bb:1d:
bd:3b:b4:14:4b:05:43:17:8c:1c:93:49:07:4b:72:82:26:53:
12:11:d4:9b:a6:1f:b0:94:de:02:e4:29:ec:38:b9:1b:6e:65:
a6:6e:b5:78:8b:8c:f6:9d:83:a3:78:2d:a4:cc:c0:7c:de:02:
ef:77:34:a9:e1:9c:9c:8a:f7:1e:78:41:d6:71:38:ef:3b:ed:
b2:a1:9c:6b:95:0c:c9:b6:00:e2:ed:e3:59:de:95:dc:9b:6c:
1a:0d:f2:2c:ac:d7:f3:16:3e:0d:4b:84:07:8f:75:16:66:81:
4a:d4:93:90:cc:df:69:f8:d6:25:f0:8f:e5:f5:61:72:69:f3:
71:44:7d:88:17:4c:dc:98:16:0d:69:2f:59:56:79:a0:40:ec:
21:15:6f:5a:ee:cf:5f:26:9d:f2:6b:6a:c0:92:d4:47:a0:50:
fa:c8:fd:ca
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUfPdRdi2AtsTFe4fMEvpitgb2NEUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDg5MjA3QTgyQTRGMUEzQjY3NTgxMzkxODZBODY3Q0U3
NTE5OTlCNzAeFw0yNjA5MTcwMTUwNThaFw0yNjA5MTgwNTUwNThaMDMxMTAvBgNV
BAMTKDE2RjgyQkYxMEYxNzBDOTY1N0VEMTJENkJFNEVEQUY0N0Q2MzlCQTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZUe3nl2X4tUtyy0ST4Gw3zZtS
vnHC6FQznqPEt+HywT3jVbamFMsjObGIqvGHI73RYnkMNDqb4czw41icUC7lAnpP
hZac4XaTUKet7oz7h0CdFLPJjvsSaGcoLlpOeCVDU7YXGE3yqmH89DcJYiWq7jvL
kHpCSntiPzqg/a71rLVx4RKdK2YUfVhvh57JNiVgN/VYVongNo/L7SBrSaiiOsOn
wqAA66pdj9ueogzFYVI7EZsYR/QzrpnLtzhs2AqTSeimuTa7/bCgb2uO7yxl46tX
CUfmcjU4QCjfsvRnou7yyYpiNXr+WrbAa2oNVnVjsMEEvX6nHlJttYyzAyojAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUFvgr8Q8XDJZX7RLWvk7a9H1jm6MwHwYDVR0j
BBgwFoAUSJIHqCpPGjtnWBORhqhnznUZmbcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZjNiNDdhYjYtZDFmMS00ZDJlLTljZmMtODA4NGE0YmFjZjBiLzAvNDg5MjA3QTgy
QTRGMUEzQjY3NTgxMzkxODZBODY3Q0U3NTE5OTlCNy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC80ODkyMDdBODJBNEYxQTNCNjc1ODEzOTE4NkE4NjdDRTc1MTk5
OUI3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjNiNDdhYjYtZDFmMS00ZDJlLTlj
ZmMtODA4NGE0YmFjZjBiLzAvNDg5MjA3QTgyQTRGMUEzQjY3NTgxMzkxODZBODY3
Q0U3NTE5OTlCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBACk9p1S6/knJGXtu/yofwgr4cg12R56nWQ8V
qdbWyTPsooZ7HM9ok0r0PHgOgaz7cljqCwjRNPbJa7+lG26D0qt1iGkVO0lG3OVB
qSG0Ja/efZASljsEcTW7Hb07tBRLBUMXjByTSQdLcoImUxIR1JumH7CU3gLkKew4
uRtuZaZutXiLjPadg6N4LaTMwHzeAu93NKnhnJyK9x54QdZxOO877bKhnGuVDMm2
AOLt41neldybbBoN8iys1/MWPg1LhAePdRZmgUrUk5DM32n41iXwj+X1YXJp83FE
fYgXTNyYFg1pL1lWeaBA7CEVb1ruz18mnfJrasCS1EegUPrI/co=
-----END CERTIFICATE-----
Generated at Thu Sep 17 14:41:47 2026 by rpki-client