
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/A9DFB6024D05A37CA0C756EC747E898140885BC9.mft
File: A9DFB6024D05A37CA0C756EC747E898140885BC9.mft (raw, json)
Hash identifier: 9KlAD3bR/dYpEfW3zkl88SO2wstm6bNbNpmvSTjyOJ8=
Subject key identifier: 51:36:80:CA:87:5B:77:5F:8D:68:B7:65:DF:9E:22:B8:B3:77:DB:C4
Authority key identifier: A9:DF:B6:02:4D:05:A3:7C:A0:C7:56:EC:74:7E:89:81:40:88:5B:C9
Certificate issuer: /CN=A9DFB6024D05A37CA0C756EC747E898140885BC9
Certificate serial: 54A7A9D93669FC294DB85EE98FEB4EFCDC2F1864
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9DFB6024D05A37CA0C756EC747E898140885BC9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/A9DFB6024D05A37CA0C756EC747E898140885BC9.mft
Manifest number: EF
Signing time: Tue 27 Oct 2026 18:58:38 +0000
Manifest this update: Tue 27 Oct 2026 18:53:38 +0000
Manifest next update: Wed 28 Oct 2026 19:50:38 +0000
Files and hashes: 1: 3131362e31322e34372e302f32342d3234203d3e203338313635.roa (hash: ls6pClLibFG+ZtAvlvA5DPGIjVB65RJG/A/2js2edZI=)
2: 3131342e33302e38392e302f32342d3234203d3e203338313635.roa (hash: maWh9CwQAwSd/hgh31AypikUc85sBDX5Qkb/wXAwqQ4=)
3: 3131342e33302e38382e302f32342d3234203d3e203338313635.roa (hash: TYxvOObRiApVHdygkcJ79px01l2EeTEanmBRk9sEhU8=)
4: 3130332e3234372e31362e302f32332d3234203d3e203338313635.roa (hash: X2L0BGiTvmgLJtgSEYwPB9xF12na1ku6hIINh+wHP14=)
5: 3131362e31322e34352e302f32342d3234203d3e203338313635.roa (hash: /Qbizla9Rd9j7hntYwBfkRjqiwhDVjGQMjdVjta/V4o=)
6: 3131362e31322e34322e302f32342d3234203d3e203338313635.roa (hash: Tzz51V+z7G+M0amuU470kd9KxBTkAYh2VanJBe/CIik=)
7: 3131342e33302e39342e302f32342d3234203d3e203338313635.roa (hash: G8aUIjts1s/SyprhduUQ7undoZSDOgnTsSv1h0ZIPBI=)
8: 323430313a646363303a3a2f33322d3438203d3e203338313635.roa (hash: 2ylo3HpAhVkvHZhTyyQa6+TpBddihUGH17bMztGMO8Y=)
9: 3131342e33302e39312e302f32342d3234203d3e203338313635.roa (hash: hwrp8oltXPCRSuxrHgsojYMMFzDn1UCIz4HCYehypeU=)
10: 3131362e31322e34302e302f32342d3234203d3e203338313635.roa (hash: solCgiJ0IBXmILHhdk+WcwssrUHzmifkTZH0iCFde94=)
11: 3131342e33302e38382e302f32312d3234203d3e203338313635.roa (hash: PbHEb+XaCGRxOonc9+PyBhvmLickz9HVhiTfl0wL8wY=)
12: 3130332e38332e3134312e302f32342d3234203d3e203338313635.roa (hash: caorMzAk2rhKrHkZPEylYGbz3q7q/4kgUFG0ZpSaKuk=)
13: 3131362e31322e34302e302f32312d3234203d3e203338313635.roa (hash: XG2kEfirxjj/sDq/rblsGtFwcedIIKGdVI/XxKks4EQ=)
14: 3131362e31322e34312e302f32342d3234203d3e203338313635.roa (hash: F7W3l45HCPDJENu+RobZMG7HgvBdxexYhGm3GKsDUsc=)
15: 3130332e38332e3134322e302f32342d3234203d3e203338313635.roa (hash: YrZIFaqaTChjnkZ/BX+Yt+LiIgZZAfEd+7+0eXA8anQ=)
16: 3130332e38332e3134302e302f32322d3234203d3e203338313635.roa (hash: Ik3fxLSlXA2Xnh23AevRPdy9KUS+oUVTjYCiGIABhYM=)
17: 3131342e33302e39322e302f32342d3234203d3e203338313635.roa (hash: XxFeX4bK2Dh55oFKthxbGwYO1QPL6JkUjpiac/LGmFc=)
18: 3130332e3234372e31372e302f32342d3234203d3e203338313635.roa (hash: 5amtZ+LM77tqz27nu3gKgm99BvgZZy43q/i93530bY0=)
19: 3130332e38332e3134332e302f32342d3234203d3e203338313635.roa (hash: PzK9iamlsHrrCIK36AFek4huEos9vJO/Mb+qJmCN8TU=)
20: 3130332e3234372e31362e302f32342d3234203d3e203338313635.roa (hash: glySjVWaeYKKJGdVLX98kL01SxrrhC2o5DvZ/OFZzes=)
21: 3131362e31322e34332e302f32342d3234203d3e203338313635.roa (hash: vuNc4l/9yLIs4KyCpx5p6F1jMwXXBMM4BQHYhbheraI=)
22: 3131342e33302e39302e302f32342d3234203d3e203338313635.roa (hash: sDSoeXLG7m9Vd+TPJvOtkj0D0bh9+lF74Y6p0yHJT2w=)
23: A9DFB6024D05A37CA0C756EC747E898140885BC9.crl (hash: wFR896romZUR8BI1Ng7jQpg9J3oynh53Vtq932RFS7Q=)
24: 3131342e33302e39332e302f32342d3234203d3e203338313635.roa (hash: Y4OQkQ+6pCKwFE7J9SktmKY2Oia99e7uSzB1cyzK/sw=)
25: 3131362e31322e34342e302f32342d3234203d3e203338313635.roa (hash: 4eVsgYjQx/GwRQGHLYtsEEdD640KhW1jdNg/AXAmGj8=)
26: 3131362e31322e34362e302f32342d3234203d3e203338313635.roa (hash: VdZyujauditCo5BInDzGT86RLe022tUhB8aqRECGwWM=)
27: 3130332e38332e3134302e302f32342d3234203d3e203338313635.roa (hash: fksrul4lMZ1/XL5r5cu/WNsWpdzw6wwNzqAHD2IefPw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/A9DFB6024D05A37CA0C756EC747E898140885BC9.crl
rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/A9DFB6024D05A37CA0C756EC747E898140885BC9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9DFB6024D05A37CA0C756EC747E898140885BC9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Oct 2026 11:39:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:a7:a9:d9:36:69:fc:29:4d:b8:5e:e9:8f:eb:4e:fc:dc:2f:18:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9DFB6024D05A37CA0C756EC747E898140885BC9
Validity
Not Before: Oct 27 18:53:38 2026 GMT
Not After : Oct 28 19:50:38 2026 GMT
Subject: CN=513680CA875B775F8D68B765DF9E22B8B377DBC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:08:2d:72:89:74:c3:f2:eb:16:67:f0:6a:cf:
c8:b9:52:4c:85:97:b1:1d:68:bf:9a:b4:44:8c:e5:
95:73:92:b9:e0:a8:47:b9:e3:71:e4:5e:06:a6:00:
c1:16:3a:d8:8a:05:b4:4e:7a:b3:f2:9c:af:0e:f3:
a2:4a:28:8d:e9:8b:89:98:db:bd:f6:1d:65:34:e0:
68:26:6e:af:00:63:d9:b8:a0:1b:23:73:74:c4:52:
9f:90:2e:ea:31:2e:aa:b5:59:37:51:4f:70:d8:1e:
db:ac:37:26:2d:33:a1:ff:bb:d2:62:91:10:14:ad:
8a:64:fc:3b:71:0e:ed:67:cb:65:ee:57:e4:70:26:
aa:be:38:e2:b4:c7:8c:6b:51:ad:14:4e:99:b7:2e:
79:ac:4d:d5:70:4c:5e:47:12:ba:c9:f0:79:3d:3d:
65:05:ea:bf:59:37:24:3f:cb:be:2f:34:8c:70:af:
3f:a9:e6:41:f9:2f:fa:06:37:13:81:1d:37:3d:2c:
3d:93:22:80:40:9f:15:3f:3c:c8:4a:88:0c:5d:7d:
47:a4:23:a3:15:66:3f:8f:51:34:f7:89:32:43:0d:
d3:45:cb:22:bf:d7:95:de:eb:2f:d2:07:a3:74:cb:
4a:97:03:02:dd:af:5a:f5:4e:05:75:af:89:a8:17:
fa:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:36:80:CA:87:5B:77:5F:8D:68:B7:65:DF:9E:22:B8:B3:77:DB:C4
X509v3 Authority Key Identifier:
keyid:A9:DF:B6:02:4D:05:A3:7C:A0:C7:56:EC:74:7E:89:81:40:88:5B:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/A9DFB6024D05A37CA0C756EC747E898140885BC9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9DFB6024D05A37CA0C756EC747E898140885BC9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/A9DFB6024D05A37CA0C756EC747E898140885BC9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:cb:ff:d8:1b:4b:83:97:d1:f3:3b:14:f8:80:bf:f9:67:fc:
93:fc:44:de:b9:52:54:36:fc:09:be:87:0e:a4:81:67:bc:21:
22:1b:47:ae:b0:e9:df:59:fc:c8:28:3d:f1:d4:d4:15:52:76:
75:7d:9d:57:3a:55:82:92:99:a3:3d:b9:9c:84:e0:1b:ca:74:
ce:26:df:98:ab:f4:71:b9:ef:bb:ec:ee:bc:6d:e5:87:47:1e:
e8:c3:ff:7c:d0:60:ff:e1:2e:86:bd:4d:ee:e2:90:e2:b1:ad:
bc:54:5e:4d:0e:91:3c:85:2d:bf:bc:2a:a0:90:3b:f2:3a:0f:
2e:fe:fe:e0:4d:b4:66:9b:e1:f0:a4:0e:a3:d8:6a:85:79:81:
3d:a9:19:41:d8:99:3e:27:7e:2b:e7:71:37:4b:75:d6:36:c0:
3e:c8:b9:44:48:56:97:92:8e:df:9f:56:f9:06:b7:cb:dc:95:
fb:58:46:68:ed:3d:8c:ed:e0:35:eb:d5:24:2a:32:c0:a5:45:
fe:06:dc:81:5d:30:6c:59:9d:4d:2d:7b:a1:67:2e:9c:57:ba:
6f:2e:36:5b:7c:d5:a1:40:28:3a:69:2f:f6:c3:7b:bb:47:83:
ee:3d:8d:dd:a8:be:98:bf:2f:a7:a4:a9:13:aa:8c:a2:8d:57:
b9:5d:e8:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:42:58 2026 by rpki-client