
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/A9DFB6024D05A37CA0C756EC747E898140885BC9.mft
File: A9DFB6024D05A37CA0C756EC747E898140885BC9.mft (raw, json)
Hash identifier: wqzgEdFwY8Ajzf1Ijh5p32CQaO1o/Gosy7xnK1hYhyo=
Subject key identifier: 81:18:CB:E3:FF:66:1A:CE:C4:E2:92:13:96:6B:5B:C4:C2:78:56:4D
Authority key identifier: A9:DF:B6:02:4D:05:A3:7C:A0:C7:56:EC:74:7E:89:81:40:88:5B:C9
Certificate issuer: /CN=A9DFB6024D05A37CA0C756EC747E898140885BC9
Certificate serial: 3D658439D74968CC299CB4B7589419A0ED84C9D9
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9DFB6024D05A37CA0C756EC747E898140885BC9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/A9DFB6024D05A37CA0C756EC747E898140885BC9.mft
Manifest number: EC
Signing time: Sun 25 Oct 2026 12:42:25 +0000
Manifest this update: Sun 25 Oct 2026 12:37:25 +0000
Manifest next update: Mon 26 Oct 2026 15:33:25 +0000
Files and hashes: 1: 3131362e31322e34302e302f32312d3234203d3e203338313635.roa (hash: XG2kEfirxjj/sDq/rblsGtFwcedIIKGdVI/XxKks4EQ=)
2: 323430313a646363303a3a2f33322d3438203d3e203338313635.roa (hash: 2ylo3HpAhVkvHZhTyyQa6+TpBddihUGH17bMztGMO8Y=)
3: 3131342e33302e39322e302f32342d3234203d3e203338313635.roa (hash: XxFeX4bK2Dh55oFKthxbGwYO1QPL6JkUjpiac/LGmFc=)
4: 3131362e31322e34342e302f32342d3234203d3e203338313635.roa (hash: 4eVsgYjQx/GwRQGHLYtsEEdD640KhW1jdNg/AXAmGj8=)
5: 3131362e31322e34332e302f32342d3234203d3e203338313635.roa (hash: vuNc4l/9yLIs4KyCpx5p6F1jMwXXBMM4BQHYhbheraI=)
6: 3130332e38332e3134312e302f32342d3234203d3e203338313635.roa (hash: caorMzAk2rhKrHkZPEylYGbz3q7q/4kgUFG0ZpSaKuk=)
7: 3131362e31322e34362e302f32342d3234203d3e203338313635.roa (hash: VdZyujauditCo5BInDzGT86RLe022tUhB8aqRECGwWM=)
8: 3131342e33302e39312e302f32342d3234203d3e203338313635.roa (hash: hwrp8oltXPCRSuxrHgsojYMMFzDn1UCIz4HCYehypeU=)
9: 3131362e31322e34312e302f32342d3234203d3e203338313635.roa (hash: F7W3l45HCPDJENu+RobZMG7HgvBdxexYhGm3GKsDUsc=)
10: 3131342e33302e39342e302f32342d3234203d3e203338313635.roa (hash: G8aUIjts1s/SyprhduUQ7undoZSDOgnTsSv1h0ZIPBI=)
11: 3131362e31322e34352e302f32342d3234203d3e203338313635.roa (hash: /Qbizla9Rd9j7hntYwBfkRjqiwhDVjGQMjdVjta/V4o=)
12: 3131342e33302e39302e302f32342d3234203d3e203338313635.roa (hash: sDSoeXLG7m9Vd+TPJvOtkj0D0bh9+lF74Y6p0yHJT2w=)
13: 3131342e33302e38392e302f32342d3234203d3e203338313635.roa (hash: maWh9CwQAwSd/hgh31AypikUc85sBDX5Qkb/wXAwqQ4=)
14: 3130332e38332e3134322e302f32342d3234203d3e203338313635.roa (hash: YrZIFaqaTChjnkZ/BX+Yt+LiIgZZAfEd+7+0eXA8anQ=)
15: 3131342e33302e38382e302f32342d3234203d3e203338313635.roa (hash: TYxvOObRiApVHdygkcJ79px01l2EeTEanmBRk9sEhU8=)
16: 3131362e31322e34372e302f32342d3234203d3e203338313635.roa (hash: ls6pClLibFG+ZtAvlvA5DPGIjVB65RJG/A/2js2edZI=)
17: 3131362e31322e34302e302f32342d3234203d3e203338313635.roa (hash: solCgiJ0IBXmILHhdk+WcwssrUHzmifkTZH0iCFde94=)
18: A9DFB6024D05A37CA0C756EC747E898140885BC9.crl (hash: QvNpob2VV9f6hMZ7Yn5braQAFv9w2ye7prXPOj/aF6o=)
19: 3130332e38332e3134302e302f32342d3234203d3e203338313635.roa (hash: fksrul4lMZ1/XL5r5cu/WNsWpdzw6wwNzqAHD2IefPw=)
20: 3130332e3234372e31362e302f32342d3234203d3e203338313635.roa (hash: glySjVWaeYKKJGdVLX98kL01SxrrhC2o5DvZ/OFZzes=)
21: 3130332e3234372e31372e302f32342d3234203d3e203338313635.roa (hash: 5amtZ+LM77tqz27nu3gKgm99BvgZZy43q/i93530bY0=)
22: 3131342e33302e39332e302f32342d3234203d3e203338313635.roa (hash: Y4OQkQ+6pCKwFE7J9SktmKY2Oia99e7uSzB1cyzK/sw=)
23: 3131362e31322e34322e302f32342d3234203d3e203338313635.roa (hash: Tzz51V+z7G+M0amuU470kd9KxBTkAYh2VanJBe/CIik=)
24: 3131342e33302e38382e302f32312d3234203d3e203338313635.roa (hash: PbHEb+XaCGRxOonc9+PyBhvmLickz9HVhiTfl0wL8wY=)
25: 3130332e38332e3134302e302f32322d3234203d3e203338313635.roa (hash: Ik3fxLSlXA2Xnh23AevRPdy9KUS+oUVTjYCiGIABhYM=)
26: 3130332e3234372e31362e302f32332d3234203d3e203338313635.roa (hash: X2L0BGiTvmgLJtgSEYwPB9xF12na1ku6hIINh+wHP14=)
27: 3130332e38332e3134332e302f32342d3234203d3e203338313635.roa (hash: PzK9iamlsHrrCIK36AFek4huEos9vJO/Mb+qJmCN8TU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/A9DFB6024D05A37CA0C756EC747E898140885BC9.crl
rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/A9DFB6024D05A37CA0C756EC747E898140885BC9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9DFB6024D05A37CA0C756EC747E898140885BC9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 12:34:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:65:84:39:d7:49:68:cc:29:9c:b4:b7:58:94:19:a0:ed:84:c9:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9DFB6024D05A37CA0C756EC747E898140885BC9
Validity
Not Before: Oct 25 12:37:25 2026 GMT
Not After : Oct 26 15:33:25 2026 GMT
Subject: CN=8118CBE3FF661ACEC4E29213966B5BC4C278564D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:65:f4:c6:70:4d:2e:09:3a:8b:31:d6:76:ea:
f9:dd:12:37:3b:28:e1:09:c2:1c:af:68:21:c7:bd:
d0:19:10:51:8c:8b:f1:f7:99:af:5d:5b:b9:67:9a:
7a:66:81:b0:47:6d:2d:e6:a9:7c:86:33:d5:8f:4a:
17:fe:e8:26:85:66:5d:c3:10:9c:8c:f0:4c:30:e1:
19:cf:5c:7c:2c:a2:18:d6:1c:55:ec:2b:c0:ee:97:
23:24:ac:ad:00:c3:10:9f:60:a6:00:69:b6:f6:e8:
c4:79:da:11:a6:8e:46:43:ce:ad:97:bf:dc:d0:72:
47:e4:a9:f2:b1:c9:80:e8:b5:a4:47:7d:cc:2a:49:
82:e5:98:5e:6b:8f:21:18:93:ef:22:95:f7:3d:11:
94:31:04:ea:5a:a4:9f:fc:95:e5:d0:18:ce:08:f3:
fb:6c:b6:6c:74:07:df:46:12:e9:17:f3:94:2d:f3:
e2:91:94:d8:08:d9:a9:1d:a5:4a:94:a5:ca:3d:31:
7b:5f:a6:4d:ba:91:c2:f6:20:73:04:27:20:1b:46:
a1:3f:8c:eb:5d:fc:74:bf:c6:26:12:51:ce:5e:51:
a4:df:6b:ae:7f:fe:72:47:0c:d2:ef:c4:5e:0e:cf:
99:16:08:2e:af:2a:be:23:f8:7f:0f:83:03:11:9a:
f7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:18:CB:E3:FF:66:1A:CE:C4:E2:92:13:96:6B:5B:C4:C2:78:56:4D
X509v3 Authority Key Identifier:
keyid:A9:DF:B6:02:4D:05:A3:7C:A0:C7:56:EC:74:7E:89:81:40:88:5B:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/A9DFB6024D05A37CA0C756EC747E898140885BC9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9DFB6024D05A37CA0C756EC747E898140885BC9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/A9DFB6024D05A37CA0C756EC747E898140885BC9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:f7:29:bd:bc:ba:57:8b:10:cf:9c:0c:a4:11:12:64:bc:3c:
42:26:23:a2:da:ab:da:d3:22:29:41:a3:6e:2a:b9:d1:f4:0b:
0c:7a:a4:19:42:fb:5c:cc:d6:fe:5c:c0:df:fe:f2:46:b0:e3:
ad:7c:e6:d7:b2:49:9e:54:47:d1:c8:1e:75:e1:0f:ab:a0:02:
22:4c:24:24:42:28:78:4b:2d:2f:51:46:1e:93:6e:9e:7c:10:
31:81:90:e4:b2:ed:77:a0:5d:8b:e9:af:9b:3d:ef:87:86:e1:
fd:02:74:44:12:87:d3:f0:1a:eb:02:c6:f7:42:ec:6b:4d:ea:
8d:1d:fa:ef:83:79:5c:4d:6b:6b:74:35:48:45:17:2d:3e:7f:
e7:65:1d:4f:76:c8:f3:db:ee:fa:14:02:12:cd:92:84:d3:53:
00:74:60:9e:68:8a:ab:17:89:79:86:f7:ba:17:17:7c:6a:f2:
ca:4e:4d:98:3f:e1:c8:da:03:2a:eb:0b:b5:03:4b:f3:67:db:
ee:e9:a6:ed:e2:69:67:4c:2b:b2:23:13:48:90:ac:d8:b1:9f:
91:9a:bd:eb:3d:f1:e3:fb:ff:f9:1d:8a:ce:7e:46:e6:69:f3:
46:10:14:b8:ab:56:ab:2d:47:45:8b:b0:e7:ed:08:07:aa:f8:
ab:49:e8:58
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUPWWEOddJaMwpnLS3WJQZoO2EydkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTlERkI2MDI0RDA1QTM3Q0EwQzc1NkVDNzQ3RTg5ODE0
MDg4NUJDOTAeFw0yNjEwMjUxMjM3MjVaFw0yNjEwMjYxNTMzMjVaMDMxMTAvBgNV
BAMTKDgxMThDQkUzRkY2NjFBQ0VDNEUyOTIxMzk2NkI1QkM0QzI3ODU2NEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2ZfTGcE0uCTqLMdZ26vndEjc7
KOEJwhyvaCHHvdAZEFGMi/H3ma9dW7lnmnpmgbBHbS3mqXyGM9WPShf+6CaFZl3D
EJyM8Eww4RnPXHwsohjWHFXsK8DulyMkrK0AwxCfYKYAabb26MR52hGmjkZDzq2X
v9zQckfkqfKxyYDotaRHfcwqSYLlmF5rjyEYk+8ilfc9EZQxBOpapJ/8leXQGM4I
8/tstmx0B99GEukX85Qt8+KRlNgI2akdpUqUpco9MXtfpk26kcL2IHMEJyAbRqE/
jOtd/HS/xiYSUc5eUaTfa65//nJHDNLvxF4Oz5kWCC6vKr4j+H8PgwMRmvddAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUgRjL4/9mGs7E4pITlmtbxMJ4Vk0wHwYDVR0j
BBgwFoAUqd+2Ak0Fo3ygx1bsdH6JgUCIW8kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
Zjc0NDhjMTEtZjhkMy00NTdkLThlMjItODQ4ODdhYjIyYTMwLzAvQTlERkI2MDI0
RDA1QTM3Q0EwQzc1NkVDNzQ3RTg5ODE0MDg4NUJDOS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9BOURGQjYwMjREMDVBMzdDQTBDNzU2RUM3NDdFODk4MTQwODg1
QkM5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjc0NDhjMTEtZjhkMy00NTdkLThl
MjItODQ4ODdhYjIyYTMwLzAvQTlERkI2MDI0RDA1QTM3Q0EwQzc1NkVDNzQ3RTg5
ODE0MDg4NUJDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABv3Kb28uleLEM+cDKQREmS8PEImI6Laq9rT
IilBo24qudH0Cwx6pBlC+1zM1v5cwN/+8kaw46185teySZ5UR9HIHnXhD6ugAiJM
JCRCKHhLLS9RRh6Tbp58EDGBkOSy7XegXYvpr5s974eG4f0CdEQSh9PwGusCxvdC
7GtN6o0d+u+DeVxNa2t0NUhFFy0+f+dlHU92yPPb7voUAhLNkoTTUwB0YJ5oiqsX
iXmG97oXF3xq8spOTZg/4cjaAyrrC7UDS/Nn2+7ppu3iaWdMK7IjE0iQrNixn5Ga
ves98eP7//kdis5+RuZp80YQFLirVqstR0WLsOftCAeq+KtJ6Fg=
-----END CERTIFICATE-----
Generated at Sun Oct 25 19:54:33 2026 by rpki-client