
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/010fef48-1ee8-4342-a541-2510fb15b96b/0/F9E76265CB34B4EEC43D8EE049601C2FA861D304.mft
File: F9E76265CB34B4EEC43D8EE049601C2FA861D304.mft (raw, json)
Hash identifier: HOwjJByx+cwvuDKh3CnUfIOyiqg/t2rxeEXS9rIGqnA=
Subject key identifier: 19:1E:A7:45:56:87:0A:E0:5B:51:7F:63:CE:BF:78:56:AF:D3:ED:C4
Authority key identifier: F9:E7:62:65:CB:34:B4:EE:C4:3D:8E:E0:49:60:1C:2F:A8:61:D3:04
Certificate issuer: /CN=F9E76265CB34B4EEC43D8EE049601C2FA861D304
Certificate serial: 3EF2EADE43389490336DEFAC7343EE545F08664C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F9E76265CB34B4EEC43D8EE049601C2FA861D304.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/010fef48-1ee8-4342-a541-2510fb15b96b/0/F9E76265CB34B4EEC43D8EE049601C2FA861D304.mft
Manifest number: BE
Signing time: Tue 22 Sep 2026 03:30:58 +0000
Manifest this update: Tue 22 Sep 2026 03:25:58 +0000
Manifest next update: Wed 23 Sep 2026 04:54:58 +0000
Files and hashes: 1: 3130332e3136362e36342e302f32342d3234203d3e20313431393333.roa (hash: fNPzl5pgP5THqHKexY3+BO0XOu1eYuUYqBqSIA0oDIk=)
2: F9E76265CB34B4EEC43D8EE049601C2FA861D304.crl (hash: DO5uR+q/4Rf3ckmLfucwM+NmRT7z5Md0ptuhS7RF+qM=)
3: 3130332e3136362e36352e302f32342d3234203d3e20313431393333.roa (hash: 5cKt2GQ70RT9pJRr52o1J2ZJ8Szvc0mfOl2vwcEkNAw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/010fef48-1ee8-4342-a541-2510fb15b96b/0/F9E76265CB34B4EEC43D8EE049601C2FA861D304.crl
rsync://rpki-rsync.idnic.net/repo/010fef48-1ee8-4342-a541-2510fb15b96b/0/F9E76265CB34B4EEC43D8EE049601C2FA861D304.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F9E76265CB34B4EEC43D8EE049601C2FA861D304.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 23 Sep 2026 04:54:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:f2:ea:de:43:38:94:90:33:6d:ef:ac:73:43:ee:54:5f:08:66:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F9E76265CB34B4EEC43D8EE049601C2FA861D304
Validity
Not Before: Sep 22 03:25:58 2026 GMT
Not After : Sep 23 04:54:58 2026 GMT
Subject: CN=191EA74556870AE05B517F63CEBF7856AFD3EDC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:95:60:01:4b:6c:00:9a:a5:a5:3b:23:1e:f5:
f1:10:6f:fd:31:bc:4c:fe:3f:4e:a6:bc:fd:8c:92:
08:29:93:82:4d:b6:7d:96:43:a5:f9:87:90:79:38:
19:6c:aa:f7:f5:a0:87:81:d7:36:88:9e:b7:bb:31:
b6:e9:c8:b3:85:be:4d:4e:b3:97:b9:11:23:fa:e9:
ce:00:f9:08:cc:a6:6c:ad:f8:03:ea:c3:a5:a9:52:
69:ac:ea:f5:22:e4:e6:0f:f5:f7:4e:48:ff:51:63:
54:22:fc:cf:5b:9e:14:55:6f:a5:ca:cd:d5:79:c2:
c8:51:e2:28:ac:f7:63:e3:08:50:38:c5:16:24:63:
68:bd:8a:4f:bf:4c:97:27:b9:4c:56:6d:95:1a:e2:
30:ba:cf:21:6d:46:80:4d:c6:6c:70:64:9b:6b:07:
1d:b7:03:ce:57:b3:52:b5:3a:03:63:6e:d3:32:fc:
cb:a4:5f:18:46:77:6f:a2:02:1e:af:95:4f:9b:b9:
be:57:4b:1e:e2:ed:28:80:ad:af:c2:fd:42:6f:68:
d8:22:fc:1b:74:18:f1:05:cb:09:5c:3c:e0:55:ba:
d6:dc:60:98:8c:10:d0:e9:a2:cf:22:72:06:94:cc:
ff:33:06:ee:0d:20:6a:7f:79:f8:01:14:38:0d:ac:
a3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:1E:A7:45:56:87:0A:E0:5B:51:7F:63:CE:BF:78:56:AF:D3:ED:C4
X509v3 Authority Key Identifier:
keyid:F9:E7:62:65:CB:34:B4:EE:C4:3D:8E:E0:49:60:1C:2F:A8:61:D3:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/010fef48-1ee8-4342-a541-2510fb15b96b/0/F9E76265CB34B4EEC43D8EE049601C2FA861D304.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F9E76265CB34B4EEC43D8EE049601C2FA861D304.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/010fef48-1ee8-4342-a541-2510fb15b96b/0/F9E76265CB34B4EEC43D8EE049601C2FA861D304.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:16:51:d3:c3:fd:91:6b:68:cd:8e:e8:41:fc:2c:2d:19:c4:
f9:8d:29:35:7a:b9:c3:9e:73:5c:87:6e:86:f6:46:b7:c9:d8:
4a:c5:b9:08:8a:7e:c6:46:35:17:ff:72:9a:6a:75:3d:63:10:
53:a1:4b:77:d5:b8:fc:ea:65:d8:c2:59:c1:90:29:b7:5d:6c:
5d:59:b3:be:21:2c:3a:a0:50:5c:1a:f0:79:74:df:af:46:fd:
70:c7:be:46:77:56:74:9c:a8:ec:df:98:04:68:2f:cc:ce:32:
5d:f0:4b:d9:8e:48:af:b1:a8:98:67:30:55:0e:ee:d0:ce:de:
3b:43:ae:5f:3d:10:0f:66:e7:18:bc:0c:49:b5:f0:10:e7:2d:
8e:c8:f9:d2:c9:ec:7b:ab:39:4c:63:23:01:10:10:60:f1:cf:
9b:d1:8a:c5:c3:af:91:56:cb:66:ff:32:b7:cc:57:81:21:74:
b9:92:c6:f9:8d:4b:74:12:c8:ae:ba:6c:5f:d0:80:a8:f7:4e:
8b:f5:85:c7:05:f8:97:a3:9d:28:1e:c6:df:bc:91:fe:9a:f5:
8b:93:a7:8e:00:d0:e6:e7:fe:5c:c6:63:90:1d:94:45:a7:2f:
81:b3:a3:ce:43:06:13:68:0a:54:a9:20:b2:cc:fa:7a:b0:5f:
3a:8a:92:da
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUPvLq3kM4lJAzbe+sc0PuVF8IZkwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjlFNzYyNjVDQjM0QjRFRUM0M0Q4RUUwNDk2MDFDMkZB
ODYxRDMwNDAeFw0yNjA5MjIwMzI1NThaFw0yNjA5MjMwNDU0NThaMDMxMTAvBgNV
BAMTKDE5MUVBNzQ1NTY4NzBBRTA1QjUxN0Y2M0NFQkY3ODU2QUZEM0VEQzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOlWABS2wAmqWlOyMe9fEQb/0x
vEz+P06mvP2Mkggpk4JNtn2WQ6X5h5B5OBlsqvf1oIeB1zaInre7MbbpyLOFvk1O
s5e5ESP66c4A+QjMpmyt+APqw6WpUmms6vUi5OYP9fdOSP9RY1Qi/M9bnhRVb6XK
zdV5wshR4iis92PjCFA4xRYkY2i9ik+/TJcnuUxWbZUa4jC6zyFtRoBNxmxwZJtr
Bx23A85Xs1K1OgNjbtMy/MukXxhGd2+iAh6vlU+bub5XSx7i7SiAra/C/UJvaNgi
/Bt0GPEFywlcPOBVutbcYJiMENDpos8icgaUzP8zBu4NIGp/efgBFDgNrKO3AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUGR6nRVaHCuBbUX9jzr94Vq/T7cQwHwYDVR0j
BBgwFoAU+ediZcs0tO7EPY7gSWAcL6hh0wQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MDEwZmVmNDgtMWVlOC00MzQyLWE1NDEtMjUxMGZiMTViOTZiLzAvRjlFNzYyNjVD
QjM0QjRFRUM0M0Q4RUUwNDk2MDFDMkZBODYxRDMwNC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9GOUU3NjI2NUNCMzRCNEVFQzQzRDhFRTA0OTYwMUMyRkE4NjFE
MzA0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDEwZmVmNDgtMWVlOC00MzQyLWE1
NDEtMjUxMGZiMTViOTZiLzAvRjlFNzYyNjVDQjM0QjRFRUM0M0Q4RUUwNDk2MDFD
MkZBODYxRDMwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFMWUdPD/ZFraM2O6EH8LC0ZxPmNKTV6ucOe
c1yHbob2RrfJ2ErFuQiKfsZGNRf/cppqdT1jEFOhS3fVuPzqZdjCWcGQKbddbF1Z
s74hLDqgUFwa8Hl0369G/XDHvkZ3VnScqOzfmARoL8zOMl3wS9mOSK+xqJhnMFUO
7tDO3jtDrl89EA9m5xi8DEm18BDnLY7I+dLJ7HurOUxjIwEQEGDxz5vRisXDr5FW
y2b/MrfMV4EhdLmSxvmNS3QSyK66bF/QgKj3Tov1hccF+JejnSgext+8kf6a9YuT
p44A0Obn/lzGY5AdlEWnL4Gzo85DBhNoClSpILLM+nqwXzqKkto=
-----END CERTIFICATE-----
Generated at Tue Sep 22 13:33:43 2026 by rpki-client