
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/F69314440BEB879DDDA166C5976A2F1F6A19E031.mft
File: F69314440BEB879DDDA166C5976A2F1F6A19E031.mft (raw, json)
Hash identifier: fRZ+VMWHZO8bEkb7zMZUNJLkPOPX1JHWtDO0HDnYd5E=
Subject key identifier: 35:BB:E2:E9:EF:7E:A4:0E:35:65:99:04:5C:88:B5:0E:D2:F4:43:1D
Authority key identifier: F6:93:14:44:0B:EB:87:9D:DD:A1:66:C5:97:6A:2F:1F:6A:19:E0:31
Certificate issuer: /CN=F69314440BEB879DDDA166C5976A2F1F6A19E031
Certificate serial: 56FDCD6EE6AB771E3423ABE2CA961A67D4E1315B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F69314440BEB879DDDA166C5976A2F1F6A19E031.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/F69314440BEB879DDDA166C5976A2F1F6A19E031.mft
Manifest number: BE
Signing time: Mon 21 Sep 2026 21:23:06 +0000
Manifest this update: Mon 21 Sep 2026 21:18:06 +0000
Manifest next update: Wed 23 Sep 2026 00:05:06 +0000
Files and hashes: 1: 323430333a313838303a3a2f33322d3332203d3e203436303535.roa (hash: 0dsqJtJ46wdaXhRYrKKKJ2werWCm6VUK7dh9hbyOntI=)
2: F69314440BEB879DDDA166C5976A2F1F6A19E031.crl (hash: Qw4jU11wAJIKTC/MOe0nsbkNEmTN43Yr8XkX2re7ZUE=)
3: 3230322e35322e34382e302f32332d3234203d3e203436303535.roa (hash: 2iUHhReRTogx2RhTVdfCvVoaJpAuDQddykI0WZaNgaI=)
4: 3130332e3139382e3132302e302f32332d3234203d3e203436303535.roa (hash: aeQ9NN7n3Js6ilpMlf3iKltx6poDEG/MLFH04LVivcI=)
5: 3130332e3139382e3132322e302f32332d3234203d3e203436303535.roa (hash: wQESs7cDBFebpdzSgETJh4YhQNH9K+ZjQ7a77NcaHp8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/F69314440BEB879DDDA166C5976A2F1F6A19E031.crl
rsync://rpki-rsync.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/F69314440BEB879DDDA166C5976A2F1F6A19E031.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F69314440BEB879DDDA166C5976A2F1F6A19E031.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 23:50:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:fd:cd:6e:e6:ab:77:1e:34:23:ab:e2:ca:96:1a:67:d4:e1:31:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F69314440BEB879DDDA166C5976A2F1F6A19E031
Validity
Not Before: Sep 21 21:18:06 2026 GMT
Not After : Sep 23 00:05:06 2026 GMT
Subject: CN=35BBE2E9EF7EA40E356599045C88B50ED2F4431D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ff:90:d8:54:8d:d2:47:6b:d1:8b:d5:20:97:
af:0a:b4:d7:14:e5:b9:d3:ab:73:ac:cf:15:36:2b:
46:87:e1:81:7e:02:1c:38:89:f1:00:42:cc:c7:66:
db:e9:bc:23:f1:d5:8c:0e:5d:4b:32:b3:fb:a2:33:
4c:f3:d3:b1:ba:01:c3:e1:ca:9a:6d:81:1c:39:16:
1d:c3:48:c2:1f:c6:75:3f:51:65:db:3c:ad:32:df:
22:aa:f2:ac:bf:98:52:4d:fe:a7:74:58:6a:8e:e8:
49:0c:f6:48:22:24:a2:71:e2:4d:dc:9d:73:20:fe:
b2:21:98:ad:55:99:c9:38:b5:8e:9b:ba:af:39:05:
26:0e:0f:49:4a:1b:5c:b8:35:93:f9:6a:db:49:26:
49:a4:73:cb:a0:b0:e8:65:f2:24:b1:ed:c0:02:fa:
76:d4:33:ec:14:a3:90:d1:b5:48:55:90:3c:08:a2:
7b:04:8f:96:5e:68:59:c8:aa:f1:9a:34:b4:7f:af:
7b:f9:ed:c9:15:55:7a:4f:4c:6c:95:45:92:79:b4:
93:9e:c2:c0:6b:ec:b2:88:34:57:04:b2:be:4a:d6:
91:20:a1:18:34:3f:22:a0:02:87:26:93:97:4b:99:
29:63:6f:9d:8f:db:2b:18:3e:14:e4:82:af:9e:c2:
17:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:BB:E2:E9:EF:7E:A4:0E:35:65:99:04:5C:88:B5:0E:D2:F4:43:1D
X509v3 Authority Key Identifier:
keyid:F6:93:14:44:0B:EB:87:9D:DD:A1:66:C5:97:6A:2F:1F:6A:19:E0:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/F69314440BEB879DDDA166C5976A2F1F6A19E031.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F69314440BEB879DDDA166C5976A2F1F6A19E031.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/F69314440BEB879DDDA166C5976A2F1F6A19E031.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:82:28:5c:a5:8f:9c:4f:83:ce:03:3b:d2:ea:d3:a9:e1:e8:
13:05:52:4f:56:ab:e2:89:19:ae:dd:dc:b4:59:df:1b:b4:44:
5b:5c:3e:23:e3:2f:62:de:38:cd:0c:f2:96:3b:c9:0a:24:83:
29:5e:1e:b4:49:2d:fc:a6:ac:00:c1:0f:2d:19:e7:8a:a6:da:
65:47:7f:12:60:d4:e3:6d:ed:59:c9:a7:ea:09:8a:77:9d:d7:
e2:78:c1:e7:46:52:c8:ef:04:28:a6:05:ff:30:ba:3b:f5:bf:
15:38:63:9b:5f:73:f0:bb:60:83:90:a7:bd:ff:68:87:97:cb:
20:21:12:c8:32:06:6f:81:b3:b2:69:8b:49:18:5a:56:fa:4c:
7a:d2:03:32:61:1e:c7:26:39:3e:28:8f:8f:9f:20:f8:6e:80:
14:7c:b0:71:ee:7e:ee:48:15:47:fd:ab:e2:4a:9c:4e:26:a0:
e7:48:20:df:ec:e4:d8:34:27:1c:c2:87:e9:40:94:ef:e6:3e:
f5:b9:80:21:08:4e:ad:58:46:d2:6f:3b:7b:5f:bd:5a:74:e1:
db:ae:ab:cb:66:cf:dd:20:cf:be:13:eb:e6:ad:47:b4:f8:9e:
c2:6a:f9:32:8c:21:82:c9:b8:df:1d:5e:c6:60:6d:cb:f3:c3:
fa:1e:f9:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:44:31 2026 by rpki-client