
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.mft
File: F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.mft (raw, json)
Hash identifier: mGvW9VtCkVR0ElTQ2kvCCkJ7cV0gDBwa2lMVXaKNjSc=
Subject key identifier: CB:FD:96:F8:E4:99:01:E3:F2:CA:38:FA:B1:9E:C9:8B:49:4F:19:E9
Authority key identifier: F8:EB:6F:4E:91:DD:D4:7F:A8:E0:48:1B:60:D4:C1:80:86:A8:32:C9
Certificate issuer: /CN=F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9
Certificate serial: 41E033E95A37E712AC2C41A8C7EF21A0E12443B4
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.mft
Manifest number: C1
Signing time: Tue 22 Sep 2026 07:10:24 +0000
Manifest this update: Tue 22 Sep 2026 07:05:24 +0000
Manifest next update: Wed 23 Sep 2026 09:57:24 +0000
Files and hashes: 1: 3130332e33312e3133342e302f32332d3233203d3e20313331373439.roa (hash: iFasMrZpPZhCJqBPOEUsMWSE1IL6XiDkC/rJS8HVQTo=)
2: 323430323a626538303a3a2f33332d3333203d3e20313331373439.roa (hash: t5lI2fSBgF1Qk+xi/wexkm174c0g31j+0DtjwN72lnc=)
3: 323430323a626538303a613030303a3a2f33352d3335203d3e20313331373439.roa (hash: esq0SPO+hAIrG7YQPAU2RMpBG0FEhngieVqoN2H1Z00=)
4: 3130332e33312e3133322e302f32322d3232203d3e20313331373439.roa (hash: hVG5QJJlsbYPr5L1RCfsG/I/X2H5aI8Xq7RBOYv0G3o=)
5: 3130332e33312e3133332e302f32342d3234203d3e20313331373439.roa (hash: /XQUhdaX/lnH/4pSzymUR8gU8PBZoGnTr2RxGh6dJJI=)
6: 3130332e33312e3133352e302f32342d3234203d3e20313331373439.roa (hash: kKPyA87cBNNbll+wZXw03s3L6LbkLTPgrzdBootFsHQ=)
7: F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.crl (hash: ig0xli/3L6hGpYjhDAEp3caZ+RpR+oj2/SeKHYJxLFU=)
8: 323430323a626538303a3a2f33352d3335203d3e20313331373439.roa (hash: ZWNoTl3f/QBfpXE45HAww//4eS88vFgydiSHbe0zdhA=)
9: 323430323a626538303a343030303a3a2f33342d3334203d3e20313331373439.roa (hash: Q18y495vHxKdcsVM96pc/tUI9Fl6GfmbLs035wir/JU=)
10: 323430323a626538303a643961623a3a2f34382d3438203d3e20313331373439.roa (hash: svAi0R5XEu9X4Ys1yfCbCgtQxluGGulsPQVUUn8ta/o=)
11: 323430323a626538303a323030303a3a2f33352d3335203d3e20313331373439.roa (hash: X24eGimplx9OKKA54SDn3PccRcDMInDYSFbqOhNXsRk=)
12: 323430323a626538303a3a2f33322d3332203d3e20313331373439.roa (hash: Fg6XcYLXwzdBTEEbtVqZPj3EQucOEbeogJk1AzgGxAQ=)
13: 3130332e33312e3133322e302f32332d3233203d3e20313331373439.roa (hash: TN3/E7Y5c/nedOyTgYgff8HK90H5iShgi5mk+WZX5nw=)
14: 323430323a626538303a653030303a3a2f33352d3335203d3e20313331373439.roa (hash: apqtipmn5kmXtB7pKv4YlNHER/Ifv3+XPDXaeex3R9k=)
15: 323430323a626538303a363030303a3a2f33352d3335203d3e20313331373439.roa (hash: bS5P/W+hj7so9J/fGjANaNnPonvylnMwWx29PNvc6E4=)
16: 323430323a626538303a3a2f33342d3334203d3e20313331373439.roa (hash: XYH3WtUdslBTF725L3cOP4xs8XuxcDg3daKQgahU/wE=)
17: 323430323a626538303a383030303a3a2f33342d3334203d3e20313331373439.roa (hash: V8AjpSzdxp8GDyMCHA7YtvW4QSVvG85ynWbgCsAEXEs=)
18: 323430323a626538303a383030303a3a2f33332d3333203d3e20313331373439.roa (hash: BS5YihTbZaw+pKOipVulLJrh9jJr2QhVUAXi4IwAkiI=)
19: 323430323a626538303a383030303a3a2f33352d3335203d3e20313331373439.roa (hash: bcUDOpCB0dNiYwZx7hB9TNsT/6Q2Z4ktB8wuICtWZXQ=)
20: 3130332e33312e3133322e302f32342d3234203d3e20313331373439.roa (hash: zrBSW8GC94FsmSWPx82P8/uTVF2HgCkoo/2hN3b+4hM=)
21: 3130332e33312e3133342e302f32342d3234203d3e20313331373439.roa (hash: OvSsEeapnu+/oiKYJIcMYudEmuSdyI2NmSImX5jHoH4=)
22: 323430323a626538303a633030303a3a2f33352d3335203d3e20313331373439.roa (hash: CnBcLvoSDxEWtZrVDvNMamVH18oi4O/jyEx1Mt/oRO8=)
23: 323430323a626538303a633030303a3a2f33342d3334203d3e20313331373439.roa (hash: v5Ut+HnAU8B++keMYhHXiHiE6JJw8p9vB3wAUzitQ/s=)
24: 323430323a626538303a343030303a3a2f33352d3335203d3e20313331373439.roa (hash: ZMKJ6qvXBCnIGQclOHQhPWyyMM8hgD3nw2GXMro25Y4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.crl
rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 23 Sep 2026 09:57:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:e0:33:e9:5a:37:e7:12:ac:2c:41:a8:c7:ef:21:a0:e1:24:43:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9
Validity
Not Before: Sep 22 07:05:24 2026 GMT
Not After : Sep 23 09:57:24 2026 GMT
Subject: CN=CBFD96F8E49901E3F2CA38FAB19EC98B494F19E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ee:97:21:32:14:38:59:55:eb:45:67:08:55:
ff:3e:3e:5a:d0:bd:03:6f:93:e4:d2:a3:ef:05:b6:
71:65:ce:8d:a5:cf:67:ef:75:bf:c2:91:54:b6:f7:
8d:85:00:dd:67:4f:e4:00:35:d8:40:5f:aa:76:4f:
3b:10:d4:bf:06:d3:42:28:f9:93:a1:90:28:c5:ee:
d4:4b:97:2e:23:c6:98:66:49:bc:8e:3f:80:c2:c6:
ad:d6:a7:3d:f5:e3:f2:eb:01:25:b2:2a:d5:4e:47:
28:12:c3:3e:6f:28:6f:9c:9c:bc:d4:10:d3:f2:48:
f6:4e:1c:fa:3e:6a:d6:0d:f0:04:ce:ee:5c:39:1e:
ce:7a:44:1a:be:58:4e:c0:a9:a4:a8:24:5a:0f:74:
0c:19:24:0c:36:c5:4e:23:a2:51:e5:eb:29:0d:02:
1e:68:c7:80:34:80:d5:02:a5:40:01:17:f8:72:d7:
12:8e:e3:73:0c:9d:49:8e:9d:c6:75:1d:e3:08:83:
db:3a:ed:79:56:6a:f8:13:90:98:0a:1e:ff:80:15:
bb:c3:8f:66:a8:38:24:60:d5:f7:d9:0d:11:a5:19:
66:6d:4c:fe:17:c1:32:50:f9:a3:7c:41:55:9e:f6:
e3:ea:b4:48:90:2e:65:64:ce:0b:83:03:0c:ce:21:
90:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:FD:96:F8:E4:99:01:E3:F2:CA:38:FA:B1:9E:C9:8B:49:4F:19:E9
X509v3 Authority Key Identifier:
keyid:F8:EB:6F:4E:91:DD:D4:7F:A8:E0:48:1B:60:D4:C1:80:86:A8:32:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:36:fc:f0:37:8f:b7:f2:a4:88:5c:df:c6:9e:2e:1c:c5:0c:
b7:af:26:40:cc:c7:36:8c:49:2f:d9:8d:cc:ff:c1:58:9e:e4:
b9:a3:1d:91:39:d5:e5:2e:fd:f2:f0:d9:21:06:6b:3a:15:2b:
a2:11:d4:c8:de:72:eb:4c:6d:22:d7:32:27:b4:2f:2b:23:a3:
5a:77:16:d7:ef:bf:60:31:4b:27:14:e8:a7:45:5e:fb:2d:59:
62:09:b1:9b:e2:fb:2b:74:18:d4:23:58:e3:31:3b:6e:ca:ab:
cb:17:0f:99:ae:0b:8a:82:32:4d:d9:8b:10:48:70:35:21:60:
3e:65:86:1c:62:94:2b:03:41:6b:f2:8b:82:10:a8:b1:46:e8:
23:00:20:26:bc:77:1e:ed:d6:9b:aa:1d:c1:9f:38:b8:e6:e6:
0a:0d:12:cd:fe:b5:cc:eb:5f:8e:a0:df:ca:9d:ad:87:bc:31:
f3:26:28:52:7b:07:31:da:11:e7:37:4a:40:55:6f:ef:10:de:
47:f3:98:02:68:99:22:8d:27:61:a8:bf:aa:e5:56:89:ab:5f:
fa:8c:49:cf:3e:dd:28:a0:d7:a2:9d:58:2b:1c:8b:9a:07:cc:
e1:da:c3:f7:c8:9c:ba:ec:b8:59:f0:74:04:e7:e3:fc:02:47:
10:93:25:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:42:01 2026 by rpki-client