
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/F908019F3DDAFD79BB1C8B63809C31742646ED94.mft
File: F908019F3DDAFD79BB1C8B63809C31742646ED94.mft (raw, json)
Hash identifier: qjU/Vb465g929qfaIS0tsPy8ee/LkPh2ctxAmxAEFHE=
Subject key identifier: 1A:66:9A:5B:7D:BD:A2:28:68:34:50:68:0F:78:66:79:FD:47:AD:23
Authority key identifier: F9:08:01:9F:3D:DA:FD:79:BB:1C:8B:63:80:9C:31:74:26:46:ED:94
Certificate issuer: /CN=F908019F3DDAFD79BB1C8B63809C31742646ED94
Certificate serial: 158DDB42409D230C249B4863D4EC609E40E28949
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F908019F3DDAFD79BB1C8B63809C31742646ED94.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/F908019F3DDAFD79BB1C8B63809C31742646ED94.mft
Manifest number: C2
Signing time: Thu 24 Sep 2026 15:45:10 +0000
Manifest this update: Thu 24 Sep 2026 15:40:10 +0000
Manifest next update: Fri 25 Sep 2026 19:19:10 +0000
Files and hashes: 1: 3135302e3234322e3137362e302f32342d3234203d3e20313532303639.roa (hash: cjE8N8SonYXudiNgGVS0p3xIfvw3WuGivTObtGkKRTg=)
2: 3135302e3234322e3137372e302f32342d3234203d3e20313532303639.roa (hash: g30Ubr5lnHY7RgPz4sO/yn/hRSs7dTdCi43T+BO8StE=)
3: F908019F3DDAFD79BB1C8B63809C31742646ED94.crl (hash: D5zmsZin7/xm3+DLY44JtAzS+xbRY5LQqlDb8w+9AO4=)
4: 3135302e3234322e3137362e302f32332d3233203d3e20313532303639.roa (hash: I26dPICHNbNpOEaAeWFDJjc3y6XbZTVJydnD33XIwu0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/F908019F3DDAFD79BB1C8B63809C31742646ED94.crl
rsync://rpki-rsync.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/F908019F3DDAFD79BB1C8B63809C31742646ED94.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F908019F3DDAFD79BB1C8B63809C31742646ED94.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 10:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:8d:db:42:40:9d:23:0c:24:9b:48:63:d4:ec:60:9e:40:e2:89:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F908019F3DDAFD79BB1C8B63809C31742646ED94
Validity
Not Before: Sep 24 15:40:10 2026 GMT
Not After : Sep 25 19:19:10 2026 GMT
Subject: CN=1A669A5B7DBDA228683450680F786679FD47AD23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e9:33:a0:b4:a5:c0:ec:e7:84:ef:67:25:01:
3b:67:cc:97:1f:a0:72:22:eb:37:e3:e7:4e:f4:d0:
48:0f:82:2f:a0:e3:80:41:20:2f:4f:1c:13:d8:b6:
e9:1e:35:3c:01:a1:c5:3f:4b:51:a8:67:9f:32:c2:
8b:87:94:06:62:ba:64:a5:bc:42:16:ea:c7:26:3e:
2c:1e:7b:d9:19:89:92:90:aa:b0:26:45:c9:a6:a2:
8b:33:62:fd:4d:18:80:97:40:09:bc:51:a4:c0:10:
a4:16:6e:14:4a:f2:9f:14:ea:4d:70:6a:60:99:0a:
da:a7:f3:1a:09:aa:ec:8c:f3:15:23:86:8a:27:1a:
0c:9a:3d:8d:bd:e5:ea:67:c5:4d:2f:e8:f1:6b:6d:
f8:e0:1d:74:5d:32:8a:05:ff:89:f6:97:ca:d1:e6:
1b:89:2e:42:18:4f:85:62:00:73:ae:da:64:88:cc:
23:a4:25:c1:d6:ac:7d:47:f3:0c:c9:ee:d1:3e:ab:
ca:ad:c1:05:3b:8f:14:4e:55:99:9b:d2:da:eb:2d:
ad:4c:f0:7f:e2:0c:7e:b3:dd:16:0f:1c:72:bb:69:
99:89:df:04:1f:3f:78:cb:49:81:0b:f0:bd:27:5a:
92:e1:18:2a:fa:16:4f:42:16:66:21:99:be:b8:96:
f8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:66:9A:5B:7D:BD:A2:28:68:34:50:68:0F:78:66:79:FD:47:AD:23
X509v3 Authority Key Identifier:
keyid:F9:08:01:9F:3D:DA:FD:79:BB:1C:8B:63:80:9C:31:74:26:46:ED:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/F908019F3DDAFD79BB1C8B63809C31742646ED94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F908019F3DDAFD79BB1C8B63809C31742646ED94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/F908019F3DDAFD79BB1C8B63809C31742646ED94.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:f1:37:97:3b:32:f2:f1:c2:99:bc:49:23:91:d5:f0:74:06:
31:b2:83:d0:ed:57:ea:77:ee:dc:6a:67:32:46:ee:96:03:6e:
fa:7f:af:4e:26:c2:4f:c7:ff:c6:74:4c:f3:30:99:19:fa:1f:
99:e2:f8:f9:8d:00:bc:69:a1:b2:22:3f:8d:75:be:ff:17:96:
b6:a0:84:4b:52:c5:6b:c1:d4:ae:a4:f5:31:9e:11:14:ca:c3:
6e:93:bb:84:55:6b:68:22:b7:e4:56:67:40:74:37:45:40:3f:
83:a3:c1:05:f6:dc:50:44:7b:43:71:49:c6:23:bb:4b:0e:33:
1f:a5:89:ac:5a:fc:eb:61:0e:13:0c:56:2c:1b:36:c5:c4:8b:
88:d5:b1:0e:74:c1:bd:66:17:78:8d:4d:48:cd:38:23:59:2c:
e0:b1:ae:1b:71:56:9b:40:15:b5:e9:4b:9d:a8:e3:fc:74:a5:
2b:1d:f1:24:c4:c2:f4:72:a3:d0:8b:f4:06:c8:11:ee:6b:a4:
b2:7e:b7:22:cf:32:63:53:be:7f:da:5c:f1:2d:68:a8:c4:5e:
52:e6:ea:c2:df:8c:c3:f4:d4:20:2e:ca:7b:fd:a1:03:b2:3f:
62:c2:9b:0e:b4:b6:40:2e:a7:94:40:8d:77:f1:e8:e5:62:95:
bd:ed:e4:1f
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUFY3bQkCdIwwkm0hj1OxgnkDiiUkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjkwODAxOUYzRERBRkQ3OUJCMUM4QjYzODA5QzMxNzQy
NjQ2RUQ5NDAeFw0yNjA5MjQxNTQwMTBaFw0yNjA5MjUxOTE5MTBaMDMxMTAvBgNV
BAMTKDFBNjY5QTVCN0RCREEyMjg2ODM0NTA2ODBGNzg2Njc5RkQ0N0FEMjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC76TOgtKXA7OeE72clATtnzJcf
oHIi6zfj50700EgPgi+g44BBIC9PHBPYtukeNTwBocU/S1GoZ58ywouHlAZiumSl
vEIW6scmPiwee9kZiZKQqrAmRcmmooszYv1NGICXQAm8UaTAEKQWbhRK8p8U6k1w
amCZCtqn8xoJquyM8xUjhoonGgyaPY295epnxU0v6PFrbfjgHXRdMooF/4n2l8rR
5huJLkIYT4ViAHOu2mSIzCOkJcHWrH1H8wzJ7tE+q8qtwQU7jxROVZmb0trrLa1M
8H/iDH6z3RYPHHK7aZmJ3wQfP3jLSYEL8L0nWpLhGCr6Fk9CFmYhmb64lviLAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUGmaaW329oihoNFBoD3hmef1HrSMwHwYDVR0j
BBgwFoAU+QgBnz3a/Xm7HItjgJwxdCZG7ZQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NTdjMDU1MjEtMDMzOC00ZjMxLWEyMDktNGY4NzhiZWY2MzhhLzAvRjkwODAxOUYz
RERBRkQ3OUJCMUM4QjYzODA5QzMxNzQyNjQ2RUQ5NC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9GOTA4MDE5RjNEREFGRDc5QkIxQzhCNjM4MDlDMzE3NDI2NDZF
RDk0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTdjMDU1MjEtMDMzOC00ZjMxLWEy
MDktNGY4NzhiZWY2MzhhLzAvRjkwODAxOUYzRERBRkQ3OUJCMUM4QjYzODA5QzMx
NzQyNjQ2RUQ5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAALxN5c7MvLxwpm8SSOR1fB0BjGyg9DtV+p3
7txqZzJG7pYDbvp/r04mwk/H/8Z0TPMwmRn6H5ni+PmNALxpobIiP411vv8Xlrag
hEtSxWvB1K6k9TGeERTKw26Tu4RVa2git+RWZ0B0N0VAP4OjwQX23FBEe0NxScYj
u0sOMx+liaxa/OthDhMMViwbNsXEi4jVsQ50wb1mF3iNTUjNOCNZLOCxrhtxVptA
FbXpS52o4/x0pSsd8STEwvRyo9CL9AbIEe5rpLJ+tyLPMmNTvn/aXPEtaKjEXlLm
6sLfjMP01CAuynv9oQOyP2LCmw60tkAup5RAjXfx6OVilb3t5B8=
-----END CERTIFICATE-----
Generated at Thu Sep 24 22:36:27 2026 by rpki-client