
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/F440C463790421765C0B198FBF82B80F70529E23.mft
File: F440C463790421765C0B198FBF82B80F70529E23.mft (raw, json)
Hash identifier: eoflfMMRhe5FbSIRoR8Weixbhc8Fm3+UU8wuVQEbn1Q=
Subject key identifier: 87:18:3A:42:6C:2E:2A:7A:EC:C9:ED:FF:1D:CC:3D:1E:B8:D3:A2:42
Authority key identifier: F4:40:C4:63:79:04:21:76:5C:0B:19:8F:BF:82:B8:0F:70:52:9E:23
Certificate issuer: /CN=F440C463790421765C0B198FBF82B80F70529E23
Certificate serial: 401066B19A38BE2CA17BCA05315347CCF5F1D7ED
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F440C463790421765C0B198FBF82B80F70529E23.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/F440C463790421765C0B198FBF82B80F70529E23.mft
Manifest number: C7
Signing time: Mon 28 Sep 2026 17:21:07 +0000
Manifest this update: Mon 28 Sep 2026 17:16:07 +0000
Manifest next update: Tue 29 Sep 2026 19:04:07 +0000
Files and hashes: 1: F440C463790421765C0B198FBF82B80F70529E23.crl (hash: L50mxk53XeaRo2Za2dFktpKcHqD1g6vdh/IguXrR4sA=)
2: 3130332e3137362e3232372e302f32342d3234203d3e20313437313534.roa (hash: vIUCd1IemIKCQ+NzE6xQfnpmhwQEajDU6BevZYDhd68=)
3: 323030313a6466303a376334303a3a2f34382d3438203d3e20313437313534.roa (hash: DUNSj4kP6eOZRckNiWJJBeXQEQuZewuUxpFimv6tinc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/F440C463790421765C0B198FBF82B80F70529E23.crl
rsync://rpki-rsync.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/F440C463790421765C0B198FBF82B80F70529E23.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F440C463790421765C0B198FBF82B80F70529E23.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 19:04:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:10:66:b1:9a:38:be:2c:a1:7b:ca:05:31:53:47:cc:f5:f1:d7:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F440C463790421765C0B198FBF82B80F70529E23
Validity
Not Before: Sep 28 17:16:07 2026 GMT
Not After : Sep 29 19:04:07 2026 GMT
Subject: CN=87183A426C2E2A7AECC9EDFF1DCC3D1EB8D3A242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a3:7a:6a:0e:ca:ec:08:06:85:6a:5f:4f:d5:
f3:1c:fc:e3:77:cd:33:56:3c:0f:4d:39:52:49:23:
68:eb:71:cf:ee:42:e7:43:c8:ea:48:af:c3:e9:45:
c3:46:dc:e1:39:ed:bf:f9:8d:36:34:c2:cd:97:54:
f5:04:dc:ce:59:10:2b:41:32:c8:62:67:4f:9a:95:
b8:21:b8:4d:2c:e5:85:71:5c:82:8c:21:d3:52:95:
3e:ee:4d:49:e0:db:eb:9a:e2:9b:85:77:38:96:7b:
30:83:a0:43:31:6b:ee:fe:93:86:02:1b:32:b1:fe:
cd:82:de:c2:08:66:d6:2f:ed:9d:96:b0:4e:42:03:
d6:16:68:ab:05:fb:63:f2:e6:70:2f:c7:ae:0b:49:
37:17:35:f4:a4:eb:3f:69:00:af:1f:18:3a:77:bb:
ab:5e:0b:47:fb:82:11:d4:f8:f6:9e:e4:c2:58:9a:
62:46:dc:e4:46:50:0c:3e:fb:f3:10:9a:8d:e5:4f:
6f:45:30:fc:c3:3f:72:18:31:f4:7c:6d:71:4c:38:
80:95:d2:91:77:57:af:bb:58:1d:df:79:24:89:6e:
78:d0:e2:45:a5:01:53:a7:d7:b2:77:b3:61:1b:2b:
02:bb:e7:06:3b:30:89:c3:cd:35:ce:a5:2f:86:8e:
c3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:18:3A:42:6C:2E:2A:7A:EC:C9:ED:FF:1D:CC:3D:1E:B8:D3:A2:42
X509v3 Authority Key Identifier:
keyid:F4:40:C4:63:79:04:21:76:5C:0B:19:8F:BF:82:B8:0F:70:52:9E:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/F440C463790421765C0B198FBF82B80F70529E23.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F440C463790421765C0B198FBF82B80F70529E23.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/F440C463790421765C0B198FBF82B80F70529E23.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:07:ba:7c:89:31:43:f6:f0:01:f3:59:ed:8b:a9:8b:3f:1d:
04:b2:56:54:8a:98:a1:ae:c6:3c:c6:6d:6e:cb:7a:57:ad:46:
f3:15:85:9b:de:72:c5:ed:90:56:f7:2d:9e:f9:8b:03:1e:53:
a6:13:26:df:fa:bb:c1:45:41:5e:32:69:65:cf:9a:f0:35:86:
7c:1c:8b:55:3f:4d:b6:35:c8:c7:60:b6:6e:e4:21:3f:47:5b:
c8:b4:9b:27:de:d7:6f:86:df:f0:3b:3e:25:b0:f2:31:ff:a1:
c4:b3:f1:fa:91:9c:b3:48:41:9c:c2:86:75:94:75:55:18:0b:
80:10:fc:ad:a7:6e:b9:70:57:d7:fc:15:bb:4e:5c:49:40:21:
ae:83:59:30:f8:d2:9a:06:0c:c4:a7:09:69:5b:2f:5d:40:56:
a8:84:c0:75:59:69:c4:c0:4a:7a:ba:67:92:aa:26:36:74:0b:
f6:d9:6f:82:94:2d:1e:c6:c8:b5:d8:80:8f:61:5b:95:5a:de:
fa:e0:12:3a:0b:48:d6:5e:1e:ab:1a:9a:5f:c2:ad:16:ed:62:
33:f6:48:b2:06:bc:a0:3b:2c:32:bf:f6:0b:36:32:35:c7:61:
83:1b:21:0d:29:5c:86:d4:c8:46:7b:e3:ee:52:cb:f5:2e:ed:
8c:b3:5b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 04:37:26 2026 by rpki-client