
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/F99FBCC0D7C1AA4794D95D70641B9011ABA2979A.mft
File: F99FBCC0D7C1AA4794D95D70641B9011ABA2979A.mft (raw, json)
Hash identifier: pAY7xvsY8Jksjdv5G+2o1C3CKcCl4bmUgPogcYZQSag=
Subject key identifier: 2D:DC:DC:96:8A:75:F3:5A:53:1E:F1:79:9D:EE:29:61:9D:09:E4:9B
Authority key identifier: F9:9F:BC:C0:D7:C1:AA:47:94:D9:5D:70:64:1B:90:11:AB:A2:97:9A
Certificate issuer: /CN=F99FBCC0D7C1AA4794D95D70641B9011ABA2979A
Certificate serial: 676236C631AB17092BC263DA784729FB50830C37
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F99FBCC0D7C1AA4794D95D70641B9011ABA2979A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/F99FBCC0D7C1AA4794D95D70641B9011ABA2979A.mft
Manifest number: BE
Signing time: Mon 21 Sep 2026 13:17:59 +0000
Manifest this update: Mon 21 Sep 2026 13:12:59 +0000
Manifest next update: Tue 22 Sep 2026 15:11:59 +0000
Files and hashes: 1: 3130332e3133352e32342e302f32332d3234203d3e20313331363939.roa (hash: 07viVR7x7xC+LRLwxX1MyeHpdtbWCRULeR9H9eZeyfE=)
2: F99FBCC0D7C1AA4794D95D70641B9011ABA2979A.crl (hash: FyRJkKT4ufz52VqiSCZ/54ipUM+lqy4WPLtZ76DL6VU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/F99FBCC0D7C1AA4794D95D70641B9011ABA2979A.crl
rsync://rpki-rsync.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/F99FBCC0D7C1AA4794D95D70641B9011ABA2979A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F99FBCC0D7C1AA4794D95D70641B9011ABA2979A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 15:11:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:62:36:c6:31:ab:17:09:2b:c2:63:da:78:47:29:fb:50:83:0c:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F99FBCC0D7C1AA4794D95D70641B9011ABA2979A
Validity
Not Before: Sep 21 13:12:59 2026 GMT
Not After : Sep 22 15:11:59 2026 GMT
Subject: CN=2DDCDC968A75F35A531EF1799DEE29619D09E49B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4d:c0:5f:f7:97:8f:f9:67:f7:c9:28:67:90:
ba:a3:02:c7:3a:7f:6f:ed:b1:07:33:88:a4:34:73:
1c:1a:ec:b4:89:e4:15:13:e9:90:3e:22:dc:c8:ab:
08:c0:29:6e:42:fa:0b:2c:16:59:5b:6c:27:a2:ba:
70:c8:73:2c:92:46:18:86:51:b8:c7:e0:fb:99:bf:
be:c9:bf:8e:1f:74:c2:96:b9:eb:e2:5d:ca:02:cb:
64:6e:4b:14:30:e8:ef:08:b2:0b:1b:f1:9e:ad:47:
ab:63:ef:bc:01:e9:17:ef:6b:4e:04:4a:85:24:6d:
8e:6e:6a:14:f2:94:36:cd:f8:5b:72:95:fd:2a:3e:
56:cd:19:5d:fd:bd:0a:f3:d8:29:d7:52:dc:7e:1b:
1c:fd:18:0d:ab:d4:7d:49:39:23:90:ba:aa:b6:98:
92:04:05:81:09:1f:b0:4f:75:81:9f:ce:7b:6c:c1:
e0:2f:79:d6:f8:81:ea:a5:ae:fa:ca:6b:ae:fa:2e:
38:cd:23:7a:ce:9f:ff:b7:69:7d:31:32:2d:8e:02:
2c:bc:7c:c4:c1:58:45:a8:43:d0:2d:3f:7b:bb:21:
8e:db:7f:bc:ce:4a:61:cf:26:8c:cd:78:24:97:72:
d3:9b:7d:a1:41:a8:ce:ee:6a:b2:04:f8:e6:c2:04:
88:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:DC:DC:96:8A:75:F3:5A:53:1E:F1:79:9D:EE:29:61:9D:09:E4:9B
X509v3 Authority Key Identifier:
keyid:F9:9F:BC:C0:D7:C1:AA:47:94:D9:5D:70:64:1B:90:11:AB:A2:97:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/F99FBCC0D7C1AA4794D95D70641B9011ABA2979A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F99FBCC0D7C1AA4794D95D70641B9011ABA2979A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/F99FBCC0D7C1AA4794D95D70641B9011ABA2979A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:44:6d:d5:1b:70:44:d4:2d:93:10:b7:0c:3b:90:d5:69:21:
ff:0d:47:3b:bd:45:f8:68:2a:19:b9:02:13:c9:ad:f3:74:16:
00:b3:15:8c:87:a2:cc:7e:8f:0b:0a:1c:a8:e9:e3:91:c8:6e:
f5:2b:34:77:d7:d0:2a:b6:6e:4f:96:f7:1b:da:b7:69:da:9d:
06:ed:f5:6a:18:99:24:b2:81:79:a7:d0:b5:bc:e0:d9:a4:a8:
bc:0f:ac:69:2d:bc:68:5c:15:07:a3:45:30:a0:1a:64:73:91:
10:69:80:8f:b3:14:bb:c4:92:5f:d2:f9:0c:7b:e3:29:0f:a6:
c3:a1:2f:2b:75:c8:c0:cd:be:b1:25:06:2c:97:60:de:2c:0e:
64:62:84:36:7e:12:76:5a:ac:5f:b6:9d:fc:91:1c:80:6f:6e:
41:44:29:36:15:d3:24:72:71:89:0e:c5:05:ed:b0:9e:51:83:
d5:5c:54:2a:d7:0b:a1:f7:8d:18:dc:b7:33:c3:c5:f7:fd:7b:
82:32:10:5c:bd:82:21:e2:82:87:29:b0:94:95:1b:84:9f:c9:
5d:90:06:c1:f8:f2:ca:5c:bd:70:58:ae:1a:03:c2:7e:04:4c:
d8:e8:e9:f6:be:22:38:7f:fd:01:c0:5c:bf:cc:d7:50:03:43:
01:fb:49:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:29:57 2026 by rpki-client