
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/09F1FCE71540608DD361D20037B585CA6313B714.mft
File: 09F1FCE71540608DD361D20037B585CA6313B714.mft (raw, json)
Hash identifier: MOQNlJk8ZG02i/gTyGqQZfPVEP1vMKUtuPaCNBpUDK4=
Subject key identifier: 26:24:A7:D1:CC:D5:EC:DD:20:BD:19:8C:F8:F1:67:9F:3C:95:27:0A
Authority key identifier: 09:F1:FC:E7:15:40:60:8D:D3:61:D2:00:37:B5:85:CA:63:13:B7:14
Certificate issuer: /CN=09F1FCE71540608DD361D20037B585CA6313B714
Certificate serial: 0EFBAE3679A7CF908C2DCB0E1E16F9311AC1E916
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/09F1FCE71540608DD361D20037B585CA6313B714.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/09F1FCE71540608DD361D20037B585CA6313B714.mft
Manifest number: BF
Signing time: Tue 22 Sep 2026 09:17:59 +0000
Manifest this update: Tue 22 Sep 2026 09:12:59 +0000
Manifest next update: Wed 23 Sep 2026 09:33:59 +0000
Files and hashes: 1: 323030313a6466373a616630303a3a2f34382d3438203d3e20313338313432.roa (hash: lNRKhcmiZUAq3a5jFdaJmEqXMHj1lj+pscOEkjDxix0=)
2: 3130332e3133342e31362e302f32342d3234203d3e20313338313432.roa (hash: Tdrs/9MxQFRJ04JmOuNBrPQeJZxfkO1jdYAYtxuEviE=)
3: 09F1FCE71540608DD361D20037B585CA6313B714.crl (hash: r4TRTo12bfWq8VmOeXDlQIYkWs3l076sXCVfytK4Yqo=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/09F1FCE71540608DD361D20037B585CA6313B714.crl
rsync://rpki-rsync.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/09F1FCE71540608DD361D20037B585CA6313B714.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/09F1FCE71540608DD361D20037B585CA6313B714.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 23 Sep 2026 09:33:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:fb:ae:36:79:a7:cf:90:8c:2d:cb:0e:1e:16:f9:31:1a:c1:e9:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09F1FCE71540608DD361D20037B585CA6313B714
Validity
Not Before: Sep 22 09:12:59 2026 GMT
Not After : Sep 23 09:33:59 2026 GMT
Subject: CN=2624A7D1CCD5ECDD20BD198CF8F1679F3C95270A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:43:9c:72:69:75:95:af:3a:00:a4:12:13:dc:
2b:37:d1:9e:b3:81:52:b3:5a:33:37:c4:c1:02:ff:
84:98:4e:0c:2e:fc:b4:5b:5f:d9:86:e7:f6:47:0b:
63:18:75:73:47:9f:74:06:19:42:49:3f:07:73:89:
61:f0:c3:7c:ca:42:b2:d5:97:e6:15:3e:91:a4:df:
8a:b1:ad:00:54:e9:7f:68:32:96:fb:40:ac:fa:cf:
cd:c4:f9:f7:32:c2:6c:96:4a:d2:62:fe:21:66:95:
f9:63:40:f9:6b:12:32:46:c5:4e:ab:ba:e9:11:6f:
68:62:0f:9a:8b:80:a7:32:64:ee:ff:57:23:b4:9d:
7a:50:6f:51:23:e0:ec:f1:31:a9:10:6c:9a:db:b2:
a4:7b:b2:80:13:a4:16:3d:21:44:d5:4a:98:ea:c1:
68:9c:cc:35:41:52:65:1d:82:5b:fa:27:cb:75:59:
d2:e0:ec:65:c5:e9:d2:6d:b7:92:1e:fa:7a:01:b6:
30:61:ae:53:cb:3f:3d:40:0b:68:c2:0a:b2:57:fa:
65:93:e6:41:cd:e0:91:7e:af:fe:f8:cd:0a:b5:19:
72:6e:81:5b:5b:29:26:c4:45:f9:72:7c:d2:5f:a3:
c2:b4:bf:63:ac:be:b7:6b:57:94:3e:c3:96:f8:47:
75:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:24:A7:D1:CC:D5:EC:DD:20:BD:19:8C:F8:F1:67:9F:3C:95:27:0A
X509v3 Authority Key Identifier:
keyid:09:F1:FC:E7:15:40:60:8D:D3:61:D2:00:37:B5:85:CA:63:13:B7:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/09F1FCE71540608DD361D20037B585CA6313B714.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/09F1FCE71540608DD361D20037B585CA6313B714.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/09F1FCE71540608DD361D20037B585CA6313B714.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:ae:0a:88:c9:e3:35:fd:0f:54:2f:15:69:d3:8e:57:ed:ac:
75:e8:59:13:92:41:0a:c1:58:f3:85:50:d0:e5:d3:ff:80:a9:
46:23:55:ca:2f:1a:84:3c:83:df:8a:0a:bc:99:1d:50:f8:97:
3d:b6:b8:75:0e:d0:23:c7:ae:50:83:4e:f8:84:de:8d:41:be:
db:37:f0:e0:23:cb:07:42:88:4a:41:ad:2c:35:76:0e:f2:e2:
de:30:50:21:a5:a5:2f:d8:c0:fe:ef:81:7c:fa:54:23:31:b6:
47:10:26:a7:64:ed:56:32:e7:e6:30:5b:7a:aa:6c:c4:a2:ca:
68:65:a2:83:89:19:04:6b:e5:5d:2a:27:fe:24:6a:a1:41:fc:
3e:e4:10:b6:32:71:fa:50:84:27:d9:6a:45:d4:7a:75:59:51:
35:fb:47:e2:b3:42:e6:13:0e:ca:14:9f:00:88:ec:c9:32:64:
f4:29:2b:72:2f:a4:21:d0:df:94:fb:b8:1f:40:89:33:8b:e2:
3c:c7:f1:89:7c:59:5b:12:61:32:b4:06:31:00:59:c7:81:d5:
c2:af:6c:87:20:8a:bd:7b:aa:0b:dc:0b:68:52:67:e0:73:8b:
c8:b3:15:50:24:d7:ea:5c:66:88:f3:19:d5:5f:2a:1a:6b:db:
69:03:2f:44
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUDvuuNnmnz5CMLcsOHhb5MRrB6RYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDlGMUZDRTcxNTQwNjA4REQzNjFEMjAwMzdCNTg1Q0E2
MzEzQjcxNDAeFw0yNjA5MjIwOTEyNTlaFw0yNjA5MjMwOTMzNTlaMDMxMTAvBgNV
BAMTKDI2MjRBN0QxQ0NENUVDREQyMEJEMTk4Q0Y4RjE2NzlGM0M5NTI3MEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWQ5xyaXWVrzoApBIT3Cs30Z6z
gVKzWjM3xMEC/4SYTgwu/LRbX9mG5/ZHC2MYdXNHn3QGGUJJPwdziWHww3zKQrLV
l+YVPpGk34qxrQBU6X9oMpb7QKz6z83E+fcywmyWStJi/iFmlfljQPlrEjJGxU6r
uukRb2hiD5qLgKcyZO7/VyO0nXpQb1Ej4OzxMakQbJrbsqR7soATpBY9IUTVSpjq
wWiczDVBUmUdglv6J8t1WdLg7GXF6dJtt5Ie+noBtjBhrlPLPz1AC2jCCrJX+mWT
5kHN4JF+r/74zQq1GXJugVtbKSbERflyfNJfo8K0v2OsvrdrV5Q+w5b4R3WbAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUJiSn0czV7N0gvRmM+PFnnzyVJwowHwYDVR0j
BBgwFoAUCfH85xVAYI3TYdIAN7WFymMTtxQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YmU1YWE5M2QtNzg3Yi00YTE3LTg3ZDAtN2VmNDFiMGYyZGVmLzAvMDlGMUZDRTcx
NTQwNjA4REQzNjFEMjAwMzdCNTg1Q0E2MzEzQjcxNC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8wOUYxRkNFNzE1NDA2MDhERDM2MUQyMDAzN0I1ODVDQTYzMTNC
NzE0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmU1YWE5M2QtNzg3Yi00YTE3LTg3
ZDAtN2VmNDFiMGYyZGVmLzAvMDlGMUZDRTcxNTQwNjA4REQzNjFEMjAwMzdCNTg1
Q0E2MzEzQjcxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGCuCojJ4zX9D1QvFWnTjlftrHXoWROSQQrB
WPOFUNDl0/+AqUYjVcovGoQ8g9+KCryZHVD4lz22uHUO0CPHrlCDTviE3o1Bvts3
8OAjywdCiEpBrSw1dg7y4t4wUCGlpS/YwP7vgXz6VCMxtkcQJqdk7VYy5+YwW3qq
bMSiymhlooOJGQRr5V0qJ/4kaqFB/D7kELYycfpQhCfZakXUenVZUTX7R+KzQuYT
DsoUnwCI7MkyZPQpK3IvpCHQ35T7uB9AiTOL4jzH8Yl8WVsSYTK0BjEAWceB1cKv
bIcgir17qgvcC2hSZ+Bzi8izFVAk1+pcZojzGdVfKhpr22kDL0Q=
-----END CERTIFICATE-----
Generated at Wed Sep 23 01:31:01 2026 by rpki-client