
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/F93D8D8531B3FFBAEB6DF1A9069610EC29EC2F93.mft
File: F93D8D8531B3FFBAEB6DF1A9069610EC29EC2F93.mft (raw, json)
Hash identifier: gGszPALimKw6pBqGS8xyNiABg612HSxvqfzDOAt27OY=
Subject key identifier: 4B:2E:99:BE:EB:6D:99:A9:84:EF:22:72:85:4C:9D:54:AF:D4:1A:DB
Authority key identifier: F9:3D:8D:85:31:B3:FF:BA:EB:6D:F1:A9:06:96:10:EC:29:EC:2F:93
Certificate issuer: /CN=F93D8D8531B3FFBAEB6DF1A9069610EC29EC2F93
Certificate serial: 76FDDA8CC754AAC3B3A1E16085A7229E1525DDE7
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F93D8D8531B3FFBAEB6DF1A9069610EC29EC2F93.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/F93D8D8531B3FFBAEB6DF1A9069610EC29EC2F93.mft
Manifest number: FF
Signing time: Mon 09 Nov 2026 05:27:15 +0000
Manifest this update: Mon 09 Nov 2026 05:22:15 +0000
Manifest next update: Tue 10 Nov 2026 06:01:15 +0000
Files and hashes: 1: F93D8D8531B3FFBAEB6DF1A9069610EC29EC2F93.crl (hash: /ict015q/8sEQjEIcGRY5TqpafmvUAHITbucMwTRc+0=)
2: 3130332e3134332e3132382e302f32342d3234203d3e20313339333933.roa (hash: 7V6Kaddss1kMYXtVZqgRaFiJNP7g2Vd9OgIa0Z52ZP0=)
3: 3130332e3134332e3132392e302f32342d3234203d3e20313339333933.roa (hash: SgGqskI/L+RorPsFbPiZwVbVpsBgnJmScUn/8q4o3/A=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/F93D8D8531B3FFBAEB6DF1A9069610EC29EC2F93.crl
rsync://rpki-rsync.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/F93D8D8531B3FFBAEB6DF1A9069610EC29EC2F93.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F93D8D8531B3FFBAEB6DF1A9069610EC29EC2F93.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Nov 2026 06:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:fd:da:8c:c7:54:aa:c3:b3:a1:e1:60:85:a7:22:9e:15:25:dd:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F93D8D8531B3FFBAEB6DF1A9069610EC29EC2F93
Validity
Not Before: Nov 9 05:22:15 2026 GMT
Not After : Nov 10 06:01:15 2026 GMT
Subject: CN=4B2E99BEEB6D99A984EF2272854C9D54AFD41ADB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1c:99:ef:53:ba:f2:2d:1b:64:f5:fd:a3:a8:
b2:84:0b:76:64:dc:e9:f0:ea:5a:62:ea:51:de:99:
0d:5e:b8:fd:b7:8d:3c:b2:c8:45:f9:e4:7a:fe:f5:
0c:8e:a7:63:c1:c2:55:34:d6:92:67:43:de:2e:ab:
c6:bc:b0:79:d8:1c:8a:1b:06:e1:d8:dd:a3:4f:ca:
26:bd:60:b2:99:3d:58:57:1f:68:e9:6e:49:f8:7d:
aa:3c:ec:5e:0e:99:8f:db:ec:a5:71:ee:50:13:28:
f6:ff:1a:2d:d0:ad:3d:c6:97:77:98:97:23:cc:30:
7e:81:61:fd:42:75:45:90:30:b8:c2:84:52:92:92:
8a:b1:c9:f1:fc:31:f3:47:f8:1f:16:38:5f:3d:47:
7d:09:af:7d:4e:e1:7d:07:75:5d:bd:cb:fc:ad:e3:
a3:7d:c6:2d:ba:8f:33:e7:07:0f:b0:7a:95:80:9d:
84:ec:84:f0:ed:de:5e:7a:30:82:60:55:96:aa:83:
d8:5e:19:2e:6a:c5:e6:5d:5c:ab:79:89:cf:88:84:
56:bb:ba:c0:ae:4a:62:e0:e3:89:fb:cf:54:d3:f4:
78:a9:7d:b6:2b:2b:1c:33:79:56:5d:a5:56:7b:41:
f2:19:fa:74:af:80:e9:50:53:42:6b:72:86:e6:65:
5b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:2E:99:BE:EB:6D:99:A9:84:EF:22:72:85:4C:9D:54:AF:D4:1A:DB
X509v3 Authority Key Identifier:
keyid:F9:3D:8D:85:31:B3:FF:BA:EB:6D:F1:A9:06:96:10:EC:29:EC:2F:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/F93D8D8531B3FFBAEB6DF1A9069610EC29EC2F93.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F93D8D8531B3FFBAEB6DF1A9069610EC29EC2F93.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/F93D8D8531B3FFBAEB6DF1A9069610EC29EC2F93.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:d1:60:5a:69:11:cc:16:bb:5e:b7:7b:41:3c:60:e3:60:4c:
fc:cb:d2:17:0d:df:5f:5f:a8:cf:37:ac:87:23:0d:37:dc:8d:
85:a7:f9:b3:19:39:e8:8c:e8:77:ae:a7:1d:97:fd:c4:72:e3:
83:db:37:5e:0d:d7:5d:1e:fc:5a:a7:7c:03:c4:2a:0f:ce:37:
b6:e6:90:ea:1e:2c:fa:dd:15:dc:81:3c:cf:64:40:30:a7:a6:
81:ac:1a:1d:6d:7e:c4:9a:dc:5b:08:52:6f:5d:fb:9f:cb:dc:
6f:6a:3e:73:d7:24:d4:76:6f:69:e9:aa:c1:a0:2b:71:fc:7b:
ca:36:c2:97:ac:51:df:38:ae:c4:f2:7d:44:2d:fd:98:3f:6a:
f3:67:9a:0e:d2:06:e8:47:23:7b:0b:d4:4d:72:e1:30:4c:79:
a6:29:42:46:3f:fb:ba:e6:5c:73:b8:d5:2a:47:9c:d2:30:dd:
68:6b:64:bd:76:ba:39:4b:c6:c9:92:cd:e5:87:f3:6d:d7:0f:
49:18:c2:8c:a8:35:04:90:c5:bd:ef:83:c7:08:a7:c4:0d:29:
64:bd:e7:0f:0e:e8:f4:9d:3c:67:99:c2:11:1b:41:ca:04:f2:
b7:04:46:00:09:f5:93:f9:42:a1:04:5c:67:5c:73:cf:87:31:
b8:66:ca:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 9 21:01:39 2026 by rpki-client