
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/A9DFB6024D05A37CA0C756EC747E898140885BC9.mft
File: A9DFB6024D05A37CA0C756EC747E898140885BC9.mft (raw, json)
Hash identifier: LilYkHgLRwRubV91axI6/pzGpqjqs3WCMV267Y8s3Ow=
Subject key identifier: 87:0C:D7:79:B2:76:3C:DF:E2:12:CA:58:4E:B5:5B:70:93:13:52:F7
Authority key identifier: A9:DF:B6:02:4D:05:A3:7C:A0:C7:56:EC:74:7E:89:81:40:88:5B:C9
Certificate issuer: /CN=A9DFB6024D05A37CA0C756EC747E898140885BC9
Certificate serial: 6552B9F6084D4EF4DFD643C57719AD465914F507
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9DFB6024D05A37CA0C756EC747E898140885BC9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/A9DFB6024D05A37CA0C756EC747E898140885BC9.mft
Manifest number: 3D
Signing time: Tue 16 Jun 2026 17:20:04 +0000
Manifest this update: Tue 16 Jun 2026 17:15:04 +0000
Manifest next update: Wed 17 Jun 2026 18:06:04 +0000
Files and hashes: 1: 3130332e3234372e31362e302f32342d3234203d3e203338313635.roa (hash: glySjVWaeYKKJGdVLX98kL01SxrrhC2o5DvZ/OFZzes=)
2: 3131362e31322e34302e302f32342d3234203d3e203338313635.roa (hash: solCgiJ0IBXmILHhdk+WcwssrUHzmifkTZH0iCFde94=)
3: 3130332e38332e3134322e302f32342d3234203d3e203338313635.roa (hash: YrZIFaqaTChjnkZ/BX+Yt+LiIgZZAfEd+7+0eXA8anQ=)
4: 3131362e31322e34302e302f32312d3234203d3e203338313635.roa (hash: XG2kEfirxjj/sDq/rblsGtFwcedIIKGdVI/XxKks4EQ=)
5: 3131342e33302e38382e302f32312d3234203d3e203338313635.roa (hash: PbHEb+XaCGRxOonc9+PyBhvmLickz9HVhiTfl0wL8wY=)
6: 3131342e33302e38382e302f32342d3234203d3e203338313635.roa (hash: TYxvOObRiApVHdygkcJ79px01l2EeTEanmBRk9sEhU8=)
7: 3131342e33302e39342e302f32342d3234203d3e203338313635.roa (hash: G8aUIjts1s/SyprhduUQ7undoZSDOgnTsSv1h0ZIPBI=)
8: 323430313a646363303a3a2f33322d3438203d3e203338313635.roa (hash: 2ylo3HpAhVkvHZhTyyQa6+TpBddihUGH17bMztGMO8Y=)
9: 3131362e31322e34372e302f32342d3234203d3e203338313635.roa (hash: ls6pClLibFG+ZtAvlvA5DPGIjVB65RJG/A/2js2edZI=)
10: 3130332e3234372e31362e302f32332d3234203d3e203338313635.roa (hash: X2L0BGiTvmgLJtgSEYwPB9xF12na1ku6hIINh+wHP14=)
11: 3131362e31322e34332e302f32342d3234203d3e203338313635.roa (hash: vuNc4l/9yLIs4KyCpx5p6F1jMwXXBMM4BQHYhbheraI=)
12: 3131362e31322e34352e302f32342d3234203d3e203338313635.roa (hash: /Qbizla9Rd9j7hntYwBfkRjqiwhDVjGQMjdVjta/V4o=)
13: 3131362e31322e34322e302f32342d3234203d3e203338313635.roa (hash: Tzz51V+z7G+M0amuU470kd9KxBTkAYh2VanJBe/CIik=)
14: 3131342e33302e39332e302f32342d3234203d3e203338313635.roa (hash: Y4OQkQ+6pCKwFE7J9SktmKY2Oia99e7uSzB1cyzK/sw=)
15: 3130332e3234372e31372e302f32342d3234203d3e203338313635.roa (hash: 5amtZ+LM77tqz27nu3gKgm99BvgZZy43q/i93530bY0=)
16: 3131362e31322e34362e302f32342d3234203d3e203338313635.roa (hash: VdZyujauditCo5BInDzGT86RLe022tUhB8aqRECGwWM=)
17: 3131362e31322e34342e302f32342d3234203d3e203338313635.roa (hash: 4eVsgYjQx/GwRQGHLYtsEEdD640KhW1jdNg/AXAmGj8=)
18: 3130332e38332e3134302e302f32342d3234203d3e203338313635.roa (hash: fksrul4lMZ1/XL5r5cu/WNsWpdzw6wwNzqAHD2IefPw=)
19: 3131342e33302e39302e302f32342d3234203d3e203338313635.roa (hash: sDSoeXLG7m9Vd+TPJvOtkj0D0bh9+lF74Y6p0yHJT2w=)
20: 3130332e38332e3134332e302f32342d3234203d3e203338313635.roa (hash: PzK9iamlsHrrCIK36AFek4huEos9vJO/Mb+qJmCN8TU=)
21: 3131342e33302e38392e302f32342d3234203d3e203338313635.roa (hash: maWh9CwQAwSd/hgh31AypikUc85sBDX5Qkb/wXAwqQ4=)
22: 3131342e33302e39322e302f32342d3234203d3e203338313635.roa (hash: XxFeX4bK2Dh55oFKthxbGwYO1QPL6JkUjpiac/LGmFc=)
23: 3131342e33302e39312e302f32342d3234203d3e203338313635.roa (hash: hwrp8oltXPCRSuxrHgsojYMMFzDn1UCIz4HCYehypeU=)
24: 3130332e38332e3134302e302f32322d3234203d3e203338313635.roa (hash: Ik3fxLSlXA2Xnh23AevRPdy9KUS+oUVTjYCiGIABhYM=)
25: 3130332e38332e3134312e302f32342d3234203d3e203338313635.roa (hash: caorMzAk2rhKrHkZPEylYGbz3q7q/4kgUFG0ZpSaKuk=)
26: A9DFB6024D05A37CA0C756EC747E898140885BC9.crl (hash: 80nVncnI/k/7/IEpS83XlkmLzRPuTzLr4wnmKwIxv/M=)
27: 3131362e31322e34312e302f32342d3234203d3e203338313635.roa (hash: F7W3l45HCPDJENu+RobZMG7HgvBdxexYhGm3GKsDUsc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/A9DFB6024D05A37CA0C756EC747E898140885BC9.crl
rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/A9DFB6024D05A37CA0C756EC747E898140885BC9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9DFB6024D05A37CA0C756EC747E898140885BC9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 18:06:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:52:b9:f6:08:4d:4e:f4:df:d6:43:c5:77:19:ad:46:59:14:f5:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9DFB6024D05A37CA0C756EC747E898140885BC9
Validity
Not Before: Jun 16 17:15:04 2026 GMT
Not After : Jun 17 18:06:04 2026 GMT
Subject: CN=870CD779B2763CDFE212CA584EB55B70931352F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f0:97:8a:40:87:ad:0b:7f:4f:79:d7:bf:d3:
bf:43:01:61:ff:b4:1d:85:98:e4:6b:8d:34:71:a3:
72:ea:f8:b7:f1:1f:30:77:90:6b:89:2c:f4:ef:a0:
dd:df:f4:5c:3f:4e:9f:b2:ed:10:0c:fc:84:20:fb:
02:47:01:4e:a5:58:7a:49:85:7c:44:e9:de:96:66:
dd:8d:4f:2e:8d:12:13:aa:fc:60:34:25:98:ab:cf:
26:89:45:1b:f2:6b:a0:2b:35:ef:56:68:8b:d6:bc:
0b:cc:e9:18:fd:80:49:d4:b0:c6:fa:1f:cc:47:80:
00:78:94:a8:c6:bc:f4:8f:35:6a:78:e4:ec:cf:88:
1b:90:e4:f8:1a:61:a9:68:58:b6:f7:5f:70:5d:7e:
51:2c:20:54:ec:58:9e:e7:17:f9:58:02:64:37:72:
aa:42:95:89:7c:10:8f:08:7a:84:9f:13:c9:2c:66:
8a:27:d7:9c:8a:a0:d8:5c:69:00:65:32:13:71:bc:
26:70:a8:3a:ce:bf:98:1e:37:4d:a8:8e:ea:03:94:
ed:4c:4a:86:85:54:3d:80:fe:4b:82:d3:2f:a8:27:
01:1a:fe:b6:5b:a8:d9:69:ab:d1:1a:14:8e:ed:3d:
50:33:ee:b6:96:c3:65:16:b4:57:8b:53:7b:61:bb:
77:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:0C:D7:79:B2:76:3C:DF:E2:12:CA:58:4E:B5:5B:70:93:13:52:F7
X509v3 Authority Key Identifier:
keyid:A9:DF:B6:02:4D:05:A3:7C:A0:C7:56:EC:74:7E:89:81:40:88:5B:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/A9DFB6024D05A37CA0C756EC747E898140885BC9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9DFB6024D05A37CA0C756EC747E898140885BC9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/A9DFB6024D05A37CA0C756EC747E898140885BC9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:0a:73:c7:5f:c2:a7:5b:b7:b3:60:3a:cf:6e:44:95:53:ec:
bf:c3:d3:56:ba:1b:ab:92:e1:21:f7:db:46:cd:bd:52:16:0e:
32:fa:c8:f4:d6:5e:fd:81:aa:e5:f3:2c:ac:6c:aa:68:fa:ab:
9f:74:ed:ba:7a:41:54:e6:24:86:65:1d:30:6e:36:38:8b:41:
55:33:df:1c:7f:db:7d:39:5b:43:03:6b:33:fb:bb:d1:15:e9:
12:b5:96:cc:e3:a5:87:3b:c8:9b:6d:43:de:80:49:de:30:bf:
21:f9:8a:ce:10:dd:38:ad:36:dc:51:ae:ed:8f:16:16:89:83:
aa:2b:df:88:5f:6a:c3:39:75:20:d8:f6:7f:8d:c3:f7:20:84:
94:ab:21:f7:93:27:c5:6b:29:5e:a7:98:6c:27:77:ba:74:29:
13:4b:4d:5c:2c:79:7f:cd:42:cb:05:8a:aa:ad:d5:d3:0e:58:
03:1b:13:1d:f0:a5:da:78:08:b8:48:d9:50:7b:d4:41:66:aa:
c6:3e:4f:d7:b5:8f:4e:86:f1:eb:12:ea:32:f5:54:a9:4c:4c:
05:0b:4f:54:bd:1a:95:43:b6:de:4a:3e:82:0a:a8:91:f2:17:
44:44:3e:2d:88:f7:f3:1d:05:2f:b9:0a:d4:60:e2:e8:a2:4e:
a0:d0:10:1a
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUZVK59ghNTvTf1kPFdxmtRlkU9QcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTlERkI2MDI0RDA1QTM3Q0EwQzc1NkVDNzQ3RTg5ODE0
MDg4NUJDOTAeFw0yNjA2MTYxNzE1MDRaFw0yNjA2MTcxODA2MDRaMDMxMTAvBgNV
BAMTKDg3MENENzc5QjI3NjNDREZFMjEyQ0E1ODRFQjU1QjcwOTMxMzUyRjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ8JeKQIetC39Pede/079DAWH/
tB2FmORrjTRxo3Lq+LfxHzB3kGuJLPTvoN3f9Fw/Tp+y7RAM/IQg+wJHAU6lWHpJ
hXxE6d6WZt2NTy6NEhOq/GA0JZirzyaJRRvya6ArNe9WaIvWvAvM6Rj9gEnUsMb6
H8xHgAB4lKjGvPSPNWp45OzPiBuQ5PgaYaloWLb3X3BdflEsIFTsWJ7nF/lYAmQ3
cqpClYl8EI8IeoSfE8ksZoon15yKoNhcaQBlMhNxvCZwqDrOv5geN02ojuoDlO1M
SoaFVD2A/kuC0y+oJwEa/rZbqNlpq9EaFI7tPVAz7raWw2UWtFeLU3thu3d5AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUhwzXebJ2PN/iEspYTrVbcJMTUvcwHwYDVR0j
BBgwFoAUqd+2Ak0Fo3ygx1bsdH6JgUCIW8kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
Zjc0NDhjMTEtZjhkMy00NTdkLThlMjItODQ4ODdhYjIyYTMwLzAvQTlERkI2MDI0
RDA1QTM3Q0EwQzc1NkVDNzQ3RTg5ODE0MDg4NUJDOS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9BOURGQjYwMjREMDVBMzdDQTBDNzU2RUM3NDdFODk4MTQwODg1
QkM5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjc0NDhjMTEtZjhkMy00NTdkLThl
MjItODQ4ODdhYjIyYTMwLzAvQTlERkI2MDI0RDA1QTM3Q0EwQzc1NkVDNzQ3RTg5
ODE0MDg4NUJDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAAoKc8dfwqdbt7NgOs9uRJVT7L/D01a6G6uS
4SH320bNvVIWDjL6yPTWXv2BquXzLKxsqmj6q5907bp6QVTmJIZlHTBuNjiLQVUz
3xx/2305W0MDazP7u9EV6RK1lszjpYc7yJttQ96ASd4wvyH5is4Q3TitNtxRru2P
FhaJg6or34hfasM5dSDY9n+Nw/cghJSrIfeTJ8VrKV6nmGwnd7p0KRNLTVwseX/N
QssFiqqt1dMOWAMbEx3wpdp4CLhI2VB71EFmqsY+T9e1j06G8esS6jL1VKlMTAUL
T1S9GpVDtt5KPoIKqJHyF0REPi2I9/MdBS+5CtRg4uiiTqDQEBo=
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:03:17 2026 by rpki-client