
$ rpki-client -vvf rpki-rsync.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.mft
File: 9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.mft (raw, json)
Hash identifier: IC3/Qe8l3Jfic8X8K0zjqpAt43MUQw9X7+j2mOC0F9g=
Subject key identifier: D9:80:29:6A:F8:1D:2E:AC:AA:DB:45:30:C6:A4:A6:63:FC:94:28:F1
Authority key identifier: 9B:CF:26:1F:1E:EB:D0:A9:61:48:76:1F:A2:E9:8E:93:FB:AF:B0:6F
Certificate issuer: /CN=9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F
Certificate serial: 31666B3CAE330B4796849011F9B231B6CA0C6691
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.mft
Manifest number: 3A
Signing time: Sat 13 Jun 2026 16:49:51 +0000
Manifest this update: Sat 13 Jun 2026 16:44:51 +0000
Manifest next update: Sun 14 Jun 2026 18:52:51 +0000
Files and hashes: 1: 3130332e3138392e36322e302f32342d3234203d3e20313439373436.roa (hash: q/9H11WTYoKvscn357helrrghEhYAd3OjlCKI1SD+L4=)
2: 9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.crl (hash: aUmYMlBXPznpAOzuo9hQoMDz9p1sm98NDvHhSPC5Xvs=)
3: 3130332e3138392e36332e302f32342d3234203d3e20313439373436.roa (hash: iowBD0aCpON/4cxOj5FQqoJWjlXtvZSA6Ncm7S12+nI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.crl
rsync://rpki-rsync.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:66:6b:3c:ae:33:0b:47:96:84:90:11:f9:b2:31:b6:ca:0c:66:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F
Validity
Not Before: Jun 13 16:44:51 2026 GMT
Not After : Jun 14 18:52:51 2026 GMT
Subject: CN=D980296AF81D2EACAADB4530C6A4A663FC9428F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:93:75:8c:ea:70:0e:52:42:cf:d6:1f:91:5e:
72:63:db:3a:a3:92:a5:55:40:20:cc:8f:72:88:9a:
95:21:23:a1:14:41:43:cd:9d:63:6c:56:a7:58:4a:
9d:2d:63:51:74:1e:16:d4:08:e9:75:1f:db:e7:e6:
7f:d2:0e:6f:44:74:00:c2:d5:98:cf:85:0a:bb:c5:
3b:c2:0b:d4:a1:27:26:fe:02:45:72:6e:7e:46:99:
8d:4b:e7:b3:2d:ed:9e:6d:1c:49:7b:b9:a4:54:58:
ad:f2:e5:a9:f8:af:d1:84:37:09:bf:ac:41:42:13:
b3:fe:bd:d4:fd:74:e5:a4:d1:2f:c8:79:62:ef:51:
c8:93:f7:b3:22:3b:7b:e8:c2:e6:66:9f:c3:43:e9:
f4:ca:65:f8:85:ac:62:8d:91:05:6a:e2:3d:aa:d9:
df:6b:d7:e9:1d:b2:49:77:03:c5:8e:c7:23:86:ae:
71:18:9f:0b:24:cc:ab:77:17:db:ac:97:ed:84:a3:
64:66:5b:09:fa:b3:ca:3f:15:66:63:02:ef:d1:ac:
84:ec:24:a1:df:b9:75:ac:4c:e7:f0:7b:ff:03:8f:
eb:d5:ee:1f:d0:bf:57:6b:e9:7d:36:4a:89:44:94:
36:95:f8:6e:59:33:fc:63:5e:f2:fb:15:9f:d2:af:
b6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:80:29:6A:F8:1D:2E:AC:AA:DB:45:30:C6:A4:A6:63:FC:94:28:F1
X509v3 Authority Key Identifier:
keyid:9B:CF:26:1F:1E:EB:D0:A9:61:48:76:1F:A2:E9:8E:93:FB:AF:B0:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:1a:d8:26:24:2b:b8:b9:be:b3:d5:0d:f3:5e:ac:e8:f0:c4:
4f:ac:41:94:6b:bb:a9:c6:b8:66:96:f2:63:8a:5a:8f:32:c8:
d4:9f:4a:e1:af:03:30:83:97:22:6e:86:19:f6:8d:21:0d:bb:
2d:4c:d7:b2:5d:2b:53:dc:57:04:d4:00:a7:1c:5b:34:f3:c4:
e2:f2:5a:6d:24:e5:0e:36:32:ea:d8:f1:6f:9f:5f:a7:bb:27:
d7:1b:8a:e6:67:49:0d:ca:52:9f:99:e4:56:65:78:e2:d6:e1:
79:65:63:56:c1:94:8f:d7:e0:6e:17:a2:5b:9a:3b:64:3b:4c:
ef:d1:e1:7e:a6:99:43:f5:57:9d:49:6e:86:e6:b0:e2:33:5e:
8d:e6:87:df:23:a3:1e:a9:7a:1e:69:6c:68:1e:19:7f:d5:1d:
5d:c1:c3:67:94:fc:97:97:01:c9:e7:b9:5b:cc:5a:12:f7:4d:
a0:ed:32:1a:99:5f:dc:0e:57:11:54:5d:e2:a7:20:bc:4b:bb:
01:e1:fa:26:bc:96:c1:5d:c5:d6:65:cd:97:d2:0c:f1:45:f0:
10:c3:b1:bd:ac:4d:77:d8:f5:74:32:34:d7:54:a2:48:ae:50:
af:e2:98:87:13:4d:89:36:1f:21:e5:93:3e:7e:9a:a1:73:18:
1f:62:19:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:07:56 2026 by rpki-client