
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.mft
File: 97F8E949F6F9949E17CCA8BD66A34372BF61C549.mft (raw, json)
Hash identifier: Izr8/L7Y3rcebO5IJJlMOGg1Ppp+55NRk+YG5mfSE88=
Subject key identifier: 26:3E:23:C4:20:0B:1B:D4:18:40:33:BF:91:C0:99:82:81:F6:0A:3F
Authority key identifier: 97:F8:E9:49:F6:F9:94:9E:17:CC:A8:BD:66:A3:43:72:BF:61:C5:49
Certificate issuer: /CN=97F8E949F6F9949E17CCA8BD66A34372BF61C549
Certificate serial: 75B8FF02F00FEEF01294DB03157C816E7377F4C9
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.mft
Manifest number: C0
Signing time: Wed 23 Sep 2026 16:36:35 +0000
Manifest this update: Wed 23 Sep 2026 16:31:35 +0000
Manifest next update: Thu 24 Sep 2026 18:33:35 +0000
Files and hashes: 1: 97F8E949F6F9949E17CCA8BD66A34372BF61C549.crl (hash: mPKYQ4ZBz6Pv0Z/kSMQRFI6zRqfzDhTfcxMGv2bReiM=)
2: 3136302e33302e3232342e302f32332d3234203d3e20313533313132.roa (hash: bsuMGNaULmyW/rNtR+yZTvUpMTve5vTq9u9xZYBiDgE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.crl
rsync://rpki-rsync.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 18:33:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:b8:ff:02:f0:0f:ee:f0:12:94:db:03:15:7c:81:6e:73:77:f4:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97F8E949F6F9949E17CCA8BD66A34372BF61C549
Validity
Not Before: Sep 23 16:31:35 2026 GMT
Not After : Sep 24 18:33:35 2026 GMT
Subject: CN=263E23C4200B1BD4184033BF91C0998281F60A3F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3c:f6:4b:50:7e:2b:2f:c2:0e:e8:d1:b9:f0:
dc:0e:23:4d:8b:54:ac:17:e7:b6:29:ae:a4:78:d5:
a5:cf:50:6e:a3:7f:35:c8:10:b1:29:9f:5d:cc:f3:
ab:06:ce:ba:8a:1c:69:b6:ed:92:49:de:78:57:d9:
95:e6:f5:a7:da:fd:d2:75:43:76:a1:b8:9a:c8:01:
96:79:33:29:2b:84:f6:26:cf:1f:70:1f:d6:f9:5b:
0c:33:8f:7b:f2:64:95:b4:92:b1:2f:24:ce:d8:49:
a9:cf:f7:2b:7d:a2:00:c0:7e:64:d3:b3:4e:0c:70:
8f:f7:5f:db:4a:7c:7e:25:7f:3f:ce:3b:4b:5a:e5:
2c:4c:29:f1:07:24:3d:5a:b6:14:7d:94:ff:12:1c:
c4:f5:2e:86:87:7f:3b:23:5f:e7:f4:09:b3:c7:0c:
97:ed:01:db:3b:ab:03:c1:c2:4f:b7:22:46:0b:72:
90:a6:7f:cb:6f:c5:be:ef:26:2a:34:d2:9d:eb:ee:
1b:5d:74:08:88:34:f7:e8:23:44:d0:20:6d:f7:01:
85:66:b0:d8:0f:13:bf:8a:06:6e:c8:26:6a:86:9d:
45:38:d1:ff:50:2a:01:8a:85:30:97:2d:bc:5e:00:
35:c8:07:4d:99:1f:a2:36:f0:71:a4:d0:9d:41:a7:
4c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:3E:23:C4:20:0B:1B:D4:18:40:33:BF:91:C0:99:82:81:F6:0A:3F
X509v3 Authority Key Identifier:
keyid:97:F8:E9:49:F6:F9:94:9E:17:CC:A8:BD:66:A3:43:72:BF:61:C5:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:14:03:2e:64:aa:6f:9f:22:20:da:a9:6a:05:55:04:8f:7e:
33:f2:14:32:d2:10:ef:48:f9:d5:b6:b5:68:5d:05:75:62:38:
d5:4b:e3:47:0c:99:e5:44:86:ca:cf:f4:38:16:6a:9d:3e:f6:
86:15:ca:8e:58:68:21:6d:60:00:97:1f:9b:98:2a:ad:b1:b3:
a0:ef:0d:17:b2:cd:15:f9:68:0f:1a:a5:37:74:4b:72:fe:02:
80:41:84:a7:c2:0c:83:3f:f5:4b:1b:e4:64:b1:fe:de:0d:05:
80:a6:c2:13:21:29:4c:29:85:23:9b:fb:b8:70:1a:1e:cc:31:
b2:c3:12:ee:f6:d6:24:73:be:48:97:16:3b:19:75:39:0c:13:
2d:b0:4c:c4:99:94:6f:e4:e2:98:d3:d4:07:37:6d:67:2d:9b:
0c:4b:40:46:72:97:e7:38:31:21:8a:9b:68:a0:19:92:1b:d7:
de:17:36:d5:f5:4a:bd:95:75:62:25:33:b7:bf:c2:db:96:62:
9f:67:5a:3f:59:a9:6c:90:6c:02:b3:15:4a:2a:7e:95:c3:6f:
b3:22:5a:71:aa:e1:a4:67:93:23:10:63:55:6b:4c:82:4b:60:
90:08:8e:51:f6:01:7a:67:f1:24:4e:52:c1:ea:92:13:c2:ee:
e4:4d:d4:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:30:41 2026 by rpki-client