
$ rpki-client -vvf rpki-rsync.idnic.net/repo/0eaa8cbe-718b-4953-b789-60fa857aec8d/0/C9E5EB92DA793B8D8BF89C80541899A148DA3FC7.mft
File: C9E5EB92DA793B8D8BF89C80541899A148DA3FC7.mft (raw, json)
Hash identifier: RHhTe9xtMx+SbEtQ+hC3pz3vUyT2whhQK8HoiGZzk9Y=
Subject key identifier: 9B:AC:64:25:F7:9E:65:35:96:13:57:2C:C6:BE:35:E8:0F:9D:A9:71
Authority key identifier: C9:E5:EB:92:DA:79:3B:8D:8B:F8:9C:80:54:18:99:A1:48:DA:3F:C7
Certificate issuer: /CN=C9E5EB92DA793B8D8BF89C80541899A148DA3FC7
Certificate serial: 630D50F7F0369B75EA50D99F36DC01C65C73A6CB
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9E5EB92DA793B8D8BF89C80541899A148DA3FC7.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0eaa8cbe-718b-4953-b789-60fa857aec8d/0/C9E5EB92DA793B8D8BF89C80541899A148DA3FC7.mft
Manifest number: 3E
Signing time: Wed 17 Jun 2026 02:05:16 +0000
Manifest this update: Wed 17 Jun 2026 02:00:16 +0000
Manifest next update: Thu 18 Jun 2026 05:12:16 +0000
Files and hashes: 1: 3130332e3136392e31302e302f32332d3234203d3e20313432333335.roa (hash: Kv2Bwd8eSfvsYR5xc9V1CjJ+ZGmosk9p1qlT46CISoA=)
2: C9E5EB92DA793B8D8BF89C80541899A148DA3FC7.crl (hash: 8zesmofX++MlHawxj8ue0RzRJPwZQrZ9Eichk2uPozw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0eaa8cbe-718b-4953-b789-60fa857aec8d/0/C9E5EB92DA793B8D8BF89C80541899A148DA3FC7.crl
rsync://rpki-rsync.idnic.net/repo/0eaa8cbe-718b-4953-b789-60fa857aec8d/0/C9E5EB92DA793B8D8BF89C80541899A148DA3FC7.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9E5EB92DA793B8D8BF89C80541899A148DA3FC7.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:0d:50:f7:f0:36:9b:75:ea:50:d9:9f:36:dc:01:c6:5c:73:a6:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C9E5EB92DA793B8D8BF89C80541899A148DA3FC7
Validity
Not Before: Jun 17 02:00:16 2026 GMT
Not After : Jun 18 05:12:16 2026 GMT
Subject: CN=9BAC6425F79E65359613572CC6BE35E80F9DA971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b7:d7:0f:b2:e3:5e:3f:a1:54:3a:ce:01:29:
d2:22:fd:e0:06:92:59:48:c3:f3:39:26:bc:ae:85:
08:ef:2f:0b:92:0d:3f:46:ba:bb:de:79:7e:af:c6:
22:a2:d5:8e:70:71:c6:33:9b:25:21:ff:62:b5:cb:
43:6a:c1:be:73:ac:bc:ea:ea:08:35:19:b8:d3:e7:
a4:95:ce:6f:2f:be:98:e0:7f:e6:2d:5f:6d:63:f2:
a9:aa:07:7b:47:e9:94:9c:ec:ba:47:ca:54:7e:67:
7a:0d:76:9e:8b:74:54:1c:db:85:70:3a:8b:4f:ff:
8e:91:da:db:c2:75:a2:51:06:3c:d3:7c:0d:b6:0d:
18:8a:a9:5c:74:08:c9:fd:c9:21:56:4d:77:cb:47:
39:19:a8:a5:f9:a4:52:59:0b:f3:72:85:ed:0a:6b:
cc:ed:8b:8e:25:a7:fc:1c:ef:2e:2e:74:73:3e:24:
63:b8:49:d9:0f:a7:03:df:ab:55:2c:74:76:ba:ba:
59:d8:38:01:b1:c4:17:8c:13:3f:fa:ee:08:77:0d:
6b:40:85:66:75:ce:6e:48:89:b7:cd:6f:6c:55:d5:
a0:d7:a0:7d:9a:29:93:80:08:95:93:6f:8f:ff:93:
b9:b7:a2:0b:02:40:a5:8d:68:32:0d:4a:ae:0e:1f:
b8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:AC:64:25:F7:9E:65:35:96:13:57:2C:C6:BE:35:E8:0F:9D:A9:71
X509v3 Authority Key Identifier:
keyid:C9:E5:EB:92:DA:79:3B:8D:8B:F8:9C:80:54:18:99:A1:48:DA:3F:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0eaa8cbe-718b-4953-b789-60fa857aec8d/0/C9E5EB92DA793B8D8BF89C80541899A148DA3FC7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9E5EB92DA793B8D8BF89C80541899A148DA3FC7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0eaa8cbe-718b-4953-b789-60fa857aec8d/0/C9E5EB92DA793B8D8BF89C80541899A148DA3FC7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:52:e4:69:7c:dd:87:a3:88:a9:01:a1:6c:b4:61:43:1e:ce:
4f:22:ff:6b:48:15:0a:9d:59:a6:b0:24:3d:28:49:c1:35:4c:
1b:d9:5c:fa:28:3d:72:65:3a:7a:6e:0c:71:b9:4e:63:20:b6:
6a:eb:e4:08:36:aa:02:8a:1f:97:3b:a2:22:e9:62:f7:0c:71:
64:e3:01:ad:1b:98:1b:96:00:f0:fb:72:cd:ab:2a:64:7d:fc:
c6:7d:fd:14:9d:a9:13:a5:15:8c:48:d3:fc:21:37:dc:ea:99:
7d:3d:1e:a6:22:a1:d3:27:81:d8:38:9f:6a:f0:a9:75:e7:ee:
a6:33:df:11:06:54:7b:b1:3c:8e:48:70:85:b4:74:50:67:2d:
94:22:db:1c:e2:e2:db:e0:ff:ea:a2:88:7f:98:b9:20:01:52:
29:7c:21:92:d0:86:a1:a1:98:f1:05:36:9e:2f:a0:ff:d3:66:
50:ac:8f:6c:e3:79:29:84:bf:51:ea:0b:76:d7:28:f6:e2:46:
aa:10:a3:5e:15:c5:1c:41:1d:2b:98:f1:c6:c9:7e:2c:70:85:
91:e3:ae:32:f9:01:21:40:f8:b5:1c:91:19:01:cc:8f:f4:a6:
3f:40:7f:b1:76:d0:0e:d1:27:1d:f9:3e:2f:0b:c7:a2:1d:07:
e1:71:ee:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:39:53 2026 by rpki-client