
$ rpki-client -vvf rpki-rsync.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/9376CDF3D2A44CC41764F89F68FD7E4130EB351C.mft
File: 9376CDF3D2A44CC41764F89F68FD7E4130EB351C.mft (raw, json)
Hash identifier: Lwc4a/OpIDi1ERcL+uHNayeOpoV3duehR66aqb+RWcM=
Subject key identifier: 3F:F5:62:9B:17:7C:C8:DF:39:0E:0E:96:8C:FF:DF:65:C3:3A:A5:A9
Authority key identifier: 93:76:CD:F3:D2:A4:4C:C4:17:64:F8:9F:68:FD:7E:41:30:EB:35:1C
Certificate issuer: /CN=9376CDF3D2A44CC41764F89F68FD7E4130EB351C
Certificate serial: 67F51B686A99D909152AE62C37E16E7A370C00A0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9376CDF3D2A44CC41764F89F68FD7E4130EB351C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/9376CDF3D2A44CC41764F89F68FD7E4130EB351C.mft
Manifest number: 39
Signing time: Sat 13 Jun 2026 06:06:22 +0000
Manifest this update: Sat 13 Jun 2026 06:01:22 +0000
Manifest next update: Sun 14 Jun 2026 09:21:22 +0000
Files and hashes: 1: 9376CDF3D2A44CC41764F89F68FD7E4130EB351C.crl (hash: k3jB8yxsuHY8jp91/TGojVKfXRiO8fRaxW6LX45m2BU=)
2: 3135372e32302e39382e302f32332d3234203d3e20313532343335.roa (hash: 1y2hMqgy1k18v9KwV+64AHSdurxHF23pHNvVVwGqp7s=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/9376CDF3D2A44CC41764F89F68FD7E4130EB351C.crl
rsync://rpki-rsync.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/9376CDF3D2A44CC41764F89F68FD7E4130EB351C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9376CDF3D2A44CC41764F89F68FD7E4130EB351C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 09:21:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:f5:1b:68:6a:99:d9:09:15:2a:e6:2c:37:e1:6e:7a:37:0c:00:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9376CDF3D2A44CC41764F89F68FD7E4130EB351C
Validity
Not Before: Jun 13 06:01:22 2026 GMT
Not After : Jun 14 09:21:22 2026 GMT
Subject: CN=3FF5629B177CC8DF390E0E968CFFDF65C33AA5A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:e4:6b:26:1a:17:ce:d8:42:22:6d:c8:6f:2a:
25:ab:a4:be:d9:81:38:5b:b0:52:59:26:31:b9:d6:
ec:87:cf:83:9c:0d:5e:a3:aa:e6:0d:83:a0:75:14:
46:c1:11:35:5f:ac:b7:2d:f4:3d:97:df:4e:8d:58:
68:ed:82:cb:14:43:34:71:69:12:5a:aa:c3:97:e9:
2f:37:45:37:43:c4:9e:a2:a1:0c:5d:87:98:88:a0:
06:50:8c:64:30:1b:8b:46:17:1d:d7:88:83:c7:25:
e7:89:41:ba:69:03:df:2a:bd:ea:81:02:d1:1e:c9:
54:a5:d1:b2:16:30:26:73:a4:56:ed:e0:9c:bd:d8:
31:fb:4f:8b:df:d3:3f:19:96:69:51:2e:cd:b5:46:
07:b0:c9:a4:fa:aa:e7:fe:cb:c6:cd:89:65:91:27:
25:25:3a:14:fe:8d:41:ee:0f:80:63:2a:81:81:2e:
8d:53:18:8f:94:a5:3c:23:bf:7c:da:8a:33:de:24:
eb:cc:f5:ba:f7:70:ae:fe:50:ea:99:aa:7d:cb:0b:
26:2b:39:a6:b9:cf:d6:1b:e1:66:b3:aa:57:90:33:
a9:44:f0:00:a0:ce:1f:72:92:a6:73:a1:78:d5:9d:
30:d2:1d:08:44:aa:ec:1a:4e:d9:f0:b5:85:f2:25:
c8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:F5:62:9B:17:7C:C8:DF:39:0E:0E:96:8C:FF:DF:65:C3:3A:A5:A9
X509v3 Authority Key Identifier:
keyid:93:76:CD:F3:D2:A4:4C:C4:17:64:F8:9F:68:FD:7E:41:30:EB:35:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/9376CDF3D2A44CC41764F89F68FD7E4130EB351C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9376CDF3D2A44CC41764F89F68FD7E4130EB351C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/9376CDF3D2A44CC41764F89F68FD7E4130EB351C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:4e:ba:e3:7c:09:03:c4:dd:fd:11:f1:fc:67:a9:aa:dd:31:
ba:1d:97:34:2b:3d:6a:7c:86:fc:aa:9b:d2:3c:30:64:f6:e0:
74:3a:fd:b4:d1:a1:33:35:ca:b1:bc:2c:db:fc:8f:62:ca:99:
07:4c:45:a2:0c:10:6e:90:00:0f:15:86:1c:98:41:52:59:48:
ae:61:f5:a1:ed:cf:df:ab:3d:71:b8:02:34:6f:8d:5b:22:f8:
86:55:ff:ce:c1:53:2b:c6:aa:a3:6f:4f:cb:5f:2b:38:78:39:
c9:8c:67:0a:56:0c:35:5b:cd:e1:21:c1:eb:9a:57:28:2a:b3:
88:89:01:d7:51:a6:05:07:b7:6d:ea:d2:f2:c1:20:e6:5f:2a:
d4:55:f4:0e:de:60:fe:5c:dd:f9:4e:0b:0a:35:37:cd:08:81:
29:df:89:f7:62:5f:c6:c5:4a:be:0d:10:84:58:64:7b:f3:b0:
f2:c8:a5:9f:f9:17:e6:81:31:f9:ef:e6:32:2b:36:5e:66:d0:
e4:41:3b:cc:4e:b6:c4:e4:d7:0a:05:ea:25:b8:55:9d:14:04:
04:b3:3a:1b:2f:4a:14:ae:44:ae:bf:08:1b:a8:3d:8a:ab:f1:
0e:6b:72:ab:a5:c7:47:69:f0:48:0c:ee:bf:01:94:76:18:2c:
19:46:32:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:09:44 2026 by rpki-client