
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/9C4704204DF89CA1B41C1A06443995B3CCE386CB.mft
File: 9C4704204DF89CA1B41C1A06443995B3CCE386CB.mft (raw, json)
Hash identifier: kd2jxOFKBMWfgurIa3+Qs5j0C7kdbD2ZvxUnjQ7DjCI=
Subject key identifier: 8F:6F:E0:93:28:02:47:DD:09:75:40:DA:64:61:72:C9:3B:95:80:28
Authority key identifier: 9C:47:04:20:4D:F8:9C:A1:B4:1C:1A:06:44:39:95:B3:CC:E3:86:CB
Certificate issuer: /CN=9C4704204DF89CA1B41C1A06443995B3CCE386CB
Certificate serial: 0C8A4CA0A0BDEAA8248DE660C3B196CF6A31AE82
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C4704204DF89CA1B41C1A06443995B3CCE386CB.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/9C4704204DF89CA1B41C1A06443995B3CCE386CB.mft
Manifest number: 3B
Signing time: Sun 14 Jun 2026 22:14:07 +0000
Manifest this update: Sun 14 Jun 2026 22:09:07 +0000
Manifest next update: Mon 15 Jun 2026 23:35:07 +0000
Files and hashes: 1: 9C4704204DF89CA1B41C1A06443995B3CCE386CB.crl (hash: VsWnGi+nXBUr4B1pkelXEj5oHXobQSVr9QvVthdavm4=)
2: AS23693.roa (hash: MYMD6pbt4sKz7OvRtkhiGBT2mMS6OgawmPYOhNxznnw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/9C4704204DF89CA1B41C1A06443995B3CCE386CB.crl
rsync://rpki-rsync.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/9C4704204DF89CA1B41C1A06443995B3CCE386CB.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C4704204DF89CA1B41C1A06443995B3CCE386CB.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 15 Jun 2026 23:35:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:8a:4c:a0:a0:bd:ea:a8:24:8d:e6:60:c3:b1:96:cf:6a:31:ae:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9C4704204DF89CA1B41C1A06443995B3CCE386CB
Validity
Not Before: Jun 14 22:09:07 2026 GMT
Not After : Jun 15 23:35:07 2026 GMT
Subject: CN=8F6FE093280247DD097540DA646172C93B958028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d9:68:7c:99:2e:31:18:32:9e:4c:b2:36:09:
a7:a2:12:62:ca:14:50:87:be:86:6e:f3:46:7b:e9:
07:5d:6b:9a:db:61:4e:8a:a5:8f:a9:e1:7d:d6:0b:
1b:9f:4f:d1:c2:33:d6:fd:6f:64:3e:9d:df:0c:6a:
46:8e:98:f0:e3:3c:05:78:0f:bf:7b:3b:59:3e:1f:
aa:61:2d:0d:08:a6:22:f2:dc:79:68:d4:0a:48:dd:
a2:27:80:f2:12:2b:e7:8c:9d:e9:f0:30:67:34:4a:
bd:48:69:3f:8b:52:e4:55:a0:a9:b7:69:fa:15:f2:
62:6e:48:df:01:7d:23:5a:8c:87:03:2e:04:eb:e3:
d4:d9:8e:1f:d9:bf:6c:af:d9:8e:21:49:2c:eb:4c:
0e:f6:8a:92:8f:da:ad:a2:71:37:84:3a:5f:b2:6c:
4b:01:c6:83:11:bf:3f:36:ad:c6:df:4d:0a:a0:5b:
d8:00:3d:8d:66:4f:fc:77:9a:a8:2a:a4:1f:76:fd:
af:80:88:1d:2f:a1:72:64:b1:ae:c9:67:8b:21:84:
05:f8:67:da:87:05:60:a0:68:72:ba:c2:09:c9:d5:
d1:fd:b1:90:ed:32:92:24:8d:84:c8:e7:c0:05:cc:
4e:bf:42:c0:2e:24:a8:66:e5:35:a3:f8:24:e6:f8:
c6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:6F:E0:93:28:02:47:DD:09:75:40:DA:64:61:72:C9:3B:95:80:28
X509v3 Authority Key Identifier:
keyid:9C:47:04:20:4D:F8:9C:A1:B4:1C:1A:06:44:39:95:B3:CC:E3:86:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/9C4704204DF89CA1B41C1A06443995B3CCE386CB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C4704204DF89CA1B41C1A06443995B3CCE386CB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/9C4704204DF89CA1B41C1A06443995B3CCE386CB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:67:53:ab:51:63:5a:a0:16:fd:e7:ad:b3:a5:26:d7:03:6c:
d6:96:19:13:66:30:ef:ce:d6:55:0d:8c:b9:d2:4a:8d:59:f6:
62:f4:32:f5:42:b1:df:73:3c:da:76:e9:58:b4:2e:ce:09:bf:
78:ee:da:13:b3:b8:e3:ba:eb:5e:7f:6a:0b:7d:8a:aa:5f:da:
58:60:6f:8c:a5:4c:09:79:36:f2:ea:20:0f:ec:26:83:71:30:
cf:85:57:60:af:37:59:69:ea:5e:f2:45:08:0b:fa:9e:6f:b5:
35:1b:81:23:17:0d:3d:d3:a9:73:66:ed:03:89:98:34:7e:80:
97:71:21:63:b1:69:6f:ab:d5:cb:9a:12:b2:0b:ed:bf:98:2c:
67:75:3f:0b:13:75:5f:24:d6:32:1a:e4:4c:ca:d4:41:35:8e:
5c:6c:a0:06:28:ee:d3:b6:db:24:fa:8a:6a:18:80:37:8f:48:
c8:fa:e6:27:b7:c3:a5:fc:e1:43:51:44:39:df:15:61:db:4f:
db:51:df:7d:20:97:fe:58:5b:e9:69:54:88:01:0b:34:0a:ae:
5c:58:9e:d2:2f:52:ef:ad:89:26:06:6d:09:b7:a4:78:a0:d4:
7d:49:cd:b3:ac:ff:7a:95:ab:f2:de:8f:d0:d5:4c:88:d3:ed:
87:13:e9:87
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUDIpMoKC96qgkjeZgw7GWz2oxroIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUM0NzA0MjA0REY4OUNBMUI0MUMxQTA2NDQzOTk1QjND
Q0UzODZDQjAeFw0yNjA2MTQyMjA5MDdaFw0yNjA2MTUyMzM1MDdaMDMxMTAvBgNV
BAMTKDhGNkZFMDkzMjgwMjQ3REQwOTc1NDBEQTY0NjE3MkM5M0I5NTgwMjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC92Wh8mS4xGDKeTLI2CaeiEmLK
FFCHvoZu80Z76Qdda5rbYU6KpY+p4X3WCxufT9HCM9b9b2Q+nd8MakaOmPDjPAV4
D797O1k+H6phLQ0IpiLy3Hlo1ApI3aIngPISK+eMnenwMGc0Sr1IaT+LUuRVoKm3
afoV8mJuSN8BfSNajIcDLgTr49TZjh/Zv2yv2Y4hSSzrTA72ipKP2q2icTeEOl+y
bEsBxoMRvz82rcbfTQqgW9gAPY1mT/x3mqgqpB92/a+AiB0voXJksa7JZ4shhAX4
Z9qHBWCgaHK6wgnJ1dH9sZDtMpIkjYTI58AFzE6/QsAuJKhm5TWj+CTm+MbLAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUj2/gkygCR90JdUDaZGFyyTuVgCgwHwYDVR0j
BBgwFoAUnEcEIE34nKG0HBoGRDmVs8zjhsswDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MzMyOGYyNGUtZGM3Zi00NTYyLWE1MWQtZTJlMzhjMzY3N2QxLzAvOUM0NzA0MjA0
REY4OUNBMUI0MUMxQTA2NDQzOTk1QjNDQ0UzODZDQi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85QzQ3MDQyMDRERjg5Q0ExQjQxQzFBMDY0NDM5OTVCM0NDRTM4
NkNCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzMyOGYyNGUtZGM3Zi00NTYyLWE1
MWQtZTJlMzhjMzY3N2QxLzAvOUM0NzA0MjA0REY4OUNBMUI0MUMxQTA2NDQzOTk1
QjNDQ0UzODZDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADdnU6tRY1qgFv3nrbOlJtcDbNaWGRNmMO/O
1lUNjLnSSo1Z9mL0MvVCsd9zPNp26Vi0Ls4Jv3ju2hOzuOO6615/agt9iqpf2lhg
b4ylTAl5NvLqIA/sJoNxMM+FV2CvN1lp6l7yRQgL+p5vtTUbgSMXDT3TqXNm7QOJ
mDR+gJdxIWOxaW+r1cuaErIL7b+YLGd1PwsTdV8k1jIa5EzK1EE1jlxsoAYo7tO2
2yT6imoYgDePSMj65ie3w6X84UNRRDnfFWHbT9tR330gl/5YW+lpVIgBCzQKrlxY
ntIvUu+tiSYGbQm3pHig1H1JzbOs/3qVq/Lej9DVTIjT7YcT6Yc=
-----END CERTIFICATE-----
Generated at Mon Jun 15 14:09:53 2026 by rpki-client