
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/9346713F8C419319E481DBF3CFA54206BF4BE699.mft
File: 9346713F8C419319E481DBF3CFA54206BF4BE699.mft (raw, json)
Hash identifier: bxdBkV5ujmjXr6WVzHFo8cXNUjOZfVvf/iedTZqgHF8=
Subject key identifier: C7:4B:38:4A:3D:B4:2A:27:B7:9A:2B:3C:DA:D0:E8:D8:A1:24:77:E0
Authority key identifier: 93:46:71:3F:8C:41:93:19:E4:81:DB:F3:CF:A5:42:06:BF:4B:E6:99
Certificate issuer: /CN=9346713F8C419319E481DBF3CFA54206BF4BE699
Certificate serial: 4759C066888EF0EC2ECF34570D49B675168BD7BD
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9346713F8C419319E481DBF3CFA54206BF4BE699.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/9346713F8C419319E481DBF3CFA54206BF4BE699.mft
Manifest number: DB
Signing time: Tue 13 Oct 2026 12:52:05 +0000
Manifest this update: Tue 13 Oct 2026 12:47:05 +0000
Manifest next update: Wed 14 Oct 2026 16:46:05 +0000
Files and hashes: 1: 9346713F8C419319E481DBF3CFA54206BF4BE699.crl (hash: 8zcR6sVNOuR8wtCFhi2KLsFWueafMNYD+waLDK31Jys=)
2: 3136302e32322e37302e302f32332d3234203d3e203538333831.roa (hash: HfjxEYgkrqfzHgHj5l+tU2/vWOSWktiutyLJJOsTTUI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/9346713F8C419319E481DBF3CFA54206BF4BE699.crl
rsync://rpki-rsync.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/9346713F8C419319E481DBF3CFA54206BF4BE699.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9346713F8C419319E481DBF3CFA54206BF4BE699.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 15:51:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:59:c0:66:88:8e:f0:ec:2e:cf:34:57:0d:49:b6:75:16:8b:d7:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9346713F8C419319E481DBF3CFA54206BF4BE699
Validity
Not Before: Oct 13 12:47:05 2026 GMT
Not After : Oct 14 16:46:05 2026 GMT
Subject: CN=C74B384A3DB42A27B79A2B3CDAD0E8D8A12477E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:41:c8:1c:30:2c:1a:d9:9f:fc:a7:4d:cc:44:
c4:cc:8a:99:34:21:c1:17:63:c5:df:e3:4b:50:5d:
e1:d9:0a:a1:0f:8f:65:bb:9d:12:03:1e:f5:77:60:
af:01:dc:3f:44:fe:9d:6f:ad:d0:ad:40:c8:ef:47:
a5:b3:04:15:e4:e0:cb:08:db:cd:4a:56:24:73:e3:
89:07:dc:cb:b8:e6:fe:c6:97:8d:76:75:6a:3c:ce:
47:59:2b:c2:f2:55:eb:85:7a:e4:57:33:18:ae:aa:
50:af:b4:bd:6c:53:29:a7:b3:23:2d:dd:53:ce:b5:
93:18:4c:fe:22:71:e0:f3:83:b5:90:0e:72:af:52:
7c:cc:90:d3:dd:e5:52:a4:58:13:9e:7b:a9:bf:c6:
11:48:9e:71:e1:5e:64:cf:f8:dd:59:94:96:60:c0:
11:7b:ae:28:b8:ad:8f:b2:fe:76:5d:19:7d:89:42:
ab:34:fa:2d:78:e1:15:5a:56:12:c3:81:7c:aa:e8:
12:c8:4f:e7:0e:46:33:bf:0e:13:41:01:b1:08:81:
8c:5f:03:16:27:8f:96:03:e0:48:85:aa:3f:27:dd:
cd:c5:08:52:a8:40:dd:8e:92:a8:22:f5:60:4b:4c:
c9:9d:6a:14:42:d7:fe:b5:03:c1:97:11:33:bf:d7:
fb:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:4B:38:4A:3D:B4:2A:27:B7:9A:2B:3C:DA:D0:E8:D8:A1:24:77:E0
X509v3 Authority Key Identifier:
keyid:93:46:71:3F:8C:41:93:19:E4:81:DB:F3:CF:A5:42:06:BF:4B:E6:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/9346713F8C419319E481DBF3CFA54206BF4BE699.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9346713F8C419319E481DBF3CFA54206BF4BE699.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/9346713F8C419319E481DBF3CFA54206BF4BE699.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:37:47:bc:ff:67:68:d1:0c:8f:66:fd:e6:fc:86:b7:6a:65:
b8:57:5d:80:68:69:3c:31:a6:39:77:76:ac:ef:63:aa:9f:1f:
90:a0:3c:07:ef:cc:e2:c3:7d:d6:43:f2:6a:42:d7:aa:bc:72:
9f:46:a0:2a:88:fd:18:a3:55:34:a8:23:20:bb:0a:e5:3d:31:
4b:b5:be:22:9e:a5:05:89:82:84:c6:1e:f1:9e:8f:b9:e9:4c:
e1:e4:21:6d:89:9b:51:55:67:7f:0e:7a:69:63:fc:6e:70:9b:
ee:5f:3a:bc:e3:e1:bb:87:9c:51:65:b1:1d:1d:d0:1e:9c:8c:
14:b5:24:33:27:14:45:46:8a:c7:db:a7:96:69:db:ba:a8:d0:
48:4c:70:60:9d:c1:58:00:1a:df:99:81:17:29:f3:fe:a9:a4:
7e:1c:46:ef:24:c3:b4:78:a6:31:39:01:c9:cc:f2:19:7a:24:
bf:b2:54:ee:bc:c0:c9:9a:85:26:7b:29:64:46:79:1b:8e:4f:
ac:57:9d:46:8d:00:66:f6:53:b9:6d:f2:12:09:47:a9:76:94:
72:14:f5:e6:8e:03:e4:2a:52:ac:ec:1c:a7:24:d0:65:a1:e8:
17:7c:4e:11:bb:cc:a3:30:38:19:ca:f6:ca:98:a1:a0:0c:75:
c3:b5:49:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 01:39:28 2026 by rpki-client