
$ rpki-client -vvf rpki-rsync.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.mft
File: 9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.mft (raw, json)
Hash identifier: fk7B/gJL4FLa4z5Iennt85ANVqIgva6CRFvMXg3uDAg=
Subject key identifier: FF:75:14:14:CD:10:D3:34:1A:64:9F:4C:50:D6:F2:6D:B6:AD:E3:5F
Authority key identifier: 9F:FB:79:1C:09:C2:A2:BF:53:CF:54:17:4A:8C:A1:AD:67:7B:35:64
Certificate issuer: /CN=9FFB791C09C2A2BF53CF54174A8CA1AD677B3564
Certificate serial: 46A5F4F568A82C4412D4D2A33251C7C65812E9BD
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.mft
Manifest number: 39
Signing time: Sat 13 Jun 2026 11:54:01 +0000
Manifest this update: Sat 13 Jun 2026 11:49:01 +0000
Manifest next update: Sun 14 Jun 2026 13:19:01 +0000
Files and hashes: 1: 3136302e32352e3234392e302f32342d3234203d3e20313336303939.roa (hash: U0YPo5BGNsV6sfhS2oiy7oPSHdSgcRKevuF2NKX91Xo=)
2: 9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.crl (hash: +QYIPiO2kPA+1HpggkLO4ZD78hYtLyWAnw3srDKedY4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.crl
rsync://rpki-rsync.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 13:19:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:a5:f4:f5:68:a8:2c:44:12:d4:d2:a3:32:51:c7:c6:58:12:e9:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9FFB791C09C2A2BF53CF54174A8CA1AD677B3564
Validity
Not Before: Jun 13 11:49:01 2026 GMT
Not After : Jun 14 13:19:01 2026 GMT
Subject: CN=FF751414CD10D3341A649F4C50D6F26DB6ADE35F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:83:7f:c9:b1:a2:5f:18:b7:79:c6:07:c8:85:
66:a7:e3:83:37:2e:44:84:10:f0:78:1b:f6:6f:d7:
42:98:da:2c:b2:3b:fa:71:f3:fd:9f:94:10:18:cd:
39:02:44:29:f8:04:42:e0:af:f6:1d:06:a9:ac:46:
32:f7:dd:09:df:8f:6c:fd:98:e2:47:26:e7:16:96:
65:6b:ab:f4:65:1b:fa:ef:db:1f:75:d1:ff:c9:64:
8c:6b:b3:98:e5:76:f4:81:16:08:67:f6:43:8a:d0:
5a:8f:4d:4a:a4:00:15:e5:29:17:17:95:47:d8:41:
a5:1b:74:cc:ee:02:38:f1:78:db:7f:6c:98:bc:56:
6b:16:65:0e:11:d6:f5:c9:06:71:5c:5c:62:70:a8:
69:70:ec:24:58:85:d9:16:50:02:2a:15:8a:f1:45:
d0:88:84:00:5e:f6:42:b5:75:58:f7:96:28:03:ce:
98:7a:4a:dd:fe:dd:f4:bd:91:98:29:54:a9:f8:7c:
4c:5d:d7:5c:88:83:9f:fc:04:33:99:38:f9:89:5b:
ec:65:c7:86:1f:f9:10:b8:5a:bb:9f:e0:50:44:49:
b3:80:8a:2d:78:19:16:4f:da:93:65:74:0a:48:1c:
bd:cf:65:f7:db:d3:6d:97:b8:80:1e:ef:0e:35:ad:
9f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:75:14:14:CD:10:D3:34:1A:64:9F:4C:50:D6:F2:6D:B6:AD:E3:5F
X509v3 Authority Key Identifier:
keyid:9F:FB:79:1C:09:C2:A2:BF:53:CF:54:17:4A:8C:A1:AD:67:7B:35:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:68:e0:d2:07:74:f1:c4:c0:f4:c6:5d:b9:ce:db:d6:3b:00:
30:0f:81:51:d4:74:89:76:0d:1e:98:86:70:d4:64:2e:98:a4:
e6:61:07:64:2a:c0:c0:17:5d:4e:ab:74:1d:e3:15:a7:ae:4c:
b4:04:09:df:4a:e6:d2:15:af:b4:a4:38:9a:e7:de:8b:e0:b6:
2f:e8:31:6e:cd:42:0a:5b:ec:4d:24:3a:b8:67:0c:9b:e5:9d:
15:8f:20:9c:b2:a7:d5:8f:0a:8a:d8:ba:3b:6f:45:d5:9a:7c:
84:22:2f:6a:d0:ae:0c:9d:88:f2:c5:fc:45:2a:57:a9:ef:30:
8a:48:60:ae:e1:7d:5a:cb:69:a3:33:5d:f2:e4:a4:a6:31:6a:
84:18:f9:f0:0b:91:e4:d3:05:9a:e7:4f:a0:89:0e:32:dd:6d:
89:15:79:d6:65:6f:82:58:68:85:e3:1b:eb:00:3c:f1:24:ca:
73:b0:16:70:b1:05:45:49:24:ab:40:29:5c:a9:0e:73:4d:6e:
f0:d9:61:67:b3:07:53:49:f5:c7:7d:28:7b:3a:d4:0f:93:d5:
81:a0:11:9a:a5:e4:d4:a0:a8:bc:52:d9:60:48:d8:66:8f:96:
a8:17:ca:8f:83:18:80:c3:93:cd:02:43:f3:2c:e3:36:56:96:
c5:6c:d4:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:55:28 2026 by rpki-client