
$ rpki-client -vvf rpki-rsync.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.mft
File: 9BD7599923B8FB8C83AB3B30287FBCC6A9874800.mft (raw, json)
Hash identifier: 6LWYuX3PbURddppfkFklMa+SMVYWCZZhOnZ1Y1lLWR8=
Subject key identifier: E2:0C:98:7B:26:6A:9C:CF:A0:3B:E3:4E:F4:64:12:30:C8:97:09:32
Authority key identifier: 9B:D7:59:99:23:B8:FB:8C:83:AB:3B:30:28:7F:BC:C6:A9:87:48:00
Certificate issuer: /CN=9BD7599923B8FB8C83AB3B30287FBCC6A9874800
Certificate serial: 53F61A4E5C6CFC935B5D7F7BA17140271B3238E7
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.mft
Manifest number: 38
Signing time: Sat 13 Jun 2026 05:56:10 +0000
Manifest this update: Sat 13 Jun 2026 05:51:10 +0000
Manifest next update: Sun 14 Jun 2026 08:01:10 +0000
Files and hashes: 1: 9BD7599923B8FB8C83AB3B30287FBCC6A9874800.crl (hash: NAUNoO5Kv5i3Ub4sUKo8ECse6Z0sbYGfsTE8f+c565E=)
2: 3130332e3232372e3138362e302f32332d3233203d3e20313432333730.roa (hash: J9RbUPOqUx6qGs/3TSnBbVnRso5umnmyOklAgJwt1Js=)
3: 3130332e3232372e3138362e302f32342d3234203d3e20313432333730.roa (hash: 2N+TEQ769mQU4C1i4Rld3w1DT7X5Tq5lgzhroXjz5Hg=)
4: 3130332e3232372e3138372e302f32342d3234203d3e20313432333730.roa (hash: WkzU0ifpIbp5OQ/6TDxMH+vwFG2tqv2mqNzHskMqmF0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.crl
rsync://rpki-rsync.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 08:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:f6:1a:4e:5c:6c:fc:93:5b:5d:7f:7b:a1:71:40:27:1b:32:38:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9BD7599923B8FB8C83AB3B30287FBCC6A9874800
Validity
Not Before: Jun 13 05:51:10 2026 GMT
Not After : Jun 14 08:01:10 2026 GMT
Subject: CN=E20C987B266A9CCFA03BE34EF4641230C8970932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:52:32:9d:4b:9a:f3:f9:cd:bd:b7:f2:fd:fc:
ff:09:6e:1c:1b:94:f5:22:54:9c:15:73:1c:e7:07:
e1:11:b1:bb:20:1b:3b:0b:3f:0e:25:d5:4e:cd:db:
05:e8:76:64:ec:d5:d7:ca:f4:8a:86:fa:85:3e:04:
4d:3c:72:04:ae:50:6c:ff:d9:be:55:31:5b:a2:4c:
7c:6e:6e:51:9d:ea:ba:15:31:b2:f8:3a:8d:18:1b:
96:0d:4e:25:d9:9b:dd:77:6d:86:34:5c:6b:da:ce:
2f:eb:c4:79:e5:c9:96:39:8f:25:b3:12:bd:a5:93:
34:16:81:c3:fb:98:87:40:83:72:2f:a7:51:55:4a:
03:46:6b:a1:44:99:65:53:e5:ef:e5:64:5e:32:a2:
ed:7d:f0:19:f8:22:26:2c:cf:57:0a:02:0f:e2:b9:
2b:0b:4f:e8:f5:3d:90:81:da:18:84:49:de:24:37:
49:9e:14:f4:80:86:a6:8a:09:af:b1:e1:f8:0f:22:
04:c4:b4:93:49:09:1c:62:32:85:da:46:61:3f:3f:
73:fe:06:56:4f:64:ac:76:04:90:ec:79:a6:96:f2:
84:0d:d8:8d:82:5b:62:15:a6:a8:01:3f:eb:92:3a:
58:a0:22:e3:63:fd:47:60:1e:18:88:da:46:49:f0:
03:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:0C:98:7B:26:6A:9C:CF:A0:3B:E3:4E:F4:64:12:30:C8:97:09:32
X509v3 Authority Key Identifier:
keyid:9B:D7:59:99:23:B8:FB:8C:83:AB:3B:30:28:7F:BC:C6:A9:87:48:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:c2:79:1c:94:f6:a2:a3:f6:3c:94:99:d1:b3:f8:0d:b6:74:
11:a2:7c:15:e4:0c:c5:34:9f:eb:cf:49:30:1e:a1:7b:0a:cb:
e2:fb:5e:24:38:0f:da:04:ae:70:d4:bb:0f:0f:b3:2e:0d:87:
00:13:77:b9:2d:f1:b4:7b:d6:ec:16:6d:cf:9a:19:f8:f4:47:
c5:43:78:4b:b2:ee:4e:c4:bd:39:9f:37:a2:06:a3:68:e5:13:
14:62:ff:2b:91:fe:e6:17:14:29:79:f5:fb:9e:83:65:94:c9:
93:cf:18:76:46:cc:a0:64:47:ae:4d:9d:84:ae:df:b1:4b:86:
0e:78:0c:82:ff:f5:34:95:f1:3f:71:9e:22:f2:12:03:2c:77:
f8:23:6d:b5:28:d0:a0:77:5e:d5:50:c8:8b:5d:5d:94:cd:69:
4b:f2:a7:79:4d:43:0d:10:1f:d3:8e:ec:3a:70:a3:5c:f7:d6:
9b:51:ab:f7:77:06:1c:74:61:c1:99:75:df:8f:32:f3:a6:ac:
98:8f:68:d3:e5:d8:b1:61:cd:78:b0:f4:f1:53:32:a0:16:4a:
ff:1f:0a:09:fc:6d:1b:f6:03:f7:e8:1b:51:43:97:d5:ac:83:
59:98:8d:18:9b:69:42:5c:92:40:17:a5:b1:6a:27:5f:3c:df:
fe:37:50:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:51:57 2026 by rpki-client