
$ rpki-client -vvf rpki-rsync.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/9B2D9946FF043D1081C26FD38F0817310077BFC7.mft
File: 9B2D9946FF043D1081C26FD38F0817310077BFC7.mft (raw, json)
Hash identifier: n/vzMCcAyOX0VYUSIM8VkrP3ibofLLqeEKqYz/Av14I=
Subject key identifier: 34:3D:F2:DE:8C:1B:FA:2E:E3:35:C0:55:25:6B:C1:DA:6E:4E:71:63
Authority key identifier: 9B:2D:99:46:FF:04:3D:10:81:C2:6F:D3:8F:08:17:31:00:77:BF:C7
Certificate issuer: /CN=9B2D9946FF043D1081C26FD38F0817310077BFC7
Certificate serial: 30E8F60B804CDEDFA76DFB27357554A59A4F9C6B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9B2D9946FF043D1081C26FD38F0817310077BFC7.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/9B2D9946FF043D1081C26FD38F0817310077BFC7.mft
Manifest number: 39
Signing time: Sat 13 Jun 2026 14:37:20 +0000
Manifest this update: Sat 13 Jun 2026 14:32:20 +0000
Manifest next update: Sun 14 Jun 2026 14:39:20 +0000
Files and hashes: 1: 9B2D9946FF043D1081C26FD38F0817310077BFC7.crl (hash: Wv5Da8SB2UPMQ/tIZXNOxpq2JExoQ6sc2o1e/4DakEY=)
2: 3136302e32322e39332e302f32342d3234203d3e20313532383335.roa (hash: nWvsjEg3FhCbHhiH6HxunuDCxB9lgrvkKOpoSSa7E9Q=)
3: 3136302e32322e39322e302f32342d3234203d3e20313532383335.roa (hash: oePR/73r7MSIzHQUks2lMsK7CVUF0CNaDFGyG/xqYVQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/9B2D9946FF043D1081C26FD38F0817310077BFC7.crl
rsync://rpki-rsync.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/9B2D9946FF043D1081C26FD38F0817310077BFC7.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9B2D9946FF043D1081C26FD38F0817310077BFC7.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 14:39:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:e8:f6:0b:80:4c:de:df:a7:6d:fb:27:35:75:54:a5:9a:4f:9c:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9B2D9946FF043D1081C26FD38F0817310077BFC7
Validity
Not Before: Jun 13 14:32:20 2026 GMT
Not After : Jun 14 14:39:20 2026 GMT
Subject: CN=343DF2DE8C1BFA2EE335C055256BC1DA6E4E7163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5d:fb:91:4f:6a:f9:82:0e:1f:82:4e:da:29:
bc:d5:fc:ba:68:36:a8:ca:79:5c:fe:2f:60:1a:e3:
eb:60:ea:34:f5:37:00:3f:96:15:24:f2:ba:b0:76:
66:43:85:a9:1c:ee:58:d3:b3:80:03:4e:1d:d9:ab:
7e:6f:d7:a6:e4:4b:2c:19:c5:65:42:89:21:d0:c7:
17:8c:35:13:e1:18:07:e2:63:44:dc:d8:1f:36:59:
70:48:93:90:92:86:2f:d7:f8:bb:35:77:42:2b:9f:
0e:05:55:ac:7b:b6:00:14:16:a8:fa:4c:43:e0:97:
7f:04:70:2e:31:53:d2:b5:5a:12:03:13:3c:70:00:
3b:39:cc:10:3b:97:63:05:1a:e0:11:a7:86:01:6f:
c4:30:2d:97:cc:a5:46:29:79:e2:51:c0:cb:c4:be:
23:d0:c2:e4:7f:ec:1b:59:aa:b1:7e:10:45:bb:75:
a7:12:1e:a3:be:2b:d2:6c:a7:75:7f:c5:13:8d:96:
90:40:1f:3e:79:7c:c6:ec:25:0f:30:57:24:9e:ef:
d7:89:2e:1c:1d:e4:55:5e:5c:15:fa:d2:29:ef:f3:
c5:2f:41:b2:75:31:3f:a5:de:09:e8:f3:2b:bf:6b:
36:2d:dd:36:6b:50:9c:95:44:23:c4:e5:a7:b9:6f:
5a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:3D:F2:DE:8C:1B:FA:2E:E3:35:C0:55:25:6B:C1:DA:6E:4E:71:63
X509v3 Authority Key Identifier:
keyid:9B:2D:99:46:FF:04:3D:10:81:C2:6F:D3:8F:08:17:31:00:77:BF:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/9B2D9946FF043D1081C26FD38F0817310077BFC7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9B2D9946FF043D1081C26FD38F0817310077BFC7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/9B2D9946FF043D1081C26FD38F0817310077BFC7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:61:d1:18:6b:cc:4b:4f:e4:ce:50:2e:16:8c:24:61:64:03:
61:ca:09:8a:8d:4b:b7:e2:59:ab:7d:6d:61:8d:06:80:e5:4a:
25:95:90:02:1b:36:f9:9d:0d:d5:88:b6:f7:30:d7:30:10:88:
23:05:01:32:57:b7:da:53:a4:98:b0:9b:67:82:f6:30:12:c9:
e4:58:75:ef:95:b0:83:6e:0c:95:51:97:1f:de:ec:35:ba:f2:
3b:2e:0c:49:e3:3a:38:88:f3:f9:34:7b:89:5d:d9:f8:ac:88:
6d:5a:20:7c:a7:72:33:b1:2d:57:09:3d:fb:e4:ca:26:ad:ac:
57:78:d6:09:dd:00:f8:f0:20:74:01:35:09:d7:2c:ae:71:bd:
d0:a7:71:5f:b2:44:8b:98:91:d4:2c:b2:7a:19:82:87:05:d8:
09:77:09:2e:2b:28:42:e4:0d:7b:fe:b8:d6:e8:e0:9d:3d:c7:
ad:92:2a:7c:01:74:19:4b:9a:f0:88:e0:8b:24:8c:83:59:81:
11:ea:d2:96:0a:97:9f:c2:9d:be:04:93:26:a1:cc:53:a7:bf:
8c:94:a5:19:df:cf:73:fe:a7:b5:c8:81:d2:80:f6:4a:fd:75:
11:b8:c5:fd:e3:5c:70:b6:99:d2:86:02:1d:3e:e8:aa:36:af:
c7:73:98:0d
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUMOj2C4BM3t+nbfsnNXVUpZpPnGswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUIyRDk5NDZGRjA0M0QxMDgxQzI2RkQzOEYwODE3MzEw
MDc3QkZDNzAeFw0yNjA2MTMxNDMyMjBaFw0yNjA2MTQxNDM5MjBaMDMxMTAvBgNV
BAMTKDM0M0RGMkRFOEMxQkZBMkVFMzM1QzA1NTI1NkJDMURBNkU0RTcxNjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxXfuRT2r5gg4fgk7aKbzV/Lpo
NqjKeVz+L2Aa4+tg6jT1NwA/lhUk8rqwdmZDhakc7ljTs4ADTh3Zq35v16bkSywZ
xWVCiSHQxxeMNRPhGAfiY0Tc2B82WXBIk5CShi/X+Ls1d0Irnw4FVax7tgAUFqj6
TEPgl38EcC4xU9K1WhIDEzxwADs5zBA7l2MFGuARp4YBb8QwLZfMpUYpeeJRwMvE
viPQwuR/7BtZqrF+EEW7dacSHqO+K9Jsp3V/xRONlpBAHz55fMbsJQ8wVySe79eJ
Lhwd5FVeXBX60inv88UvQbJ1MT+l3gno8yu/azYt3TZrUJyVRCPE5ae5b1rhAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUND3y3owb+i7jNcBVJWvB2m5OcWMwHwYDVR0j
BBgwFoAUmy2ZRv8EPRCBwm/TjwgXMQB3v8cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NjJkMjliMzItM2EyOS00YTE0LWJjOWItYzc2YTAwN2NhMDMyLzAvOUIyRDk5NDZG
RjA0M0QxMDgxQzI2RkQzOEYwODE3MzEwMDc3QkZDNy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC85QjJEOTk0NkZGMDQzRDEwODFDMjZGRDM4RjA4MTczMTAwNzdC
RkM3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjJkMjliMzItM2EyOS00YTE0LWJj
OWItYzc2YTAwN2NhMDMyLzAvOUIyRDk5NDZGRjA0M0QxMDgxQzI2RkQzOEYwODE3
MzEwMDc3QkZDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJ1h0RhrzEtP5M5QLhaMJGFkA2HKCYqNS7fi
Wat9bWGNBoDlSiWVkAIbNvmdDdWItvcw1zAQiCMFATJXt9pTpJiwm2eC9jASyeRY
de+VsINuDJVRlx/e7DW68jsuDEnjOjiI8/k0e4ld2fisiG1aIHyncjOxLVcJPfvk
yiatrFd41gndAPjwIHQBNQnXLK5xvdCncV+yRIuYkdQssnoZgocF2Al3CS4rKELk
DXv+uNbo4J09x62SKnwBdBlLmvCI4IskjINZgRHq0pYKl5/Cnb4EkyahzFOnv4yU
pRnfz3P+p7XIgdKA9kr9dRG4xf3jXHC2mdKGAh0+6Ko2r8dzmA0=
-----END CERTIFICATE-----
Generated at Sun Jun 14 02:22:55 2026 by rpki-client