
$ rpki-client -vvf rpki-rsync.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/9DE0710D199DAE298457CA63B91BD20C03F148B9.mft
File: 9DE0710D199DAE298457CA63B91BD20C03F148B9.mft (raw, json)
Hash identifier: 4EO8IjRHDnfZUnzJtgNqYyt6034JUoEA/jqIafaAjek=
Subject key identifier: 1E:6B:11:2C:CD:EE:36:11:97:6F:DE:44:8F:94:F1:5B:8C:C5:0F:37
Authority key identifier: 9D:E0:71:0D:19:9D:AE:29:84:57:CA:63:B9:1B:D2:0C:03:F1:48:B9
Certificate issuer: /CN=9DE0710D199DAE298457CA63B91BD20C03F148B9
Certificate serial: 4E771DDDC7C5C03D3DAC13DA852BEAB270CCFC74
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DE0710D199DAE298457CA63B91BD20C03F148B9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/9DE0710D199DAE298457CA63B91BD20C03F148B9.mft
Manifest number: 3E
Signing time: Tue 16 Jun 2026 17:25:13 +0000
Manifest this update: Tue 16 Jun 2026 17:20:13 +0000
Manifest next update: Wed 17 Jun 2026 19:58:13 +0000
Files and hashes: 1: 3130332e3139312e33392e302f32342d3234203d3e20313439393233.roa (hash: Wixcu+2ilRcFPig7lum9EHWYiNT3uxWOphv6H0Og4uE=)
2: 9DE0710D199DAE298457CA63B91BD20C03F148B9.crl (hash: BLiSELxl8t9tUyMZ4oYHVZC1/zNZGr09YgDHDLqEasI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/9DE0710D199DAE298457CA63B91BD20C03F148B9.crl
rsync://rpki-rsync.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/9DE0710D199DAE298457CA63B91BD20C03F148B9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DE0710D199DAE298457CA63B91BD20C03F148B9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 19:58:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:77:1d:dd:c7:c5:c0:3d:3d:ac:13:da:85:2b:ea:b2:70:cc:fc:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9DE0710D199DAE298457CA63B91BD20C03F148B9
Validity
Not Before: Jun 16 17:20:13 2026 GMT
Not After : Jun 17 19:58:13 2026 GMT
Subject: CN=1E6B112CCDEE3611976FDE448F94F15B8CC50F37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:24:f2:98:ba:e1:ae:16:a7:d9:b7:e0:a9:ea:
12:48:09:2f:51:dc:8f:f8:a0:f9:08:5e:32:6f:57:
c7:91:b1:b2:c4:dc:45:8e:c0:51:b5:82:33:2b:75:
44:3a:e8:57:df:e5:e6:16:00:cb:e9:13:93:12:23:
b3:62:83:af:57:e7:73:f0:f6:f5:15:53:3a:68:31:
39:88:de:e8:41:9f:a0:9b:85:4d:9e:2a:96:43:cc:
9b:64:e8:06:06:b6:60:39:03:d2:08:e0:18:a5:ca:
45:9f:2e:cc:a9:38:c8:f6:fa:c3:22:23:ed:87:73:
47:06:75:e9:5e:6b:5d:ad:6d:ad:a2:e3:06:58:74:
81:03:18:ea:13:c8:e0:82:23:5a:30:8e:08:84:f1:
c3:01:99:67:52:53:1d:73:87:2d:fa:fb:b4:86:4e:
7b:86:55:95:1d:6a:c4:d0:9e:32:6d:91:37:ea:c4:
84:d7:33:d5:d8:8a:53:a5:b0:68:24:18:5d:0c:b2:
c7:9c:41:0e:14:7d:69:34:2c:92:dd:4a:07:61:4a:
4f:4d:9e:d1:eb:25:ab:49:ca:46:9d:85:ec:4e:cf:
3a:67:6f:f5:79:0c:c0:ee:49:80:70:a2:3d:0d:35:
06:4d:02:5a:30:b9:d4:6b:e6:0c:38:31:78:52:99:
65:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:6B:11:2C:CD:EE:36:11:97:6F:DE:44:8F:94:F1:5B:8C:C5:0F:37
X509v3 Authority Key Identifier:
keyid:9D:E0:71:0D:19:9D:AE:29:84:57:CA:63:B9:1B:D2:0C:03:F1:48:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/9DE0710D199DAE298457CA63B91BD20C03F148B9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DE0710D199DAE298457CA63B91BD20C03F148B9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/9DE0710D199DAE298457CA63B91BD20C03F148B9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:e3:5a:88:5a:9d:89:30:ff:d5:86:8c:c2:2e:9b:12:67:61:
a4:d4:26:7d:ae:77:56:1e:46:93:60:4d:7e:d1:3d:a8:44:d4:
50:c7:21:b4:da:1e:f5:bc:8a:7e:e0:8e:31:87:33:e7:cf:df:
da:40:a4:ed:ae:22:35:3d:0c:3a:94:cc:6b:95:21:4f:1a:80:
84:e3:ad:e8:ec:59:a9:fc:3e:52:88:05:57:8e:78:43:be:4e:
9f:bc:a6:40:a1:24:4d:f7:32:a8:88:e4:fb:e0:d1:a5:48:69:
74:25:94:5b:46:71:5f:c7:18:e6:14:69:fd:99:b9:32:40:0c:
87:03:72:81:0a:3a:6b:dc:ef:b6:f9:4f:b6:ab:4b:8e:fb:64:
49:99:71:ac:40:77:83:57:13:04:0a:71:04:97:29:51:cf:38:
22:21:8b:d9:9c:81:d6:6d:65:4a:81:06:5b:91:77:82:43:0d:
fc:3f:a7:96:f7:cb:8b:10:e7:17:fc:d3:e3:1c:f2:29:29:39:
9f:76:2d:16:c4:1d:b6:17:c3:c3:0c:90:04:08:29:e2:2b:2f:
ed:11:b8:b8:bc:fc:45:58:75:c9:66:8b:83:7a:1c:f6:93:f3:
57:97:e8:82:78:a2:f4:f2:79:cd:c6:c3:c5:d8:ce:14:df:f3:
c3:b8:0b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:32:48 2026 by rpki-client