
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/662c2366-f9ec-4455-a9ff-ff696a107e62/0/0E8E7FF529A30407FEDE18CF892F4E205578CFF4.mft
File: 0E8E7FF529A30407FEDE18CF892F4E205578CFF4.mft (raw, json)
Hash identifier: kkh/BaYiAQB/dJffMqyvVtz1+vzJolFeIlmAgF2tSfE=
Subject key identifier: 07:A1:9E:BA:D7:A7:7C:3D:95:20:76:39:1B:1B:B9:04:1C:5E:3A:6A
Authority key identifier: 0E:8E:7F:F5:29:A3:04:07:FE:DE:18:CF:89:2F:4E:20:55:78:CF:F4
Certificate issuer: /CN=0E8E7FF529A30407FEDE18CF892F4E205578CFF4
Certificate serial: 35F60B5D1B43BA628B8A62DBFC6062A3CF53F40B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0E8E7FF529A30407FEDE18CF892F4E205578CFF4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/662c2366-f9ec-4455-a9ff-ff696a107e62/0/0E8E7FF529A30407FEDE18CF892F4E205578CFF4.mft
Manifest number: D9
Signing time: Sun 11 Oct 2026 03:41:15 +0000
Manifest this update: Sun 11 Oct 2026 03:36:15 +0000
Manifest next update: Mon 12 Oct 2026 06:12:15 +0000
Files and hashes: 1: 0E8E7FF529A30407FEDE18CF892F4E205578CFF4.crl (hash: 2uvAY7Fet3gVkxDn52P6eDvIjD9sp15kk6z3OvZTf2A=)
2: 3130332e38332e302e302f32342d3234203d3e20313530323532.roa (hash: ESYFLhLUVsrTAfVtaCjm2iupLDG9Q3qv3T4W73aB/40=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/662c2366-f9ec-4455-a9ff-ff696a107e62/0/0E8E7FF529A30407FEDE18CF892F4E205578CFF4.crl
rsync://rpki-rsync.idnic.net/repo/662c2366-f9ec-4455-a9ff-ff696a107e62/0/0E8E7FF529A30407FEDE18CF892F4E205578CFF4.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0E8E7FF529A30407FEDE18CF892F4E205578CFF4.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 21:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:f6:0b:5d:1b:43:ba:62:8b:8a:62:db:fc:60:62:a3:cf:53:f4:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0E8E7FF529A30407FEDE18CF892F4E205578CFF4
Validity
Not Before: Oct 11 03:36:15 2026 GMT
Not After : Oct 12 06:12:15 2026 GMT
Subject: CN=07A19EBAD7A77C3D952076391B1BB9041C5E3A6A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:69:d5:30:ce:05:0d:72:b1:41:78:3c:fb:1d:
fc:a8:3a:32:b4:99:f5:56:7c:2f:d9:77:c6:c0:8d:
c5:0c:64:3b:5b:51:a6:5b:26:92:be:a5:1b:36:67:
0b:47:99:8b:6d:86:4f:ac:eb:08:1b:c6:f0:15:44:
ee:43:ac:a8:5f:58:88:bd:c3:cf:75:92:14:64:e7:
d3:61:0b:0d:b5:10:bf:b1:4a:27:60:25:32:da:0c:
53:c9:7e:89:9e:25:4b:70:29:f0:21:48:11:63:77:
62:ad:5c:c6:17:e9:38:c5:c2:fc:11:62:bb:5d:e5:
e8:d9:c8:7c:d4:b3:ae:19:7e:4a:9d:e0:1f:49:a8:
b9:a2:0e:ab:2c:f8:e3:e7:87:f4:dd:d2:7f:72:4c:
f6:5d:21:6a:5b:53:89:c0:9e:8a:04:bd:31:ab:51:
b8:9d:0a:b1:37:81:66:05:31:60:ef:1a:86:1d:97:
ca:c6:48:fa:bd:a4:ee:43:c1:67:39:6b:17:74:42:
15:08:0a:f7:de:d9:8b:5c:87:47:36:cd:cb:f5:05:
0a:e4:82:71:86:af:01:1e:51:1d:9f:8f:8a:ab:dc:
ca:dc:a2:23:44:95:fa:bc:3a:9d:cb:07:cf:a8:7b:
24:4e:16:1e:83:8c:d6:b3:9c:6c:ea:b7:47:4e:53:
49:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:A1:9E:BA:D7:A7:7C:3D:95:20:76:39:1B:1B:B9:04:1C:5E:3A:6A
X509v3 Authority Key Identifier:
keyid:0E:8E:7F:F5:29:A3:04:07:FE:DE:18:CF:89:2F:4E:20:55:78:CF:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/662c2366-f9ec-4455-a9ff-ff696a107e62/0/0E8E7FF529A30407FEDE18CF892F4E205578CFF4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0E8E7FF529A30407FEDE18CF892F4E205578CFF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/662c2366-f9ec-4455-a9ff-ff696a107e62/0/0E8E7FF529A30407FEDE18CF892F4E205578CFF4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:5d:32:7f:89:42:86:b9:f6:6f:30:57:b8:f6:c9:60:76:c9:
93:a7:2d:e9:fc:ff:70:92:8a:b6:78:37:eb:0f:43:1d:06:93:
bd:e9:af:ac:34:a9:02:b9:4e:ce:dd:24:2b:24:3d:c0:f5:b1:
11:d1:d2:15:fc:31:6a:7f:c2:a9:c2:bf:56:2e:af:aa:e1:33:
1f:26:f0:0e:d9:32:5f:30:48:f3:33:55:f0:99:4e:e7:e8:27:
2b:f6:e4:59:1f:74:9b:b5:40:77:cf:a4:0a:68:69:06:7e:7f:
1a:35:21:48:b8:10:b0:8c:7a:8b:b4:d8:3d:08:e6:3b:f0:4a:
fb:c6:18:3c:22:6a:f8:f4:a6:cc:bb:d3:ff:5f:7b:7a:db:24:
33:94:bf:3d:c4:db:6c:24:da:9b:16:dd:04:31:cf:37:91:9c:
c7:50:42:03:1e:b0:db:ad:16:c0:b0:4f:32:c0:fb:44:e6:64:
6d:18:a1:c1:65:d0:41:e6:15:17:04:43:89:b4:42:bb:a4:fd:
09:c7:8e:a0:65:ce:a4:a5:07:44:3b:0a:56:af:62:b2:b8:4e:
40:eb:bf:db:dc:63:b0:0c:92:aa:92:1a:c1:1e:43:55:89:7d:
1d:8b:6a:9d:3d:ed:38:e5:5a:36:13:00:bd:0a:8b:9e:d1:37:
ba:12:a5:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 07:20:08 2026 by rpki-client