
$ rpki-client -vvf rpki-rsync.idnic.net/repo/6cd24b05-269e-4784-b935-f27665830fda/0/9CCE2197D83CFA0979E79295EFEE5D486FB3A23E.mft
File: 9CCE2197D83CFA0979E79295EFEE5D486FB3A23E.mft (raw, json)
Hash identifier: wucgR319DDefQuS2nLwbiyhQKxtP5syJFfqfHHIRIm4=
Subject key identifier: 52:40:E7:A9:2D:F5:A0:19:5F:4E:02:EF:FD:EA:B8:F2:5A:D2:E0:F9
Authority key identifier: 9C:CE:21:97:D8:3C:FA:09:79:E7:92:95:EF:EE:5D:48:6F:B3:A2:3E
Certificate issuer: /CN=9CCE2197D83CFA0979E79295EFEE5D486FB3A23E
Certificate serial: 3D2C91CF3E5F99E37C5DBE3B2027BDEBA8F3E8AF
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9CCE2197D83CFA0979E79295EFEE5D486FB3A23E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6cd24b05-269e-4784-b935-f27665830fda/0/9CCE2197D83CFA0979E79295EFEE5D486FB3A23E.mft
Manifest number: 3E
Signing time: Tue 16 Jun 2026 22:31:26 +0000
Manifest this update: Tue 16 Jun 2026 22:26:26 +0000
Manifest next update: Thu 18 Jun 2026 02:06:26 +0000
Files and hashes: 1: 3130332e3132362e32362e302f32342d3234203d3e20313530353038.roa (hash: 6Awu2Ik5tqvQ6rEKLN4Gy/qaMR8Y4RuJeJcgKdpNQtw=)
2: 9CCE2197D83CFA0979E79295EFEE5D486FB3A23E.crl (hash: 2nGQJY2R+aAso+WRlFWdF7i3Ma3nRp4qmh/rVLZkgP8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6cd24b05-269e-4784-b935-f27665830fda/0/9CCE2197D83CFA0979E79295EFEE5D486FB3A23E.crl
rsync://rpki-rsync.idnic.net/repo/6cd24b05-269e-4784-b935-f27665830fda/0/9CCE2197D83CFA0979E79295EFEE5D486FB3A23E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9CCE2197D83CFA0979E79295EFEE5D486FB3A23E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 02:06:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:2c:91:cf:3e:5f:99:e3:7c:5d:be:3b:20:27:bd:eb:a8:f3:e8:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9CCE2197D83CFA0979E79295EFEE5D486FB3A23E
Validity
Not Before: Jun 16 22:26:26 2026 GMT
Not After : Jun 18 02:06:26 2026 GMT
Subject: CN=5240E7A92DF5A0195F4E02EFFDEAB8F25AD2E0F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5e:00:f5:9a:2b:ea:55:5f:9e:c7:30:d1:82:
97:48:aa:f4:eb:81:24:52:91:2e:ce:b7:77:22:3c:
96:33:7f:3f:73:5b:2a:66:d9:6f:b5:e9:d6:23:84:
aa:76:ca:a4:e7:45:94:98:bc:51:11:1b:0b:a3:0f:
a0:16:9f:8f:78:26:1d:1d:46:10:f4:b9:92:7f:e8:
c1:7e:0d:de:97:56:6a:f0:52:cf:32:1d:38:47:0b:
7e:ce:6e:b4:95:02:e6:fb:8a:5c:b3:cf:2e:26:5d:
50:71:b7:56:e5:a0:fd:f1:35:95:14:c7:f0:bb:18:
9c:96:f9:71:e5:69:6a:03:42:8f:a2:d3:5c:8f:b5:
e6:66:ad:7f:61:34:80:2b:b7:31:86:e3:59:1c:e4:
69:52:ff:cf:28:4d:a2:44:29:fe:48:d0:1a:ce:a8:
11:0d:d7:3f:d2:8b:99:4b:76:65:07:8c:30:81:23:
f2:e3:d5:6c:ef:13:16:f9:ca:7c:3d:72:23:cb:07:
c9:45:45:99:ff:8e:80:1e:b8:a2:4d:49:09:3c:1d:
52:45:1d:31:8f:97:fb:46:2b:68:b0:d8:58:6c:14:
21:c4:5d:b3:7e:1e:98:13:d3:96:59:21:e0:a1:71:
e1:dd:93:37:ab:11:3d:91:fd:54:bb:a7:2e:80:d7:
2c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:40:E7:A9:2D:F5:A0:19:5F:4E:02:EF:FD:EA:B8:F2:5A:D2:E0:F9
X509v3 Authority Key Identifier:
keyid:9C:CE:21:97:D8:3C:FA:09:79:E7:92:95:EF:EE:5D:48:6F:B3:A2:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6cd24b05-269e-4784-b935-f27665830fda/0/9CCE2197D83CFA0979E79295EFEE5D486FB3A23E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9CCE2197D83CFA0979E79295EFEE5D486FB3A23E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6cd24b05-269e-4784-b935-f27665830fda/0/9CCE2197D83CFA0979E79295EFEE5D486FB3A23E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:f8:4b:1a:e3:85:4f:95:be:41:04:31:6c:e4:3c:73:30:a2:
39:11:b1:37:5c:38:7a:b2:bd:7b:85:03:b5:19:15:ea:fc:24:
cb:eb:26:34:80:9d:54:6f:94:6f:16:ce:bc:3f:69:09:15:0d:
f8:99:e6:3e:9e:26:ab:a3:49:59:34:de:4c:09:08:bb:3b:8a:
27:f5:8a:2b:42:77:b9:93:21:43:16:82:6e:0c:2f:1f:8d:de:
23:29:64:25:47:b9:4e:0b:9e:63:7f:5d:be:a4:fb:9b:66:87:
5f:33:95:da:61:44:ff:24:69:de:63:77:94:5a:a1:5d:34:b6:
86:4d:c9:3d:9b:c8:cd:e5:31:81:5a:72:76:1b:85:30:7f:da:
8e:20:cd:06:4d:52:66:e4:7b:97:93:36:ea:75:63:85:e1:8b:
bc:f8:e0:2e:d0:f9:74:d1:ef:55:45:79:58:56:c1:d3:50:b9:
42:40:9c:06:0c:ba:13:89:f8:f9:2c:be:27:dc:f0:b8:ac:9a:
0d:fd:e7:0c:6c:84:ad:d1:6e:29:83:14:25:54:de:5d:53:08:
ed:ca:86:5a:90:a7:65:eb:cb:9d:7d:66:36:bb:f2:2b:16:9f:
64:b3:2d:c5:6d:a7:35:9d:7d:aa:2f:a1:bc:32:e4:13:e5:7e:
3a:1c:1e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:14:09 2026 by rpki-client