
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.mft
File: C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.mft (raw, json)
Hash identifier: oIqT20sWcSytBGYEqDWzoIOnGIdM8u/yo4L7ojQjEck=
Subject key identifier: DC:E4:DB:3B:AB:5B:93:CF:0C:B3:36:0F:34:F0:D4:C4:FF:AD:5A:25
Authority key identifier: C9:BB:DF:0E:A1:4D:DD:F0:C5:51:DF:18:63:32:CB:85:9E:B9:D8:94
Certificate issuer: /CN=C9BBDF0EA14DDDF0C551DF186332CB859EB9D894
Certificate serial: 0282298FDC183756EEC1C8809353BF9922B0AB98
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.mft
Manifest number: BD
Signing time: Mon 21 Sep 2026 14:49:49 +0000
Manifest this update: Mon 21 Sep 2026 14:44:49 +0000
Manifest next update: Tue 22 Sep 2026 16:36:49 +0000
Files and hashes: 1: C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.crl (hash: LVFIEZeH5BglP5qpmWkjutlJe2cnbmBsuag+eAHzr00=)
2: 3130332e3137392e3234392e302f32342d3234203d3e2039333431.roa (hash: ZVZI5MXEYgq+QpFFWNL7lGXYAS9omg0P+vD6tywGpec=)
3: 3130332e3137392e3234382e302f32332d3233203d3e2039333431.roa (hash: Pfe66TELIpbboDlTlvL4smle14adEmFMF0KS3kt6HYM=)
4: 3130332e3137392e3234382e302f32342d3234203d3e2039333431.roa (hash: occ5qoM9oAkKmzdKhCiXxb0YYDDzZw7eQPlVtS1+AXA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.crl
rsync://rpki-rsync.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 05:24:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:82:29:8f:dc:18:37:56:ee:c1:c8:80:93:53:bf:99:22:b0:ab:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C9BBDF0EA14DDDF0C551DF186332CB859EB9D894
Validity
Not Before: Sep 21 14:44:49 2026 GMT
Not After : Sep 22 16:36:49 2026 GMT
Subject: CN=DCE4DB3BAB5B93CF0CB3360F34F0D4C4FFAD5A25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e1:8a:6d:8e:0f:a1:d1:21:77:21:1e:bf:91:
bb:53:d4:4d:f4:82:5b:a4:b0:6b:78:9e:51:fd:78:
0f:73:f5:d1:3f:08:47:80:f6:bf:51:75:07:15:0a:
45:7a:d3:3e:42:8a:24:a1:91:12:65:0c:30:c6:69:
95:f1:7f:ef:d1:43:eb:92:99:b2:10:af:66:7f:44:
31:e0:72:21:46:75:0e:dc:20:66:ed:98:d8:92:f4:
79:42:38:d8:82:12:7c:41:db:e8:31:2b:06:3e:c5:
c7:5c:12:07:1a:08:61:71:75:99:5f:25:53:fd:a7:
93:51:57:4e:c1:64:ae:6c:c0:46:11:26:f2:3e:c0:
f2:af:d1:17:81:8e:06:89:41:b9:db:6f:f8:84:87:
b9:84:30:ef:8a:1c:75:f3:c6:10:3e:00:0a:4c:2b:
fe:90:94:4a:9a:37:35:ab:a2:52:a7:b7:df:fc:58:
f0:b3:31:8b:01:c2:8a:fd:60:be:ba:57:94:5a:f2:
9b:09:e9:12:78:7d:73:d6:04:cc:2a:4a:a0:b5:58:
12:c2:83:b3:4c:ce:5f:d2:88:6b:58:ec:67:bb:9c:
93:83:1c:af:24:f6:30:79:9f:48:ae:1d:43:1a:29:
c0:d3:7d:a0:27:3a:28:3a:80:a8:8d:47:71:68:98:
46:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:E4:DB:3B:AB:5B:93:CF:0C:B3:36:0F:34:F0:D4:C4:FF:AD:5A:25
X509v3 Authority Key Identifier:
keyid:C9:BB:DF:0E:A1:4D:DD:F0:C5:51:DF:18:63:32:CB:85:9E:B9:D8:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:d5:06:cc:90:f6:6b:50:79:7b:87:9d:bc:e8:50:15:a0:02:
3b:a6:8d:fa:bf:5b:8f:62:ed:32:95:71:f9:d5:16:46:e6:5e:
ad:bc:a2:cc:a9:4e:bf:fb:80:c7:25:c2:8d:94:a3:ef:7a:ca:
dd:b0:55:63:22:6e:0e:d2:4f:d4:66:ca:ef:d2:92:2b:05:89:
32:fa:88:ca:48:60:15:fa:fc:07:0a:df:1d:ed:b2:50:98:b8:
a0:c1:da:0d:a8:33:26:fb:ff:0e:fe:eb:51:b9:2d:76:b1:5a:
34:48:c3:09:a8:8a:d6:c6:6d:f8:75:b7:44:6b:ae:da:f1:49:
28:10:42:ce:29:e6:96:8d:99:00:f3:af:67:5c:e8:2f:b2:11:
96:b6:76:9e:7a:dc:99:33:c7:90:75:df:4d:6e:21:26:49:2d:
75:c7:bf:44:f6:5b:26:91:b8:4e:3e:77:3d:3b:d1:07:df:55:
92:fa:bd:5a:a9:1e:b8:d0:9a:a0:ed:76:bb:f3:4f:6c:4a:0b:
05:ca:e8:e4:28:bd:44:4b:9c:77:1e:93:c4:0f:da:64:27:58:
5b:d7:c5:26:0f:7f:91:ea:b0:5a:ef:fc:d8:72:79:d9:da:88:
61:f5:5f:bb:39:8d:50:14:22:87:d0:0b:64:f3:dc:4f:ee:40:
f9:98:25:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:40:52 2026 by rpki-client