
$ rpki-client -vvf rpki-rsync.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/09F1FCE71540608DD361D20037B585CA6313B714.mft
File: 09F1FCE71540608DD361D20037B585CA6313B714.mft (raw, json)
Hash identifier: UvhKx23BL6GtfIUsbXWec9RUTdJ/E8hgM3Q4S2z+OMU=
Subject key identifier: D1:E6:FE:DB:4A:94:0A:45:E3:E5:91:1C:83:BA:82:67:26:17:29:B2
Authority key identifier: 09:F1:FC:E7:15:40:60:8D:D3:61:D2:00:37:B5:85:CA:63:13:B7:14
Certificate issuer: /CN=09F1FCE71540608DD361D20037B585CA6313B714
Certificate serial: 239D3B1F98117D4AC2F02641D5B6F91039A37D92
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/09F1FCE71540608DD361D20037B585CA6313B714.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/09F1FCE71540608DD361D20037B585CA6313B714.mft
Manifest number: 3E
Signing time: Tue 16 Jun 2026 20:59:31 +0000
Manifest this update: Tue 16 Jun 2026 20:54:31 +0000
Manifest next update: Wed 17 Jun 2026 21:09:31 +0000
Files and hashes: 1: 3130332e3133342e31362e302f32342d3234203d3e20313338313432.roa (hash: Tdrs/9MxQFRJ04JmOuNBrPQeJZxfkO1jdYAYtxuEviE=)
2: 323030313a6466373a616630303a3a2f34382d3438203d3e20313338313432.roa (hash: lNRKhcmiZUAq3a5jFdaJmEqXMHj1lj+pscOEkjDxix0=)
3: 09F1FCE71540608DD361D20037B585CA6313B714.crl (hash: m1ePVxlOfAy1FcniPcnconK15Tfil9fBLSi+RwlAZ28=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/09F1FCE71540608DD361D20037B585CA6313B714.crl
rsync://rpki-rsync.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/09F1FCE71540608DD361D20037B585CA6313B714.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/09F1FCE71540608DD361D20037B585CA6313B714.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 21:09:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:9d:3b:1f:98:11:7d:4a:c2:f0:26:41:d5:b6:f9:10:39:a3:7d:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09F1FCE71540608DD361D20037B585CA6313B714
Validity
Not Before: Jun 16 20:54:31 2026 GMT
Not After : Jun 17 21:09:31 2026 GMT
Subject: CN=D1E6FEDB4A940A45E3E5911C83BA8267261729B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:89:8f:f2:75:c7:37:04:ca:d0:18:53:5c:a8:
48:ab:32:1b:58:5a:bc:4c:e8:08:89:d7:99:c6:e1:
f8:23:51:60:40:d1:f9:4e:37:01:79:54:61:60:f5:
f4:77:4d:53:ff:88:43:d5:7b:59:13:c6:3e:cd:04:
c1:af:11:3a:0c:85:9a:d5:89:9c:71:e7:b9:8e:32:
2b:28:78:03:91:9c:00:b6:e6:f1:ec:dc:ca:03:d7:
6f:3b:f4:e7:5f:ff:2f:07:62:b1:9c:3c:7c:4d:c6:
28:23:cb:1e:4a:15:2a:2d:1e:08:ca:e7:1a:d8:57:
3b:63:c1:3f:80:57:d3:6a:9a:3f:d8:af:46:cc:71:
a9:ed:88:76:58:78:7d:28:76:25:ec:ff:74:1a:73:
a9:91:5c:9b:a2:45:8c:6e:8a:a6:ac:82:05:ae:8b:
0b:26:0d:4e:b5:a8:15:9b:c4:9a:bf:5e:c1:9a:a0:
6b:c9:51:d9:e6:a8:8e:91:74:4f:ac:5b:97:5d:75:
6d:bc:13:cd:93:da:2d:3d:5c:09:53:45:aa:9a:3f:
b1:50:dd:e1:aa:9c:8a:c8:f7:56:d3:15:0e:b5:c5:
e1:0c:18:e3:38:ff:56:14:b7:69:da:78:df:de:38:
32:40:72:83:fa:0c:5e:ed:f3:41:58:9a:8a:c2:cb:
8e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E6:FE:DB:4A:94:0A:45:E3:E5:91:1C:83:BA:82:67:26:17:29:B2
X509v3 Authority Key Identifier:
keyid:09:F1:FC:E7:15:40:60:8D:D3:61:D2:00:37:B5:85:CA:63:13:B7:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/09F1FCE71540608DD361D20037B585CA6313B714.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/09F1FCE71540608DD361D20037B585CA6313B714.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/09F1FCE71540608DD361D20037B585CA6313B714.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:6c:4c:36:13:31:cb:94:81:db:73:f8:f9:89:2b:be:b3:a5:
04:43:1a:37:6d:57:95:6c:01:3d:79:20:58:cb:ed:f6:49:45:
db:88:57:7a:0d:9c:18:fd:71:fa:eb:21:73:ac:e3:1e:eb:c1:
b4:6a:ab:bd:7a:53:e4:bd:98:68:cd:fe:0b:58:6d:79:a6:cb:
16:98:a4:e8:b1:b4:f1:32:06:ce:ad:38:27:38:bf:62:f6:d8:
ba:17:dd:bb:3e:36:3f:44:ee:38:86:44:29:0d:2a:5a:74:b5:
41:0e:cf:4e:e7:81:55:16:4e:e4:05:13:43:08:d4:f5:e8:4e:
ec:29:ec:82:af:91:9b:ab:f3:3d:d9:f5:5f:59:35:c5:ea:7d:
e4:a3:4a:e8:9e:ef:a2:b5:2c:4e:63:cd:11:9a:0c:0a:5e:16:
a2:1e:59:50:4a:3b:ac:ab:ed:62:ce:3c:5c:be:c4:dc:e3:c3:
b2:44:22:2f:17:bf:b5:8d:8f:b5:65:5c:b6:8d:7f:7f:d9:de:
2b:80:cd:0d:b7:21:3b:f4:43:11:be:fb:65:6d:da:a9:26:c1:
f6:fb:e7:9c:a8:b5:3c:bf:49:f4:71:36:c1:1a:ad:9e:3d:b5:
ab:41:d4:81:51:a3:ab:53:d9:4e:67:5a:61:c4:96:6e:57:e4:
be:34:7e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:30:04 2026 by rpki-client