
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/9F0EDA9BA3F7B24D18F6E17A5B6108F3E9EC41E4.mft
File: 9F0EDA9BA3F7B24D18F6E17A5B6108F3E9EC41E4.mft (raw, json)
Hash identifier: flypuEWeDMfLLyR+nTOhGMkEma8Qfe/oyjroeK5nOd4=
Subject key identifier: 45:CE:37:21:BC:0C:85:73:11:F2:78:BC:BC:D8:00:9F:79:D3:32:2F
Authority key identifier: 9F:0E:DA:9B:A3:F7:B2:4D:18:F6:E1:7A:5B:61:08:F3:E9:EC:41:E4
Certificate issuer: /CN=9F0EDA9BA3F7B24D18F6E17A5B6108F3E9EC41E4
Certificate serial: 2D9F42343949170DB5DA12C3ECBC8D483DD3C0E0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F0EDA9BA3F7B24D18F6E17A5B6108F3E9EC41E4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/9F0EDA9BA3F7B24D18F6E17A5B6108F3E9EC41E4.mft
Manifest number: 39
Signing time: Sat 13 Jun 2026 00:30:00 +0000
Manifest this update: Sat 13 Jun 2026 00:25:00 +0000
Manifest next update: Sun 14 Jun 2026 02:42:00 +0000
Files and hashes: 1: 3130332e3231312e3139362e302f32342d3234203d3e20313534343130.roa (hash: J5G+McAVtr2U9Oe5SR6DxQqcZsQxCgVXssdzL4FSaj4=)
2: 9F0EDA9BA3F7B24D18F6E17A5B6108F3E9EC41E4.crl (hash: LByu4QhlbI4zwAh62ZN9Bpg+srvW6MhsqCd+gGkLMXA=)
3: 3130332e3231312e3139362e302f32342d3234203d3e20313530393532.roa (hash: THjdUj/zxX7Pt6OgYoGfW4AdRr45vtKFbMKetg/qeDc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/9F0EDA9BA3F7B24D18F6E17A5B6108F3E9EC41E4.crl
rsync://rpki-rsync.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/9F0EDA9BA3F7B24D18F6E17A5B6108F3E9EC41E4.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F0EDA9BA3F7B24D18F6E17A5B6108F3E9EC41E4.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 20:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:9f:42:34:39:49:17:0d:b5:da:12:c3:ec:bc:8d:48:3d:d3:c0:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9F0EDA9BA3F7B24D18F6E17A5B6108F3E9EC41E4
Validity
Not Before: Jun 13 00:25:00 2026 GMT
Not After : Jun 14 02:42:00 2026 GMT
Subject: CN=45CE3721BC0C857311F278BCBCD8009F79D3322F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:74:2c:2d:27:48:79:ae:51:32:f1:91:55:aa:
10:b9:06:0e:8a:e0:82:f9:8c:8a:e3:35:ba:07:4b:
fe:57:c8:ae:64:b4:77:0e:63:e6:76:fd:d7:e0:a9:
a6:e6:ea:c0:57:27:7e:76:7d:c9:c8:09:3a:31:25:
6f:d3:12:ca:77:62:bd:fb:fe:c4:c9:b3:df:f8:30:
45:18:80:91:45:bd:89:4b:71:ae:ce:8f:3c:0d:ba:
b8:7b:e8:50:10:68:44:39:4a:96:ac:23:9e:15:d5:
06:4a:da:d3:40:88:7f:34:e7:41:00:da:70:63:02:
5b:11:5d:a5:15:62:af:0e:bf:09:b6:ae:38:9c:83:
46:de:1e:79:42:70:55:61:1b:f6:c6:1d:a7:ba:7c:
64:c3:bb:f2:cb:3b:d6:79:09:77:b9:40:0e:63:86:
ea:2d:3f:52:57:a6:1f:d9:25:d3:f0:1c:16:c6:64:
1d:70:e6:06:8f:45:4d:04:1a:9f:dc:46:84:9f:f7:
bf:d2:53:62:6a:f7:07:03:ea:56:ea:2f:42:fc:e8:
b7:93:cb:ec:96:45:0e:67:a8:ce:83:6b:c8:17:f2:
d5:8c:83:64:2f:e0:6d:4f:74:c9:50:a5:d5:33:f4:
49:99:8a:e3:d8:b5:da:f2:6a:b6:36:01:27:69:34:
0e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:CE:37:21:BC:0C:85:73:11:F2:78:BC:BC:D8:00:9F:79:D3:32:2F
X509v3 Authority Key Identifier:
keyid:9F:0E:DA:9B:A3:F7:B2:4D:18:F6:E1:7A:5B:61:08:F3:E9:EC:41:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/9F0EDA9BA3F7B24D18F6E17A5B6108F3E9EC41E4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F0EDA9BA3F7B24D18F6E17A5B6108F3E9EC41E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/9F0EDA9BA3F7B24D18F6E17A5B6108F3E9EC41E4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:12:06:db:33:ac:a0:99:56:cc:c8:9a:b9:c4:d5:9b:be:e1:
77:4b:e7:8b:c1:64:9b:d8:5e:f3:ec:2d:68:ff:f8:9c:91:a9:
0b:f5:d5:dd:f0:d3:07:33:f1:65:33:05:77:7c:01:49:e0:3b:
71:49:6b:b0:82:87:9a:95:ad:03:55:98:0a:e7:6b:27:b9:26:
42:b0:14:5f:d2:d8:94:14:84:ef:e8:97:56:c6:e8:e6:46:3f:
af:67:55:10:c7:3d:4e:29:41:fe:ac:4d:26:45:c8:83:28:34:
d5:3f:c9:0f:2f:98:1b:7d:e0:ce:12:43:e9:f1:f1:30:64:5e:
04:ac:61:ef:b2:43:55:35:8b:18:00:7a:8e:89:cf:30:15:57:
d9:91:90:3c:1b:97:e2:f4:7b:7e:b6:ac:e4:8b:e5:fd:b0:b3:
c3:30:2a:3e:f4:d6:af:c0:8f:4f:5d:63:fe:51:2a:55:9f:fd:
54:59:25:f0:9d:18:b9:de:30:23:44:2c:c4:c5:8d:98:72:9d:
79:36:d5:d7:7c:49:f9:3f:1f:86:f0:f0:01:bb:60:1d:9d:94:
23:2d:56:c8:d4:c1:fb:23:62:10:48:a0:1f:b3:6b:15:40:b4:
14:3b:2f:84:bb:7e:0a:61:35:03:1a:ef:be:a6:db:67:dc:d2:
94:5c:b3:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:56:47 2026 by rpki-client