
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/9E9F5935C65B93B070730D31DC3B0B94A4C3EF00.mft
File: 9E9F5935C65B93B070730D31DC3B0B94A4C3EF00.mft (raw, json)
Hash identifier: K58Ib7YICLU0DjLacHM69SXMSUlcWWt8thnb6OEcQzY=
Subject key identifier: EF:6E:E6:0E:B5:23:8B:59:30:E3:4A:87:9A:42:66:84:C4:9F:18:E9
Authority key identifier: 9E:9F:59:35:C6:5B:93:B0:70:73:0D:31:DC:3B:0B:94:A4:C3:EF:00
Certificate issuer: /CN=9E9F5935C65B93B070730D31DC3B0B94A4C3EF00
Certificate serial: 659F622111FDECDF13DD953A1726DD5BCB092DBC
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9E9F5935C65B93B070730D31DC3B0B94A4C3EF00.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/9E9F5935C65B93B070730D31DC3B0B94A4C3EF00.mft
Manifest number: BF
Signing time: Tue 22 Sep 2026 18:08:57 +0000
Manifest this update: Tue 22 Sep 2026 18:03:57 +0000
Manifest next update: Wed 23 Sep 2026 18:11:57 +0000
Files and hashes: 1: 3130332e3135382e3235302e302f32332d3234203d3e20313431313334.roa (hash: naWUC2Rkww5G3UJh4eCfssT9Zr/V8p7wGu4ngZht9HU=)
2: 9E9F5935C65B93B070730D31DC3B0B94A4C3EF00.crl (hash: 9Mo58Jft8yB5sPyn7hGZ9hfqaGo0gR3wHQXj0IGIkgM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/9E9F5935C65B93B070730D31DC3B0B94A4C3EF00.crl
rsync://rpki-rsync.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/9E9F5935C65B93B070730D31DC3B0B94A4C3EF00.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9E9F5935C65B93B070730D31DC3B0B94A4C3EF00.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 23 Sep 2026 17:48:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:9f:62:21:11:fd:ec:df:13:dd:95:3a:17:26:dd:5b:cb:09:2d:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9E9F5935C65B93B070730D31DC3B0B94A4C3EF00
Validity
Not Before: Sep 22 18:03:57 2026 GMT
Not After : Sep 23 18:11:57 2026 GMT
Subject: CN=EF6EE60EB5238B5930E34A879A426684C49F18E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:71:2e:2a:5e:97:66:a8:e8:b6:3b:74:ee:02:
04:52:b4:0a:83:1e:5a:7d:a7:99:4b:c8:66:b5:5f:
4f:96:e6:bf:27:fa:22:85:c4:1d:22:fb:e2:b3:11:
00:0b:20:1a:a6:68:84:c9:e6:68:8e:8a:3d:63:2e:
a9:5a:9d:41:a5:4e:43:d4:7c:1a:7a:b0:2e:f4:fc:
54:65:65:ac:e4:e9:26:83:60:24:bf:ec:93:90:3e:
c8:62:d9:e0:99:4f:0e:ce:af:44:17:5a:0b:7b:d0:
23:55:21:b5:c8:8a:9f:98:d8:31:bd:14:db:45:c1:
00:04:89:2d:7b:26:2b:21:0d:f8:b1:0d:06:7c:a1:
0e:35:28:39:35:15:c2:fc:5a:98:06:55:33:53:f3:
f2:7c:fb:f4:b8:00:d9:b1:28:17:be:25:99:df:24:
63:19:2d:2e:0a:d8:8d:00:3d:ab:13:47:1d:ac:26:
77:ba:0b:b1:1b:2a:da:1f:a6:ef:31:eb:00:47:10:
3b:93:15:4f:09:cf:fb:a6:f2:c3:82:84:e3:3b:f0:
b2:03:48:d2:70:ae:11:09:ac:72:1d:9e:33:b2:95:
51:a0:e5:b8:0c:55:8c:50:ea:bb:2f:64:fc:46:1e:
a1:f2:c9:a7:d1:12:9c:6f:f7:3f:06:a3:70:a4:2e:
17:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:6E:E6:0E:B5:23:8B:59:30:E3:4A:87:9A:42:66:84:C4:9F:18:E9
X509v3 Authority Key Identifier:
keyid:9E:9F:59:35:C6:5B:93:B0:70:73:0D:31:DC:3B:0B:94:A4:C3:EF:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/9E9F5935C65B93B070730D31DC3B0B94A4C3EF00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9E9F5935C65B93B070730D31DC3B0B94A4C3EF00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/9E9F5935C65B93B070730D31DC3B0B94A4C3EF00.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:4b:16:dd:a1:52:1a:e7:f3:5b:3c:f1:c0:71:55:71:14:15:
1a:e7:51:f7:29:1a:8c:26:3e:90:e6:35:04:1f:26:6e:a5:04:
a2:e1:33:8e:b6:eb:7e:64:93:c5:5d:59:6b:24:30:7c:5e:39:
89:4e:92:bc:79:1c:29:a9:42:f0:e5:d3:ba:ee:da:16:61:36:
5f:73:ad:22:8d:ef:84:29:57:e0:77:ac:16:29:fd:8d:b0:93:
65:25:5d:4a:ab:ae:80:8d:e2:eb:bb:ad:cd:a2:dd:9d:12:34:
3b:46:1e:ac:3a:fa:fc:f6:2f:88:1d:81:3c:8e:56:ef:20:5b:
99:6e:77:e3:4b:e1:aa:c5:bd:bb:34:45:43:95:87:eb:34:99:
d5:34:dd:8e:ca:26:01:51:c6:b0:e2:d1:25:43:80:a8:c9:13:
3e:ff:35:b8:8c:9d:ab:2d:68:5d:fc:15:6d:28:73:ef:cd:8d:
db:12:37:89:3d:56:ea:0a:88:00:d7:e0:03:50:2f:55:a4:76:
ee:7e:05:66:0e:70:96:29:06:ad:f6:71:29:e7:08:16:6f:77:
f1:f4:9f:84:1a:cf:f5:ca:d5:6b:73:e5:90:dc:ca:c6:3b:00:
37:57:97:e9:f8:69:2f:eb:d8:84:86:b7:c9:5d:5f:d9:74:04:
9b:1f:db:a5
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUZZ9iIRH97N8T3ZU6FybdW8sJLbwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUU5RjU5MzVDNjVCOTNCMDcwNzMwRDMxREMzQjBCOTRB
NEMzRUYwMDAeFw0yNjA5MjIxODAzNTdaFw0yNjA5MjMxODExNTdaMDMxMTAvBgNV
BAMTKEVGNkVFNjBFQjUyMzhCNTkzMEUzNEE4NzlBNDI2Njg0QzQ5RjE4RTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDccS4qXpdmqOi2O3TuAgRStAqD
Hlp9p5lLyGa1X0+W5r8n+iKFxB0i++KzEQALIBqmaITJ5miOij1jLqlanUGlTkPU
fBp6sC70/FRlZazk6SaDYCS/7JOQPshi2eCZTw7Or0QXWgt70CNVIbXIip+Y2DG9
FNtFwQAEiS17JishDfixDQZ8oQ41KDk1FcL8WpgGVTNT8/J8+/S4ANmxKBe+JZnf
JGMZLS4K2I0APasTRx2sJne6C7EbKtofpu8x6wBHEDuTFU8Jz/um8sOChOM78LID
SNJwrhEJrHIdnjOylVGg5bgMVYxQ6rsvZPxGHqHyyafREpxv9z8Go3CkLhclAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU727mDrUji1kw40qHmkJmhMSfGOkwHwYDVR0j
BBgwFoAUnp9ZNcZbk7Bwcw0x3DsLlKTD7wAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
Y2Q3YzdhYzItNWE5Yi00OTJhLWE0YzUtMWYxMzU5MGRhZTA2LzAvOUU5RjU5MzVD
NjVCOTNCMDcwNzMwRDMxREMzQjBCOTRBNEMzRUYwMC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85RTlGNTkzNUM2NUI5M0IwNzA3MzBEMzFEQzNCMEI5NEE0QzNF
RjAwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2Q3YzdhYzItNWE5Yi00OTJhLWE0
YzUtMWYxMzU5MGRhZTA2LzAvOUU5RjU5MzVDNjVCOTNCMDcwNzMwRDMxREMzQjBC
OTRBNEMzRUYwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAAFLFt2hUhrn81s88cBxVXEUFRrnUfcpGowm
PpDmNQQfJm6lBKLhM462635kk8VdWWskMHxeOYlOkrx5HCmpQvDl07ru2hZhNl9z
rSKN74QpV+B3rBYp/Y2wk2UlXUqrroCN4uu7rc2i3Z0SNDtGHqw6+vz2L4gdgTyO
Vu8gW5lud+NL4arFvbs0RUOVh+s0mdU03Y7KJgFRxrDi0SVDgKjJEz7/NbiMnast
aF38FW0oc+/NjdsSN4k9VuoKiADX4ANQL1Wkdu5+BWYOcJYpBq32cSnnCBZvd/H0
n4Qaz/XK1Wtz5ZDcysY7ADdXl+n4aS/r2ISGt8ldX9l0BJsf26U=
-----END CERTIFICATE-----
Generated at Wed Sep 23 01:44:53 2026 by rpki-client