
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/9635F0724E9717C889D5604679E31DA89F807CC1.mft
File: 9635F0724E9717C889D5604679E31DA89F807CC1.mft (raw, json)
Hash identifier: E1TBVmki3byw78h2IZJL99omeG8I7n+OjCPPJ+oUzSs=
Subject key identifier: 5F:36:5A:93:61:20:FD:4E:C4:53:39:44:34:74:81:A8:72:73:0E:73
Authority key identifier: 96:35:F0:72:4E:97:17:C8:89:D5:60:46:79:E3:1D:A8:9F:80:7C:C1
Certificate issuer: /CN=9635F0724E9717C889D5604679E31DA89F807CC1
Certificate serial: 78F6BB2399390CF5654803D208A908B7C894D97B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9635F0724E9717C889D5604679E31DA89F807CC1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/9635F0724E9717C889D5604679E31DA89F807CC1.mft
Manifest number: C4
Signing time: Tue 22 Sep 2026 08:37:15 +0000
Manifest this update: Tue 22 Sep 2026 08:32:15 +0000
Manifest next update: Wed 23 Sep 2026 11:50:15 +0000
Files and hashes: 1: 3130332e39372e3139382e302f32332d3234203d3e20313530393135.roa (hash: z6kkZUKqF82/TRaRxSD81xe5bX0APDWAtc/JbcQmawI=)
2: 9635F0724E9717C889D5604679E31DA89F807CC1.crl (hash: FGKQ2XEA4qBECxAs30RCWW9TkzN8bKmycwWK4Mb1EZo=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/9635F0724E9717C889D5604679E31DA89F807CC1.crl
rsync://rpki-rsync.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/9635F0724E9717C889D5604679E31DA89F807CC1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9635F0724E9717C889D5604679E31DA89F807CC1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 23 Sep 2026 11:50:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:f6:bb:23:99:39:0c:f5:65:48:03:d2:08:a9:08:b7:c8:94:d9:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9635F0724E9717C889D5604679E31DA89F807CC1
Validity
Not Before: Sep 22 08:32:15 2026 GMT
Not After : Sep 23 11:50:15 2026 GMT
Subject: CN=5F365A936120FD4EC4533944347481A872730E73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5e:12:29:53:84:1d:63:73:23:c6:07:9e:7c:
c0:f6:0a:9b:9b:82:3f:a1:8a:e3:f5:68:cc:46:0f:
9f:30:d1:3b:5a:60:88:96:3f:90:66:3b:cc:23:4b:
34:71:34:68:17:d4:50:bd:e4:43:58:f6:c5:45:7f:
82:ec:e6:38:28:d5:e3:95:39:c5:18:bb:91:9c:44:
19:1e:b6:86:59:66:9a:28:3a:e9:99:d3:53:bd:8e:
bf:40:0f:61:19:77:85:b1:04:ab:c4:1d:3f:39:6c:
de:a8:cf:a7:7b:15:3d:36:75:d8:25:87:6b:2f:de:
7c:8c:3e:d9:f7:f2:3e:60:d8:09:4e:20:a4:65:60:
79:0f:48:3d:0d:ab:19:db:49:a0:65:83:e8:7c:9b:
c3:bb:82:79:b7:45:32:14:e4:09:e1:33:19:33:a1:
99:d1:34:0c:63:3b:1c:2e:3b:24:29:0f:eb:ff:66:
32:7f:fc:20:91:67:1d:eb:c9:c8:e8:28:0c:07:9d:
06:17:e9:04:a8:46:3f:ac:2d:19:98:57:11:34:1f:
cd:2c:39:f1:d6:00:11:76:56:65:d2:9b:65:01:e0:
52:fd:62:3f:10:4b:45:ce:d4:f0:bc:4b:97:45:60:
e8:57:ef:5a:30:53:63:44:45:ae:68:c9:e8:e1:f1:
a1:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:36:5A:93:61:20:FD:4E:C4:53:39:44:34:74:81:A8:72:73:0E:73
X509v3 Authority Key Identifier:
keyid:96:35:F0:72:4E:97:17:C8:89:D5:60:46:79:E3:1D:A8:9F:80:7C:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/9635F0724E9717C889D5604679E31DA89F807CC1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9635F0724E9717C889D5604679E31DA89F807CC1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/9635F0724E9717C889D5604679E31DA89F807CC1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:f8:db:fb:c4:50:2c:29:9f:b3:0c:aa:99:62:6a:18:24:9d:
88:c4:47:ec:63:c0:4a:47:52:94:1f:53:ff:94:2b:f8:e4:26:
e2:ea:2e:e9:d0:41:b8:7a:5a:aa:94:99:70:65:e5:58:6b:e4:
af:fe:62:70:91:62:fe:42:4f:14:e8:f3:a7:c0:03:e9:d9:c5:
cb:2c:e0:3f:3b:7b:4b:60:92:2d:94:15:0a:94:5c:48:29:e4:
96:e2:37:29:88:d5:5e:03:ce:77:ef:c9:ce:2c:2b:97:d6:b0:
8b:9e:98:13:01:bb:dc:94:20:33:14:61:b1:d9:54:f8:ab:a2:
6f:e5:37:3d:0f:e9:69:4f:22:80:a9:13:0a:5a:74:c3:70:3d:
70:c9:08:04:e2:50:92:da:f3:eb:9d:e8:ab:d6:db:91:7e:7c:
e3:3b:51:9e:9e:43:91:81:99:2c:8e:ba:03:90:07:b8:ce:8a:
fb:a4:dc:f2:fe:33:9a:32:26:cb:f0:80:cd:9c:f5:d9:38:f9:
4a:06:ec:fb:17:c0:f7:52:b2:0e:59:5e:90:ae:73:74:96:d4:
d4:6f:21:8e:bc:54:9d:3c:eb:ec:d5:89:75:00:9b:29:43:ea:
e0:7f:bb:1a:b2:db:1d:36:bf:9f:9c:d2:00:e2:2a:7d:08:59:
99:e3:2a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:24:10 2026 by rpki-client