
$ rpki-client -vvf rpki-rsync.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/9CD069361DE1E2B7F987CB377D2065CD073D2BD6.mft
File: 9CD069361DE1E2B7F987CB377D2065CD073D2BD6.mft (raw, json)
Hash identifier: 5q+/qxLBsFpMbDsSui3v5vsB/5G+Ah9djsuPhcgAi14=
Subject key identifier: 94:90:96:35:B7:26:24:BD:45:E7:61:9C:E8:7C:47:DA:B4:7E:7C:C0
Authority key identifier: 9C:D0:69:36:1D:E1:E2:B7:F9:87:CB:37:7D:20:65:CD:07:3D:2B:D6
Certificate issuer: /CN=9CD069361DE1E2B7F987CB377D2065CD073D2BD6
Certificate serial: 17BCBE45CF52A2748F574FDDDBA7C86D0580C3A1
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9CD069361DE1E2B7F987CB377D2065CD073D2BD6.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/9CD069361DE1E2B7F987CB377D2065CD073D2BD6.mft
Manifest number: 3E
Signing time: Wed 17 Jun 2026 05:24:25 +0000
Manifest this update: Wed 17 Jun 2026 05:19:25 +0000
Manifest next update: Thu 18 Jun 2026 07:27:25 +0000
Files and hashes: 1: 3130332e3137342e37392e302f32342d3234203d3e20313331363939.roa (hash: 0YvIC8wCtWvDa2HWmo5ajWyQO0v7nGfkKloFn4oUr5Y=)
2: 3130332e3137342e37382e302f32342d3234203d3e20313331363939.roa (hash: TbeMR6DCS8oQZoWLlauGHIZkAoCLHj7Jp79qNO5aAvk=)
3: 9CD069361DE1E2B7F987CB377D2065CD073D2BD6.crl (hash: gunSz0M1T3N1jiO/sRTACb2fKidOVNs62ovEx4nVKpY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/9CD069361DE1E2B7F987CB377D2065CD073D2BD6.crl
rsync://rpki-rsync.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/9CD069361DE1E2B7F987CB377D2065CD073D2BD6.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9CD069361DE1E2B7F987CB377D2065CD073D2BD6.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:bc:be:45:cf:52:a2:74:8f:57:4f:dd:db:a7:c8:6d:05:80:c3:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9CD069361DE1E2B7F987CB377D2065CD073D2BD6
Validity
Not Before: Jun 17 05:19:25 2026 GMT
Not After : Jun 18 07:27:25 2026 GMT
Subject: CN=94909635B72624BD45E7619CE87C47DAB47E7CC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:97:d4:81:be:2b:8c:4a:f4:e4:16:2a:94:81:
6e:b2:cb:df:1a:b9:7e:0b:24:24:34:09:e6:fe:46:
21:42:f4:40:77:c8:66:33:45:ac:bf:1c:ed:19:62:
93:2c:f9:6c:17:69:bb:c0:22:eb:34:7b:a6:f4:1f:
36:ad:82:12:17:93:fc:e7:15:d6:7a:aa:c0:0f:51:
a4:82:ef:ba:6b:86:8f:50:f2:9e:a8:47:e5:51:51:
f7:ef:b4:bd:10:b4:b3:b5:01:c8:2d:a0:72:0c:ef:
d2:ce:45:f3:3c:22:6a:28:44:c0:bf:27:e1:7c:83:
f4:04:13:91:88:40:b0:9f:0f:cf:71:16:79:28:25:
0b:57:53:fd:3a:62:ea:08:23:db:54:7e:1c:e0:b3:
0e:4a:05:3a:2e:65:ad:41:40:0e:7b:5c:56:3e:da:
79:ce:a5:16:b7:39:2f:87:35:bb:d7:54:34:b9:44:
d8:3b:a3:7c:a8:4e:4e:39:0a:13:7d:61:5e:ff:0d:
5a:70:8f:19:6b:ed:72:8c:1d:85:ca:b0:a6:95:a5:
21:06:92:4d:9c:86:30:66:d5:71:38:38:ec:c8:47:
6b:d9:49:f8:be:c7:c4:a2:7d:ae:b3:68:e0:1e:ec:
dc:3d:71:8c:71:8f:54:c6:ae:3c:43:2b:7c:f3:42:
a5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:90:96:35:B7:26:24:BD:45:E7:61:9C:E8:7C:47:DA:B4:7E:7C:C0
X509v3 Authority Key Identifier:
keyid:9C:D0:69:36:1D:E1:E2:B7:F9:87:CB:37:7D:20:65:CD:07:3D:2B:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/9CD069361DE1E2B7F987CB377D2065CD073D2BD6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9CD069361DE1E2B7F987CB377D2065CD073D2BD6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/9CD069361DE1E2B7F987CB377D2065CD073D2BD6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:5b:78:3f:eb:fa:81:60:a4:f7:4b:9e:ef:09:f3:4d:42:d5:
ad:df:d0:40:37:82:16:5c:0b:2d:c8:f7:7e:a7:41:db:c6:17:
53:c6:83:b7:e9:7c:6e:7b:2d:ad:b1:4c:d4:f4:16:9a:09:6e:
f4:77:86:25:8f:c8:7e:06:d0:78:fe:a3:f9:c8:50:1f:ee:12:
26:6b:19:b5:66:4f:c2:3b:2e:db:01:38:ad:b8:e9:38:94:da:
f4:c9:3e:63:06:c4:d5:15:2e:49:18:ed:84:f4:16:d4:cb:6a:
2a:4a:af:2f:60:ad:47:5e:5d:b0:4a:ad:b0:08:27:b1:16:93:
02:f0:ba:2b:4f:b9:fc:25:b0:5a:03:d5:9e:a2:a1:71:e8:e3:
23:48:ac:22:13:ba:c9:41:8b:82:79:0c:2a:ae:33:4b:55:c6:
0f:06:c2:7f:d8:de:81:56:87:49:ac:6b:af:9f:3b:d0:3c:58:
60:b3:ad:d5:e0:e9:a4:16:8c:a3:76:8a:ab:75:5e:a8:fb:3c:
88:a9:f6:56:2d:ae:26:ad:cb:cc:6f:bd:ad:b0:cb:bf:d7:e4:
4f:5f:9f:cd:84:d8:b2:91:5d:4d:b0:14:45:ec:2a:c8:b9:cd:
84:ef:d7:75:ce:ce:48:5e:0f:5e:26:2e:ab:52:82:f4:33:7d:
fa:87:97:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:31:28 2026 by rpki-client