
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/9EDB723FFE084B9B87B5B0A108574335936817FB.mft
File: 9EDB723FFE084B9B87B5B0A108574335936817FB.mft (raw, json)
Hash identifier: WUFtdm6Mt2tWT4Md3zFEvnaZjaaNBQ/jy+pEZyaQL/U=
Subject key identifier: 11:E9:C1:21:91:82:E9:BD:73:20:1E:47:7D:7D:55:6F:31:33:36:4D
Authority key identifier: 9E:DB:72:3F:FE:08:4B:9B:87:B5:B0:A1:08:57:43:35:93:68:17:FB
Certificate issuer: /CN=9EDB723FFE084B9B87B5B0A108574335936817FB
Certificate serial: 56536195DD1C29CBF4548DEA699909446C8F8F8F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EDB723FFE084B9B87B5B0A108574335936817FB.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/9EDB723FFE084B9B87B5B0A108574335936817FB.mft
Manifest number: 3D
Signing time: Tue 16 Jun 2026 18:00:58 +0000
Manifest this update: Tue 16 Jun 2026 17:55:58 +0000
Manifest next update: Wed 17 Jun 2026 20:47:58 +0000
Files and hashes: 1: 3130332e3137342e36362e302f32342d3234203d3e20313431363138.roa (hash: TKijjNdinkZx0yUPQ2piNtCq6wNxlLJwsDj7lMp8o1A=)
2: 9EDB723FFE084B9B87B5B0A108574335936817FB.crl (hash: r/v8TqubJO2x0zoyNxVPt8VsN1/enTehiffU3KimYew=)
3: 3130332e3136312e3130392e302f32342d3234203d3e20313431363138.roa (hash: i1PCAoIZ8GEBtvqZu9y6RsJ/+cUgKfG+tpL6n+2MQ0w=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/9EDB723FFE084B9B87B5B0A108574335936817FB.crl
rsync://rpki-rsync.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/9EDB723FFE084B9B87B5B0A108574335936817FB.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EDB723FFE084B9B87B5B0A108574335936817FB.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 20:47:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:53:61:95:dd:1c:29:cb:f4:54:8d:ea:69:99:09:44:6c:8f:8f:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9EDB723FFE084B9B87B5B0A108574335936817FB
Validity
Not Before: Jun 16 17:55:58 2026 GMT
Not After : Jun 17 20:47:58 2026 GMT
Subject: CN=11E9C1219182E9BD73201E477D7D556F3133364D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:60:67:5c:31:eb:24:29:f4:32:a9:20:30:62:
2f:3b:fc:da:46:a0:6c:c6:d5:0d:84:12:cb:e1:72:
21:67:a4:e5:b2:11:93:ee:c3:f1:11:21:70:fe:61:
88:a7:a8:31:c1:11:f6:bf:65:68:31:71:53:c0:8a:
e7:5a:29:2f:42:42:97:0b:dd:89:fc:1f:2d:8a:1f:
be:e5:61:78:1a:43:f8:9d:ae:4c:f6:4e:b7:96:a2:
5c:87:84:1f:04:b9:2a:07:aa:dc:8f:41:2b:a0:73:
5a:77:14:37:91:f6:c8:14:2f:cf:df:37:f4:b4:13:
a7:d7:65:44:a1:92:0c:73:a2:d1:b1:b6:f1:10:65:
55:a7:d8:16:67:a0:53:e5:71:fe:3b:58:90:54:4b:
5d:82:db:46:8a:40:0c:4a:a1:83:4c:28:2e:c9:52:
67:69:85:f7:94:4e:23:80:6c:83:82:70:ef:5d:0b:
ad:bd:3a:d4:d4:0a:41:33:b0:cd:1c:61:82:df:cb:
e5:be:21:b0:8a:ea:1d:c2:3a:9e:e6:3b:ca:f4:2c:
59:46:65:7d:01:6d:69:a5:5c:eb:0d:84:32:e8:6a:
1c:f7:d8:d3:2f:8c:cb:1d:db:55:2e:31:5f:db:26:
13:9b:aa:2d:72:a5:1c:b1:9a:0e:3c:ad:b0:62:d8:
06:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E9:C1:21:91:82:E9:BD:73:20:1E:47:7D:7D:55:6F:31:33:36:4D
X509v3 Authority Key Identifier:
keyid:9E:DB:72:3F:FE:08:4B:9B:87:B5:B0:A1:08:57:43:35:93:68:17:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/9EDB723FFE084B9B87B5B0A108574335936817FB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EDB723FFE084B9B87B5B0A108574335936817FB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/9EDB723FFE084B9B87B5B0A108574335936817FB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:0b:07:70:51:96:3e:b2:fc:d3:9f:48:b9:7d:ea:77:4c:eb:
e2:4b:46:32:94:e5:89:4c:3e:6b:9c:9b:98:b1:ca:84:32:e5:
da:80:f1:c9:fd:04:cd:b1:41:8f:1b:ad:84:a5:ab:e3:53:8a:
6e:e4:3e:24:01:d7:4a:a8:b4:71:81:3a:74:da:a7:7b:29:8f:
23:4a:e5:7a:d8:d2:bb:53:ac:42:24:2a:48:9a:a7:35:71:46:
97:d7:d2:bd:64:1e:c2:1e:31:d4:26:74:fc:cb:a6:95:6f:b4:
b6:f7:ed:db:67:f0:df:a6:cd:ae:f0:95:3e:44:fc:8d:3b:8a:
5c:b1:bb:f1:5b:78:3f:9b:fb:14:97:3e:d6:c1:7a:ad:bc:b1:
a2:33:92:0e:84:12:0e:9e:09:14:c4:7e:15:32:49:d9:d6:c1:
73:b7:5d:89:82:36:88:71:f3:e1:5f:03:24:53:2d:44:01:c2:
fa:84:6a:e1:b7:b5:0b:bb:2b:52:29:c0:3e:3d:a0:9a:6b:ab:
98:14:21:f1:59:bb:ab:af:ee:ce:02:0b:f0:0e:e0:8c:47:53:
86:a9:82:1e:9d:9e:da:0e:3c:e0:72:6e:b1:30:79:d1:f0:ed:
4f:78:45:86:a6:d3:b2:b4:a9:28:d6:92:2e:1c:69:89:01:87:
f0:bb:63:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 12:40:55 2026 by rpki-client