
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e1132497-5963-47aa-9de1-6c8496a36eb6/0/9BF4E3BFC90E2E556FB033A6F61DF552E131514B.mft
File: 9BF4E3BFC90E2E556FB033A6F61DF552E131514B.mft (raw, json)
Hash identifier: P0o26+269XCk7TsZyNlm4shjvYu7NfAFdvs2kPjOn7Q=
Subject key identifier: F4:35:BC:C9:85:D0:D2:E3:B8:AF:0E:72:06:48:58:93:8E:21:10:ED
Authority key identifier: 9B:F4:E3:BF:C9:0E:2E:55:6F:B0:33:A6:F6:1D:F5:52:E1:31:51:4B
Certificate issuer: /CN=9BF4E3BFC90E2E556FB033A6F61DF552E131514B
Certificate serial: 2B3FCF2D35A62E1255CB371EEC0DEA5D674E6AAF
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BF4E3BFC90E2E556FB033A6F61DF552E131514B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e1132497-5963-47aa-9de1-6c8496a36eb6/0/9BF4E3BFC90E2E556FB033A6F61DF552E131514B.mft
Manifest number: 38
Signing time: Sat 13 Jun 2026 03:02:48 +0000
Manifest this update: Sat 13 Jun 2026 02:57:48 +0000
Manifest next update: Sun 14 Jun 2026 06:05:48 +0000
Files and hashes: 1: 3130332e3132312e3130322e302f32332d3234203d3e20313335343738.roa (hash: HYL8rmsnXXXs/BoqrngiGYdSN3TKjR8GgZKUfGOUHuE=)
2: 3130332e3132312e3130302e302f32332d3234203d3e20313335343738.roa (hash: c0+q/NVTLzO/hS8+W37na92ADaS9y92HcCmUqDS60d0=)
3: 9BF4E3BFC90E2E556FB033A6F61DF552E131514B.crl (hash: e1nWE6AmvpuGPUR6wWVg9JvEebcYqLoDCpoT8DrXgo8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e1132497-5963-47aa-9de1-6c8496a36eb6/0/9BF4E3BFC90E2E556FB033A6F61DF552E131514B.crl
rsync://rpki-rsync.idnic.net/repo/e1132497-5963-47aa-9de1-6c8496a36eb6/0/9BF4E3BFC90E2E556FB033A6F61DF552E131514B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BF4E3BFC90E2E556FB033A6F61DF552E131514B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 06:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:3f:cf:2d:35:a6:2e:12:55:cb:37:1e:ec:0d:ea:5d:67:4e:6a:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9BF4E3BFC90E2E556FB033A6F61DF552E131514B
Validity
Not Before: Jun 13 02:57:48 2026 GMT
Not After : Jun 14 06:05:48 2026 GMT
Subject: CN=F435BCC985D0D2E3B8AF0E72064858938E2110ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:df:b2:f3:e9:cf:e5:dd:97:14:df:fb:35:7d:
33:05:ac:a2:2d:41:0b:91:0e:b8:d4:2d:06:ec:00:
39:9b:ea:c5:c1:59:aa:1b:16:51:ea:0c:a6:58:41:
63:fc:2c:db:41:61:32:26:31:50:a1:fd:15:bb:79:
83:3d:6a:a2:d7:f2:5f:c9:1a:21:90:cc:da:0c:6a:
1a:d0:e9:41:28:e8:42:68:b3:a7:f9:1d:0f:6c:42:
af:75:95:a3:33:07:ae:a3:24:b2:b3:2c:c1:3a:61:
ef:83:44:59:91:ee:e6:9c:ef:c0:6f:c4:15:2e:db:
63:d1:16:84:3a:ce:70:6d:97:14:9d:a0:f8:3b:15:
94:76:52:f8:ae:f6:34:d4:34:4b:29:8b:30:6c:ea:
7d:09:4b:e3:21:80:27:fd:30:2c:e4:10:84:bf:e4:
36:7b:5e:a9:7c:17:47:69:8f:8a:08:69:9b:6d:63:
8a:f7:1e:ad:7d:08:2e:70:35:05:23:a5:8f:6a:ac:
44:fb:a6:05:00:b1:4b:7c:b5:b5:fa:fc:a9:ed:28:
57:2e:0f:bc:b2:c8:41:0f:75:21:fb:f9:e5:ba:4e:
21:2b:18:c6:15:02:2d:78:8d:d3:06:b8:91:84:0b:
11:8a:13:cf:a4:fb:ba:ab:4a:c2:63:0b:21:6d:5a:
d3:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:35:BC:C9:85:D0:D2:E3:B8:AF:0E:72:06:48:58:93:8E:21:10:ED
X509v3 Authority Key Identifier:
keyid:9B:F4:E3:BF:C9:0E:2E:55:6F:B0:33:A6:F6:1D:F5:52:E1:31:51:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e1132497-5963-47aa-9de1-6c8496a36eb6/0/9BF4E3BFC90E2E556FB033A6F61DF552E131514B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BF4E3BFC90E2E556FB033A6F61DF552E131514B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e1132497-5963-47aa-9de1-6c8496a36eb6/0/9BF4E3BFC90E2E556FB033A6F61DF552E131514B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:cc:e8:45:11:cc:91:74:f2:5d:ff:03:1e:ea:61:c0:5a:71:
4b:3f:c2:f2:e7:62:5f:23:5d:a9:2e:1e:9f:dd:db:81:fc:1b:
47:15:0e:ae:f9:80:62:70:fb:87:8f:16:f0:3f:69:67:e5:49:
61:d3:c1:19:38:eb:52:b7:63:9e:26:af:c0:c7:53:e9:d9:88:
4d:b8:c2:73:82:d4:2a:a5:72:96:a3:57:5c:1c:e1:2d:f7:e5:
b0:f7:a9:21:e0:c0:49:82:fb:38:8d:ba:68:59:ea:6d:f4:1e:
8e:ca:ca:36:2c:46:47:09:a8:99:a2:69:4e:06:5b:c2:ff:3a:
67:5d:eb:e1:44:1b:67:69:4b:b7:03:79:d8:67:9c:9e:6d:82:
1f:36:90:37:fe:96:ea:56:d7:d2:26:92:a0:a9:4c:d1:55:fe:
b6:55:f0:13:0b:2b:37:7e:ff:e0:e5:8b:e8:8c:9f:5b:52:0e:
33:18:ce:33:74:00:47:8f:50:64:22:5f:59:35:92:ba:69:11:
a3:02:fe:17:5f:89:c7:cc:bc:ec:08:40:18:6d:3c:6c:6e:3e:
6e:09:dd:3b:a2:55:33:25:c1:66:60:30:aa:34:33:55:ce:3a:
1e:ac:50:73:8b:2a:af:6e:50:24:f6:1d:67:5d:ed:c9:f6:49:
d0:1e:81:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:15:59 2026 by rpki-client