
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/9EDD58FB55B45037D75C83359B697B445D7A5AF0.mft
File: 9EDD58FB55B45037D75C83359B697B445D7A5AF0.mft (raw, json)
Hash identifier: j6Tak3JkAlVCopxXlKv4Y7L68pUMlXMndniWtMgs2e8=
Subject key identifier: C2:A4:41:D3:11:A1:43:DB:84:4E:29:2A:DF:1A:A6:9A:AB:70:E2:C4
Authority key identifier: 9E:DD:58:FB:55:B4:50:37:D7:5C:83:35:9B:69:7B:44:5D:7A:5A:F0
Certificate issuer: /CN=9EDD58FB55B45037D75C83359B697B445D7A5AF0
Certificate serial: 1E0460CC67DE32F58A0EF7AD19ED8DC7CEC71C44
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EDD58FB55B45037D75C83359B697B445D7A5AF0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/9EDD58FB55B45037D75C83359B697B445D7A5AF0.mft
Manifest number: 39
Signing time: Sat 13 Jun 2026 17:25:38 +0000
Manifest this update: Sat 13 Jun 2026 17:20:38 +0000
Manifest next update: Sun 14 Jun 2026 19:15:38 +0000
Files and hashes: 1: 34392e302e32342e302f32332d3234203d3e203137393935.roa (hash: JCF66MyDOPPpoP3h97z544G+/kStkUh5SxWxjVUNyZE=)
2: 9EDD58FB55B45037D75C83359B697B445D7A5AF0.crl (hash: Q0dKeYWNHoTBXzmQaBZ4k+mJKfdS+6/BkGfTaWfV7R4=)
3: 3130332e3136342e31342e302f32332d3234203d3e20313532303537.roa (hash: mH28ada8E5i3aNud985QIm6IhE3W0Yqx49iijo6/+ho=)
4: 3131302e39322e37322e302f32332d3234203d3e203137393935.roa (hash: EnY0Hs+doVUANIJECCY02CNqFLFOHODN+SHTHjgvg80=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/9EDD58FB55B45037D75C83359B697B445D7A5AF0.crl
rsync://rpki-rsync.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/9EDD58FB55B45037D75C83359B697B445D7A5AF0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EDD58FB55B45037D75C83359B697B445D7A5AF0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:04:60:cc:67:de:32:f5:8a:0e:f7:ad:19:ed:8d:c7:ce:c7:1c:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9EDD58FB55B45037D75C83359B697B445D7A5AF0
Validity
Not Before: Jun 13 17:20:38 2026 GMT
Not After : Jun 14 19:15:38 2026 GMT
Subject: CN=C2A441D311A143DB844E292ADF1AA69AAB70E2C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e5:76:3e:0b:3b:cb:6a:d1:81:bf:06:94:92:
45:f4:47:a1:82:51:e2:7c:e3:53:d7:76:41:6c:e5:
e5:e2:75:ca:5c:03:e8:d7:82:95:57:7b:37:55:0d:
7f:d4:b3:cc:9d:4f:3b:09:7b:59:61:98:9f:ac:7b:
4f:b2:e8:26:03:9d:a2:08:2c:c6:9b:a9:9c:02:b7:
00:e7:28:85:cc:da:7a:43:94:65:9a:76:1a:29:7a:
7f:42:4a:6f:6b:af:12:d0:2b:bc:80:35:6c:7d:e9:
5f:be:e2:7a:e9:b4:70:94:71:7b:66:98:68:78:a8:
b0:25:df:12:0b:a6:5c:a2:db:6c:d3:c7:8b:ed:ec:
00:b2:87:23:a3:f3:0b:2e:0b:45:d0:ab:f1:7c:7e:
73:dd:cb:2b:06:08:fd:f7:9c:0b:72:4d:b1:a4:e3:
9f:34:a2:63:df:a7:50:90:cc:3e:b1:0c:af:2d:f9:
42:f1:31:a5:3a:7f:3a:5d:7d:6e:d8:7f:c2:75:fb:
de:f0:f4:8c:f4:a6:24:3b:79:5c:5f:66:2b:a9:4b:
ff:0e:c7:5f:f5:34:28:83:bf:f7:5a:84:6b:90:c3:
7f:fc:97:20:66:4d:ba:f0:0b:73:9f:f6:72:09:8f:
23:fd:9d:e5:38:05:1d:65:f5:11:2f:f0:b1:e3:ec:
9d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:A4:41:D3:11:A1:43:DB:84:4E:29:2A:DF:1A:A6:9A:AB:70:E2:C4
X509v3 Authority Key Identifier:
keyid:9E:DD:58:FB:55:B4:50:37:D7:5C:83:35:9B:69:7B:44:5D:7A:5A:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/9EDD58FB55B45037D75C83359B697B445D7A5AF0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EDD58FB55B45037D75C83359B697B445D7A5AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/9EDD58FB55B45037D75C83359B697B445D7A5AF0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:e0:a4:b5:57:23:31:24:44:b3:cd:6f:8b:bb:b7:80:ab:91:
13:cc:01:f3:7f:38:f0:c5:79:0e:63:3b:d0:ac:40:8e:f6:24:
c5:b3:58:4c:b8:24:de:cf:f4:56:55:41:e2:52:64:8f:f4:6f:
89:fa:21:a2:0e:7e:2b:50:5a:a4:aa:0f:40:87:99:0f:d0:ad:
48:aa:ce:e1:11:e8:e6:02:f3:e5:e0:44:88:87:57:d7:bf:e0:
56:f7:47:9f:30:46:19:c8:90:a8:41:12:bd:f7:f4:4e:f8:08:
42:54:fa:4f:b3:99:d8:85:a6:01:af:fd:e4:05:e0:67:c3:60:
6d:35:7f:d7:25:11:ac:bc:ec:39:48:5c:f1:6b:ad:57:45:46:
e8:be:0d:5c:2e:1b:53:bc:28:75:85:84:14:26:bb:1f:a3:71:
3d:67:e4:d3:66:e6:8a:d4:41:a1:c0:f6:79:09:bd:52:4d:cd:
d3:f4:24:96:60:b0:2e:9d:af:89:2c:ad:38:4a:01:09:d2:9d:
02:d6:4b:f8:fd:29:3c:3c:20:d2:a2:33:d3:44:77:fb:79:26:
2f:f3:14:a5:74:ee:07:3d:c2:56:7a:46:c5:55:99:45:b2:24:
1e:03:76:fa:1b:2b:35:30:e9:99:7d:9b:dd:47:2b:1e:11:e9:
71:4f:97:0b
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUHgRgzGfeMvWKDvetGe2Nx87HHEQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUVERDU4RkI1NUI0NTAzN0Q3NUM4MzM1OUI2OTdCNDQ1
RDdBNUFGMDAeFw0yNjA2MTMxNzIwMzhaFw0yNjA2MTQxOTE1MzhaMDMxMTAvBgNV
BAMTKEMyQTQ0MUQzMTFBMTQzREI4NDRFMjkyQURGMUFBNjlBQUI3MEUyQzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCW5XY+CzvLatGBvwaUkkX0R6GC
UeJ841PXdkFs5eXidcpcA+jXgpVXezdVDX/Us8ydTzsJe1lhmJ+se0+y6CYDnaII
LMabqZwCtwDnKIXM2npDlGWadhopen9CSm9rrxLQK7yANWx96V++4nrptHCUcXtm
mGh4qLAl3xILplyi22zTx4vt7ACyhyOj8wsuC0XQq/F8fnPdyysGCP33nAtyTbGk
4580omPfp1CQzD6xDK8t+ULxMaU6fzpdfW7Yf8J1+97w9Iz0piQ7eVxfZiupS/8O
x1/1NCiDv/dahGuQw3/8lyBmTbrwC3Of9nIJjyP9neU4BR1l9REv8LHj7J0xAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUwqRB0xGhQ9uETikq3xqmmqtw4sQwHwYDVR0j
BBgwFoAUnt1Y+1W0UDfXXIM1m2l7RF16WvAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZmY3YWU4MmYtNTM3ZS00NjI2LWJlOWUtMzMzOTRhMmRjOTY5LzAvOUVERDU4RkI1
NUI0NTAzN0Q3NUM4MzM1OUI2OTdCNDQ1RDdBNUFGMC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85RURENThGQjU1QjQ1MDM3RDc1QzgzMzU5QjY5N0I0NDVEN0E1
QUYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmY3YWU4MmYtNTM3ZS00NjI2LWJl
OWUtMzMzOTRhMmRjOTY5LzAvOUVERDU4RkI1NUI0NTAzN0Q3NUM4MzM1OUI2OTdC
NDQ1RDdBNUFGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJbgpLVXIzEkRLPNb4u7t4CrkRPMAfN/OPDF
eQ5jO9CsQI72JMWzWEy4JN7P9FZVQeJSZI/0b4n6IaIOfitQWqSqD0CHmQ/QrUiq
zuER6OYC8+XgRIiHV9e/4Fb3R58wRhnIkKhBEr339E74CEJU+k+zmdiFpgGv/eQF
4GfDYG01f9clEay87DlIXPFrrVdFRui+DVwuG1O8KHWFhBQmux+jcT1n5NNm5orU
QaHA9nkJvVJNzdP0JJZgsC6dr4ksrThKAQnSnQLWS/j9KTw8INKiM9NEd/t5Ji/z
FKV07gc9wlZ6RsVVmUWyJB4DdvobKzUw6Zl9m91HKx4R6XFPlws=
-----END CERTIFICATE-----
Generated at Sun Jun 14 02:44:06 2026 by rpki-client