
$ rpki-client -vvf rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.mft
File: 9CF05E7024D4A487E0B79E2F57525BF345DB53EC.mft (raw, json)
Hash identifier: 9irFFEjxJd8HF/B+wsdTI0zbOtc/CdklRo4NEKYwg00=
Subject key identifier: CA:25:60:9F:2A:E8:78:42:A9:B5:60:9D:86:7F:FF:0B:34:E0:9F:AA
Authority key identifier: 9C:F0:5E:70:24:D4:A4:87:E0:B7:9E:2F:57:52:5B:F3:45:DB:53:EC
Certificate issuer: /CN=A9121C330000/serialNumber=9CF05E7024D4A487E0B79E2F57525BF345DB53EC
Certificate serial: 5B075C22488DFA631C680405E9FA249CD34B3F49
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer
Subject info access: rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.mft
Manifest number: 04B7
Signing time: Sun 19 Apr 2026 10:01:47 +0000
Manifest this update: Sun 19 Apr 2026 09:56:47 +0000
Manifest next update: Mon 20 Apr 2026 12:51:47 +0000
Files and hashes: 1: 3130332e3137302e3233322e302f32332d3234203d3e20313432363136.roa (hash: VzgTFP3K3ygUqjqoPkC7s7tjeyqTHVnjgq3zWGYCRKg=)
2: 323430373a623963303a623030303a3a2f33362d3438203d3e203233393631.roa (hash: wZpa/GAw/+LZ/5VD3LkDlyxUo6eY0mnlaZ6P5jMgauk=)
3: 323430373a623963303a666230303a3a2f34342d3438203d3e20393639.roa (hash: jS7uDPReOddZwVCAwtZ435utMhttXzVf5ZdMVbhKurY=)
4: 323430373a623963303a3a2f33322d3438203d3e20393137.roa (hash: EWyx31GnzeEa34YdlCfOKBBLtKjLerW7tETk3ztfEgw=)
5: 3130332e3137302e3233322e302f32332d3234203d3e20393137.roa (hash: f/uHdRx9VZqoZk3nqfnUiYoyLo18xCMnrIDjbbMrTto=)
6: 323430373a623963303a3a2f33322d3438203d3e203537363935.roa (hash: tEG9JFKiDdsjMGlGAtGF9ff7/fO0QNV3vFqHY+f6qAc=)
7: 9CF05E7024D4A487E0B79E2F57525BF345DB53EC.crl (hash: 12wtouNQjQh5jXhFIWh+lRJmT43tWMxZipkD3XOIMhY=)
8: 323430373a623963303a3a2f33322d3438203d3e20313432363136.roa (hash: XBT+G1DQ9/F6v2XQZcRxw+M4rvuykMlUtUtQD6DlGXU=)
9: 323430373a623963303a663030303a3a2f33362d3438203d3e203233393631.roa (hash: Ndg1bmsRuBSL7CF5QQzZOGIFLYIHMSUM05PGM6gpt7I=)
10: 3130332e3137302e3233322e302f32332d3234203d3e203537363935.roa (hash: SPGV8cz23OXVtY1/WBtsxbxXhYFhmyQwGc0AQ879Tzo=)
11: 323430373a623963303a3a2f33322d3438203d3e203233393631.roa (hash: Chrj9m4BrE2U2pfcWlFNBSg+oO8sOSxTQ6ekpt4BV7I=)
Validation: OK
Signature path: rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.crl
rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 12:51:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:07:5c:22:48:8d:fa:63:1c:68:04:05:e9:fa:24:9c:d3:4b:3f:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9121C330000, serialNumber=9CF05E7024D4A487E0B79E2F57525BF345DB53EC
Validity
Not Before: Apr 19 09:56:47 2026 GMT
Not After : Apr 20 12:51:47 2026 GMT
Subject: CN=CA25609F2AE87842A9B5609D867FFF0B34E09FAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:41:45:4a:11:0a:64:b1:5f:68:49:af:68:42:
01:36:03:c1:ec:e0:93:3c:8d:d1:c0:00:2e:dd:f0:
62:da:cc:79:9b:71:aa:94:65:6d:ed:57:de:ae:fd:
67:8a:fb:b1:d9:ec:e3:4f:68:ca:00:31:bb:33:a1:
39:4b:89:1b:ef:25:24:23:16:3c:ae:e8:05:77:2f:
ac:e5:60:4b:75:be:0c:81:fd:c7:18:78:32:43:c1:
f4:6b:e8:d8:c4:6f:67:fc:6a:09:4b:bb:ff:ff:f9:
c9:06:c3:d9:ee:e6:ec:58:f2:26:b1:ec:e4:e8:ab:
03:f3:2c:cf:27:90:20:75:55:c7:e3:91:a8:8b:cc:
5f:0a:70:47:86:b2:f1:25:af:47:3c:7e:de:0c:87:
31:f0:51:2c:b4:8e:f4:6b:b9:86:b2:f0:3e:35:8f:
7e:a5:ed:27:bf:67:d7:5b:17:24:ae:95:16:63:88:
56:3a:6f:76:66:9d:cf:ff:8e:f2:f4:68:6d:72:ed:
aa:6a:51:7c:99:65:8d:a8:20:09:a7:4c:1d:25:cf:
01:be:93:4b:79:ec:e1:e2:a9:a9:64:56:5e:ed:7f:
c2:d8:15:9c:52:94:40:88:56:d6:15:1f:1e:71:97:
f7:c1:a4:2e:40:bd:e0:87:73:df:3b:a3:3b:97:e3:
db:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:25:60:9F:2A:E8:78:42:A9:B5:60:9D:86:7F:FF:0B:34:E0:9F:AA
X509v3 Authority Key Identifier:
keyid:9C:F0:5E:70:24:D4:A4:87:E0:B7:9E:2F:57:52:5B:F3:45:DB:53:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:3a:a3:1c:a0:fc:98:0d:63:b9:3a:f9:b6:d2:4c:77:f1:d2:
74:e8:48:da:26:e5:e3:87:84:c3:dc:83:8d:bd:6c:42:89:f5:
af:c3:fe:46:81:a2:9f:8c:fe:89:ba:3b:57:90:3e:e7:ff:17:
fe:4e:4c:30:58:e0:de:0f:6f:7e:dc:e3:70:b8:05:7c:e3:96:
d2:b7:49:68:7c:e9:c4:dc:f3:72:22:47:97:7a:59:9e:63:a1:
50:cb:52:b1:52:86:84:92:1b:36:a7:01:62:db:85:e1:c5:3a:
3a:fa:20:47:70:81:03:b2:50:59:4a:1c:75:90:3a:73:b3:21:
14:9c:2b:0d:72:2e:0f:0c:08:c9:7e:9f:49:62:58:2f:22:81:
6b:0c:6c:70:92:b1:cf:2c:97:22:30:2a:22:7e:28:57:3d:5f:
88:ca:b7:a7:a0:05:b0:3d:ec:8e:96:be:36:9b:50:40:bd:ad:
d3:23:8b:0a:ad:a3:ed:64:f6:df:25:08:ee:02:fc:57:b6:6e:
c7:51:3f:b0:0f:90:9d:59:2e:7b:bf:f2:40:5a:96:97:58:6e:
d7:3c:db:bf:77:5e:ce:51:dc:da:ab:dd:c5:4c:29:23:87:7e:
bb:a3:a7:91:4e:b8:02:a3:4b:91:d6:70:fa:1f:16:87:36:7e:
da:73:64:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 15:28:08 2026 by rpki-client