
$ rpki-client -vvf rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.mft
File: 9CF05E7024D4A487E0B79E2F57525BF345DB53EC.mft (raw, json)
Hash identifier: HDY0hW+WrZcuc9GkIpUyVgF+wQym0Nwc13uE4joYbkw=
Subject key identifier: 0A:F0:21:DD:45:24:C4:33:2F:E3:A9:AF:2F:22:51:97:5F:EC:C3:34
Authority key identifier: 9C:F0:5E:70:24:D4:A4:87:E0:B7:9E:2F:57:52:5B:F3:45:DB:53:EC
Certificate issuer: /CN=A9121C330000/serialNumber=9CF05E7024D4A487E0B79E2F57525BF345DB53EC
Certificate serial: 06D573832FBF786EE7DA98AF71A3889D6DAC1132
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer
Subject info access: rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.mft
Manifest number: 0475
Signing time: Sun 01 Mar 2026 05:35:42 +0000
Manifest this update: Sun 01 Mar 2026 05:30:42 +0000
Manifest next update: Mon 02 Mar 2026 09:16:42 +0000
Files and hashes: 1: 3130332e3137302e3233322e302f32332d3234203d3e203537363935.roa (hash: SPGV8cz23OXVtY1/WBtsxbxXhYFhmyQwGc0AQ879Tzo=)
2: 323430373a623963303a3a2f33322d3438203d3e203233393631.roa (hash: Chrj9m4BrE2U2pfcWlFNBSg+oO8sOSxTQ6ekpt4BV7I=)
3: 323430373a623963303a666230303a3a2f34342d3438203d3e20393639.roa (hash: jS7uDPReOddZwVCAwtZ435utMhttXzVf5ZdMVbhKurY=)
4: 9CF05E7024D4A487E0B79E2F57525BF345DB53EC.crl (hash: 29WkNUI3AGexsjq8KjvcaXYbj2jyUDMA+7tgwE4oKnI=)
5: 323430373a623963303a3a2f33322d3438203d3e20393137.roa (hash: EWyx31GnzeEa34YdlCfOKBBLtKjLerW7tETk3ztfEgw=)
6: 323430373a623963303a3a2f33322d3438203d3e20313432363136.roa (hash: XBT+G1DQ9/F6v2XQZcRxw+M4rvuykMlUtUtQD6DlGXU=)
7: 323430373a623963303a623030303a3a2f33362d3438203d3e203233393631.roa (hash: wZpa/GAw/+LZ/5VD3LkDlyxUo6eY0mnlaZ6P5jMgauk=)
8: 3130332e3137302e3233322e302f32332d3234203d3e20313432363136.roa (hash: VzgTFP3K3ygUqjqoPkC7s7tjeyqTHVnjgq3zWGYCRKg=)
9: 3130332e3137302e3233322e302f32332d3234203d3e20393137.roa (hash: f/uHdRx9VZqoZk3nqfnUiYoyLo18xCMnrIDjbbMrTto=)
10: 323430373a623963303a663030303a3a2f33362d3438203d3e203233393631.roa (hash: Ndg1bmsRuBSL7CF5QQzZOGIFLYIHMSUM05PGM6gpt7I=)
11: 323430373a623963303a3a2f33322d3438203d3e203537363935.roa (hash: tEG9JFKiDdsjMGlGAtGF9ff7/fO0QNV3vFqHY+f6qAc=)
Validation: OK
Signature path: rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.crl
rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Mar 2026 09:16:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:d5:73:83:2f:bf:78:6e:e7:da:98:af:71:a3:88:9d:6d:ac:11:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9121C330000, serialNumber=9CF05E7024D4A487E0B79E2F57525BF345DB53EC
Validity
Not Before: Mar 1 05:30:42 2026 GMT
Not After : Mar 2 09:16:42 2026 GMT
Subject: CN=0AF021DD4524C4332FE3A9AF2F2251975FECC334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:5b:5d:7e:62:17:a2:2e:e7:2c:9c:24:e4:42:
6a:60:c1:6d:62:31:b6:2a:be:69:3e:3a:9c:0c:88:
76:70:99:81:29:5b:58:e4:10:c8:da:bf:c4:8f:ca:
23:ed:3f:6f:a9:e4:d2:ee:14:66:de:71:06:4b:25:
0c:e1:55:2a:35:a8:e0:8f:03:44:d8:ab:41:8a:52:
4f:cb:50:98:81:58:15:44:24:91:50:9c:39:6c:2c:
d4:66:a6:c2:24:ec:f0:f2:60:d0:3f:6f:b6:be:10:
e4:91:a9:6f:86:26:3d:dc:cb:ec:cf:81:1c:4e:69:
27:cc:ad:d2:c3:73:6f:30:f9:be:96:2d:c9:20:de:
f7:0a:96:dd:f9:70:ca:a0:ee:04:32:41:02:e2:3a:
1c:b7:0b:f2:cd:d1:8f:9b:3b:db:6f:5e:d5:49:18:
93:db:26:a0:8e:73:27:60:d1:e9:f9:bb:9e:58:24:
23:7d:fc:a0:ba:07:e3:87:56:14:2e:e3:d0:a7:38:
46:28:e8:42:67:c6:eb:ca:93:4b:1a:d8:2e:62:ac:
a9:0d:9d:7a:96:99:29:75:c9:f6:8c:f2:54:41:2b:
74:9f:3f:40:a4:8d:70:74:e0:69:36:fb:e7:cb:ef:
9c:ae:c1:70:9d:db:44:a0:52:82:4d:f9:3d:df:06:
77:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:F0:21:DD:45:24:C4:33:2F:E3:A9:AF:2F:22:51:97:5F:EC:C3:34
X509v3 Authority Key Identifier:
keyid:9C:F0:5E:70:24:D4:A4:87:E0:B7:9E:2F:57:52:5B:F3:45:DB:53:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:f6:44:57:88:20:b8:9c:53:ac:2a:72:fd:69:e9:87:92:51:
04:de:01:9d:23:6f:f0:26:f7:12:22:7b:7e:5f:eb:9e:00:31:
0e:38:95:35:b7:7b:07:f9:5a:a6:f5:8d:22:be:6b:f0:ef:bf:
ca:2f:fb:76:a8:0b:07:8d:5f:4f:8a:e0:9a:b6:99:cc:ff:af:
76:4f:58:06:06:91:47:39:43:1f:86:6f:8f:91:a8:39:dd:b9:
2c:a6:83:28:e0:19:c7:c1:83:27:a2:2a:9a:15:41:eb:24:2e:
82:33:ce:3f:6f:08:3f:28:42:50:66:00:9f:4a:af:22:ac:b8:
b4:52:39:ac:76:57:1c:ac:6e:53:18:7c:3c:ee:2d:33:72:fb:
cc:d4:2b:c8:4b:41:10:76:65:d0:42:b6:6e:74:1f:1f:54:ba:
87:8e:7e:df:68:49:09:22:53:a6:20:ae:25:46:3b:61:72:1d:
33:97:41:35:1a:6c:6e:98:81:1a:8f:10:95:13:62:5a:42:a7:
60:3e:c6:40:51:08:62:ce:9d:41:0a:83:23:c1:5d:db:ca:1e:
1c:6d:cf:d7:27:19:13:d6:aa:85:a9:c5:83:75:0f:43:0a:9a:
3d:a4:f2:b2:7f:91:94:59:24:54:c9:9a:a1:15:7f:27:f5:ed:
a1:0f:ee:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:48:35 2026 by rpki-client