
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0eaa8cbe-718b-4953-b789-60fa857aec8d/0/C9E5EB92DA793B8D8BF89C80541899A148DA3FC7.mft
File: C9E5EB92DA793B8D8BF89C80541899A148DA3FC7.mft (raw, json)
Hash identifier: U/33aNxh9LoRZ2+8a0WqitjQG0cuExic5jF0eoUv+jk=
Subject key identifier: 00:A9:D9:AC:7F:FC:02:14:DA:41:0F:B1:E9:20:E9:F2:DC:87:EF:66
Authority key identifier: C9:E5:EB:92:DA:79:3B:8D:8B:F8:9C:80:54:18:99:A1:48:DA:3F:C7
Certificate issuer: /CN=C9E5EB92DA793B8D8BF89C80541899A148DA3FC7
Certificate serial: 5BFEBAC00F3016886C9BF81C9F6A1605BE1452A5
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9E5EB92DA793B8D8BF89C80541899A148DA3FC7.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0eaa8cbe-718b-4953-b789-60fa857aec8d/0/C9E5EB92DA793B8D8BF89C80541899A148DA3FC7.mft
Manifest number: A6
Signing time: Thu 03 Sep 2026 00:49:02 +0000
Manifest this update: Thu 03 Sep 2026 00:44:02 +0000
Manifest next update: Fri 04 Sep 2026 02:57:02 +0000
Files and hashes: 1: C9E5EB92DA793B8D8BF89C80541899A148DA3FC7.crl (hash: Wu8EOh7sl5ay2KzWaUFq8Zj2sLrpM1z1J1iuV0TO4O4=)
2: 3130332e3136392e31302e302f32332d3234203d3e20313432333335.roa (hash: Kv2Bwd8eSfvsYR5xc9V1CjJ+ZGmosk9p1qlT46CISoA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0eaa8cbe-718b-4953-b789-60fa857aec8d/0/C9E5EB92DA793B8D8BF89C80541899A148DA3FC7.crl
rsync://rpki-rsync.idnic.net/repo/0eaa8cbe-718b-4953-b789-60fa857aec8d/0/C9E5EB92DA793B8D8BF89C80541899A148DA3FC7.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9E5EB92DA793B8D8BF89C80541899A148DA3FC7.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 04 Sep 2026 02:57:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:fe:ba:c0:0f:30:16:88:6c:9b:f8:1c:9f:6a:16:05:be:14:52:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C9E5EB92DA793B8D8BF89C80541899A148DA3FC7
Validity
Not Before: Sep 3 00:44:02 2026 GMT
Not After : Sep 4 02:57:02 2026 GMT
Subject: CN=00A9D9AC7FFC0214DA410FB1E920E9F2DC87EF66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a6:f7:19:40:ca:20:10:19:a5:31:63:ea:3c:
64:a8:5f:ed:09:c2:8e:a3:ae:c0:f9:ec:39:52:88:
eb:4b:31:00:7e:3e:12:dc:67:27:28:3d:5b:e0:53:
3d:7f:34:83:78:da:00:97:5e:55:94:30:04:5e:a5:
6e:79:a2:59:7a:37:af:f3:c4:90:f5:5c:55:2b:d5:
0b:d3:3f:5e:ff:4e:22:75:13:52:0d:7f:86:1f:e1:
f2:18:e3:5f:ea:23:4e:c0:fc:e4:79:fa:7f:50:67:
1d:36:9d:bd:21:b4:f0:95:2c:26:a3:76:77:e3:52:
d3:0a:9a:42:9e:3c:4b:44:c7:67:9c:68:68:02:e5:
46:0e:69:7d:e6:09:06:6c:d2:12:c7:4e:82:33:79:
3a:76:7c:97:b2:e0:70:92:eb:af:77:dd:c1:1e:72:
02:15:b7:2e:bd:4c:22:46:c3:2a:1f:d8:0d:4c:e7:
a6:d1:00:f8:13:2b:98:41:da:7f:9d:fc:29:c9:b3:
67:e6:21:72:7c:9e:05:93:66:d9:cb:f4:1f:7c:3b:
42:2c:64:9a:63:98:e0:70:fd:61:db:e2:83:2d:74:
38:8b:1e:f9:ab:b2:29:dd:37:08:83:90:5d:ba:c0:
6a:74:97:d1:54:c9:ee:2f:b1:c8:66:42:93:2a:55:
69:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:A9:D9:AC:7F:FC:02:14:DA:41:0F:B1:E9:20:E9:F2:DC:87:EF:66
X509v3 Authority Key Identifier:
keyid:C9:E5:EB:92:DA:79:3B:8D:8B:F8:9C:80:54:18:99:A1:48:DA:3F:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0eaa8cbe-718b-4953-b789-60fa857aec8d/0/C9E5EB92DA793B8D8BF89C80541899A148DA3FC7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9E5EB92DA793B8D8BF89C80541899A148DA3FC7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0eaa8cbe-718b-4953-b789-60fa857aec8d/0/C9E5EB92DA793B8D8BF89C80541899A148DA3FC7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:26:5f:57:4b:56:4f:08:99:01:aa:3d:85:6d:f4:6c:c8:dd:
98:e8:eb:4f:1c:7f:77:c9:36:28:dc:77:c2:1a:50:13:63:36:
56:11:37:4b:26:b1:9f:12:0f:c7:3e:58:52:94:78:8b:0d:0d:
65:af:9c:23:bf:f1:c2:61:0c:b1:f5:a7:c0:96:6c:2a:68:e2:
b4:3b:c9:64:43:4e:41:d4:79:0a:a7:a1:88:4f:66:3f:d0:a3:
6a:cb:46:ec:76:0a:ab:ee:25:4e:d2:f0:34:fb:54:f2:ff:6b:
11:1a:77:77:32:e4:66:87:0b:58:3a:d8:fe:fb:44:bf:53:ec:
49:f0:92:68:ec:37:4c:c9:d4:f3:3b:23:eb:03:50:48:cf:b0:
ee:6a:e0:0a:ed:82:4f:0f:73:64:a0:15:f4:c1:c7:c6:26:a6:
c9:64:95:14:f1:ac:74:04:47:c2:56:80:f1:37:7f:39:f6:9b:
70:c3:d0:06:fd:30:11:b2:d9:d9:5f:fc:cf:b9:fa:a0:5f:34:
4a:0d:36:db:18:c3:d6:13:1e:2f:19:c5:c9:99:87:62:6c:dd:
9e:69:ef:18:29:e5:30:8d:49:5e:0c:4e:9f:91:4a:36:d3:12:
a3:09:74:2f:d1:33:fa:2c:c4:18:52:4f:df:c6:e8:f6:5e:e1:
95:70:38:89
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUW/66wA8wFohsm/gcn2oWBb4UUqUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzlFNUVCOTJEQTc5M0I4RDhCRjg5QzgwNTQxODk5QTE0
OERBM0ZDNzAeFw0yNjA5MDMwMDQ0MDJaFw0yNjA5MDQwMjU3MDJaMDMxMTAvBgNV
BAMTKDAwQTlEOUFDN0ZGQzAyMTREQTQxMEZCMUU5MjBFOUYyREM4N0VGNjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxpvcZQMogEBmlMWPqPGSoX+0J
wo6jrsD57DlSiOtLMQB+PhLcZycoPVvgUz1/NIN42gCXXlWUMARepW55oll6N6/z
xJD1XFUr1QvTP17/TiJ1E1INf4Yf4fIY41/qI07A/OR5+n9QZx02nb0htPCVLCaj
dnfjUtMKmkKePEtEx2ecaGgC5UYOaX3mCQZs0hLHToIzeTp2fJey4HCS66933cEe
cgIVty69TCJGwyof2A1M56bRAPgTK5hB2n+d/CnJs2fmIXJ8ngWTZtnL9B98O0Is
ZJpjmOBw/WHb4oMtdDiLHvmrsindNwiDkF26wGp0l9FUye4vschmQpMqVWlRAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUAKnZrH/8AhTaQQ+x6SDp8tyH72YwHwYDVR0j
BBgwFoAUyeXrktp5O42L+JyAVBiZoUjaP8cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MGVhYThjYmUtNzE4Yi00OTUzLWI3ODktNjBmYTg1N2FlYzhkLzAvQzlFNUVCOTJE
QTc5M0I4RDhCRjg5QzgwNTQxODk5QTE0OERBM0ZDNy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9DOUU1RUI5MkRBNzkzQjhEOEJGODlDODA1NDE4OTlBMTQ4REEz
RkM3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGVhYThjYmUtNzE4Yi00OTUzLWI3
ODktNjBmYTg1N2FlYzhkLzAvQzlFNUVCOTJEQTc5M0I4RDhCRjg5QzgwNTQxODk5
QTE0OERBM0ZDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEomX1dLVk8ImQGqPYVt9GzI3Zjo608cf3fJ
Nijcd8IaUBNjNlYRN0smsZ8SD8c+WFKUeIsNDWWvnCO/8cJhDLH1p8CWbCpo4rQ7
yWRDTkHUeQqnoYhPZj/Qo2rLRux2CqvuJU7S8DT7VPL/axEad3cy5GaHC1g62P77
RL9T7EnwkmjsN0zJ1PM7I+sDUEjPsO5q4Artgk8Pc2SgFfTBx8YmpslklRTxrHQE
R8JWgPE3fzn2m3DD0Ab9MBGy2dlf/M+5+qBfNEoNNtsYw9YTHi8ZxcmZh2Js3Z5p
7xgp5TCNSV4MTp+RSjbTEqMJdC/RM/osxBhST9/G6PZe4ZVwOIk=
-----END CERTIFICATE-----
Generated at Thu Sep 3 15:19:23 2026 by rpki-client