
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/9346713F8C419319E481DBF3CFA54206BF4BE699.mft
File: 9346713F8C419319E481DBF3CFA54206BF4BE699.mft (raw, json)
Hash identifier: trQExAJuKt+YcUVeERf7do5z7MldW6ruunGi17ItTF4=
Subject key identifier: 95:62:37:B0:C7:6B:1D:FA:B8:21:AA:43:D0:53:2D:61:62:59:81:9A
Authority key identifier: 93:46:71:3F:8C:41:93:19:E4:81:DB:F3:CF:A5:42:06:BF:4B:E6:99
Certificate issuer: /CN=9346713F8C419319E481DBF3CFA54206BF4BE699
Certificate serial: 207B0F444C1FA7610BAC39C75F01ADCC524E517C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9346713F8C419319E481DBF3CFA54206BF4BE699.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/9346713F8C419319E481DBF3CFA54206BF4BE699.mft
Manifest number: B2
Signing time: Sat 12 Sep 2026 20:31:41 +0000
Manifest this update: Sat 12 Sep 2026 20:26:41 +0000
Manifest next update: Sun 13 Sep 2026 22:06:41 +0000
Files and hashes: 1: 3136302e32322e37302e302f32332d3234203d3e203538333831.roa (hash: HfjxEYgkrqfzHgHj5l+tU2/vWOSWktiutyLJJOsTTUI=)
2: 9346713F8C419319E481DBF3CFA54206BF4BE699.crl (hash: 4y7zCT+Zuk9khO+NEXXqFv3Kbe72UmSUWOax44DV1Fk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/9346713F8C419319E481DBF3CFA54206BF4BE699.crl
rsync://rpki-rsync.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/9346713F8C419319E481DBF3CFA54206BF4BE699.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9346713F8C419319E481DBF3CFA54206BF4BE699.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 13 Sep 2026 19:32:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:7b:0f:44:4c:1f:a7:61:0b:ac:39:c7:5f:01:ad:cc:52:4e:51:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9346713F8C419319E481DBF3CFA54206BF4BE699
Validity
Not Before: Sep 12 20:26:41 2026 GMT
Not After : Sep 13 22:06:41 2026 GMT
Subject: CN=956237B0C76B1DFAB821AA43D0532D616259819A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:03:82:55:97:bd:f8:c9:62:9e:18:6d:81:e9:
3a:f0:4b:c1:6d:74:22:96:5c:5b:26:fa:43:81:91:
98:6e:3e:e9:40:af:7a:82:69:fd:72:dc:e6:57:4c:
c8:a9:b9:7f:c5:aa:e4:98:23:28:eb:80:0b:7c:2b:
67:7a:bd:32:48:28:e6:da:22:5d:b9:09:d4:0f:10:
ad:e3:3e:a8:77:47:81:7c:fd:e7:e4:5c:9e:fc:ae:
de:e5:86:dc:14:d5:68:69:2b:5a:82:9f:0e:1f:f0:
78:50:70:e2:1c:55:27:37:9b:ca:40:b5:93:36:97:
3a:34:a8:23:6f:7d:ba:94:60:67:d7:f1:db:da:8f:
f4:3d:c6:cb:76:10:e0:7a:7b:4e:e8:40:67:f4:78:
96:35:ee:ca:22:52:f9:ec:83:85:6b:29:f6:1e:61:
0d:bf:88:15:68:0c:cd:81:f5:46:59:b3:30:b6:ae:
49:ec:b3:79:64:76:20:e6:b0:cc:85:e3:53:86:f3:
17:a2:ba:fa:00:57:76:ad:7d:59:1b:3f:e1:2e:f9:
07:fe:07:36:f0:99:32:26:b1:99:7b:96:db:b9:1d:
19:4b:d8:28:88:6d:39:55:35:d4:68:b4:5b:21:53:
23:d0:0e:eb:65:0d:21:f2:a2:ca:93:ee:c8:0f:fd:
f6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:62:37:B0:C7:6B:1D:FA:B8:21:AA:43:D0:53:2D:61:62:59:81:9A
X509v3 Authority Key Identifier:
keyid:93:46:71:3F:8C:41:93:19:E4:81:DB:F3:CF:A5:42:06:BF:4B:E6:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/9346713F8C419319E481DBF3CFA54206BF4BE699.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9346713F8C419319E481DBF3CFA54206BF4BE699.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/9346713F8C419319E481DBF3CFA54206BF4BE699.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:28:d7:76:fd:76:fe:0b:1c:7d:4b:a9:52:14:83:6c:66:2f:
46:dd:62:2e:bc:0d:d2:69:ca:17:73:fb:3d:0b:27:eb:2b:2c:
cc:f0:33:65:92:5c:be:8b:46:ba:d8:1e:92:45:ec:f7:a0:ec:
36:13:47:20:e8:99:f3:f5:48:2e:74:bd:54:eb:df:84:2c:8a:
d1:d6:03:0a:9a:40:c6:f2:2f:bc:85:93:49:4d:cc:79:b1:3e:
ea:dd:f5:c0:b1:61:6e:67:bd:07:db:f0:49:90:f7:ec:a9:ee:
21:ea:85:cf:df:4b:71:35:b8:50:33:64:49:02:48:eb:48:21:
39:6b:9b:27:84:cd:3d:fc:2c:8a:05:0e:27:9f:69:9d:d2:ba:
19:0c:82:7f:62:88:3a:d2:87:89:e0:75:e7:11:af:e8:70:b2:
86:00:bf:f6:87:f2:6a:99:87:91:c4:c7:6a:7b:24:e9:14:c3:
50:a2:0d:3d:a7:6d:4f:fc:f5:c8:74:e2:e9:d9:0c:4b:b9:20:
80:7d:2f:33:fa:d6:46:6d:bc:21:42:61:cc:8c:2c:e6:7a:cf:
09:c8:c8:27:4d:d5:ae:dd:a8:b9:c8:2b:98:19:67:b7:12:b6:
02:62:23:b1:14:cc:59:6f:2f:63:9f:e4:ab:ae:3f:d4:3b:3d:
94:e8:2a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 05:14:04 2026 by rpki-client