
$ rpki-client -vvf rpki-rsync.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/9290697B92D08AFAAFB01253090BE0FE28871EA9.mft
File: 9290697B92D08AFAAFB01253090BE0FE28871EA9.mft (raw, json)
Hash identifier: NeN4zmxO0tQBq9XHTmmYzEBya9idxmtpzDElG0+cSjU=
Subject key identifier: 97:22:AF:DE:C7:FC:82:01:90:F1:F8:CB:62:32:F2:A7:29:CF:C8:C7
Authority key identifier: 92:90:69:7B:92:D0:8A:FA:AF:B0:12:53:09:0B:E0:FE:28:87:1E:A9
Certificate issuer: /CN=9290697B92D08AFAAFB01253090BE0FE28871EA9
Certificate serial: 37EDA6D45AE27B676EFEE08C6C74584978737CED
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9290697B92D08AFAAFB01253090BE0FE28871EA9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/9290697B92D08AFAAFB01253090BE0FE28871EA9.mft
Manifest number: 6B
Signing time: Mon 20 Jul 2026 09:58:49 +0000
Manifest this update: Mon 20 Jul 2026 09:53:49 +0000
Manifest next update: Tue 21 Jul 2026 13:48:49 +0000
Files and hashes: 1: 3130332e3136342e3135312e302f32342d3234203d3e20313431393039.roa (hash: hRuNQymA0Kqk7Awfu8/hFwiPFpevo38okveHDPwRfwI=)
2: 3130332e3136342e3135302e302f32332d3233203d3e20313431393039.roa (hash: ld7ZAKTrz/u5LDPP3+3DpOULg7oKh+lQm5wahDEcTNc=)
3: 9290697B92D08AFAAFB01253090BE0FE28871EA9.crl (hash: Wch0tlWjIJQjQZdXMlMAGMj+9ShJ+bTpMjY6vFV5GUs=)
4: 323030313a6466373a376438303a3a2f34382d3438203d3e20313431393039.roa (hash: tw5oikVlx6lbDw0PXuWWK4JNZ7QDnCFmUnX8Ug8gws8=)
5: 3130332e3136342e3135302e302f32342d3234203d3e20313431393039.roa (hash: WJxpeyz7OfQNEVK9NO1sVdlmaQoTrq8jALq72l9BXpw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/9290697B92D08AFAAFB01253090BE0FE28871EA9.crl
rsync://rpki-rsync.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/9290697B92D08AFAAFB01253090BE0FE28871EA9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9290697B92D08AFAAFB01253090BE0FE28871EA9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Jul 2026 13:48:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:ed:a6:d4:5a:e2:7b:67:6e:fe:e0:8c:6c:74:58:49:78:73:7c:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9290697B92D08AFAAFB01253090BE0FE28871EA9
Validity
Not Before: Jul 20 09:53:49 2026 GMT
Not After : Jul 21 13:48:49 2026 GMT
Subject: CN=9722AFDEC7FC820190F1F8CB6232F2A729CFC8C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5e:8e:ac:2a:96:59:70:64:e3:12:30:5a:d9:
bb:f8:af:a0:29:0d:08:3a:59:8d:25:7b:e7:7a:ca:
89:ee:92:63:6c:5e:0d:eb:d1:05:4f:cd:ca:3f:b4:
79:ed:d2:fe:10:40:33:70:1e:3c:4d:1f:42:bc:a3:
ba:d9:60:de:c5:b2:be:7b:a8:93:73:6f:62:59:d7:
83:f2:ae:dd:41:84:fc:95:bf:b8:4b:5c:9f:6a:8f:
19:22:c5:7e:e4:10:c1:a8:36:57:ee:03:f1:34:98:
e3:2e:44:13:f8:3e:ca:13:d7:bf:fb:fe:82:f2:56:
55:19:a2:d3:91:21:6b:8f:b3:b5:4a:b4:f5:bf:13:
20:19:93:82:a0:87:f2:9d:64:53:e6:bf:8b:66:b2:
ad:1d:d7:0c:4c:1a:97:03:dc:00:fa:e5:17:48:41:
95:14:02:f7:a0:14:00:9a:4b:0a:83:7b:b6:58:5b:
48:fd:41:46:87:87:7d:0c:aa:66:1e:25:6e:90:43:
0b:f5:e0:71:99:6d:9e:84:4f:65:cb:62:57:b5:3d:
78:93:80:a3:3c:08:d8:92:ed:ce:e2:f4:59:0b:3d:
b0:d5:93:54:c6:47:1c:4b:ad:51:28:4a:5d:bf:23:
5c:13:22:d3:8b:74:74:ac:8e:ac:e6:3c:b3:65:f6:
77:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:22:AF:DE:C7:FC:82:01:90:F1:F8:CB:62:32:F2:A7:29:CF:C8:C7
X509v3 Authority Key Identifier:
keyid:92:90:69:7B:92:D0:8A:FA:AF:B0:12:53:09:0B:E0:FE:28:87:1E:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/9290697B92D08AFAAFB01253090BE0FE28871EA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9290697B92D08AFAAFB01253090BE0FE28871EA9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/9290697B92D08AFAAFB01253090BE0FE28871EA9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:81:0f:81:4d:da:e9:68:85:34:fa:87:5e:da:7c:b0:f1:1f:
1b:11:46:23:ca:a2:77:3f:eb:e8:d7:b1:3e:48:6b:5d:5b:4b:
2f:4a:57:99:30:5a:b1:6f:11:79:60:be:3e:52:d0:69:fa:dc:
ee:6b:38:37:db:1a:c9:63:e4:c0:a5:10:2e:18:76:28:b3:27:
5d:29:33:1b:bb:e5:82:0d:45:5d:3d:cf:8d:af:a1:17:26:94:
9f:9d:a9:06:6e:a7:f8:e7:ef:14:11:f6:c2:04:94:55:30:05:
56:39:37:06:85:38:87:ed:aa:54:c6:7c:4f:bf:cb:e2:ce:85:
99:93:57:d4:7a:ff:3a:cc:97:4d:4a:b0:6f:e3:61:0c:6e:53:
30:3b:ee:f8:a9:0b:57:68:1d:41:2f:b6:34:33:25:d0:a5:3a:
68:56:bf:13:f9:22:a6:3b:f0:a3:b2:47:ff:d1:a1:40:c2:ec:
9e:a2:28:47:27:6b:d9:65:fe:ee:b4:ee:5e:96:2f:79:96:77:
ab:bb:d7:9f:c0:2e:09:2b:f9:e3:73:1c:d0:fe:4b:16:ed:10:
fa:f2:33:77:51:26:70:77:cc:2c:ec:9a:8e:23:2a:bd:d8:b9:
af:56:c2:15:63:28:4a:20:73:52:b9:eb:2e:fc:17:2c:96:76:
1a:da:f0:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:16:00 2026 by rpki-client