
$ rpki-client -vvf rpki-rsync.idnic.net/repo/6cd24b05-269e-4784-b935-f27665830fda/0/9CCE2197D83CFA0979E79295EFEE5D486FB3A23E.mft
File: 9CCE2197D83CFA0979E79295EFEE5D486FB3A23E.mft (raw, json)
Hash identifier: PkGNX243673aeyARKaSIujZwpSsIv8nSBxjHUtk6DmY=
Subject key identifier: 54:CA:9B:37:E4:DD:81:99:AA:88:73:83:41:DD:B2:DC:1E:9E:2A:8E
Authority key identifier: 9C:CE:21:97:D8:3C:FA:09:79:E7:92:95:EF:EE:5D:48:6F:B3:A2:3E
Certificate issuer: /CN=9CCE2197D83CFA0979E79295EFEE5D486FB3A23E
Certificate serial: 6E2A97AFF7C74A40F94A3556C3B9CFD460F433D8
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9CCE2197D83CFA0979E79295EFEE5D486FB3A23E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6cd24b05-269e-4784-b935-f27665830fda/0/9CCE2197D83CFA0979E79295EFEE5D486FB3A23E.mft
Manifest number: 6B
Signing time: Mon 20 Jul 2026 21:27:40 +0000
Manifest this update: Mon 20 Jul 2026 21:22:40 +0000
Manifest next update: Tue 21 Jul 2026 22:11:40 +0000
Files and hashes: 1: 9CCE2197D83CFA0979E79295EFEE5D486FB3A23E.crl (hash: sZ4lZC2GlEkd9gbR/FWpf8vySATIVbz+gG6SOJ/YCf8=)
2: 3130332e3132362e32362e302f32342d3234203d3e20313530353038.roa (hash: 6Awu2Ik5tqvQ6rEKLN4Gy/qaMR8Y4RuJeJcgKdpNQtw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6cd24b05-269e-4784-b935-f27665830fda/0/9CCE2197D83CFA0979E79295EFEE5D486FB3A23E.crl
rsync://rpki-rsync.idnic.net/repo/6cd24b05-269e-4784-b935-f27665830fda/0/9CCE2197D83CFA0979E79295EFEE5D486FB3A23E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9CCE2197D83CFA0979E79295EFEE5D486FB3A23E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Jul 2026 22:11:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:2a:97:af:f7:c7:4a:40:f9:4a:35:56:c3:b9:cf:d4:60:f4:33:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9CCE2197D83CFA0979E79295EFEE5D486FB3A23E
Validity
Not Before: Jul 20 21:22:40 2026 GMT
Not After : Jul 21 22:11:40 2026 GMT
Subject: CN=54CA9B37E4DD8199AA88738341DDB2DC1E9E2A8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7b:75:46:c0:75:3a:9a:48:ee:b2:62:37:98:
56:6e:b8:26:43:53:c7:00:d5:06:96:1a:24:a7:9a:
14:f1:ae:02:88:09:a1:d1:2a:3e:3c:bd:0b:9d:e3:
59:f1:83:9d:19:ad:6d:9e:1d:1a:08:4b:17:cf:5f:
73:aa:2d:28:64:53:3a:54:fc:e1:2e:04:68:60:ba:
72:30:40:d1:36:d0:50:82:d3:a8:34:5c:aa:df:e4:
58:3d:c4:86:f4:cb:04:95:91:d9:2d:26:88:88:0a:
09:b1:ab:96:08:7c:e3:9b:56:c0:a8:8b:e2:b5:cb:
95:5c:1a:12:e8:98:2e:d1:b2:62:a3:1b:5f:50:37:
4a:c6:88:51:c5:e7:eb:85:26:a4:77:a0:a9:eb:0a:
b2:e7:ac:79:d4:fb:52:1d:47:99:9f:08:4d:9b:31:
36:c4:b2:c5:30:dd:03:da:1a:e3:c1:0b:1f:0b:9b:
2e:e4:58:22:69:4d:49:d5:b7:37:f0:48:4e:2d:fc:
f0:4c:8a:85:41:5d:65:38:4e:56:b0:76:ef:a2:c5:
11:e6:fb:ad:af:39:2e:79:ad:2b:b0:ea:80:c2:ca:
5d:38:a9:56:86:4d:9e:1e:37:7a:6b:d4:8d:58:15:
95:70:5d:63:65:e0:49:7a:0b:16:c1:c8:f5:57:a7:
a5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:CA:9B:37:E4:DD:81:99:AA:88:73:83:41:DD:B2:DC:1E:9E:2A:8E
X509v3 Authority Key Identifier:
keyid:9C:CE:21:97:D8:3C:FA:09:79:E7:92:95:EF:EE:5D:48:6F:B3:A2:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6cd24b05-269e-4784-b935-f27665830fda/0/9CCE2197D83CFA0979E79295EFEE5D486FB3A23E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9CCE2197D83CFA0979E79295EFEE5D486FB3A23E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6cd24b05-269e-4784-b935-f27665830fda/0/9CCE2197D83CFA0979E79295EFEE5D486FB3A23E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:79:bf:0f:b5:50:b9:12:99:9a:9b:4d:e1:dd:39:98:e5:99:
0b:32:4f:b5:3c:2e:6f:ec:7e:05:5c:41:e3:78:ba:3b:74:75:
e2:89:f7:da:1e:81:2f:57:42:da:ee:9f:b0:cd:00:06:2d:16:
35:37:b2:ec:aa:f6:f6:ac:12:bc:03:74:f1:13:c3:3e:6c:db:
52:32:b3:8b:e2:71:59:ea:03:10:d5:d6:fc:1c:f4:bc:35:00:
7a:65:3f:b7:49:33:64:3f:93:c5:f3:8a:d5:91:f2:45:0b:55:
d0:57:b4:f2:2a:c0:6f:ee:64:c0:13:1f:a9:07:61:88:2e:1a:
9e:ea:ec:65:88:da:23:71:d7:2a:40:53:2e:04:8d:5c:2b:2e:
74:04:01:7d:3e:ea:62:e1:85:e0:31:38:4a:8a:84:fa:d3:3c:
84:1f:cd:8c:3f:eb:f3:77:ec:35:ae:d0:ad:79:9b:f6:8a:9e:
c0:16:ef:c9:b0:58:e7:38:b8:7a:cb:bf:70:63:b7:85:11:b5:
16:7f:f4:a3:dc:45:f0:46:4b:44:35:a2:45:b7:1e:c8:8f:e4:
6b:3c:29:05:bd:45:97:f5:2e:1a:31:59:fc:62:52:db:2a:1f:
8e:b7:22:6c:42:5c:93:af:c3:f0:72:30:50:d0:3e:e8:a6:47:
31:46:e6:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 07:00:35 2026 by rpki-client