
$ rpki-client -vvf rpki-rsync.idnic.net/repo/6cd24b05-269e-4784-b935-f27665830fda/0/9CCE2197D83CFA0979E79295EFEE5D486FB3A23E.mft
File: 9CCE2197D83CFA0979E79295EFEE5D486FB3A23E.mft (raw, json)
Hash identifier: 9qLSCFBuTsTIHxQokl6FXlgzYcw0WL491RaDqxOLl6U=
Subject key identifier: 0C:08:E6:2B:3B:63:A5:46:70:2E:89:40:B4:0B:51:81:E8:81:CB:B7
Authority key identifier: 9C:CE:21:97:D8:3C:FA:09:79:E7:92:95:EF:EE:5D:48:6F:B3:A2:3E
Certificate issuer: /CN=9CCE2197D83CFA0979E79295EFEE5D486FB3A23E
Certificate serial: 33CE511C4E6E6AD75E7AF477862FCB5824E1D9B1
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9CCE2197D83CFA0979E79295EFEE5D486FB3A23E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6cd24b05-269e-4784-b935-f27665830fda/0/9CCE2197D83CFA0979E79295EFEE5D486FB3A23E.mft
Manifest number: 2B
Signing time: Tue 02 Jun 2026 14:42:59 +0000
Manifest this update: Tue 02 Jun 2026 14:37:59 +0000
Manifest next update: Wed 03 Jun 2026 14:43:59 +0000
Files and hashes: 1: 3130332e3132362e32362e302f32342d3234203d3e20313530353038.roa (hash: 6Awu2Ik5tqvQ6rEKLN4Gy/qaMR8Y4RuJeJcgKdpNQtw=)
2: 9CCE2197D83CFA0979E79295EFEE5D486FB3A23E.crl (hash: RfcA9HG6W2jF64I7yx/H3SwXOnsWdRX05qZiWAMzIAY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6cd24b05-269e-4784-b935-f27665830fda/0/9CCE2197D83CFA0979E79295EFEE5D486FB3A23E.crl
rsync://rpki-rsync.idnic.net/repo/6cd24b05-269e-4784-b935-f27665830fda/0/9CCE2197D83CFA0979E79295EFEE5D486FB3A23E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9CCE2197D83CFA0979E79295EFEE5D486FB3A23E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 14:43:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:ce:51:1c:4e:6e:6a:d7:5e:7a:f4:77:86:2f:cb:58:24:e1:d9:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9CCE2197D83CFA0979E79295EFEE5D486FB3A23E
Validity
Not Before: Jun 2 14:37:59 2026 GMT
Not After : Jun 3 14:43:59 2026 GMT
Subject: CN=0C08E62B3B63A546702E8940B40B5181E881CBB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:9c:d0:92:70:e1:3c:45:d1:ed:8d:18:30:94:
86:ae:38:bf:6b:2c:32:7f:2f:10:60:d2:b8:5f:be:
04:0e:d8:f6:ad:ca:34:74:c6:6c:f5:04:a4:03:11:
11:e0:1e:5f:ad:6e:19:a6:39:26:79:10:34:a8:dd:
ce:c9:d0:95:07:ad:ba:8c:cb:67:b7:7f:e2:8d:4c:
77:f0:45:a9:f2:79:d7:e6:de:17:49:7f:3a:17:b2:
77:fa:25:d5:98:85:93:37:37:23:8a:31:9f:a3:5d:
b7:b2:78:cf:15:98:80:a6:fa:25:52:6a:06:af:5a:
d5:55:ec:61:00:7b:bb:66:ac:5c:44:b5:cc:fd:df:
4d:2a:91:74:b4:eb:b9:43:db:c5:b9:9b:7e:08:68:
e9:11:60:b1:6e:ea:3d:bb:a0:18:25:ef:94:7f:96:
60:82:60:79:a6:f3:4b:0b:8c:52:eb:a6:a6:ae:3b:
04:cc:a6:b3:5d:5c:f2:c0:6f:58:1a:e6:09:cd:70:
a6:b7:22:32:51:86:d2:05:0e:8e:46:2a:18:cc:48:
b9:af:0b:85:09:a6:0c:d5:69:94:99:0e:15:74:1f:
e7:2d:da:e0:3a:e6:db:c4:e9:4a:10:46:05:4e:04:
a6:d0:56:f8:ca:85:9c:ed:fa:08:17:d7:31:d2:be:
42:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:08:E6:2B:3B:63:A5:46:70:2E:89:40:B4:0B:51:81:E8:81:CB:B7
X509v3 Authority Key Identifier:
keyid:9C:CE:21:97:D8:3C:FA:09:79:E7:92:95:EF:EE:5D:48:6F:B3:A2:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6cd24b05-269e-4784-b935-f27665830fda/0/9CCE2197D83CFA0979E79295EFEE5D486FB3A23E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9CCE2197D83CFA0979E79295EFEE5D486FB3A23E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6cd24b05-269e-4784-b935-f27665830fda/0/9CCE2197D83CFA0979E79295EFEE5D486FB3A23E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:29:14:89:a7:64:b2:09:04:09:df:cc:93:af:ed:a1:50:d4:
93:09:43:4e:46:d1:ce:9e:53:87:f4:a3:95:05:ce:84:b6:41:
aa:c4:31:d8:5d:90:b0:b3:09:36:a9:75:60:aa:64:de:b7:38:
f4:20:f1:77:a5:59:3a:9b:20:d4:6d:13:1a:6a:43:50:25:12:
47:65:ad:23:b9:5b:d2:66:0c:ac:dc:e9:d1:43:ac:68:cb:3b:
a4:7d:98:68:d2:ec:2a:d2:d1:8c:68:8f:98:83:df:5a:6f:c9:
67:53:e2:ce:3e:45:57:ba:41:f9:c7:a5:06:ad:73:d4:39:94:
a7:c0:c2:c1:4d:46:97:a0:9e:78:bb:26:69:90:11:78:a1:ce:
73:0e:9b:b6:5e:b4:2e:83:08:3f:cc:1c:ac:f3:47:94:d0:7a:
3c:8e:f3:be:a9:3d:a3:b2:b0:b3:a1:86:8f:66:2e:f2:9f:80:
66:29:06:e8:2d:ed:f3:bd:d7:28:29:d5:21:36:fd:a4:c4:d8:
e3:03:fc:fe:ed:ca:e1:9b:2b:7b:67:a5:ea:03:1d:7c:bf:59:
31:ec:0e:e0:62:91:d9:5a:86:5f:48:7e:b8:1c:d1:1d:50:d3:
f6:57:69:f5:a1:5e:d6:44:fa:6c:00:d7:d1:d6:a6:e1:37:94:
a8:e0:bb:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:26:34 2026 by rpki-client