
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD.mft
File: 9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD.mft (raw, json)
Hash identifier: gFYdyUOReU5hTafyJf4A+t8BMx41PBVW1NNxO1vqHxE=
Subject key identifier: 4D:E1:08:0E:20:1C:AA:B4:7E:88:47:D6:46:13:D1:30:E7:B0:E7:01
Authority key identifier: 9F:2D:47:C2:7A:04:66:64:7C:9A:8F:AF:24:6A:C8:5A:9F:2B:1F:BD
Certificate issuer: /CN=9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD
Certificate serial: 66CC5D3AAC4617ECD3BCF9EC66956BD5E309D041
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD.mft
Manifest number: A6
Signing time: Wed 02 Sep 2026 17:29:07 +0000
Manifest this update: Wed 02 Sep 2026 17:24:07 +0000
Manifest next update: Thu 03 Sep 2026 19:26:07 +0000
Files and hashes: 1: 3130332e3132322e3135342e302f32332d3233203d3e20313430343037.roa (hash: bTctqXrHoddHLmiHRZEAbvepwDnyNZuBmN3yjSF/QUg=)
2: 3130332e3132322e3135322e302f32332d3233203d3e20313430343037.roa (hash: wjQlJjUfkbt1n7Rc6SHSm1K1dY+H6SCMIIZnXPYbFUQ=)
3: 3130332e3132322e3135322e302f32322d3232203d3e20313430343037.roa (hash: eE9KfhHZMD39d40KbY7oSEFpRtTmkSjOZgjX7V3PP3E=)
4: 3130332e3132322e3135352e302f32342d3234203d3e20313430343037.roa (hash: XHc5XJ3BNfkaI/lsgwiIo3VZ/lOhS7oABSPc/TOM6ZY=)
5: 323430333a393063303a3a2f33322d3430203d3e20313430343037.roa (hash: Yg7MUDs8e7RtjcON84BP67HQDd4RbJW/QQRbIefF+fk=)
6: 323430333a393063303a3a2f33322d3332203d3e20313430343037.roa (hash: evwEHBL+Efz58EUm4jU4ct9sLmawRVLDyaUcdYukI+g=)
7: 3130332e3132322e3135322e302f32342d3234203d3e20313430343037.roa (hash: 7UHUG49KeSvdqIfX5Q2/sjN4aSqQC/7iFrJSNv+5Ax4=)
8: 3130332e3132322e3135342e302f32342d3234203d3e20313430343037.roa (hash: 38Xm9PyU4xIsiex90hJwlQrnnXy77AnXzl8H3OHJdtc=)
9: 3130332e3132322e3135332e302f32342d3234203d3e20313430343037.roa (hash: ueytpOIHoXmrHTRXDms0z+mkyIFFMatKweHFitzqnbY=)
10: 9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD.crl (hash: Ekykg5aLmITMmdzQarQ3a/pYFzwOYVivL49T9OjtR40=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD.crl
rsync://rpki-rsync.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 03 Sep 2026 19:26:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:cc:5d:3a:ac:46:17:ec:d3:bc:f9:ec:66:95:6b:d5:e3:09:d0:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD
Validity
Not Before: Sep 2 17:24:07 2026 GMT
Not After : Sep 3 19:26:07 2026 GMT
Subject: CN=4DE1080E201CAAB47E8847D64613D130E7B0E701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:40:2f:fc:3f:15:0d:38:4b:58:a5:a1:a1:4a:
cf:99:c6:43:fa:2c:d5:4b:8d:dc:6a:d1:27:5d:95:
89:ff:43:93:c8:4e:e8:59:e9:3f:03:f3:9f:77:99:
e4:28:2d:70:74:3f:bd:5d:c2:22:2a:4f:34:8c:4e:
9f:80:f4:e7:3e:50:28:f5:07:48:6f:6b:da:71:3a:
a3:9f:f9:c1:2d:3c:ce:fe:3c:69:bd:a6:42:9e:3b:
82:c4:67:05:9c:51:d1:2c:17:68:6a:c8:97:79:32:
10:84:dd:0c:3c:01:cd:68:04:7e:8d:8d:37:a7:cd:
cb:aa:24:65:90:4c:d8:b0:0a:c1:96:c0:55:51:6b:
3b:d8:5a:71:58:64:e7:b5:ba:0c:3f:c9:ab:49:b8:
11:1b:67:26:d8:a1:c2:08:5a:b9:23:f5:32:fb:32:
74:57:35:92:2e:83:2e:13:d8:96:82:00:43:4a:e0:
92:b5:2e:9a:15:75:2f:6d:72:80:e6:e3:dc:e1:e9:
48:93:7b:a5:16:88:47:14:07:7c:3e:e0:17:47:2c:
6b:86:6e:e6:9e:98:bc:80:82:11:78:56:a7:94:1f:
3d:15:ee:de:32:92:d8:ef:c8:9c:ff:65:80:b0:1f:
18:20:0b:c1:47:a7:31:4d:7c:6f:dc:87:64:a7:88:
66:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:E1:08:0E:20:1C:AA:B4:7E:88:47:D6:46:13:D1:30:E7:B0:E7:01
X509v3 Authority Key Identifier:
keyid:9F:2D:47:C2:7A:04:66:64:7C:9A:8F:AF:24:6A:C8:5A:9F:2B:1F:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:54:64:1a:79:4b:fb:6b:3e:dd:39:e2:0d:70:d6:f7:42:ac:
5c:6b:8e:72:f0:61:2f:7f:ae:60:64:be:a5:ef:06:6f:b3:38:
2f:cd:56:f7:c4:6a:8c:28:99:ab:61:3a:3f:33:a9:b4:14:8e:
73:ba:ea:47:e4:41:c6:a0:22:1c:aa:1e:71:42:89:a7:f7:17:
e2:96:b2:59:15:87:47:e4:9a:68:0c:30:74:77:ce:5e:6d:00:
57:3b:2e:b0:93:5e:e3:ab:57:4c:c4:8b:e4:3d:31:54:87:87:
c0:2c:19:d9:ca:1a:84:9a:fd:c4:c4:9d:c8:88:81:0d:99:fb:
9d:7b:b9:6d:50:71:ef:65:bf:c8:37:26:c7:8d:7c:60:60:55:
98:02:54:bd:2d:2e:a4:b9:23:88:4a:69:64:b8:61:27:cc:09:
ba:de:35:c0:1b:e6:6d:68:46:f8:ff:5d:a2:8b:13:b7:d1:a4:
52:92:5a:41:de:8c:e3:0e:5e:e8:ce:9a:a5:1f:cb:67:d7:ad:
aa:65:51:7c:65:56:37:00:b7:32:13:87:e7:b4:76:de:94:4b:
b0:e5:ab:c5:99:74:35:8e:61:97:81:19:c7:76:9e:a5:6f:1d:
19:34:bd:51:e1:a1:74:1e:02:06:48:b5:44:90:7a:f9:83:ed:
08:4f:f6:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 05:20:01 2026 by rpki-client