
$ rpki-client -vvf rpki-rsync.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9A4283F96B701EC60EA45F124F88819D76D7E8FC.mft
File: 9A4283F96B701EC60EA45F124F88819D76D7E8FC.mft (raw, json)
Hash identifier: z5hX1qeoQe7IiSS2cJInjimrZScF2VMN5oIwTtIAyjA=
Subject key identifier: 1C:EB:F6:B0:BD:92:B7:B1:EC:39:96:91:D5:D7:FB:8D:B6:06:3F:D1
Authority key identifier: 9A:42:83:F9:6B:70:1E:C6:0E:A4:5F:12:4F:88:81:9D:76:D7:E8:FC
Certificate issuer: /CN=9A4283F96B701EC60EA45F124F88819D76D7E8FC
Certificate serial: 126F87E34A45FC50347052DCC658A106FC843E78
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A4283F96B701EC60EA45F124F88819D76D7E8FC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9A4283F96B701EC60EA45F124F88819D76D7E8FC.mft
Manifest number: 1C
Signing time: Fri 22 May 2026 16:24:19 +0000
Manifest this update: Fri 22 May 2026 16:19:19 +0000
Manifest next update: Sat 23 May 2026 16:59:19 +0000
Files and hashes: 1: 3130332e3136392e3139342e302f32342d3234203d3e20313432333536.roa (hash: lqSxCFv5WmyrxicOkawzjV/AVzQFgoIxemd6g7X5MqQ=)
2: 3130332e3136392e3139352e302f32342d3234203d3e20313339393637.roa (hash: 8HBG0p89815vWKkauI6Wn4NeMLGP4fCVAgDc4tDqrGk=)
3: 9A4283F96B701EC60EA45F124F88819D76D7E8FC.crl (hash: UDUdyZRkOLTqTAr666Ta3zhMxymArtUuOn3xcnX0gzU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9A4283F96B701EC60EA45F124F88819D76D7E8FC.crl
rsync://rpki-rsync.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9A4283F96B701EC60EA45F124F88819D76D7E8FC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A4283F96B701EC60EA45F124F88819D76D7E8FC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 23 May 2026 12:36:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:6f:87:e3:4a:45:fc:50:34:70:52:dc:c6:58:a1:06:fc:84:3e:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9A4283F96B701EC60EA45F124F88819D76D7E8FC
Validity
Not Before: May 22 16:19:19 2026 GMT
Not After : May 23 16:59:19 2026 GMT
Subject: CN=1CEBF6B0BD92B7B1EC399691D5D7FB8DB6063FD1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0b:33:56:f2:04:36:ad:20:f0:df:1b:78:35:
e8:a4:44:01:b7:11:d6:9f:06:05:97:99:01:d1:3c:
a3:ea:55:05:b2:83:48:73:e3:de:c4:76:2e:63:b2:
ae:a0:88:71:ee:86:cc:0e:d9:e3:2b:5f:5f:3d:37:
f1:29:23:c9:77:9f:a3:a6:01:60:09:87:61:cf:02:
83:64:ce:6c:5f:8a:82:24:13:79:f6:16:0b:7b:5b:
6e:27:c0:c9:5d:00:65:6c:9e:8a:59:9f:ba:90:92:
5a:fe:9e:fe:bf:e7:0d:52:31:78:12:28:db:8d:f2:
5a:b6:57:dd:f2:87:4f:d1:02:4b:5f:35:4f:f6:28:
30:8b:f2:d3:5f:90:40:e2:c8:15:2a:d6:80:a4:2d:
99:79:88:2a:e7:76:60:6a:8d:ea:f7:a9:00:c0:73:
25:c2:61:34:bc:24:fa:6a:fe:4f:92:19:22:ad:96:
2e:3e:68:69:ec:8c:f7:55:2e:9d:11:9c:86:d9:2d:
d4:ed:88:79:a7:cd:94:6d:e6:47:f4:38:4b:61:e0:
42:b8:f8:21:0f:9e:2b:2e:2f:51:39:54:2d:00:25:
20:f1:44:b2:aa:18:03:bc:75:a1:81:84:54:51:1c:
53:5d:8a:16:84:94:27:45:ee:cc:5d:a8:fd:bd:7f:
a2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:EB:F6:B0:BD:92:B7:B1:EC:39:96:91:D5:D7:FB:8D:B6:06:3F:D1
X509v3 Authority Key Identifier:
keyid:9A:42:83:F9:6B:70:1E:C6:0E:A4:5F:12:4F:88:81:9D:76:D7:E8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9A4283F96B701EC60EA45F124F88819D76D7E8FC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A4283F96B701EC60EA45F124F88819D76D7E8FC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9A4283F96B701EC60EA45F124F88819D76D7E8FC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:b1:c3:10:79:5a:fb:7d:e1:bc:f2:45:60:50:94:43:7a:ef:
b4:c9:ea:64:51:71:ee:b7:91:7a:a9:8a:6a:8d:54:2e:c2:74:
e7:e5:39:d9:c3:36:34:b3:e3:2e:b1:47:af:f3:ee:21:7d:e7:
ff:2e:df:8b:63:18:61:8a:9f:e9:4d:92:6e:fc:27:af:f5:23:
66:b4:b5:09:e5:d6:ee:a4:29:22:8b:f9:ae:ef:fc:f0:76:b3:
01:0e:fe:5f:c2:16:ee:f9:db:20:c1:5a:26:bc:ef:45:88:95:
8a:ac:1c:52:85:9d:94:92:4d:bc:66:a7:3c:74:26:41:d5:8a:
44:bf:0e:a1:a5:00:34:02:38:b5:4d:1e:bf:ee:15:8e:5e:4c:
93:9a:de:bc:31:f2:7b:72:89:74:c8:64:e5:b3:50:cc:a6:8c:
ae:3f:d6:37:f0:6b:06:bf:8e:bc:81:71:37:f7:c5:71:75:32:
21:12:9a:4e:8f:dd:47:41:1e:b4:7f:52:d1:79:4e:87:b4:e0:
04:0a:a2:6c:23:74:c5:1b:a8:ee:1c:c6:88:75:e4:a4:68:4b:
90:3e:2c:d7:86:07:43:60:df:e7:9f:7a:ab:12:a0:79:a8:a9:
aa:93:3e:12:58:0f:33:86:b1:6b:c2:75:39:70:e0:36:6e:1c:
9a:ef:31:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 06:06:08 2026 by rpki-client