
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/CF55E7412871AB0F42347E2FEE1F6815035C7C39.mft
File: CF55E7412871AB0F42347E2FEE1F6815035C7C39.mft (raw, json)
Hash identifier: R1i3HOdaeOBWuTCLyL9y5XUh+Upp36Jwr21qH28igGQ=
Subject key identifier: DE:BC:3F:13:BD:49:B2:CB:A1:88:3E:35:38:E0:5C:0A:4B:9C:E4:32
Authority key identifier: CF:55:E7:41:28:71:AB:0F:42:34:7E:2F:EE:1F:68:15:03:5C:7C:39
Certificate issuer: /CN=CF55E7412871AB0F42347E2FEE1F6815035C7C39
Certificate serial: 2B06C1CD9C2AF14A13DAFF897C0F09397DDC23E7
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF55E7412871AB0F42347E2FEE1F6815035C7C39.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/CF55E7412871AB0F42347E2FEE1F6815035C7C39.mft
Manifest number: A6
Signing time: Thu 03 Sep 2026 13:12:57 +0000
Manifest this update: Thu 03 Sep 2026 13:07:57 +0000
Manifest next update: Fri 04 Sep 2026 15:49:57 +0000
Files and hashes: 1: CF55E7412871AB0F42347E2FEE1F6815035C7C39.crl (hash: HuHPpLKsW552IRJ2a/fBvPWdHTCIT7HYexwwZul/vUo=)
2: 3130332e3131372e31302e302f32342d3234203d3e20313530343738.roa (hash: Om/3/8RVQVP4CmrlSjOFvYcq6slIyV0KgfonhTO00tc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/CF55E7412871AB0F42347E2FEE1F6815035C7C39.crl
rsync://rpki-rsync.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/CF55E7412871AB0F42347E2FEE1F6815035C7C39.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF55E7412871AB0F42347E2FEE1F6815035C7C39.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 04 Sep 2026 12:22:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:06:c1:cd:9c:2a:f1:4a:13:da:ff:89:7c:0f:09:39:7d:dc:23:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CF55E7412871AB0F42347E2FEE1F6815035C7C39
Validity
Not Before: Sep 3 13:07:57 2026 GMT
Not After : Sep 4 15:49:57 2026 GMT
Subject: CN=DEBC3F13BD49B2CBA1883E3538E05C0A4B9CE432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:21:2b:39:e3:92:8b:d8:8a:66:71:e4:18:87:
b1:df:72:2c:f8:32:a2:50:ba:16:b0:f4:e7:fb:8a:
0b:ab:19:4b:fd:70:e2:92:9a:d2:04:51:80:f7:ce:
33:2e:3a:55:bc:53:51:c2:d5:72:83:03:9e:83:aa:
80:c1:71:2c:c2:a0:e0:92:0f:5d:43:c1:33:15:1d:
ff:db:d6:be:85:a2:85:58:f2:66:28:1e:73:f6:d3:
c6:da:4f:6c:33:2a:6d:31:bd:0f:cd:d2:92:9b:8f:
6c:e4:77:ea:43:3b:20:83:e0:24:89:86:49:5a:27:
94:eb:1b:4b:4a:85:5b:05:85:81:f4:ec:cc:08:24:
ae:8f:4c:c1:6e:e8:30:9b:12:ad:a4:b2:5a:61:a6:
38:8c:4b:5f:98:fd:f2:10:a3:1a:37:b8:bc:80:7b:
66:a0:cd:07:0a:8a:57:55:74:72:4a:68:aa:7c:d0:
bc:a5:0d:bd:72:ba:40:ac:a6:33:b9:ea:2e:a6:1f:
16:1a:73:43:38:68:b2:0b:43:58:fe:2c:3e:6f:db:
af:89:0d:c8:bb:1f:9d:a3:cf:cc:17:46:3e:a6:a6:
9b:d3:e1:1a:45:0e:54:9d:c9:80:72:0d:fc:10:25:
34:4e:54:f9:1a:ee:e6:a8:67:69:a4:51:cb:58:a4:
4f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:BC:3F:13:BD:49:B2:CB:A1:88:3E:35:38:E0:5C:0A:4B:9C:E4:32
X509v3 Authority Key Identifier:
keyid:CF:55:E7:41:28:71:AB:0F:42:34:7E:2F:EE:1F:68:15:03:5C:7C:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/CF55E7412871AB0F42347E2FEE1F6815035C7C39.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF55E7412871AB0F42347E2FEE1F6815035C7C39.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/CF55E7412871AB0F42347E2FEE1F6815035C7C39.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:2a:85:15:3f:b9:f7:9d:c4:55:c6:d9:27:7e:b4:2b:fa:9e:
38:84:8d:c4:98:d1:18:0d:43:19:5b:a1:de:5c:4b:f3:87:93:
b0:9a:b3:aa:bf:9d:27:11:e2:a1:af:3c:d1:0e:d6:de:17:c0:
9d:1e:a9:9b:87:56:92:cb:64:39:73:fb:e2:57:9b:80:40:b4:
cc:f2:a0:3b:4d:a6:72:10:e1:a2:06:f7:ce:b7:a0:be:cf:44:
d3:3b:a6:f9:ef:b0:77:d6:45:c6:c7:60:f7:d1:31:38:54:df:
9f:6b:9c:c7:60:dd:02:a5:71:91:e2:96:36:35:a2:52:0b:71:
92:4b:31:72:b7:9d:14:b1:cd:f8:bf:cf:3c:69:75:b9:b8:61:
b6:ba:66:33:81:a1:09:b9:64:ee:c3:05:04:26:14:bf:72:05:
49:78:63:68:94:77:43:74:95:d7:99:ba:da:4c:8a:f6:d5:4f:
cc:8a:2e:9d:b6:84:36:bc:e3:ce:be:c2:9d:e7:dc:8e:08:cc:
83:34:6e:c4:e8:a8:bd:33:6d:10:15:52:71:50:c8:18:f0:c4:
90:b9:6d:40:64:a2:5b:b6:44:0f:53:88:f5:54:41:a2:b7:5c:
07:7c:71:f8:a6:ad:69:d5:97:3e:f8:33:7c:09:d0:05:63:dd:
b5:3c:bc:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 16:18:59 2026 by rpki-client