
$ rpki-client -vvf rpki-rsync.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/9E9F5935C65B93B070730D31DC3B0B94A4C3EF00.mft
File: 9E9F5935C65B93B070730D31DC3B0B94A4C3EF00.mft (raw, json)
Hash identifier: g6dlW5xqJX8hreMizJy8Yh4TRX3oqad15vFIG6SM1Nk=
Subject key identifier: EF:98:25:8C:13:8B:05:D1:70:15:48:77:66:15:53:06:C4:8D:AA:05
Authority key identifier: 9E:9F:59:35:C6:5B:93:B0:70:73:0D:31:DC:3B:0B:94:A4:C3:EF:00
Certificate issuer: /CN=9E9F5935C65B93B070730D31DC3B0B94A4C3EF00
Certificate serial: 41201B3A53F0EA02D0B91F4F9AB36DE759AD8DC9
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9E9F5935C65B93B070730D31DC3B0B94A4C3EF00.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/9E9F5935C65B93B070730D31DC3B0B94A4C3EF00.mft
Manifest number: 6B
Signing time: Tue 21 Jul 2026 04:26:19 +0000
Manifest this update: Tue 21 Jul 2026 04:21:19 +0000
Manifest next update: Wed 22 Jul 2026 07:20:19 +0000
Files and hashes: 1: 9E9F5935C65B93B070730D31DC3B0B94A4C3EF00.crl (hash: CbMxHIKYshE7dwPw3fa5UdJsmjK/vifs329bajp5B2U=)
2: 3130332e3135382e3235302e302f32332d3234203d3e20313431313334.roa (hash: naWUC2Rkww5G3UJh4eCfssT9Zr/V8p7wGu4ngZht9HU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/9E9F5935C65B93B070730D31DC3B0B94A4C3EF00.crl
rsync://rpki-rsync.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/9E9F5935C65B93B070730D31DC3B0B94A4C3EF00.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9E9F5935C65B93B070730D31DC3B0B94A4C3EF00.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Jul 2026 02:08:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:20:1b:3a:53:f0:ea:02:d0:b9:1f:4f:9a:b3:6d:e7:59:ad:8d:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9E9F5935C65B93B070730D31DC3B0B94A4C3EF00
Validity
Not Before: Jul 21 04:21:19 2026 GMT
Not After : Jul 22 07:20:19 2026 GMT
Subject: CN=EF98258C138B05D17015487766155306C48DAA05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:83:0f:36:1a:e5:9a:db:f3:95:1d:a3:09:4c:
ef:79:82:2b:b0:36:53:71:48:1b:66:91:11:a3:f7:
47:8e:1f:15:dc:a4:bf:ee:43:fe:3b:c7:e7:53:5b:
c1:f6:ea:74:d5:a2:0c:14:ee:07:42:41:71:a6:bb:
03:98:3e:8f:d1:00:53:32:d3:f2:7e:6d:2e:c5:ac:
8e:b7:85:65:50:63:08:8d:af:87:ce:56:81:e4:a7:
d3:19:05:5e:9b:74:05:e6:69:4a:ee:e3:6f:20:d3:
b3:23:0d:db:33:50:f0:42:4e:e9:92:c5:93:23:fe:
41:46:fb:7a:2c:16:9a:75:52:b8:f6:dd:21:11:29:
fc:19:66:6c:9d:8c:ef:24:8b:6e:3b:77:6c:f2:55:
89:d8:74:65:0a:a4:77:98:8b:25:1b:34:9c:c5:95:
3f:ea:05:c5:c1:0f:ce:b6:41:72:6c:bb:1b:be:58:
f0:d2:09:45:09:81:2c:f6:92:cd:d8:36:59:af:1d:
11:63:77:00:b7:ef:96:0f:f0:41:50:78:8d:26:e2:
92:9b:ae:82:5e:0f:e9:18:c9:55:76:71:9d:d5:55:
a0:2f:f7:60:ac:dc:31:4c:99:fd:19:c6:1d:3b:59:
35:10:56:26:84:55:2e:ce:8e:a1:98:b4:a1:88:38:
f2:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:98:25:8C:13:8B:05:D1:70:15:48:77:66:15:53:06:C4:8D:AA:05
X509v3 Authority Key Identifier:
keyid:9E:9F:59:35:C6:5B:93:B0:70:73:0D:31:DC:3B:0B:94:A4:C3:EF:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/9E9F5935C65B93B070730D31DC3B0B94A4C3EF00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9E9F5935C65B93B070730D31DC3B0B94A4C3EF00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/9E9F5935C65B93B070730D31DC3B0B94A4C3EF00.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:a2:9b:c8:28:eb:df:01:a8:e7:af:46:cc:c6:23:71:26:39:
3d:b4:c5:1a:83:0e:74:4b:ab:7e:5f:78:fc:37:3b:63:e9:f7:
96:d2:40:f4:9a:f4:16:c4:a0:82:d5:15:55:cd:f8:b3:82:30:
0f:db:57:d9:f3:2d:11:35:7b:62:9b:9d:52:96:55:74:d5:12:
61:b0:84:d5:0e:d2:69:7e:24:31:2b:6e:d5:fe:f7:3c:d2:3b:
cb:f1:68:0e:d8:94:36:38:5a:56:28:03:95:4e:b7:c0:c0:4e:
8a:15:ca:b8:a4:52:40:aa:1e:4e:7e:cc:df:92:88:f6:e6:10:
5b:e8:da:10:03:2f:41:2c:da:e2:90:0a:53:bc:85:04:01:24:
2b:99:e3:d9:5b:7e:0d:b6:ad:1d:cb:b6:90:a8:2b:d7:a9:b8:
af:a9:c0:4c:b4:e0:2d:64:dd:77:93:ef:db:fb:60:49:02:43:
0b:eb:26:1e:da:7b:6e:89:57:e8:51:c7:46:22:31:21:d3:00:
57:22:d6:9e:45:9a:30:54:8a:96:32:28:6a:23:42:d8:48:0d:
cf:03:3c:eb:c7:29:d0:df:37:2c:39:79:ed:6a:6c:78:1a:d1:
ab:f7:98:34:17:95:68:a0:75:79:d4:3a:57:25:5b:8d:6e:20:
6e:d9:97:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:59:05 2026 by rpki-client