
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/9635F0724E9717C889D5604679E31DA89F807CC1.mft
File: 9635F0724E9717C889D5604679E31DA89F807CC1.mft (raw, json)
Hash identifier: ix2m9OvKcLM2QQBi9VJU3sfuKN1v3p5jt7JzrV6VFKo=
Subject key identifier: 93:43:E8:71:65:3F:6D:90:62:FB:F8:9F:C7:7F:9D:CE:1D:CB:5E:CA
Authority key identifier: 96:35:F0:72:4E:97:17:C8:89:D5:60:46:79:E3:1D:A8:9F:80:7C:C1
Certificate issuer: /CN=9635F0724E9717C889D5604679E31DA89F807CC1
Certificate serial: 231D9B7BFC684D0CD51058CD382056339AE114A6
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9635F0724E9717C889D5604679E31DA89F807CC1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/9635F0724E9717C889D5604679E31DA89F807CC1.mft
Manifest number: 2B
Signing time: Tue 02 Jun 2026 14:48:08 +0000
Manifest this update: Tue 02 Jun 2026 14:43:08 +0000
Manifest next update: Wed 03 Jun 2026 15:46:08 +0000
Files and hashes: 1: 9635F0724E9717C889D5604679E31DA89F807CC1.crl (hash: b6R82uXbpP41+jgt04kXK/cRcJ8TXyVpncP8Sh0RJOw=)
2: 3130332e39372e3139382e302f32342d3234203d3e20313530393135.roa (hash: 8TsJDUFf5xwZJs6EgPJxyciB9/EWUhvPgtxe1fcDLMI=)
3: 3130332e39372e3139392e302f32342d3234203d3e20313530393135.roa (hash: XboM/GVCHUPVqpn45N0upXfql+dI6DpgJ/Slav4V/kE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/9635F0724E9717C889D5604679E31DA89F807CC1.crl
rsync://rpki-rsync.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/9635F0724E9717C889D5604679E31DA89F807CC1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9635F0724E9717C889D5604679E31DA89F807CC1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 10:27:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:1d:9b:7b:fc:68:4d:0c:d5:10:58:cd:38:20:56:33:9a:e1:14:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9635F0724E9717C889D5604679E31DA89F807CC1
Validity
Not Before: Jun 2 14:43:08 2026 GMT
Not After : Jun 3 15:46:08 2026 GMT
Subject: CN=9343E871653F6D9062FBF89FC77F9DCE1DCB5ECA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:85:8a:be:47:74:b0:30:f3:cb:e0:c3:e8:63:
c9:dd:77:bd:68:2e:ca:89:ab:69:46:4f:9e:e0:7d:
fb:93:cf:59:b5:a4:59:67:67:dd:80:89:69:0a:95:
3e:23:30:5d:95:e4:15:b7:f7:7f:e0:f3:d0:73:97:
83:5b:4f:e7:7d:05:a9:35:c0:e3:9d:bb:3c:cf:30:
b4:33:50:b6:0b:fa:ce:30:b6:77:73:8b:2b:4c:a7:
0f:09:99:b1:f5:40:38:0b:03:a8:6f:8f:8e:48:b5:
16:42:33:5e:13:1e:15:f5:89:46:27:83:76:10:0e:
b9:72:70:84:fe:44:9a:50:bf:0a:7a:3d:79:b6:eb:
ea:ce:cf:90:1a:dd:53:0c:df:9e:b0:b3:42:b2:91:
61:23:41:99:93:a6:94:17:a3:a0:26:7e:ee:a5:f7:
3c:3e:83:6e:ca:fd:3b:d3:98:90:5c:78:84:4f:16:
b9:d4:d9:42:72:8d:70:74:ab:12:42:65:ad:16:1a:
6a:2e:0e:03:3a:82:b5:86:f4:9b:f0:52:60:5b:d5:
5c:6c:58:08:e0:da:57:fa:4a:d9:75:aa:2e:b2:da:
df:6c:18:3d:71:2c:12:67:73:a0:7e:7d:a9:9b:ad:
75:2a:87:c2:01:c1:3f:d2:15:2e:57:d8:d3:1c:50:
a3:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:43:E8:71:65:3F:6D:90:62:FB:F8:9F:C7:7F:9D:CE:1D:CB:5E:CA
X509v3 Authority Key Identifier:
keyid:96:35:F0:72:4E:97:17:C8:89:D5:60:46:79:E3:1D:A8:9F:80:7C:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/9635F0724E9717C889D5604679E31DA89F807CC1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9635F0724E9717C889D5604679E31DA89F807CC1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/9635F0724E9717C889D5604679E31DA89F807CC1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:c1:97:36:a2:e7:69:90:1e:64:d5:67:ff:14:8d:5b:92:58:
35:48:1e:d8:74:2b:ea:63:53:52:88:89:b5:9a:eb:fe:88:24:
8c:95:a4:2b:42:39:e4:a7:a3:9e:fb:1c:66:56:1c:a1:96:91:
e4:a3:c9:29:a0:2c:d9:06:23:db:c4:79:0e:17:18:6b:d8:f1:
da:59:23:d4:42:79:51:9b:a2:49:f1:34:25:92:94:19:5c:79:
6d:e8:53:80:b1:52:0e:19:19:f9:dc:8d:5c:1e:43:2b:46:ce:
bc:2b:26:a9:17:0f:8b:4f:5c:1b:d3:11:73:00:44:5e:f9:94:
65:9e:88:bc:32:f1:8f:73:63:76:e8:bf:e6:22:fb:fe:ac:9e:
64:bc:c1:63:f2:15:7c:06:a1:c5:29:6e:6e:c8:c4:fb:d4:64:
12:3b:f3:ad:90:79:5a:b4:5c:86:13:87:d1:be:9d:2f:48:55:
ba:cf:93:e7:43:86:60:f1:50:eb:8e:66:26:6c:54:7b:33:9e:
fa:c8:77:a8:3c:bf:2e:3c:ce:45:f6:27:4c:60:ac:b2:de:d4:
aa:cf:6f:87:cb:f8:3f:92:f1:bb:bc:8f:ee:e2:9b:57:e1:e5:
59:c6:8b:96:4c:b7:35:29:0f:57:9c:65:6d:ab:90:e2:62:9d:
4a:d5:23:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:12:20 2026 by rpki-client