
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/9635F0724E9717C889D5604679E31DA89F807CC1.mft
File: 9635F0724E9717C889D5604679E31DA89F807CC1.mft (raw, json)
Hash identifier: 4OQRuRwrgoemAhZ03I82AMBEY0uMP0Dj2ZxPZsOCOKA=
Subject key identifier: 3E:DB:E1:B4:DD:50:C1:7E:46:19:E4:2D:EE:9E:A7:1A:43:2B:6A:86
Authority key identifier: 96:35:F0:72:4E:97:17:C8:89:D5:60:46:79:E3:1D:A8:9F:80:7C:C1
Certificate issuer: /CN=9635F0724E9717C889D5604679E31DA89F807CC1
Certificate serial: 1FAC1A304A32DF8062ABB2EF3AA304DE79902D07
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9635F0724E9717C889D5604679E31DA89F807CC1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/9635F0724E9717C889D5604679E31DA89F807CC1.mft
Manifest number: 6C
Signing time: Mon 20 Jul 2026 19:25:25 +0000
Manifest this update: Mon 20 Jul 2026 19:20:25 +0000
Manifest next update: Tue 21 Jul 2026 20:11:25 +0000
Files and hashes: 1: 3130332e39372e3139382e302f32342d3234203d3e20313530393135.roa (hash: 8TsJDUFf5xwZJs6EgPJxyciB9/EWUhvPgtxe1fcDLMI=)
2: 9635F0724E9717C889D5604679E31DA89F807CC1.crl (hash: JJiIfP8GkO/UZyIMJSMQoQTkHHwedQp44/t5XmXzJ0w=)
3: 3130332e39372e3139392e302f32342d3234203d3e20313530393135.roa (hash: XboM/GVCHUPVqpn45N0upXfql+dI6DpgJ/Slav4V/kE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/9635F0724E9717C889D5604679E31DA89F807CC1.crl
rsync://rpki-rsync.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/9635F0724E9717C889D5604679E31DA89F807CC1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9635F0724E9717C889D5604679E31DA89F807CC1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Jul 2026 20:11:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:ac:1a:30:4a:32:df:80:62:ab:b2:ef:3a:a3:04:de:79:90:2d:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9635F0724E9717C889D5604679E31DA89F807CC1
Validity
Not Before: Jul 20 19:20:25 2026 GMT
Not After : Jul 21 20:11:25 2026 GMT
Subject: CN=3EDBE1B4DD50C17E4619E42DEE9EA71A432B6A86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:dc:64:b4:70:cb:cd:ce:43:a8:ed:81:72:ee:
09:cf:e1:75:17:53:41:87:30:ca:99:60:75:4d:47:
76:98:c2:c6:dd:a6:55:9b:60:16:36:c0:7e:c0:a4:
48:37:36:74:a0:60:fc:7f:9e:37:ed:ea:6f:d0:01:
d8:4f:04:ca:77:ab:7f:4c:78:ea:90:d4:ac:53:7d:
65:25:ae:8b:d7:a6:53:6b:0d:59:4e:0f:9a:eb:e8:
d5:58:c0:c7:27:ce:4f:f6:96:1e:3f:d4:22:af:64:
0b:7c:db:00:66:5d:f2:97:35:55:bd:07:00:35:f5:
f7:d2:ae:0a:b3:a7:a2:c1:d9:84:9a:e9:9b:fe:ac:
53:0b:bb:00:29:f0:a1:6a:dd:eb:f6:29:b0:e8:a0:
f7:d6:91:24:ae:cb:00:6c:3b:a6:64:a8:6a:8b:7f:
25:a3:ad:e3:bf:03:d6:09:56:8a:8d:17:64:b8:4c:
5a:08:f9:36:a9:9e:13:05:5f:93:c2:89:38:d9:58:
ca:71:41:68:18:c2:d1:4a:5e:ba:c2:45:69:fb:05:
45:de:51:b8:b9:8a:62:bb:f9:ee:a8:ff:36:56:85:
b3:1f:8b:3d:0a:1a:7c:1c:27:15:0a:68:63:d6:12:
3b:20:a0:4f:63:56:a2:ec:02:27:b7:d8:26:32:a6:
a5:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:DB:E1:B4:DD:50:C1:7E:46:19:E4:2D:EE:9E:A7:1A:43:2B:6A:86
X509v3 Authority Key Identifier:
keyid:96:35:F0:72:4E:97:17:C8:89:D5:60:46:79:E3:1D:A8:9F:80:7C:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/9635F0724E9717C889D5604679E31DA89F807CC1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9635F0724E9717C889D5604679E31DA89F807CC1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/9635F0724E9717C889D5604679E31DA89F807CC1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:e6:0c:8e:1b:09:30:cc:68:b5:1a:64:0b:c4:84:9a:5d:69:
46:49:41:c8:51:a3:6c:37:ad:a7:57:31:2d:91:8c:09:11:90:
c9:d9:42:59:44:cd:0a:3d:ee:8e:49:4d:69:ce:2c:3e:83:72:
3b:da:a0:53:b5:76:45:b8:69:7e:95:9e:46:e4:09:2f:8b:a4:
ab:8b:3c:50:d5:0a:eb:e8:bd:7a:5d:15:a6:a2:32:e3:41:fc:
74:f5:f6:64:7e:f3:5f:42:8e:35:ae:73:ff:d2:3e:61:8e:e2:
e7:b0:49:4c:75:24:af:f0:fa:a9:38:8a:49:78:93:ae:6b:bc:
bf:74:a2:f9:b6:f5:f6:3e:79:35:8a:cb:87:0a:2c:07:1c:4b:
67:d1:62:0a:f2:56:ce:03:fa:66:d2:48:61:04:0d:c4:70:e0:
57:8e:45:ec:78:45:0b:c9:07:4e:c7:09:46:4e:b9:45:9c:b5:
e5:65:f0:c5:70:93:8e:ff:b9:6c:cb:d2:39:0c:b8:ce:5b:b3:
0d:d5:d3:9b:0f:13:3a:67:80:9f:53:53:48:a2:7e:b7:3d:dc:
e0:a3:b0:e7:1e:c4:47:13:18:05:30:24:6d:74:4c:77:22:24:
c9:f6:89:b0:e5:b1:a5:1d:7f:b8:2f:9d:21:0f:74:64:52:fd:
f5:42:02:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 07:00:17 2026 by rpki-client