
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/9CD069361DE1E2B7F987CB377D2065CD073D2BD6.mft
File: 9CD069361DE1E2B7F987CB377D2065CD073D2BD6.mft (raw, json)
Hash identifier: pPcsLlzVTDEJ71rFdG3hjNKx80bw51VSEpMxtFqG+tw=
Subject key identifier: EB:77:69:CF:DB:1C:6A:D2:40:DA:0A:A0:14:D9:39:F0:BB:FD:BD:73
Authority key identifier: 9C:D0:69:36:1D:E1:E2:B7:F9:87:CB:37:7D:20:65:CD:07:3D:2B:D6
Certificate issuer: /CN=9CD069361DE1E2B7F987CB377D2065CD073D2BD6
Certificate serial: 1B53C62D877EA3AE226B213651316A6ED5CC2816
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9CD069361DE1E2B7F987CB377D2065CD073D2BD6.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/9CD069361DE1E2B7F987CB377D2065CD073D2BD6.mft
Manifest number: F8
Signing time: Wed 04 Nov 2026 15:12:12 +0000
Manifest this update: Wed 04 Nov 2026 15:07:12 +0000
Manifest next update: Thu 05 Nov 2026 15:23:12 +0000
Files and hashes: 1: 3130332e3137342e37382e302f32342d3234203d3e20313331363939.roa (hash: TbeMR6DCS8oQZoWLlauGHIZkAoCLHj7Jp79qNO5aAvk=)
2: 9CD069361DE1E2B7F987CB377D2065CD073D2BD6.crl (hash: zFfxSHIv75zNDv6UtG7+zhmMzWkFBUFWmeQGFQYf3ew=)
3: 3130332e3137342e37392e302f32342d3234203d3e20313331363939.roa (hash: 0YvIC8wCtWvDa2HWmo5ajWyQO0v7nGfkKloFn4oUr5Y=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/9CD069361DE1E2B7F987CB377D2065CD073D2BD6.crl
rsync://rpki-rsync.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/9CD069361DE1E2B7F987CB377D2065CD073D2BD6.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9CD069361DE1E2B7F987CB377D2065CD073D2BD6.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Nov 2026 11:48:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:53:c6:2d:87:7e:a3:ae:22:6b:21:36:51:31:6a:6e:d5:cc:28:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9CD069361DE1E2B7F987CB377D2065CD073D2BD6
Validity
Not Before: Nov 4 15:07:12 2026 GMT
Not After : Nov 5 15:23:12 2026 GMT
Subject: CN=EB7769CFDB1C6AD240DA0AA014D939F0BBFDBD73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fe:fc:21:26:20:1d:fa:f0:2b:72:8b:36:d4:
45:44:9f:dd:8e:bf:51:92:d4:8b:4a:a0:d9:72:64:
20:7e:6d:55:8f:41:65:68:51:eb:eb:c8:c5:ee:33:
38:43:d9:df:ac:2c:12:6f:10:89:79:9b:11:d6:0e:
82:25:12:e6:2a:9f:a7:8b:02:99:29:44:ae:e9:24:
ae:47:e5:8d:eb:0e:e0:b4:5d:93:57:54:aa:d4:06:
fd:0c:92:95:8d:6c:41:b3:ce:bb:0e:24:4f:26:c0:
32:c5:da:d7:a6:38:cc:20:db:41:03:0d:a3:be:a7:
3f:60:1e:60:1e:98:db:49:74:bd:bf:65:5d:95:84:
98:35:58:51:b0:55:7b:f6:56:fc:5e:95:91:63:1b:
94:be:0f:90:36:ab:49:1d:e4:a8:c6:7d:6a:f4:39:
a2:c2:fc:69:3c:58:d1:47:23:6a:50:84:ec:9c:13:
d2:16:ba:2e:dd:16:56:1c:33:63:15:42:6f:5f:86:
8f:91:9a:8a:fd:1f:e5:f8:74:f8:2b:23:f9:52:e8:
0a:06:32:ec:59:10:b2:3e:28:b9:f1:95:71:14:29:
ad:11:fd:5a:71:34:93:e9:1c:80:bd:11:22:8b:6f:
c9:61:f9:48:8c:36:05:16:83:2d:aa:65:68:c6:6a:
89:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:77:69:CF:DB:1C:6A:D2:40:DA:0A:A0:14:D9:39:F0:BB:FD:BD:73
X509v3 Authority Key Identifier:
keyid:9C:D0:69:36:1D:E1:E2:B7:F9:87:CB:37:7D:20:65:CD:07:3D:2B:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/9CD069361DE1E2B7F987CB377D2065CD073D2BD6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9CD069361DE1E2B7F987CB377D2065CD073D2BD6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/9CD069361DE1E2B7F987CB377D2065CD073D2BD6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:6b:c9:97:7e:30:6c:c3:a4:c4:53:ec:6b:47:bb:15:cf:36:
a6:d8:89:26:7a:ca:e3:71:c1:f6:19:53:37:c5:ec:d6:16:4f:
b9:5b:da:ac:f6:60:de:0b:e7:d3:20:c0:aa:14:6d:35:a0:2c:
2c:52:b1:46:f7:fd:b7:dc:f2:a7:2c:85:f7:08:85:ba:9f:55:
c5:92:ea:4c:65:7a:84:2e:4e:d3:a3:4c:ae:e2:37:07:de:46:
4c:14:d8:5f:39:c8:db:8e:ef:eb:c3:16:2f:5f:68:f7:5a:20:
81:78:0f:97:4d:e4:09:f0:77:6c:2c:c5:66:ab:1b:78:cd:93:
3f:6b:3c:fd:1b:34:72:ee:14:00:34:15:c2:ab:6d:df:cd:65:
68:96:0c:e4:21:38:f1:e7:26:a3:06:57:77:ca:7d:1c:8a:3a:
b7:1f:ad:9c:0d:25:af:a3:16:40:c7:32:9d:b8:34:23:f8:d5:
9d:57:c9:5d:27:a8:1f:89:02:59:47:30:9d:c1:c9:ea:ef:e0:
86:c2:96:d6:1c:08:c1:be:ed:72:8e:de:50:00:6f:b0:3e:cd:
53:d5:bc:ae:9f:3e:81:9e:81:a6:d8:ea:ab:35:56:3a:0f:97:
bd:d1:68:44:2b:e0:4d:d9:bb:20:26:57:76:d5:0b:14:fe:bb:
0c:c1:21:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 19:25:04 2026 by rpki-client