
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/9CD069361DE1E2B7F987CB377D2065CD073D2BD6.mft
File: 9CD069361DE1E2B7F987CB377D2065CD073D2BD6.mft (raw, json)
Hash identifier: ZdufZgc2Gd8VwkfphEzvLurkS658Jt+f0E+1iorXOIs=
Subject key identifier: 56:FD:51:5D:75:FB:DB:D0:8F:91:13:A2:A0:32:07:FC:E0:2D:57:DB
Authority key identifier: 9C:D0:69:36:1D:E1:E2:B7:F9:87:CB:37:7D:20:65:CD:07:3D:2B:D6
Certificate issuer: /CN=9CD069361DE1E2B7F987CB377D2065CD073D2BD6
Certificate serial: 20EA71B71977E21612CC39C72C8EA4F005CB5D55
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9CD069361DE1E2B7F987CB377D2065CD073D2BD6.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/9CD069361DE1E2B7F987CB377D2065CD073D2BD6.mft
Manifest number: F7
Signing time: Tue 03 Nov 2026 21:55:06 +0000
Manifest this update: Tue 03 Nov 2026 21:50:06 +0000
Manifest next update: Wed 04 Nov 2026 23:10:06 +0000
Files and hashes: 1: 9CD069361DE1E2B7F987CB377D2065CD073D2BD6.crl (hash: h5pymtW5a1kW7CQawq2qU/dBm/bsjWXETA4BUuNcIsg=)
2: 3130332e3137342e37392e302f32342d3234203d3e20313331363939.roa (hash: 0YvIC8wCtWvDa2HWmo5ajWyQO0v7nGfkKloFn4oUr5Y=)
3: 3130332e3137342e37382e302f32342d3234203d3e20313331363939.roa (hash: TbeMR6DCS8oQZoWLlauGHIZkAoCLHj7Jp79qNO5aAvk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/9CD069361DE1E2B7F987CB377D2065CD073D2BD6.crl
rsync://rpki-rsync.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/9CD069361DE1E2B7F987CB377D2065CD073D2BD6.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9CD069361DE1E2B7F987CB377D2065CD073D2BD6.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Nov 2026 23:10:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:ea:71:b7:19:77:e2:16:12:cc:39:c7:2c:8e:a4:f0:05:cb:5d:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9CD069361DE1E2B7F987CB377D2065CD073D2BD6
Validity
Not Before: Nov 3 21:50:06 2026 GMT
Not After : Nov 4 23:10:06 2026 GMT
Subject: CN=56FD515D75FBDBD08F9113A2A03207FCE02D57DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:47:ba:39:84:c5:68:6e:e4:e1:77:83:ee:47:
d6:66:3d:af:51:a8:e4:db:ee:cf:33:e0:67:ac:4b:
f1:c8:8b:b9:f8:88:62:66:0d:32:8f:df:c2:cd:a4:
a3:26:f1:7b:a7:2f:9b:bb:3f:ca:a4:70:93:bf:19:
81:41:9b:2f:27:b6:34:8d:e9:5e:83:3b:64:69:92:
1e:2b:ec:5d:39:49:f4:a3:1c:87:ba:5e:2f:ab:10:
ff:cf:ac:d5:8d:fa:35:5e:2c:df:fd:04:19:92:f0:
bf:fb:9b:2c:78:77:60:c0:b7:f5:f6:dc:c0:f9:57:
31:63:41:a3:d4:ef:d0:8f:9f:d5:fc:d8:41:48:13:
57:6d:a1:3b:f0:6f:d8:e8:c3:19:d4:f8:17:5d:fe:
31:1c:34:fe:08:6c:99:4d:2c:c3:df:c0:ef:c1:d5:
1a:05:32:f8:28:0c:2d:e8:d3:63:26:03:97:50:dd:
c5:72:9e:96:08:60:3e:1a:24:a4:d7:57:82:ac:0a:
50:23:bd:8a:33:89:ea:74:f5:e5:76:12:b3:a8:f8:
fe:a6:92:3b:08:56:54:ae:02:b2:b4:91:33:1b:a8:
87:e3:4d:8f:c4:29:4c:c3:d3:cd:ad:5e:ce:7f:8b:
f2:16:68:73:51:f3:80:8d:f8:0b:29:66:64:68:0b:
7b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:FD:51:5D:75:FB:DB:D0:8F:91:13:A2:A0:32:07:FC:E0:2D:57:DB
X509v3 Authority Key Identifier:
keyid:9C:D0:69:36:1D:E1:E2:B7:F9:87:CB:37:7D:20:65:CD:07:3D:2B:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/9CD069361DE1E2B7F987CB377D2065CD073D2BD6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9CD069361DE1E2B7F987CB377D2065CD073D2BD6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/9CD069361DE1E2B7F987CB377D2065CD073D2BD6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:82:1a:23:70:25:c3:1c:f7:19:de:29:1e:dd:d0:01:2e:a8:
cc:ae:b5:80:8a:27:97:b5:75:5f:8d:79:fd:3c:aa:c2:bf:0c:
47:be:7e:b3:44:fa:29:64:f9:6d:e9:72:8d:eb:68:2b:71:12:
53:d8:79:2c:a4:db:78:96:cc:6c:b9:21:8b:48:90:8b:32:f1:
ed:5a:a9:cf:d3:ad:57:07:f9:c3:bb:3d:9a:32:8c:75:54:aa:
7e:83:7d:19:28:9a:ee:52:1b:c6:c3:3f:28:7e:ce:50:2b:30:
5e:97:a8:9d:c0:db:55:cd:af:db:c3:46:d0:b4:35:d7:d7:26:
15:0f:03:5b:c7:f1:6b:ea:f1:0d:6e:7a:71:0c:a5:13:5c:06:
de:68:9a:78:3e:ef:7e:db:b1:84:4d:5b:3a:5c:49:86:71:03:
1b:23:68:0d:f1:9e:54:ee:6d:6c:87:de:b3:41:cf:88:3c:d4:
18:02:8b:e0:58:81:06:cd:21:65:ae:fa:d4:2f:30:12:20:b4:
2c:24:0e:7d:da:a9:bc:a3:bb:03:58:77:db:6e:2b:24:0e:76:
b0:c6:41:83:14:ba:c4:6a:b0:55:07:9e:9d:af:72:05:13:15:
14:e9:6b:ea:e0:05:43:1c:a0:87:07:fb:4b:c6:c6:0d:1f:0a:
fd:45:a0:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 05:44:20 2026 by rpki-client