
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/9AEB58DCD82BE9C8496A5061296B769FD6CE5723.mft
File: 9AEB58DCD82BE9C8496A5061296B769FD6CE5723.mft (raw, json)
Hash identifier: 6Dyu0L4QMiGpesU8Kp7bU0eUVyyMgExzjbsOtpNrlnE=
Subject key identifier: 83:2D:34:5D:D0:C6:72:B1:C2:C4:30:64:DA:54:7E:FF:83:93:AB:39
Authority key identifier: 9A:EB:58:DC:D8:2B:E9:C8:49:6A:50:61:29:6B:76:9F:D6:CE:57:23
Certificate issuer: /CN=9AEB58DCD82BE9C8496A5061296B769FD6CE5723
Certificate serial: 6EF43A3B10194B97417E5303CAE337C6CA371366
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9AEB58DCD82BE9C8496A5061296B769FD6CE5723.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/9AEB58DCD82BE9C8496A5061296B769FD6CE5723.mft
Manifest number: 6B
Signing time: Mon 20 Jul 2026 20:16:19 +0000
Manifest this update: Mon 20 Jul 2026 20:11:19 +0000
Manifest next update: Tue 21 Jul 2026 23:09:19 +0000
Files and hashes: 1: 9AEB58DCD82BE9C8496A5061296B769FD6CE5723.crl (hash: 3QJyyVjmSdRKrIZXxukiUQNMH2intt82LZhbmlxBvDg=)
2: 3130332e37332e3139332e302f32342d3234203d3e20313439393434.roa (hash: R4MBAYAEX9Tv0xootJiGEA1eln9suXnVGRSSaR5WyEA=)
3: 3130332e37332e3139322e302f32342d3234203d3e20313439393434.roa (hash: G6mJxfPd30UDcz5ag6UPMmbiQqjncxx0XmGW9whSIV4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/9AEB58DCD82BE9C8496A5061296B769FD6CE5723.crl
rsync://rpki-rsync.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/9AEB58DCD82BE9C8496A5061296B769FD6CE5723.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9AEB58DCD82BE9C8496A5061296B769FD6CE5723.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Jul 2026 23:09:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:f4:3a:3b:10:19:4b:97:41:7e:53:03:ca:e3:37:c6:ca:37:13:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9AEB58DCD82BE9C8496A5061296B769FD6CE5723
Validity
Not Before: Jul 20 20:11:19 2026 GMT
Not After : Jul 21 23:09:19 2026 GMT
Subject: CN=832D345DD0C672B1C2C43064DA547EFF8393AB39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:23:94:9f:49:f3:28:14:94:b6:5f:1b:ad:e8:
ec:27:31:44:37:47:5b:58:6d:a8:50:78:c1:45:8e:
a7:14:be:7f:71:ba:e1:5b:5b:33:19:fc:56:02:9e:
29:53:e8:cf:a7:2d:27:d4:a7:ba:20:00:e0:bc:85:
47:e0:cf:1d:47:20:9c:60:d9:d3:57:28:f6:31:fb:
a1:c4:f7:34:d3:37:18:10:43:03:6a:cf:db:ab:58:
10:52:0e:f9:a6:a4:88:76:a5:c3:5e:54:15:b8:98:
60:7a:2c:37:64:ac:35:14:9c:8b:56:8d:70:01:e2:
b3:06:62:c5:86:a2:da:e6:c5:8d:6a:b0:fe:83:4f:
d0:89:e3:e6:63:5e:b5:ae:8b:64:3f:b5:b1:31:d8:
c8:aa:65:da:d8:df:5f:fe:f4:88:62:0a:61:e6:22:
99:9d:da:43:7e:ff:b4:79:c2:b4:8f:03:92:67:b0:
af:d4:43:b2:7a:d6:10:5e:fc:49:44:5f:28:ab:f0:
37:19:91:52:21:77:f5:c1:20:c0:a6:79:83:3e:11:
9d:08:49:3f:0b:e6:78:8c:2f:ae:2f:3b:38:2d:09:
52:0c:3b:6c:24:4a:12:1b:a7:4e:12:d7:d3:0a:c4:
5c:5f:4c:f4:90:bb:e3:2d:2c:7d:b7:9e:ab:68:b0:
1b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:2D:34:5D:D0:C6:72:B1:C2:C4:30:64:DA:54:7E:FF:83:93:AB:39
X509v3 Authority Key Identifier:
keyid:9A:EB:58:DC:D8:2B:E9:C8:49:6A:50:61:29:6B:76:9F:D6:CE:57:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/9AEB58DCD82BE9C8496A5061296B769FD6CE5723.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9AEB58DCD82BE9C8496A5061296B769FD6CE5723.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/9AEB58DCD82BE9C8496A5061296B769FD6CE5723.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:90:4f:6d:6c:ac:f9:02:6d:78:ef:ca:6b:96:4a:d2:30:39:
11:40:2f:98:25:2b:cf:e7:5b:07:29:44:81:67:17:f9:e1:65:
7d:90:b5:c7:21:93:c7:a0:d9:dd:c9:7e:66:67:a1:17:ff:b3:
72:9d:01:9e:f7:cd:e4:90:63:f5:fc:73:5e:82:a9:39:50:90:
05:90:bf:66:a9:fb:36:9f:56:fd:52:03:bd:50:8f:25:e9:90:
30:32:40:4d:b1:1a:7c:9d:4a:76:9e:2b:e6:68:e7:71:c0:44:
59:9b:43:68:1b:cc:6a:6f:d0:1a:d2:78:ca:83:16:14:f4:d9:
9c:40:e9:2c:11:3f:05:86:d3:3d:e7:b2:4c:46:02:7d:21:6c:
44:b0:a3:46:4b:ec:9f:1a:1e:2e:a1:4a:89:8a:b1:6d:f8:f6:
ad:8f:8f:83:63:1c:20:ed:4d:7a:01:0e:32:a8:48:3d:5d:a1:
1e:39:0f:cb:8d:dd:9f:f3:d0:03:9f:a8:13:c7:4e:4d:a6:3a:
7f:d2:d0:2a:46:0f:2c:ee:26:89:be:48:db:da:ce:7a:8c:f4:
12:26:6b:80:8b:45:b5:eb:83:f1:0d:04:5a:fe:f2:f6:2b:2e:
37:57:a0:a0:04:44:76:1d:d7:ce:e3:d6:e4:56:cd:42:c3:d4:
ab:4c:04:10
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUbvQ6OxAZS5dBflMDyuM3xso3E2YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUFFQjU4RENEODJCRTlDODQ5NkE1MDYxMjk2Qjc2OUZE
NkNFNTcyMzAeFw0yNjA3MjAyMDExMTlaFw0yNjA3MjEyMzA5MTlaMDMxMTAvBgNV
BAMTKDgzMkQzNDVERDBDNjcyQjFDMkM0MzA2NERBNTQ3RUZGODM5M0FCMzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDII5SfSfMoFJS2Xxut6OwnMUQ3
R1tYbahQeMFFjqcUvn9xuuFbWzMZ/FYCnilT6M+nLSfUp7ogAOC8hUfgzx1HIJxg
2dNXKPYx+6HE9zTTNxgQQwNqz9urWBBSDvmmpIh2pcNeVBW4mGB6LDdkrDUUnItW
jXAB4rMGYsWGotrmxY1qsP6DT9CJ4+ZjXrWui2Q/tbEx2MiqZdrY31/+9IhiCmHm
Ipmd2kN+/7R5wrSPA5JnsK/UQ7J61hBe/ElEXyir8DcZkVIhd/XBIMCmeYM+EZ0I
ST8L5niML64vOzgtCVIMO2wkShIbp04S19MKxFxfTPSQu+MtLH23nqtosBsHAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUgy00XdDGcrHCxDBk2lR+/4OTqzkwHwYDVR0j
BBgwFoAUmutY3Ngr6chJalBhKWt2n9bOVyMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
Zjc0MTgwMTMtMTY3OS00OTZiLTgwZjYtMmQwNWNjNWJlNzJmLzAvOUFFQjU4RENE
ODJCRTlDODQ5NkE1MDYxMjk2Qjc2OUZENkNFNTcyMy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85QUVCNThEQ0Q4MkJFOUM4NDk2QTUwNjEyOTZCNzY5RkQ2Q0U1
NzIzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjc0MTgwMTMtMTY3OS00OTZiLTgw
ZjYtMmQwNWNjNWJlNzJmLzAvOUFFQjU4RENEODJCRTlDODQ5NkE1MDYxMjk2Qjc2
OUZENkNFNTcyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHmQT21srPkCbXjvymuWStIwORFAL5glK8/n
WwcpRIFnF/nhZX2Qtcchk8eg2d3JfmZnoRf/s3KdAZ73zeSQY/X8c16CqTlQkAWQ
v2ap+zafVv1SA71QjyXpkDAyQE2xGnydSnaeK+Zo53HARFmbQ2gbzGpv0BrSeMqD
FhT02ZxA6SwRPwWG0z3nskxGAn0hbESwo0ZL7J8aHi6hSomKsW349q2Pj4NjHCDt
TXoBDjKoSD1doR45D8uN3Z/z0AOfqBPHTk2mOn/S0CpGDyzuJom+SNvaznqM9BIm
a4CLRbXrg/ENBFr+8vYrLjdXoKAERHYd187j1uRWzULD1KtMBBA=
-----END CERTIFICATE-----
Generated at Tue Jul 21 06:16:35 2026 by rpki-client