
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.mft
File: 9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.mft (raw, json)
Hash identifier: 99ny/6+LPR6LTSqenDJDY62a2X/BTq2lJoQLk2hMMVA=
Subject key identifier: 05:D1:DD:35:F9:98:55:A7:74:78:5B:45:3A:CE:E4:0D:EF:9F:32:CC
Authority key identifier: 9B:CF:26:1F:1E:EB:D0:A9:61:48:76:1F:A2:E9:8E:93:FB:AF:B0:6F
Certificate issuer: /CN=9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F
Certificate serial: 444DE5DE42B35165C957E7917A43F6046E5BBA47
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.mft
Manifest number: B9
Signing time: Thu 17 Sep 2026 05:40:26 +0000
Manifest this update: Thu 17 Sep 2026 05:35:26 +0000
Manifest next update: Fri 18 Sep 2026 08:59:26 +0000
Files and hashes: 1: 9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.crl (hash: //jZJ9hk9Z+QGMsZpEzR2av/xYYYBQfyWUoMdOj5wwA=)
2: 3130332e3138392e36332e302f32342d3234203d3e20313439373436.roa (hash: iowBD0aCpON/4cxOj5FQqoJWjlXtvZSA6Ncm7S12+nI=)
3: 3130332e3138392e36322e302f32342d3234203d3e20313439373436.roa (hash: q/9H11WTYoKvscn357helrrghEhYAd3OjlCKI1SD+L4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.crl
rsync://rpki-rsync.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 08:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:4d:e5:de:42:b3:51:65:c9:57:e7:91:7a:43:f6:04:6e:5b:ba:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F
Validity
Not Before: Sep 17 05:35:26 2026 GMT
Not After : Sep 18 08:59:26 2026 GMT
Subject: CN=05D1DD35F99855A774785B453ACEE40DEF9F32CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ee:83:85:78:6a:b4:ce:6e:80:a0:84:d0:b5:
82:99:af:3e:ee:b4:18:6d:46:38:ae:e2:e9:05:be:
21:0f:70:da:23:eb:7a:77:96:20:ba:d0:56:a3:0b:
fa:81:c9:3f:d2:7c:81:5b:a6:f6:b0:fe:73:35:88:
c2:6a:51:f7:9d:46:bd:20:83:3d:77:98:1e:0c:72:
40:f2:90:92:eb:c1:6d:59:ba:74:d2:41:2e:17:a0:
10:a0:dd:1d:2b:45:de:67:fa:b4:63:b0:79:75:54:
35:b4:ce:d8:d1:a0:1b:73:22:d8:52:41:41:b8:78:
c9:35:30:ca:e8:40:70:7d:d9:f5:74:fc:94:36:36:
9d:85:8d:ac:83:3a:ca:8c:0c:7f:e0:a2:00:ea:a5:
f4:38:e0:8e:b2:f2:4a:fa:ec:1e:9c:a6:10:18:00:
66:8c:81:e2:27:dd:0e:bb:37:bd:39:16:5a:26:d2:
03:4f:77:a7:0a:dd:b8:fa:b5:75:71:04:e3:26:48:
47:a0:60:29:4e:4c:0f:82:b1:45:c1:14:42:ee:f5:
83:25:88:00:e4:f5:52:e9:ef:43:61:41:0e:9d:4d:
7b:46:68:e7:7b:e1:74:31:91:0b:ad:fc:ab:5d:66:
38:9c:06:5b:84:48:60:90:57:b7:63:23:b4:aa:d7:
70:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:D1:DD:35:F9:98:55:A7:74:78:5B:45:3A:CE:E4:0D:EF:9F:32:CC
X509v3 Authority Key Identifier:
keyid:9B:CF:26:1F:1E:EB:D0:A9:61:48:76:1F:A2:E9:8E:93:FB:AF:B0:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:94:d1:b7:da:3b:55:bb:78:f9:cc:ef:ff:08:c1:e3:40:94:
a2:0f:5a:b8:14:7f:e6:ba:6d:70:9c:1a:8b:44:ba:25:90:d5:
39:3b:38:54:02:5d:5a:6d:d7:77:19:6e:72:d3:98:be:d7:0a:
d0:ab:19:26:98:df:c6:1b:da:6f:aa:c3:fd:6a:06:a9:1b:05:
08:58:0e:e9:0a:8a:ec:c0:b5:9a:b5:4a:da:57:41:de:b5:b1:
e4:52:47:5c:45:5b:89:ef:a7:85:5f:d8:91:fa:00:f7:37:01:
bb:30:df:96:72:f6:8e:ba:f2:b0:9c:60:c7:14:24:97:e3:3e:
7a:45:b1:3f:d2:8c:51:fe:93:a3:46:8e:68:e7:70:0e:57:1a:
76:ab:32:d6:45:3f:4e:9b:17:39:93:bd:eb:a3:d7:35:13:24:
5f:ef:8a:d5:fe:34:6b:29:f4:63:28:21:da:cb:09:f0:f4:7d:
4d:9c:c6:61:80:15:5d:e2:09:a1:f9:cb:f1:73:ce:52:2b:9a:
62:78:f4:fe:2a:24:01:3c:17:23:0b:1b:49:d7:d6:34:76:ff:
c1:2a:9c:4b:38:69:a8:18:81:f5:d3:9b:49:ef:c2:d9:5d:9d:
89:ad:49:f5:34:c1:78:7c:07:f0:4d:ec:bf:1c:b5:37:62:2c:
19:b7:3a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 10:56:28 2026 by rpki-client