
$ rpki-client -vvf rpki-rsync.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.mft
File: 9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.mft (raw, json)
Hash identifier: V+ZndD7KYm20WK7qHcDiP8zzHvmejfAaBNtLn8kDRZI=
Subject key identifier: 4A:84:5A:B2:A5:44:CB:FA:27:F7:D1:C5:56:01:5C:4B:DF:5C:A9:E8
Authority key identifier: 9B:CF:26:1F:1E:EB:D0:A9:61:48:76:1F:A2:E9:8E:93:FB:AF:B0:6F
Certificate issuer: /CN=9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F
Certificate serial: 29D9B47F526C8A0BD9FBD6E62A995408C7F11828
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.mft
Manifest number: 38
Signing time: Fri 12 Jun 2026 04:36:15 +0000
Manifest this update: Fri 12 Jun 2026 04:31:15 +0000
Manifest next update: Sat 13 Jun 2026 05:42:15 +0000
Files and hashes: 1: 3130332e3138392e36332e302f32342d3234203d3e20313439373436.roa (hash: iowBD0aCpON/4cxOj5FQqoJWjlXtvZSA6Ncm7S12+nI=)
2: 9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.crl (hash: EzDBbtiEE0gH83dbcbDKIDalE8VAlJKfAbZ1v8nUfLI=)
3: 3130332e3138392e36322e302f32342d3234203d3e20313439373436.roa (hash: q/9H11WTYoKvscn357helrrghEhYAd3OjlCKI1SD+L4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.crl
rsync://rpki-rsync.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 05:42:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:d9:b4:7f:52:6c:8a:0b:d9:fb:d6:e6:2a:99:54:08:c7:f1:18:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F
Validity
Not Before: Jun 12 04:31:15 2026 GMT
Not After : Jun 13 05:42:15 2026 GMT
Subject: CN=4A845AB2A544CBFA27F7D1C556015C4BDF5CA9E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e4:e3:48:ed:c2:ee:99:81:51:65:a8:4a:be:
fb:d8:24:64:5b:c6:2d:59:ed:41:ec:8e:35:f3:04:
a5:7c:84:a6:1d:e6:3e:f2:c8:f1:bc:31:a6:e1:22:
95:0b:7b:e8:f8:8a:ff:21:2f:d1:b3:e9:b0:de:c4:
37:7b:34:03:e2:c3:d5:9f:22:2b:f5:75:a6:d8:0e:
a4:26:46:8b:3c:41:23:1d:ca:cb:4b:3e:c2:57:35:
72:ab:ee:13:b2:2e:e4:df:c0:bd:ef:ac:a8:f0:9c:
20:b8:ca:c3:90:a5:77:5a:f4:48:4d:d4:52:37:0b:
d8:93:2d:54:a9:a1:34:f0:d1:20:0e:b3:80:c2:49:
b6:02:4a:6a:a7:a1:8a:90:bd:99:28:92:c2:da:95:
e0:b0:bb:5c:93:3e:0f:1c:d6:c7:c7:1b:a0:a4:1f:
aa:31:21:25:a5:94:7a:cc:fe:3a:10:7e:79:10:ca:
af:da:63:39:e1:54:45:83:4f:0f:48:82:7b:ae:e0:
d6:da:c9:8c:d9:bc:d6:8c:d3:0c:ab:d2:0a:3d:cc:
8e:5d:5f:28:55:85:80:17:aa:c7:4a:26:91:cb:15:
21:f9:c2:7e:31:41:be:46:41:60:a0:eb:9e:d0:73:
88:50:11:64:3b:64:4f:be:d5:8c:f0:4c:db:de:25:
87:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:84:5A:B2:A5:44:CB:FA:27:F7:D1:C5:56:01:5C:4B:DF:5C:A9:E8
X509v3 Authority Key Identifier:
keyid:9B:CF:26:1F:1E:EB:D0:A9:61:48:76:1F:A2:E9:8E:93:FB:AF:B0:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:d9:69:eb:64:f8:51:09:a0:77:09:2f:bc:89:10:26:0c:13:
b9:a9:bf:b0:38:14:80:4c:f3:d9:6e:32:8f:dd:2b:f0:08:11:
09:bc:4c:89:74:d6:5d:83:bc:14:e6:b8:01:70:39:4b:70:9e:
e2:06:2e:8d:3c:37:cd:24:70:47:eb:9f:da:d9:32:b2:4f:4e:
cc:4c:2b:b3:98:3b:3b:0b:20:74:0f:41:2d:d0:92:72:b8:e4:
d6:c8:48:f4:b6:8e:56:d6:03:8f:e1:ae:64:e1:05:ef:05:cc:
10:95:50:9a:11:09:47:91:1b:66:4a:d5:71:03:c5:1d:a0:16:
ea:28:41:ff:88:47:87:97:29:b5:42:91:78:e9:43:65:8c:10:
fc:66:99:b1:28:26:29:ee:45:32:9b:e4:dc:10:07:98:a5:37:
42:1f:0d:dc:94:f9:44:70:ae:4a:43:98:94:e9:33:88:13:39:
5d:77:19:df:00:95:74:95:04:35:64:96:27:96:67:05:bf:98:
40:17:23:99:94:9a:c8:cf:ca:ae:05:57:26:ff:03:19:27:a1:
3b:df:06:1f:e9:c7:5d:7f:a4:ef:ff:c5:fa:a7:32:a5:6b:62:
8c:bc:f1:f0:03:1e:c9:58:3d:97:60:2a:60:f1:a2:ad:bb:5d:
73:81:04:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 10:36:02 2026 by rpki-client