
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0eaa8cbe-718b-4953-b789-60fa857aec8d/0/C9E5EB92DA793B8D8BF89C80541899A148DA3FC7.mft
File: C9E5EB92DA793B8D8BF89C80541899A148DA3FC7.mft (raw, json)
Hash identifier: 2JEgu/sXRFMY6F1bY/RNVQqnr6BoMbzSyQKaLwJXVgw=
Subject key identifier: 85:B6:9E:9A:1E:8B:64:4A:53:E2:7D:12:55:96:8E:E0:AB:1B:AC:5E
Authority key identifier: C9:E5:EB:92:DA:79:3B:8D:8B:F8:9C:80:54:18:99:A1:48:DA:3F:C7
Certificate issuer: /CN=C9E5EB92DA793B8D8BF89C80541899A148DA3FC7
Certificate serial: 1C9E1551B561457D6CDA2DAC40ADDEF5B3FCC94C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9E5EB92DA793B8D8BF89C80541899A148DA3FC7.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0eaa8cbe-718b-4953-b789-60fa857aec8d/0/C9E5EB92DA793B8D8BF89C80541899A148DA3FC7.mft
Manifest number: EB
Signing time: Sun 25 Oct 2026 00:34:50 +0000
Manifest this update: Sun 25 Oct 2026 00:29:50 +0000
Manifest next update: Mon 26 Oct 2026 01:28:50 +0000
Files and hashes: 1: 3130332e3136392e31302e302f32332d3234203d3e20313432333335.roa (hash: Kv2Bwd8eSfvsYR5xc9V1CjJ+ZGmosk9p1qlT46CISoA=)
2: C9E5EB92DA793B8D8BF89C80541899A148DA3FC7.crl (hash: vQFS6y/GYHQlU7etoZlvSP+n9xfOoQ68Qqs3evBwurg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0eaa8cbe-718b-4953-b789-60fa857aec8d/0/C9E5EB92DA793B8D8BF89C80541899A148DA3FC7.crl
rsync://rpki-rsync.idnic.net/repo/0eaa8cbe-718b-4953-b789-60fa857aec8d/0/C9E5EB92DA793B8D8BF89C80541899A148DA3FC7.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9E5EB92DA793B8D8BF89C80541899A148DA3FC7.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Oct 2026 19:21:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:9e:15:51:b5:61:45:7d:6c:da:2d:ac:40:ad:de:f5:b3:fc:c9:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C9E5EB92DA793B8D8BF89C80541899A148DA3FC7
Validity
Not Before: Oct 25 00:29:50 2026 GMT
Not After : Oct 26 01:28:50 2026 GMT
Subject: CN=85B69E9A1E8B644A53E27D1255968EE0AB1BAC5E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d3:7d:92:b6:eb:cb:b4:18:5e:6f:76:4d:fb:
8f:b6:02:61:57:ba:d5:b2:b9:6c:fb:da:11:55:48:
a8:4d:b8:78:f8:a4:9d:02:95:37:c1:4e:74:02:1d:
a8:3e:7f:05:28:b1:37:dd:fc:47:44:f2:e0:5e:6a:
90:74:ea:70:63:bd:75:30:39:7a:43:64:84:d1:c2:
b1:42:d4:c7:f5:a3:fb:44:71:05:88:ae:7e:1d:c4:
c0:6a:21:55:6f:29:0d:3d:25:37:50:2e:ca:5b:c9:
f4:21:d1:7e:c3:21:9c:7e:cb:1c:76:94:15:98:93:
5a:ee:be:d1:82:06:f3:05:45:52:ea:d0:d6:59:de:
ea:95:e6:1c:6c:3a:0c:91:85:4e:9e:9c:b2:cf:2e:
bc:8d:c2:f8:78:f1:87:24:7a:8f:7a:c6:d8:e6:5b:
b2:34:57:62:fb:3d:f3:ce:ec:33:90:ed:01:d4:34:
02:e7:b3:94:97:3b:bc:79:ad:f5:b1:07:9b:22:a6:
45:68:04:f2:f0:20:a4:af:ab:1f:56:7d:15:b0:f1:
86:d4:98:94:38:fd:3c:ec:d0:6d:5a:68:e8:1d:ea:
13:e1:4c:2f:ab:9f:20:76:1f:14:79:30:37:52:2e:
12:0c:6a:16:b8:81:40:85:94:b9:f4:d4:20:ea:12:
37:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:B6:9E:9A:1E:8B:64:4A:53:E2:7D:12:55:96:8E:E0:AB:1B:AC:5E
X509v3 Authority Key Identifier:
keyid:C9:E5:EB:92:DA:79:3B:8D:8B:F8:9C:80:54:18:99:A1:48:DA:3F:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0eaa8cbe-718b-4953-b789-60fa857aec8d/0/C9E5EB92DA793B8D8BF89C80541899A148DA3FC7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9E5EB92DA793B8D8BF89C80541899A148DA3FC7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0eaa8cbe-718b-4953-b789-60fa857aec8d/0/C9E5EB92DA793B8D8BF89C80541899A148DA3FC7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:ad:21:5c:49:f8:90:95:d9:5a:e2:67:cc:6e:e3:c5:2c:51:
13:6f:34:b4:a6:40:19:9b:b3:ad:cd:cf:87:13:fa:2f:88:4a:
49:f9:5e:04:a9:49:91:00:cb:3a:dc:63:93:91:52:3c:0d:ef:
bb:7f:27:85:dd:80:27:9f:70:ea:73:32:63:2d:45:db:ca:43:
03:5b:b7:c1:21:4d:c7:53:b5:fd:5b:0a:c6:19:01:38:c6:72:
c3:17:fd:1c:ff:9e:90:2f:29:6f:78:60:60:2a:cf:fc:0e:6c:
22:c9:23:44:c0:87:52:e2:12:05:67:a9:89:82:28:4d:b1:24:
9c:a0:10:6d:f5:4d:e0:58:10:39:56:62:7e:6a:ba:60:e5:a9:
6c:89:70:e1:6c:d7:d0:64:bc:02:d7:ab:1d:08:94:19:e4:8e:
b0:1e:ed:82:1d:30:7b:ab:aa:3a:46:39:57:fd:55:8f:2b:eb:
c1:1a:18:2d:2a:f2:6e:5e:d0:11:32:fd:35:d9:5f:f4:32:5c:
83:fc:0b:d6:da:75:18:fb:f4:09:1e:4f:93:75:c7:67:db:06:
11:12:26:85:20:ae:ee:ab:78:83:09:e5:e8:63:8b:ec:d6:3e:
49:5f:35:17:8d:da:81:61:29:44:78:9c:55:51:1e:9a:ac:d0:
df:75:bc:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 06:06:39 2026 by rpki-client