
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/73AC68F9F57E709948037DADDAC8DC88616BF980.mft
File: 73AC68F9F57E709948037DADDAC8DC88616BF980.mft (raw, json)
Hash identifier: ABcO2rX6EYrxxKhKBuulzd6VhVPbB2PyqWT5+PKp+aA=
Subject key identifier: 99:C9:58:2C:40:49:DB:63:E6:DC:20:C0:15:26:ED:76:B4:4B:E3:C2
Authority key identifier: 73:AC:68:F9:F5:7E:70:99:48:03:7D:AD:DA:C8:DC:88:61:6B:F9:80
Certificate issuer: /CN=73AC68F9F57E709948037DADDAC8DC88616BF980
Certificate serial: 3EEBE1D94A99F137D0FB616E9E4A017C9C910E45
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/73AC68F9F57E709948037DADDAC8DC88616BF980.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/73AC68F9F57E709948037DADDAC8DC88616BF980.mft
Manifest number: B9
Signing time: Thu 17 Sep 2026 09:15:02 +0000
Manifest this update: Thu 17 Sep 2026 09:10:02 +0000
Manifest next update: Fri 18 Sep 2026 10:54:02 +0000
Files and hashes: 1: 73AC68F9F57E709948037DADDAC8DC88616BF980.crl (hash: W2XDrNq3Hvr0mbtZ0NvkK5Ccos55pBCRIs7z3k7rmk0=)
2: 3136302e3139312e3130362e302f32332d3234203d3e20313533313433.roa (hash: vd1S4Z6+zmIZSCdC4Qdy1PZIz8w97xUXmpTWkwwvVQE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/73AC68F9F57E709948037DADDAC8DC88616BF980.crl
rsync://rpki-rsync.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/73AC68F9F57E709948037DADDAC8DC88616BF980.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/73AC68F9F57E709948037DADDAC8DC88616BF980.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 07:46:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:eb:e1:d9:4a:99:f1:37:d0:fb:61:6e:9e:4a:01:7c:9c:91:0e:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73AC68F9F57E709948037DADDAC8DC88616BF980
Validity
Not Before: Sep 17 09:10:02 2026 GMT
Not After : Sep 18 10:54:02 2026 GMT
Subject: CN=99C9582C4049DB63E6DC20C01526ED76B44BE3C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d3:0a:81:81:5e:8b:a2:1e:77:40:4c:e2:9d:
01:0b:7a:00:57:72:41:a4:e2:4c:11:6a:31:1c:a9:
ec:e5:73:bd:c9:e8:77:f3:79:70:33:f6:d5:49:44:
85:70:86:09:05:f6:c6:12:74:29:6a:97:64:0c:2a:
25:06:93:96:2a:88:ac:f8:c2:ab:8b:72:81:81:66:
91:11:9b:8c:10:82:f8:e4:4f:1e:2c:60:f8:aa:3b:
58:c4:cf:65:30:5f:4a:0f:c8:7c:a1:4e:c3:b4:a9:
ac:03:fd:fa:82:95:c3:7a:53:9d:40:10:79:94:11:
4a:d6:89:a9:77:b4:11:a6:cb:92:06:44:7f:dd:66:
48:a5:94:d2:88:27:82:a9:0f:99:ef:bd:45:c9:b9:
34:02:32:21:7f:6a:72:40:3a:6c:ff:37:98:58:ef:
56:b1:f7:e6:ed:3a:8a:8d:89:28:d5:34:b3:e7:42:
2f:91:c2:15:f0:d9:b5:0b:fc:93:86:3b:ca:e6:2c:
87:d6:5a:18:fb:a2:9d:85:bc:c0:f4:a3:82:ef:76:
5c:03:59:6a:0e:14:d0:ee:c5:39:d4:03:61:1b:37:
69:46:b7:b2:dd:b2:b4:03:ac:33:ca:6c:84:fd:23:
91:b4:a0:94:88:84:9f:69:c6:9a:9d:19:77:56:e8:
0c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:C9:58:2C:40:49:DB:63:E6:DC:20:C0:15:26:ED:76:B4:4B:E3:C2
X509v3 Authority Key Identifier:
keyid:73:AC:68:F9:F5:7E:70:99:48:03:7D:AD:DA:C8:DC:88:61:6B:F9:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/73AC68F9F57E709948037DADDAC8DC88616BF980.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/73AC68F9F57E709948037DADDAC8DC88616BF980.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/73AC68F9F57E709948037DADDAC8DC88616BF980.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:66:41:85:0f:6b:72:1c:22:16:06:3d:08:95:c7:2e:f4:fc:
e4:d2:c5:33:3a:a4:16:c9:7b:dd:70:01:74:fd:3f:8d:d5:34:
1d:e7:0d:37:22:27:54:f2:da:2f:07:0d:c6:a4:e9:75:2b:09:
04:12:cd:0c:e2:5e:93:89:44:04:82:9d:25:e4:27:61:fb:3c:
7b:9e:5f:10:54:92:4c:24:c4:1a:f2:49:e4:4c:a5:a6:cd:ad:
29:bb:89:d8:f4:68:5e:a3:66:33:34:0f:a0:fc:b0:81:c1:2f:
a7:b7:8b:13:9e:10:30:f2:49:a3:61:13:72:72:4f:70:eb:74:
57:cc:e2:42:32:47:e3:23:ea:3f:42:41:66:d7:36:b0:5b:31:
e3:65:ff:ff:3c:b6:51:dc:dc:f9:b1:49:ad:11:48:5d:2a:b1:
d0:7a:2a:60:e3:a3:6f:48:87:1d:d7:97:15:10:23:5c:3e:ea:
68:48:70:25:db:2a:fa:6f:3f:d7:14:7f:a6:33:98:ce:e9:8d:
17:4c:d8:5e:36:cf:8c:0f:d1:db:f0:20:6b:b2:c5:c8:99:9d:
3f:d8:5e:84:25:99:3f:20:f4:b1:d2:6e:9a:ba:02:05:25:0c:
2f:65:a1:af:59:5c:3c:c6:9a:59:ef:7c:67:aa:55:9b:88:1a:
96:7c:b6:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 12:20:07 2026 by rpki-client