
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/9A347241E9DA18B0BB748E5558F85DFA6AD14F13.mft
File: 9A347241E9DA18B0BB748E5558F85DFA6AD14F13.mft (raw, json)
Hash identifier: iyQuvbIn+QN24FcBBffgGeYkqgPRSdA4bXBMDeRLeHI=
Subject key identifier: F1:C2:2E:CE:17:7D:40:1C:08:43:0C:80:81:C3:97:ED:F0:B8:EC:58
Authority key identifier: 9A:34:72:41:E9:DA:18:B0:BB:74:8E:55:58:F8:5D:FA:6A:D1:4F:13
Certificate issuer: /CN=9A347241E9DA18B0BB748E5558F85DFA6AD14F13
Certificate serial: 3B186CAC7C63E4A5D18E725959E64FAC3694FF4C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A347241E9DA18B0BB748E5558F85DFA6AD14F13.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/9A347241E9DA18B0BB748E5558F85DFA6AD14F13.mft
Manifest number: B9
Signing time: Thu 17 Sep 2026 07:17:29 +0000
Manifest this update: Thu 17 Sep 2026 07:12:29 +0000
Manifest next update: Fri 18 Sep 2026 08:16:29 +0000
Files and hashes: 1: 9A347241E9DA18B0BB748E5558F85DFA6AD14F13.crl (hash: dchXDLzlLXgvVqcUNyBifhnufA+KwNAM7u0TEC+WeC0=)
2: 3130332e3135392e3139362e302f32342d3234203d3e20313430343730.roa (hash: PjTS4Hn+0nQcRzsQo6Ms0LRYKKTZlFXIqpYw+ixRnkk=)
3: 3130332e3135392e3139362e302f32332d3233203d3e20313430343730.roa (hash: wInMUXHOP8RJI5eoz/+Dc4x331OyQaS/P4AI/7E+Chw=)
4: 3130332e3135392e3139372e302f32342d3234203d3e20313430343730.roa (hash: vdwdHoa0dxzBT4qxWDgRcyQiniSgsgBOI6Tm2dJ4lDY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/9A347241E9DA18B0BB748E5558F85DFA6AD14F13.crl
rsync://rpki-rsync.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/9A347241E9DA18B0BB748E5558F85DFA6AD14F13.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A347241E9DA18B0BB748E5558F85DFA6AD14F13.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 08:16:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:18:6c:ac:7c:63:e4:a5:d1:8e:72:59:59:e6:4f:ac:36:94:ff:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9A347241E9DA18B0BB748E5558F85DFA6AD14F13
Validity
Not Before: Sep 17 07:12:29 2026 GMT
Not After : Sep 18 08:16:29 2026 GMT
Subject: CN=F1C22ECE177D401C08430C8081C397EDF0B8EC58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7b:16:b2:ad:9d:40:46:3c:d1:16:4b:2a:a4:
4c:9d:1f:9a:a0:c4:a4:a9:ad:cb:6a:f1:21:6d:6b:
22:49:4f:e8:cf:00:46:ff:4f:49:89:c3:f2:63:f6:
6b:db:98:8e:55:29:85:5f:b2:56:ce:5e:69:45:26:
34:d3:e3:6a:79:cd:8b:23:7a:4d:45:33:4c:4f:03:
4c:bd:7e:e8:c1:8f:60:ff:2a:05:c2:46:4e:c2:5e:
73:d9:25:de:81:51:0e:55:ac:3d:17:bc:1b:83:c0:
20:c5:5a:69:37:50:e3:7f:e7:77:f5:77:48:98:5b:
64:4b:75:a1:b4:b0:1a:dd:79:ab:87:06:f8:58:05:
9c:1a:35:31:5b:d8:92:ac:bc:81:74:c9:3b:24:6a:
0c:06:5e:5a:71:ad:55:c0:5b:d7:c9:f0:44:62:98:
bc:58:71:a4:72:fa:52:dd:f4:b3:f3:a9:08:0d:69:
4e:a2:27:65:e4:f9:4a:c6:9c:c2:f4:b8:dc:32:25:
e5:0e:db:03:a7:63:48:bf:f6:98:f7:c8:d8:9a:7f:
84:af:16:6a:55:7d:fa:51:30:78:da:61:41:e0:b8:
89:7c:f8:09:01:c1:09:ff:df:4a:52:a8:7d:96:c8:
99:27:e1:fa:ff:11:a9:85:ee:08:50:15:c1:eb:2a:
d9:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:C2:2E:CE:17:7D:40:1C:08:43:0C:80:81:C3:97:ED:F0:B8:EC:58
X509v3 Authority Key Identifier:
keyid:9A:34:72:41:E9:DA:18:B0:BB:74:8E:55:58:F8:5D:FA:6A:D1:4F:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/9A347241E9DA18B0BB748E5558F85DFA6AD14F13.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A347241E9DA18B0BB748E5558F85DFA6AD14F13.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/9A347241E9DA18B0BB748E5558F85DFA6AD14F13.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:4b:b9:4e:92:db:dd:d9:77:12:ec:a7:59:31:7d:5e:3a:f9:
e7:64:49:9f:a5:67:71:5a:c5:09:0e:b4:0c:ab:d1:2e:fb:b6:
f8:6a:e2:4f:3f:94:72:f3:80:bd:96:a6:e4:55:e4:08:75:ae:
58:c1:ff:a1:bc:c4:20:fe:a0:a5:1f:38:81:13:8c:6a:f9:08:
e4:fa:e1:8b:69:b9:20:fc:24:d4:04:b0:80:a8:eb:11:e2:6c:
c8:4c:94:0c:5a:e6:58:56:d7:08:1c:61:f5:76:3b:00:10:1d:
d5:a0:8c:ec:28:3f:ad:3e:21:5e:98:f1:b0:f2:af:bb:df:ff:
51:e3:f8:92:8e:c7:77:08:14:86:c3:1c:66:03:93:65:53:77:
24:cf:5e:ff:a9:78:d6:07:89:d4:81:d2:4e:71:07:b6:20:05:
66:2b:6d:8f:ae:c1:36:fd:0c:b9:46:43:b3:e9:2a:60:bd:af:
f8:4e:5c:7f:70:3f:01:23:ab:c8:69:4e:52:35:c7:74:7a:90:
11:e3:59:e5:c7:d0:8f:43:99:6e:0b:cb:d0:04:0f:7e:39:8f:
bb:ff:d1:eb:b2:e8:72:b8:0e:bc:d6:10:b4:58:6f:d0:d3:79:
65:b9:dd:00:72:22:6c:ce:03:07:0e:36:d0:fc:77:22:1f:a6:
c7:da:de:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 10:51:05 2026 by rpki-client