
$ rpki-client -vvf rpki-rsync.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.mft
File: 9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.mft (raw, json)
Hash identifier: 1n4PtNxWXw0c8cdZNtYMU9Y1pJerx7nqHUqSeRcdfog=
Subject key identifier: A0:DF:60:C4:25:E6:C0:98:AF:B4:82:01:B3:25:02:6B:0C:EA:88:74
Authority key identifier: 9F:FB:79:1C:09:C2:A2:BF:53:CF:54:17:4A:8C:A1:AD:67:7B:35:64
Certificate issuer: /CN=9FFB791C09C2A2BF53CF54174A8CA1AD677B3564
Certificate serial: 0DA3F643BA762E58B88D3A89966A6484216997C6
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.mft
Manifest number: 7C
Signing time: Sun 02 Aug 2026 08:27:58 +0000
Manifest this update: Sun 02 Aug 2026 08:22:58 +0000
Manifest next update: Mon 03 Aug 2026 11:57:58 +0000
Files and hashes: 1: 3136302e32352e3234392e302f32342d3234203d3e20313336303939.roa (hash: U0YPo5BGNsV6sfhS2oiy7oPSHdSgcRKevuF2NKX91Xo=)
2: 9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.crl (hash: OPTAHqWdhYw7uLgd9JAgkXbIPotffEWH6Qy09NWvVJI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.crl
rsync://rpki-rsync.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 11:57:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:a3:f6:43:ba:76:2e:58:b8:8d:3a:89:96:6a:64:84:21:69:97:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9FFB791C09C2A2BF53CF54174A8CA1AD677B3564
Validity
Not Before: Aug 2 08:22:58 2026 GMT
Not After : Aug 3 11:57:58 2026 GMT
Subject: CN=A0DF60C425E6C098AFB48201B325026B0CEA8874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:17:08:68:11:8c:b8:a2:bf:a3:34:9c:32:55:
54:c6:bf:00:be:79:64:52:3c:bd:88:9f:a2:03:34:
c9:55:20:53:9a:1b:d7:98:c2:6f:2a:fb:0c:a0:4d:
03:16:af:dd:d0:ef:08:03:ee:1e:df:c5:2b:62:85:
87:21:05:40:48:40:c8:3d:aa:b6:0f:e5:7c:28:9e:
33:ac:50:c1:de:f0:2f:73:c9:d8:ed:0f:0a:83:d2:
48:5c:ed:3b:1d:ab:26:97:51:05:d7:6c:18:46:85:
b0:2c:6f:0b:88:9a:c2:4f:07:f2:25:6e:cf:f0:fe:
07:7c:71:32:54:f6:54:fc:8a:a1:25:1a:91:00:6e:
31:7c:1e:f5:1a:d0:f1:f4:6e:18:7e:40:a7:45:ee:
30:f9:25:07:91:f8:db:24:84:ca:da:c5:9f:b8:ba:
a7:84:df:46:81:f6:c8:ff:f8:83:c0:87:a4:c8:d9:
05:50:67:6f:12:2b:30:a4:d4:7c:65:a8:11:1b:91:
91:84:cc:e9:46:c2:3a:be:dc:3b:4c:b1:1e:d3:c2:
83:18:7c:4c:d0:36:7f:89:a2:59:74:24:b5:3d:96:
1a:bd:0e:32:3a:8b:b6:d2:ff:3c:80:b6:14:8c:1b:
7d:6c:93:22:22:be:e2:1d:76:87:50:f3:1a:a4:ea:
97:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:DF:60:C4:25:E6:C0:98:AF:B4:82:01:B3:25:02:6B:0C:EA:88:74
X509v3 Authority Key Identifier:
keyid:9F:FB:79:1C:09:C2:A2:BF:53:CF:54:17:4A:8C:A1:AD:67:7B:35:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:14:ba:e2:c9:b8:2f:77:47:3b:5f:5c:22:5c:1f:0a:d9:73:
c2:51:18:d8:e8:83:ca:91:6d:13:fc:aa:17:b1:26:38:cd:8d:
5c:f8:b0:87:fc:65:72:17:8a:42:bc:31:d2:39:79:12:6d:11:
2d:77:5b:fd:6a:2c:be:bf:23:23:ea:f5:f7:d2:91:fe:99:07:
9d:f2:0f:f5:d4:69:bf:c2:f3:d8:ec:22:a4:bc:3e:11:7e:34:
4a:44:c8:7f:9c:e9:51:81:1a:c9:bb:d6:af:c0:10:d6:d4:22:
f7:17:29:85:33:9b:b2:37:17:0f:e0:00:83:41:ef:81:4e:54:
08:97:c7:fd:ee:86:e2:88:76:13:29:a1:ef:1b:e4:58:61:88:
4b:16:7f:c1:d2:d2:1d:75:d7:bb:b8:9c:45:97:ba:46:94:bd:
49:e8:03:4b:ea:8b:a2:cb:a7:73:59:64:8b:5c:8c:12:0c:b8:
2f:5f:6d:b5:66:aa:b4:6a:bc:37:15:af:67:25:cb:20:20:a1:
b0:41:d1:a9:ca:e8:b2:ad:e9:91:7e:fe:dc:5c:b7:cd:0f:bd:
a8:9a:9a:f5:40:cc:87:f1:95:c1:3b:fd:63:72:d8:15:6e:8e:
11:5b:fa:e6:d1:73:92:9e:36:d9:9a:f0:7d:16:36:34:3a:74:
36:40:68:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 2 20:35:39 2026 by rpki-client