
$ rpki-client -vvf rpki-rsync.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/9B2D9946FF043D1081C26FD38F0817310077BFC7.mft
File: 9B2D9946FF043D1081C26FD38F0817310077BFC7.mft (raw, json)
Hash identifier: qNqAYuvrGr0wYYYTlknFJXUfooV9adP7KBIoFGnHhSw=
Subject key identifier: A6:FF:84:C0:F4:48:93:2F:6C:CF:45:E1:B2:42:3A:E6:12:51:04:31
Authority key identifier: 9B:2D:99:46:FF:04:3D:10:81:C2:6F:D3:8F:08:17:31:00:77:BF:C7
Certificate issuer: /CN=9B2D9946FF043D1081C26FD38F0817310077BFC7
Certificate serial: 0D87D4454DB467BB289F48E7CCAAC0BA61F47582
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9B2D9946FF043D1081C26FD38F0817310077BFC7.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/9B2D9946FF043D1081C26FD38F0817310077BFC7.mft
Manifest number: 3F
Signing time: Thu 18 Jun 2026 03:15:48 +0000
Manifest this update: Thu 18 Jun 2026 03:10:48 +0000
Manifest next update: Fri 19 Jun 2026 05:58:48 +0000
Files and hashes: 1: 3136302e32322e39322e302f32342d3234203d3e20313532383335.roa (hash: oePR/73r7MSIzHQUks2lMsK7CVUF0CNaDFGyG/xqYVQ=)
2: 3136302e32322e39332e302f32342d3234203d3e20313532383335.roa (hash: nWvsjEg3FhCbHhiH6HxunuDCxB9lgrvkKOpoSSa7E9Q=)
3: 9B2D9946FF043D1081C26FD38F0817310077BFC7.crl (hash: pNZ6UIGqkFH3B4VmwVtxCIO4vVDz1kipKjFT5/4yV60=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/9B2D9946FF043D1081C26FD38F0817310077BFC7.crl
rsync://rpki-rsync.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/9B2D9946FF043D1081C26FD38F0817310077BFC7.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9B2D9946FF043D1081C26FD38F0817310077BFC7.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 05:58:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:87:d4:45:4d:b4:67:bb:28:9f:48:e7:cc:aa:c0:ba:61:f4:75:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9B2D9946FF043D1081C26FD38F0817310077BFC7
Validity
Not Before: Jun 18 03:10:48 2026 GMT
Not After : Jun 19 05:58:48 2026 GMT
Subject: CN=A6FF84C0F448932F6CCF45E1B2423AE612510431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ac:24:35:ee:da:fc:51:67:77:7e:1c:57:85:
7b:40:62:bf:cf:84:42:27:20:1d:1e:90:cc:ab:95:
c6:8c:f2:55:41:35:da:11:e9:3d:35:6a:e2:76:bb:
5e:db:eb:db:e3:2f:ce:c7:d2:be:a2:b5:79:aa:ac:
c4:b9:34:2b:1c:b9:b9:6b:3d:9e:e1:55:3c:12:b6:
2b:72:3a:9f:06:25:f7:2c:41:fc:c6:8a:9c:f5:1c:
1f:54:95:80:9e:69:15:71:ec:75:dd:78:bf:9e:f1:
0f:41:2e:2d:87:c7:3f:d3:03:65:b7:7b:e8:f4:99:
f1:3b:89:cc:bd:79:c1:f8:da:94:45:0a:bc:06:92:
f5:39:74:32:98:30:03:ff:f6:b9:37:f6:81:ad:0c:
4e:68:36:e1:6f:db:eb:63:9e:8d:d8:5a:63:39:1a:
8c:8c:24:23:e6:cb:c9:31:8c:02:67:36:46:52:73:
c7:28:44:a6:d3:e5:b3:50:07:cd:09:64:9f:68:7b:
ba:55:08:44:56:d8:08:e5:2a:b4:98:d5:1d:a9:6a:
1f:c7:78:7f:a6:2f:5e:23:1b:f3:51:e5:b8:32:61:
4b:cf:d6:0b:7f:9a:67:a9:18:b4:fb:ca:97:c4:b4:
47:dd:0d:e0:7b:ad:e7:3b:0b:96:48:f3:87:3d:d8:
9e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:FF:84:C0:F4:48:93:2F:6C:CF:45:E1:B2:42:3A:E6:12:51:04:31
X509v3 Authority Key Identifier:
keyid:9B:2D:99:46:FF:04:3D:10:81:C2:6F:D3:8F:08:17:31:00:77:BF:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/9B2D9946FF043D1081C26FD38F0817310077BFC7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9B2D9946FF043D1081C26FD38F0817310077BFC7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/9B2D9946FF043D1081C26FD38F0817310077BFC7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e0:39:12:81:bc:20:2e:5d:72:2d:19:71:2b:57:c0:63:dd:24:
fa:ac:65:97:41:bb:bb:f7:4e:a0:88:db:73:69:6b:c1:3a:47:
f1:69:07:98:f0:b1:f4:73:70:2b:29:3b:f6:7c:b5:26:df:63:
c7:ee:1e:be:3d:4d:36:9f:53:b5:7d:2b:c6:bc:0b:d7:9c:43:
56:62:bf:9b:e9:11:35:4f:70:73:40:ec:10:5e:78:7a:32:86:
b1:3c:2b:e5:bb:5d:1b:6a:b8:5d:25:35:ef:75:27:a3:e4:b5:
36:75:a7:25:9f:fe:a2:14:d0:6b:3b:72:02:ac:51:98:fc:3d:
78:29:f2:ef:51:79:bd:36:10:35:9a:77:6f:20:6c:10:3f:3e:
01:cb:2e:1c:d9:66:fb:6a:f6:10:e7:03:b4:a5:dd:3f:a7:db:
9f:07:33:78:59:10:80:ab:6a:f2:0c:44:ed:1d:fc:be:3d:24:
60:4e:8b:83:eb:61:7e:f4:d4:0f:0c:5a:a2:b5:a3:8b:d9:31:
e0:be:77:07:fb:dd:c7:69:be:af:32:0b:e9:d4:c6:f9:a7:31:
6e:32:fd:bd:af:6f:92:70:1b:d6:3b:45:a2:24:1b:11:e5:68:
05:de:8b:cd:6a:87:25:18:8d:36:1c:25:2a:da:b9:88:7e:48:
9d:ca:39:9d
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUDYfURU20Z7son0jnzKrAumH0dYIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUIyRDk5NDZGRjA0M0QxMDgxQzI2RkQzOEYwODE3MzEw
MDc3QkZDNzAeFw0yNjA2MTgwMzEwNDhaFw0yNjA2MTkwNTU4NDhaMDMxMTAvBgNV
BAMTKEE2RkY4NEMwRjQ0ODkzMkY2Q0NGNDVFMUIyNDIzQUU2MTI1MTA0MzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZrCQ17tr8UWd3fhxXhXtAYr/P
hEInIB0ekMyrlcaM8lVBNdoR6T01auJ2u17b69vjL87H0r6itXmqrMS5NCscublr
PZ7hVTwStityOp8GJfcsQfzGipz1HB9UlYCeaRVx7HXdeL+e8Q9BLi2Hxz/TA2W3
e+j0mfE7icy9ecH42pRFCrwGkvU5dDKYMAP/9rk39oGtDE5oNuFv2+tjno3YWmM5
GoyMJCPmy8kxjAJnNkZSc8coRKbT5bNQB80JZJ9oe7pVCERW2AjlKrSY1R2pah/H
eH+mL14jG/NR5bgyYUvP1gt/mmepGLT7ypfEtEfdDeB7rec7C5ZI84c92J7pAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUpv+EwPRIky9sz0XhskI65hJRBDEwHwYDVR0j
BBgwFoAUmy2ZRv8EPRCBwm/TjwgXMQB3v8cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NjJkMjliMzItM2EyOS00YTE0LWJjOWItYzc2YTAwN2NhMDMyLzAvOUIyRDk5NDZG
RjA0M0QxMDgxQzI2RkQzOEYwODE3MzEwMDc3QkZDNy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC85QjJEOTk0NkZGMDQzRDEwODFDMjZGRDM4RjA4MTczMTAwNzdC
RkM3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjJkMjliMzItM2EyOS00YTE0LWJj
OWItYzc2YTAwN2NhMDMyLzAvOUIyRDk5NDZGRjA0M0QxMDgxQzI2RkQzOEYwODE3
MzEwMDc3QkZDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAOA5EoG8IC5dci0ZcStXwGPdJPqsZZdBu7v3
TqCI23Npa8E6R/FpB5jwsfRzcCspO/Z8tSbfY8fuHr49TTafU7V9K8a8C9ecQ1Zi
v5vpETVPcHNA7BBeeHoyhrE8K+W7XRtquF0lNe91J6PktTZ1pyWf/qIU0Gs7cgKs
UZj8PXgp8u9Reb02EDWad28gbBA/PgHLLhzZZvtq9hDnA7Sl3T+n258HM3hZEICr
avIMRO0d/L49JGBOi4PrYX701A8MWqK1o4vZMeC+dwf73cdpvq8yC+nUxvmnMW4y
/b2vb5JwG9Y7RaIkGxHlaAXei81qhyUYjTYcJSrauYh+SJ3KOZ0=
-----END CERTIFICATE-----
Generated at Thu Jun 18 17:08:14 2026 by rpki-client