
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6cd24b05-269e-4784-b935-f27665830fda/0/9CCE2197D83CFA0979E79295EFEE5D486FB3A23E.mft
File: 9CCE2197D83CFA0979E79295EFEE5D486FB3A23E.mft (raw, json)
Hash identifier: fIPWpiqpuB7tQXJbwDugyPM73mCHGfslK5gN9UAatbY=
Subject key identifier: 81:3E:32:27:45:A5:95:57:B3:40:A9:E2:BB:9A:CE:2F:60:EA:B6:A0
Authority key identifier: 9C:CE:21:97:D8:3C:FA:09:79:E7:92:95:EF:EE:5D:48:6F:B3:A2:3E
Certificate issuer: /CN=9CCE2197D83CFA0979E79295EFEE5D486FB3A23E
Certificate serial: 23D77F7D91FB1A09A79BEDF4B358E3AFD5DA7DAE
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9CCE2197D83CFA0979E79295EFEE5D486FB3A23E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6cd24b05-269e-4784-b935-f27665830fda/0/9CCE2197D83CFA0979E79295EFEE5D486FB3A23E.mft
Manifest number: BA
Signing time: Fri 18 Sep 2026 03:37:49 +0000
Manifest this update: Fri 18 Sep 2026 03:32:49 +0000
Manifest next update: Sat 19 Sep 2026 07:30:49 +0000
Files and hashes: 1: 3130332e3132362e32362e302f32342d3234203d3e20313530353038.roa (hash: 6Awu2Ik5tqvQ6rEKLN4Gy/qaMR8Y4RuJeJcgKdpNQtw=)
2: 9CCE2197D83CFA0979E79295EFEE5D486FB3A23E.crl (hash: R6FDIYKjiO5qAxeACK+VCDhZG/jnABHwh03UCx0/Jms=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6cd24b05-269e-4784-b935-f27665830fda/0/9CCE2197D83CFA0979E79295EFEE5D486FB3A23E.crl
rsync://rpki-rsync.idnic.net/repo/6cd24b05-269e-4784-b935-f27665830fda/0/9CCE2197D83CFA0979E79295EFEE5D486FB3A23E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9CCE2197D83CFA0979E79295EFEE5D486FB3A23E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 19 Sep 2026 07:16:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:d7:7f:7d:91:fb:1a:09:a7:9b:ed:f4:b3:58:e3:af:d5:da:7d:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9CCE2197D83CFA0979E79295EFEE5D486FB3A23E
Validity
Not Before: Sep 18 03:32:49 2026 GMT
Not After : Sep 19 07:30:49 2026 GMT
Subject: CN=813E322745A59557B340A9E2BB9ACE2F60EAB6A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c3:4e:89:6a:a2:bf:33:18:ea:ed:f7:8c:86:
fd:86:84:58:7f:bb:8f:4c:15:13:ca:94:97:8b:e8:
ce:f0:3a:83:c1:54:05:1e:6b:77:a1:74:b2:8b:dc:
22:25:da:6f:84:49:2c:f4:bb:33:4e:26:0c:bd:80:
97:ee:ff:e1:0f:f6:59:b0:62:0d:08:e8:f1:02:b0:
74:a5:6b:c1:15:a8:f5:56:a8:e7:5a:e5:84:66:34:
80:d0:10:5d:a5:69:cf:ff:9a:2e:eb:50:2f:75:1e:
64:d5:87:d9:0a:f8:4a:0b:7c:19:78:78:7b:f2:b9:
15:2e:82:8a:d2:f0:18:54:04:de:57:69:53:f1:01:
07:3f:86:ca:34:c8:27:c9:73:f1:a7:2f:99:c7:9d:
57:b3:4b:3b:50:36:55:80:d7:14:9d:09:33:f4:2d:
e6:9f:0c:11:12:8e:4e:d9:ed:11:be:8c:22:c2:a3:
28:ea:8e:2d:6f:d7:f6:0a:fa:12:ec:4d:ff:47:85:
fb:22:2d:16:2d:3e:71:a5:ea:85:22:e6:3e:3c:29:
9c:f4:bb:b1:3f:50:48:aa:94:04:53:f4:28:32:44:
2c:78:94:1d:52:4c:80:82:42:ac:9e:8a:b5:f5:b8:
c6:9b:bd:ab:44:2e:f5:28:88:ba:4b:4d:a2:96:e7:
3c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:3E:32:27:45:A5:95:57:B3:40:A9:E2:BB:9A:CE:2F:60:EA:B6:A0
X509v3 Authority Key Identifier:
keyid:9C:CE:21:97:D8:3C:FA:09:79:E7:92:95:EF:EE:5D:48:6F:B3:A2:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6cd24b05-269e-4784-b935-f27665830fda/0/9CCE2197D83CFA0979E79295EFEE5D486FB3A23E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9CCE2197D83CFA0979E79295EFEE5D486FB3A23E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6cd24b05-269e-4784-b935-f27665830fda/0/9CCE2197D83CFA0979E79295EFEE5D486FB3A23E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:37:3b:e2:69:d2:d7:3f:c6:66:c0:e6:a4:99:8c:de:d2:55:
db:b2:de:da:dc:1b:9d:93:53:13:f6:ed:74:56:db:8c:4c:31:
e1:bd:63:f2:24:aa:89:7f:c3:7d:b9:62:14:58:f9:06:cf:05:
38:44:03:40:f0:2d:46:30:04:68:f2:34:0b:8c:b4:e7:35:f3:
5e:04:83:3c:26:6d:d2:7e:d3:c9:01:e8:32:b7:c9:bc:22:c7:
e9:cf:33:fe:fd:8a:7d:05:ec:1e:fc:29:de:6d:93:c7:80:fd:
a7:de:bf:59:de:7e:5c:4b:2d:8f:73:57:c3:be:6e:a4:85:99:
b8:c4:22:3c:07:b3:90:5c:98:cf:86:80:1a:19:a7:bb:ac:4b:
49:8a:66:3c:03:ab:05:95:d3:12:c8:1a:5d:f5:e5:16:48:e9:
e8:2a:7f:8b:9f:05:1e:9a:f7:cf:d3:6c:47:4c:92:d7:92:24:
6f:7b:f3:6d:25:22:43:f3:58:6c:12:96:f0:67:3e:0b:13:9b:
c8:7c:9d:3f:20:cb:33:19:c3:4f:e0:2e:22:3e:e5:0f:16:17:
85:5e:0f:15:88:ed:21:5b:c8:00:85:85:17:5d:1e:5d:11:0b:
7a:b6:26:f0:86:26:c5:bf:82:d4:c1:5d:cb:9b:48:eb:37:05:
77:2c:65:5f
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUI9d/fZH7Ggmnm+30s1jjr9Xafa4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUNDRTIxOTdEODNDRkEwOTc5RTc5Mjk1RUZFRTVENDg2
RkIzQTIzRTAeFw0yNjA5MTgwMzMyNDlaFw0yNjA5MTkwNzMwNDlaMDMxMTAvBgNV
BAMTKDgxM0UzMjI3NDVBNTk1NTdCMzQwQTlFMkJCOUFDRTJGNjBFQUI2QTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyw06JaqK/Mxjq7feMhv2GhFh/
u49MFRPKlJeL6M7wOoPBVAUea3ehdLKL3CIl2m+ESSz0uzNOJgy9gJfu/+EP9lmw
Yg0I6PECsHSla8EVqPVWqOda5YRmNIDQEF2lac//mi7rUC91HmTVh9kK+EoLfBl4
eHvyuRUugorS8BhUBN5XaVPxAQc/hso0yCfJc/GnL5nHnVezSztQNlWA1xSdCTP0
LeafDBESjk7Z7RG+jCLCoyjqji1v1/YK+hLsTf9HhfsiLRYtPnGl6oUi5j48KZz0
u7E/UEiqlART9CgyRCx4lB1STICCQqyeirX1uMabvatELvUoiLpLTaKW5zz9AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUgT4yJ0WllVezQKniu5rOL2DqtqAwHwYDVR0j
BBgwFoAUnM4hl9g8+gl555KV7+5dSG+zoj4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NmNkMjRiMDUtMjY5ZS00Nzg0LWI5MzUtZjI3NjY1ODMwZmRhLzAvOUNDRTIxOTdE
ODNDRkEwOTc5RTc5Mjk1RUZFRTVENDg2RkIzQTIzRS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85Q0NFMjE5N0Q4M0NGQTA5NzlFNzkyOTVFRkVFNUQ0ODZGQjNB
MjNFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmNkMjRiMDUtMjY5ZS00Nzg0LWI5
MzUtZjI3NjY1ODMwZmRhLzAvOUNDRTIxOTdEODNDRkEwOTc5RTc5Mjk1RUZFRTVE
NDg2RkIzQTIzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAI83O+Jp0tc/xmbA5qSZjN7SVduy3trcG52T
UxP27XRW24xMMeG9Y/Ikqol/w325YhRY+QbPBThEA0DwLUYwBGjyNAuMtOc1814E
gzwmbdJ+08kB6DK3ybwix+nPM/79in0F7B78Kd5tk8eA/afev1neflxLLY9zV8O+
bqSFmbjEIjwHs5BcmM+GgBoZp7usS0mKZjwDqwWV0xLIGl315RZI6egqf4ufBR6a
98/TbEdMkteSJG97820lIkPzWGwSlvBnPgsTm8h8nT8gyzMZw0/gLiI+5Q8WF4Ve
DxWI7SFbyACFhRddHl0RC3q2JvCGJsW/gtTBXcubSOs3BXcsZV8=
-----END CERTIFICATE-----
Generated at Fri Sep 18 15:09:05 2026 by rpki-client