
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/DA20692305010D31E154AE60F41C822DD2D6CECC.mft
File: DA20692305010D31E154AE60F41C822DD2D6CECC.mft (raw, json)
Hash identifier: 3v1SYOuq8arEs1NhOlHJx636YiVjAisnXtZsoLw2718=
Subject key identifier: E8:00:37:D8:A2:FE:AD:72:6B:EB:71:E5:5C:3B:46:38:C1:5D:B3:74
Authority key identifier: DA:20:69:23:05:01:0D:31:E1:54:AE:60:F4:1C:82:2D:D2:D6:CE:CC
Certificate issuer: /CN=DA20692305010D31E154AE60F41C822DD2D6CECC
Certificate serial: 3498DA93183E92247433B7FBAABCC32A83F507E9
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DA20692305010D31E154AE60F41C822DD2D6CECC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/DA20692305010D31E154AE60F41C822DD2D6CECC.mft
Manifest number: B9
Signing time: Thu 17 Sep 2026 02:31:34 +0000
Manifest this update: Thu 17 Sep 2026 02:26:34 +0000
Manifest next update: Fri 18 Sep 2026 05:04:34 +0000
Files and hashes: 1: DA20692305010D31E154AE60F41C822DD2D6CECC.crl (hash: xjvYWCpOOql5uM9cph8xPsehCKGI3uJbisKiC0nhI2Q=)
2: 3135372e36362e34302e302f32332d3233203d3e20313532373934.roa (hash: o8gOkqGVnHiHCblL7s8ySrSdxhRCwAVnszXZYwnxcmY=)
3: 3135372e36362e34312e302f32342d3234203d3e20313532373934.roa (hash: agruC/We/sLJTlhbwSnl6x4MYxmzcCS3rf7w9cYqIto=)
4: 3135372e36362e34302e302f32342d3234203d3e20313532373934.roa (hash: aQMTJYE8nMh07FLcvIjiQtwhdByf/7nyD/zkKRD7jaM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/DA20692305010D31E154AE60F41C822DD2D6CECC.crl
rsync://rpki-rsync.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/DA20692305010D31E154AE60F41C822DD2D6CECC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DA20692305010D31E154AE60F41C822DD2D6CECC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 05:04:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:98:da:93:18:3e:92:24:74:33:b7:fb:aa:bc:c3:2a:83:f5:07:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DA20692305010D31E154AE60F41C822DD2D6CECC
Validity
Not Before: Sep 17 02:26:34 2026 GMT
Not After : Sep 18 05:04:34 2026 GMT
Subject: CN=E80037D8A2FEAD726BEB71E55C3B4638C15DB374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f8:25:6d:18:98:3b:5f:e8:9d:36:7c:11:b0:
ae:5c:d1:b2:3b:a7:c6:46:98:80:79:63:79:78:70:
c8:dc:ca:c7:0f:b9:a8:cf:58:31:59:c7:30:ed:c6:
7b:da:83:9e:3a:35:7c:58:52:6e:66:77:be:0f:9f:
5a:82:a9:a6:15:70:c2:46:bd:bd:29:7d:c5:a6:35:
6d:23:20:00:e4:86:fd:5c:27:94:6c:75:12:b2:e5:
0b:db:3f:f8:71:e9:92:8f:56:2a:60:f0:e4:30:4b:
11:36:1b:bb:15:57:75:c7:76:49:6f:9d:40:2c:88:
0e:f7:ed:a7:bb:d5:b7:76:8e:e6:56:e7:3e:e2:34:
b4:af:64:34:da:8f:85:df:14:9f:79:a6:46:7d:05:
0d:e4:76:6d:b3:50:47:b3:de:a3:42:5c:0b:a2:fa:
a6:3a:05:e7:8c:c8:59:4f:36:5d:57:df:b3:58:d7:
af:54:05:10:8c:eb:67:0d:28:df:29:40:fc:13:72:
ee:63:d0:76:d4:40:4e:db:41:04:37:41:35:7e:0c:
bb:39:2c:60:1d:3d:53:b1:51:40:e2:29:93:18:d3:
13:9c:52:d9:35:30:14:3e:7b:aa:69:fb:26:eb:8d:
16:51:d2:c3:4c:dc:83:a3:fc:c3:d1:96:e8:6e:bd:
9b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:00:37:D8:A2:FE:AD:72:6B:EB:71:E5:5C:3B:46:38:C1:5D:B3:74
X509v3 Authority Key Identifier:
keyid:DA:20:69:23:05:01:0D:31:E1:54:AE:60:F4:1C:82:2D:D2:D6:CE:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/DA20692305010D31E154AE60F41C822DD2D6CECC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DA20692305010D31E154AE60F41C822DD2D6CECC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/DA20692305010D31E154AE60F41C822DD2D6CECC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:ad:eb:ff:b4:19:7e:ba:4a:bc:5e:be:76:4b:57:dd:5b:0f:
b1:f5:bc:bb:51:9e:f3:02:dc:51:4b:11:0d:4b:73:f2:e2:64:
09:e0:f6:45:ca:fd:ef:25:68:02:98:ba:e6:e2:8b:88:d9:65:
1b:66:1b:61:f1:42:d3:6b:90:a2:0d:a7:30:a7:74:a9:3a:fe:
1a:c8:8b:92:a7:0c:c9:6b:08:dc:d5:02:37:a5:0c:d5:1b:3e:
c0:a0:fd:f2:1b:4f:2d:00:14:1e:1a:44:82:78:7f:26:f7:da:
10:70:5d:d1:b0:ea:4c:b5:f7:9a:45:89:5d:40:5c:f9:8a:75:
70:2f:3c:a1:fc:3e:13:5c:0b:7b:b1:fe:bf:1e:5d:a6:62:b2:
e7:7a:79:45:e7:a0:5b:f4:21:99:e7:d6:d3:8d:e8:f0:6b:ee:
42:25:01:1d:b7:bd:ec:61:b7:f5:37:fd:fe:54:36:20:86:11:
10:ba:e1:5c:ad:29:ed:d5:0c:a9:79:d3:0c:26:f3:b9:03:2c:
b8:69:f4:8e:2a:fb:f2:3b:af:95:a1:f4:5b:60:d8:05:0f:47:
2e:ab:2e:9b:a4:a9:e7:dd:3b:9e:a6:cf:42:2c:1b:e7:02:94:
c5:c2:11:dd:3a:e4:9c:26:96:32:ae:70:84:40:dc:ca:af:6d:
20:dd:b6:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 12:20:02 2026 by rpki-client