
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/9D0779C339B77C1A9E7292F6D90FF812DB4D996E.mft
File: 9D0779C339B77C1A9E7292F6D90FF812DB4D996E.mft (raw, json)
Hash identifier: EVT8jzwcM6tiBFQAjOmnUFLweI1v7n1NQUJt8VzzG7M=
Subject key identifier: 63:21:8D:DB:EE:33:A6:93:16:49:BB:C5:8F:D6:4F:3D:95:6B:CC:C0
Authority key identifier: 9D:07:79:C3:39:B7:7C:1A:9E:72:92:F6:D9:0F:F8:12:DB:4D:99:6E
Certificate issuer: /CN=9D0779C339B77C1A9E7292F6D90FF812DB4D996E
Certificate serial: 23CF1F3B0AB7B237E906E3188F50A49F78F2B054
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D0779C339B77C1A9E7292F6D90FF812DB4D996E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/9D0779C339B77C1A9E7292F6D90FF812DB4D996E.mft
Manifest number: B8
Signing time: Thu 17 Sep 2026 06:21:14 +0000
Manifest this update: Thu 17 Sep 2026 06:16:14 +0000
Manifest next update: Fri 18 Sep 2026 08:49:14 +0000
Files and hashes: 1: 3230332e3139302e34302e302f32312d3234203d3e203435333137.roa (hash: qsT0+VavPcHM0/0OWpLNw++GFhjVrktegs30W7OSHuM=)
2: 9D0779C339B77C1A9E7292F6D90FF812DB4D996E.crl (hash: ajVoUQRZBPSjDI2YFSVsZO9Gd60+xDgYUrNw7QZc5Wk=)
3: 323430363a316230303a3a2f33322d3438203d3e203435333137.roa (hash: 1l7BLLHS+TGyR07xEVlu5VYGZCuMxLn7HlZoUt+u8AM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/9D0779C339B77C1A9E7292F6D90FF812DB4D996E.crl
rsync://rpki-rsync.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/9D0779C339B77C1A9E7292F6D90FF812DB4D996E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D0779C339B77C1A9E7292F6D90FF812DB4D996E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 08:49:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:cf:1f:3b:0a:b7:b2:37:e9:06:e3:18:8f:50:a4:9f:78:f2:b0:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9D0779C339B77C1A9E7292F6D90FF812DB4D996E
Validity
Not Before: Sep 17 06:16:14 2026 GMT
Not After : Sep 18 08:49:14 2026 GMT
Subject: CN=63218DDBEE33A6931649BBC58FD64F3D956BCCC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:97:21:a2:ac:38:b4:bc:40:16:ac:22:cb:f1:
7d:bb:a9:aa:56:db:97:04:48:a8:cc:4e:60:b0:93:
b6:f4:a5:d5:8b:92:6b:9f:88:e1:36:d1:ad:b8:6d:
44:d4:38:e8:8f:52:ff:01:e1:6d:85:51:6c:11:42:
8c:30:7f:cf:11:a3:a7:e4:39:e4:cb:76:cb:a5:51:
c2:e0:f5:49:45:aa:14:d2:c3:af:25:75:8b:65:2b:
d1:ca:6d:32:74:b9:b2:ff:2f:4b:42:dd:4e:8b:47:
5b:fb:06:01:d4:93:58:70:45:63:fd:40:3a:cc:84:
17:61:fc:cf:bd:13:d7:a8:43:5d:29:04:75:2e:c1:
d3:42:2f:ce:5f:da:3a:53:14:0e:54:07:c2:fd:c4:
cf:b0:f1:00:e2:10:42:14:ad:d4:83:76:10:a7:7b:
ef:e6:8d:7e:e1:4f:fd:0f:8b:02:2a:31:65:57:fa:
41:fc:00:83:6f:c7:e8:9b:90:36:9e:69:cd:29:bc:
04:63:a9:e5:e5:ef:85:25:d8:90:8f:8a:b1:f4:c9:
d6:f5:1c:63:dc:27:b8:8b:d4:96:6b:a2:1c:13:40:
be:04:8c:42:07:9d:c4:be:82:c0:62:51:e9:49:3d:
47:11:70:f0:2b:45:c5:10:fb:f6:16:d2:e6:5b:bc:
be:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:21:8D:DB:EE:33:A6:93:16:49:BB:C5:8F:D6:4F:3D:95:6B:CC:C0
X509v3 Authority Key Identifier:
keyid:9D:07:79:C3:39:B7:7C:1A:9E:72:92:F6:D9:0F:F8:12:DB:4D:99:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/9D0779C339B77C1A9E7292F6D90FF812DB4D996E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D0779C339B77C1A9E7292F6D90FF812DB4D996E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/9D0779C339B77C1A9E7292F6D90FF812DB4D996E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:12:11:a3:f6:ad:a4:d0:25:30:36:f8:21:45:90:f0:39:76:
3e:60:1c:a7:70:fb:fd:9b:fc:7d:d7:b0:9a:93:4f:bc:74:d9:
6b:6a:c1:0a:78:39:d9:c8:37:4c:af:f0:79:b0:8d:90:ef:41:
bf:22:af:ab:c2:a7:96:e9:2f:27:04:e4:cd:65:6b:87:16:de:
0e:68:f7:27:8f:5c:61:75:e9:c4:eb:11:f0:79:73:68:5c:25:
94:74:6f:2e:97:57:0d:de:a9:72:51:d8:2c:3e:20:d1:a0:f8:
dd:de:7f:87:07:09:1d:8a:ec:a1:65:63:81:2c:e9:5c:91:26:
57:10:b0:22:07:e5:73:e8:f2:e7:42:63:c1:14:a7:52:d2:10:
78:81:fe:ac:11:5e:73:90:9d:66:53:c6:e3:7d:62:a5:7c:1c:
a1:a0:fd:3b:cd:36:28:ec:52:85:9b:58:d5:f6:ee:73:70:72:
11:1e:47:bc:03:9b:0e:64:34:aa:ca:ed:4e:2c:f0:b9:71:a4:
01:89:94:dc:21:67:21:d6:6f:67:cd:5e:29:4f:67:79:a3:c7:
26:82:dd:35:04:8d:eb:8b:0a:1f:62:43:77:3c:56:1d:a7:94:
64:eb:08:74:a1:af:b0:bb:ee:ae:62:42:6e:82:37:75:c6:65:
da:dc:0c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 10:56:33 2026 by rpki-client