
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/9F0EDA9BA3F7B24D18F6E17A5B6108F3E9EC41E4.mft
File: 9F0EDA9BA3F7B24D18F6E17A5B6108F3E9EC41E4.mft (raw, json)
Hash identifier: rWUTgPmiRYrMvDdV8FrZ/RcLOI6wf8NtThJfDc805V4=
Subject key identifier: BB:9A:3E:91:96:28:F8:5C:DA:5A:51:44:6C:5E:4E:43:18:53:F5:AD
Authority key identifier: 9F:0E:DA:9B:A3:F7:B2:4D:18:F6:E1:7A:5B:61:08:F3:E9:EC:41:E4
Certificate issuer: /CN=9F0EDA9BA3F7B24D18F6E17A5B6108F3E9EC41E4
Certificate serial: 052CE2085F19A517B638E54DC0791A4BAE872673
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F0EDA9BA3F7B24D18F6E17A5B6108F3E9EC41E4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/9F0EDA9BA3F7B24D18F6E17A5B6108F3E9EC41E4.mft
Manifest number: ED
Signing time: Sun 25 Oct 2026 05:58:46 +0000
Manifest this update: Sun 25 Oct 2026 05:53:46 +0000
Manifest next update: Mon 26 Oct 2026 09:36:46 +0000
Files and hashes: 1: 9F0EDA9BA3F7B24D18F6E17A5B6108F3E9EC41E4.crl (hash: y8jspkQEYp15Axkgf/i0V9EbLOiNfvlpyR5yEUoQWMI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/9F0EDA9BA3F7B24D18F6E17A5B6108F3E9EC41E4.crl
rsync://rpki-rsync.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/9F0EDA9BA3F7B24D18F6E17A5B6108F3E9EC41E4.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F0EDA9BA3F7B24D18F6E17A5B6108F3E9EC41E4.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 09:36:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:2c:e2:08:5f:19:a5:17:b6:38:e5:4d:c0:79:1a:4b:ae:87:26:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9F0EDA9BA3F7B24D18F6E17A5B6108F3E9EC41E4
Validity
Not Before: Oct 25 05:53:46 2026 GMT
Not After : Oct 26 09:36:46 2026 GMT
Subject: CN=BB9A3E919628F85CDA5A51446C5E4E431853F5AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f7:48:de:2a:16:5c:43:9f:97:38:49:a7:0e:
f1:c3:a3:28:fa:46:8d:6e:59:fe:05:77:da:ed:5f:
a4:58:26:8a:c0:d0:3b:16:d2:eb:7e:27:2c:62:dd:
4d:7d:78:6a:8e:e2:0a:1d:e0:b0:fa:ff:7d:67:26:
8f:66:7f:0e:2a:60:34:90:17:8f:7e:44:fb:2e:6e:
1e:3e:8c:58:97:99:2d:28:b9:53:a8:0e:2e:53:1b:
6f:e5:af:09:35:6e:9b:25:92:6f:38:01:2b:9a:28:
99:70:5e:f5:e6:53:ab:26:3a:b1:1e:b6:ce:21:8e:
59:3b:58:01:3a:84:51:00:ab:44:80:f4:63:36:17:
f4:15:38:b3:a1:16:40:70:54:b3:4f:a8:2c:64:63:
7d:6f:f0:04:37:88:19:65:c8:2a:66:88:84:78:c7:
b0:46:da:25:19:ff:67:bb:e6:4e:ae:4a:13:29:e5:
6c:e0:3c:6b:4b:c6:a1:64:7d:e2:a3:06:6d:c8:7a:
ca:64:bc:14:94:fe:1b:d1:47:a3:e0:f0:58:a8:2a:
7d:ce:32:bf:68:69:12:44:46:39:02:b9:ce:e6:8f:
d7:07:32:f6:1f:6b:e0:44:1a:07:41:62:2c:7b:c5:
07:38:64:1b:2c:b7:f8:99:a3:a0:04:d7:01:c8:9a:
79:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:9A:3E:91:96:28:F8:5C:DA:5A:51:44:6C:5E:4E:43:18:53:F5:AD
X509v3 Authority Key Identifier:
keyid:9F:0E:DA:9B:A3:F7:B2:4D:18:F6:E1:7A:5B:61:08:F3:E9:EC:41:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/9F0EDA9BA3F7B24D18F6E17A5B6108F3E9EC41E4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F0EDA9BA3F7B24D18F6E17A5B6108F3E9EC41E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/9F0EDA9BA3F7B24D18F6E17A5B6108F3E9EC41E4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:84:a5:6c:ae:f2:81:72:7e:98:db:95:ee:ee:bd:5a:40:ab:
fd:ba:3c:44:64:de:9f:c4:ec:3b:d2:36:db:c0:2f:03:13:5f:
83:25:c6:c6:0e:f7:1a:31:81:4d:d4:96:b3:f2:f1:17:38:43:
b8:7a:6a:5f:0d:ba:49:9f:04:df:4f:de:da:18:ed:23:e2:14:
6e:46:7b:9b:64:90:05:2f:28:c7:2b:89:6e:a8:7b:80:31:56:
27:3b:86:4d:65:95:61:e1:8f:32:ce:2f:10:d5:6b:91:12:13:
c7:24:ef:cc:98:32:ff:7c:b4:4d:24:08:73:35:85:af:8e:62:
5b:e8:6b:cd:ec:37:d4:0d:3c:44:ac:66:b2:4f:91:0b:00:73:
5d:6b:cd:c4:4d:e9:88:04:24:56:5d:2b:0a:a3:dc:ce:6e:34:
c7:54:60:e5:3b:73:1a:da:80:19:29:7e:35:2d:4f:f1:f6:6a:
a8:fa:30:99:f8:a2:dc:4b:66:85:e3:43:d3:b8:98:3c:53:18:
27:da:be:f0:ad:20:b7:0d:1d:77:01:87:7c:aa:d2:3c:de:62:
c5:f6:9b:9c:d3:10:75:02:69:ef:8c:56:c4:32:ae:fd:bb:60:
8c:80:80:e7:52:4f:3b:ba:c8:26:41:26:23:12:09:d1:08:1d:
13:70:df:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 17:57:49 2026 by rpki-client