
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/9FA20A14AF60219662C9668DE75D25F0C8B84220.mft
File: 9FA20A14AF60219662C9668DE75D25F0C8B84220.mft (raw, json)
Hash identifier: 3oPOz37QCs3ViSWpqdFNu53kGHbSraH+YRS7eNeIJYI=
Subject key identifier: EE:2F:14:6B:9D:E2:46:30:48:80:4C:64:61:4B:3A:AA:C0:D6:11:13
Authority key identifier: 9F:A2:0A:14:AF:60:21:96:62:C9:66:8D:E7:5D:25:F0:C8:B8:42:20
Certificate issuer: /CN=9FA20A14AF60219662C9668DE75D25F0C8B84220
Certificate serial: 1E9BBC3E0ED7F6D1C0AAF9E61DB0583EECA4387E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FA20A14AF60219662C9668DE75D25F0C8B84220.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/9FA20A14AF60219662C9668DE75D25F0C8B84220.mft
Manifest number: 48
Signing time: Wed 24 Jun 2026 11:13:49 +0000
Manifest this update: Wed 24 Jun 2026 11:08:49 +0000
Manifest next update: Thu 25 Jun 2026 14:07:49 +0000
Files and hashes: 1: 9FA20A14AF60219662C9668DE75D25F0C8B84220.crl (hash: nYkh7D5+OdwOLc7Z7RVyEBHIehtINbdh3+Wbny3LrYM=)
2: 3130332e3136352e3235342e302f32332d3234203d3e203137393935.roa (hash: YS2T4alON/4lMEWof38ueY05KIoXFInJbn/EVbWzFdU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/9FA20A14AF60219662C9668DE75D25F0C8B84220.crl
rsync://rpki-rsync.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/9FA20A14AF60219662C9668DE75D25F0C8B84220.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FA20A14AF60219662C9668DE75D25F0C8B84220.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Jun 2026 06:44:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:9b:bc:3e:0e:d7:f6:d1:c0:aa:f9:e6:1d:b0:58:3e:ec:a4:38:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9FA20A14AF60219662C9668DE75D25F0C8B84220
Validity
Not Before: Jun 24 11:08:49 2026 GMT
Not After : Jun 25 14:07:49 2026 GMT
Subject: CN=EE2F146B9DE2463048804C64614B3AAAC0D61113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:0d:b2:8b:79:ef:d6:a2:b6:e5:54:bd:82:26:
fa:d9:ec:63:50:2e:02:f3:7f:b9:ec:64:0d:fd:cd:
20:d0:68:51:4e:85:21:69:99:c6:b5:bb:93:98:0f:
e0:d5:f9:56:3a:ae:b1:f2:3b:35:ab:20:a0:1b:f1:
b2:e3:a5:60:09:46:5b:b6:50:94:52:53:24:7e:77:
a1:63:d4:10:54:db:cd:8f:ba:3e:3d:95:f2:ff:ed:
e2:9f:b0:d0:7a:3a:c6:c2:ea:e1:11:84:d4:e1:57:
51:7e:d2:12:89:b1:5f:98:18:34:de:de:0a:0f:3c:
13:ad:dc:10:a2:66:b7:d9:66:d6:6e:7f:47:ba:73:
24:d8:44:f7:5b:d0:89:3a:7a:ed:57:74:3d:0c:e2:
da:41:98:fc:6c:67:83:36:e0:9f:66:98:b8:f2:4d:
ae:52:1f:c9:85:ea:f7:26:d6:c9:4c:84:24:d5:d3:
73:b6:e7:70:97:dc:69:21:e2:be:38:0f:c7:4e:6f:
73:10:46:8b:71:7c:b5:54:63:1c:8f:26:fc:d7:f5:
00:35:4d:ba:a9:5a:ab:93:62:35:6a:0c:5c:06:c8:
85:6d:c8:2d:2c:8a:94:42:87:2a:4e:d0:63:43:9a:
1d:e8:93:71:d8:26:8d:e8:19:36:26:2f:0c:d2:0f:
1a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:2F:14:6B:9D:E2:46:30:48:80:4C:64:61:4B:3A:AA:C0:D6:11:13
X509v3 Authority Key Identifier:
keyid:9F:A2:0A:14:AF:60:21:96:62:C9:66:8D:E7:5D:25:F0:C8:B8:42:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/9FA20A14AF60219662C9668DE75D25F0C8B84220.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FA20A14AF60219662C9668DE75D25F0C8B84220.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/9FA20A14AF60219662C9668DE75D25F0C8B84220.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:ab:8c:f8:c9:ae:fd:e9:39:9f:ba:fa:f3:ea:05:ca:bf:74:
2f:f7:c5:42:a3:f8:bb:05:5a:ef:60:56:97:70:e6:c9:a6:7d:
b2:c3:19:cb:5a:df:87:42:aa:af:0d:38:72:9e:30:83:db:d5:
bd:ee:d4:6b:3b:46:e3:ab:e9:a4:b1:b6:5b:39:08:55:41:40:
01:a8:f1:36:69:7e:74:3d:3c:cd:d0:e3:ed:04:44:66:a4:fd:
ef:23:91:8b:7b:46:7c:cd:3f:9c:18:b8:aa:96:f4:dc:b6:4f:
e5:26:0d:3e:60:d6:c6:4e:cc:f8:51:27:f5:6e:ca:fa:98:c6:
cd:01:30:c7:9d:5b:69:d3:f7:3b:20:e9:bc:e7:59:71:cd:b9:
11:50:db:66:ff:84:87:0d:59:15:e4:d5:1c:12:b2:a0:36:d9:
25:a1:4c:f2:46:2a:2b:6f:af:3a:55:47:bb:5c:84:af:93:36:
79:ba:98:2d:ec:40:6e:50:09:c9:28:2f:7c:08:7d:d2:2e:ac:
7f:e4:e1:3a:97:16:1f:77:bf:21:7b:9b:7a:b9:b1:8c:65:b0:
ef:24:03:5f:bf:2d:bf:76:af:3b:b6:d4:b1:e0:b5:de:65:f6:
cf:9e:0a:fc:a4:60:86:ad:5e:3a:4e:35:38:c5:d2:a0:27:c9:
86:58:2d:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 16:40:07 2026 by rpki-client