
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/9FA20A14AF60219662C9668DE75D25F0C8B84220.mft
File: 9FA20A14AF60219662C9668DE75D25F0C8B84220.mft (raw, json)
Hash identifier: 61Pia58g9MM8YytV1y3yP/ekN6zj3IxJ7ktLKReWPBI=
Subject key identifier: ED:9D:74:35:C2:F9:A7:F6:00:D4:2B:C4:B5:B2:AD:73:10:4B:1A:1B
Authority key identifier: 9F:A2:0A:14:AF:60:21:96:62:C9:66:8D:E7:5D:25:F0:C8:B8:42:20
Certificate issuer: /CN=9FA20A14AF60219662C9668DE75D25F0C8B84220
Certificate serial: 783E6325735225D37BBC5163A8F4C5D845278EF1
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FA20A14AF60219662C9668DE75D25F0C8B84220.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/9FA20A14AF60219662C9668DE75D25F0C8B84220.mft
Manifest number: D6
Signing time: Fri 09 Oct 2026 04:58:49 +0000
Manifest this update: Fri 09 Oct 2026 04:53:49 +0000
Manifest next update: Sat 10 Oct 2026 07:02:49 +0000
Files and hashes: 1: 3130332e3136352e3235342e302f32332d3234203d3e203137393935.roa (hash: YS2T4alON/4lMEWof38ueY05KIoXFInJbn/EVbWzFdU=)
2: 9FA20A14AF60219662C9668DE75D25F0C8B84220.crl (hash: 9siEdCf4qAq1WqXFBh1GtqL9YbldGvyGPWjjDUpUB9A=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/9FA20A14AF60219662C9668DE75D25F0C8B84220.crl
rsync://rpki-rsync.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/9FA20A14AF60219662C9668DE75D25F0C8B84220.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FA20A14AF60219662C9668DE75D25F0C8B84220.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 07:02:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:3e:63:25:73:52:25:d3:7b:bc:51:63:a8:f4:c5:d8:45:27:8e:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9FA20A14AF60219662C9668DE75D25F0C8B84220
Validity
Not Before: Oct 9 04:53:49 2026 GMT
Not After : Oct 10 07:02:49 2026 GMT
Subject: CN=ED9D7435C2F9A7F600D42BC4B5B2AD73104B1A1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:19:36:49:29:c3:38:19:8c:dc:54:86:ff:21:
99:01:a0:8b:d4:07:13:83:6c:88:79:44:1f:39:d1:
cf:fe:9c:cc:f9:b6:59:81:82:4f:7a:f4:1a:b9:b3:
8a:9e:63:f8:0a:0a:d9:71:92:46:e4:0b:6f:44:2c:
31:55:ea:fd:fb:90:b6:f8:a6:d9:4d:07:04:e4:b5:
00:f3:08:de:96:b7:94:86:42:dc:59:79:d9:da:2b:
fb:0c:f7:6b:7e:11:06:e4:2b:64:8b:bb:91:08:67:
71:a1:5c:5e:15:2e:c8:7b:c8:79:ff:02:b6:57:18:
77:f9:c1:e1:ce:dd:11:64:9d:99:11:a4:a6:c1:23:
6e:00:5a:35:77:d9:6d:0b:42:7c:70:4c:e8:10:e6:
31:ba:d8:b7:8d:76:76:90:1b:8c:9d:c4:fe:b9:0b:
0f:0e:d8:39:87:13:22:6f:ab:a2:f5:0b:a3:a8:f5:
2a:a8:08:44:ec:c2:35:8d:25:a4:96:a6:e2:be:5f:
81:23:d9:39:52:17:72:fd:87:17:2b:f9:af:33:c8:
73:62:a9:04:71:de:7e:42:7d:d5:9b:03:64:5a:99:
10:08:a2:c8:4f:19:b4:36:53:e7:22:d9:58:3e:f0:
27:e3:ff:d7:76:aa:a0:27:ba:90:ac:3d:cb:e9:a6:
98:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:9D:74:35:C2:F9:A7:F6:00:D4:2B:C4:B5:B2:AD:73:10:4B:1A:1B
X509v3 Authority Key Identifier:
keyid:9F:A2:0A:14:AF:60:21:96:62:C9:66:8D:E7:5D:25:F0:C8:B8:42:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/9FA20A14AF60219662C9668DE75D25F0C8B84220.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FA20A14AF60219662C9668DE75D25F0C8B84220.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/9FA20A14AF60219662C9668DE75D25F0C8B84220.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:a9:58:1a:24:10:0a:b8:30:b5:bc:e5:9f:73:69:6a:11:5c:
5c:b7:1c:f7:94:95:4f:fa:70:82:9f:90:29:3c:dd:d2:95:b6:
f3:4b:fd:ed:08:b1:ac:2e:3b:2d:8a:6e:3d:49:14:f5:cd:c4:
c9:5f:db:0f:12:6b:3e:40:58:a5:f6:2b:a8:b8:59:b5:72:d2:
73:b0:c6:9d:b6:0e:5b:30:ee:a0:f0:e9:26:55:d6:8e:1d:39:
45:73:d7:28:14:b0:66:33:6a:5c:ba:44:0e:3a:10:3f:d6:42:
a4:8e:7b:1c:b8:ef:17:49:35:5c:34:de:3e:20:dd:c4:f4:c7:
f1:10:62:12:5f:67:af:a1:9a:02:8c:3e:f9:ce:9f:fc:43:f0:
00:99:cb:76:fa:77:8d:d1:3a:b6:2a:b3:e0:2d:0d:c5:e1:d6:
b1:04:a8:84:87:a7:3b:41:24:b5:bd:d2:73:d4:f2:12:8a:d2:
b2:d1:b4:93:30:23:e1:fa:96:c7:8c:e3:73:16:fd:76:d9:60:
d2:78:79:19:25:3b:f3:90:a5:27:a4:61:30:69:91:7b:32:a3:
b6:29:fb:f3:74:02:95:f5:d5:38:16:bc:ac:18:f5:3c:99:58:
3a:5c:18:49:7f:53:8f:ee:be:88:3f:34:be:de:91:60:59:de:
96:f1:99:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 20:04:17 2026 by rpki-client