
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/9CD069361DE1E2B7F987CB377D2065CD073D2BD6.mft
File: 9CD069361DE1E2B7F987CB377D2065CD073D2BD6.mft (raw, json)
Hash identifier: FyGZcwQMRN63vidki1UfeznEvdIzVMMa8lCP23J4x+k=
Subject key identifier: C5:37:FB:E3:C6:3F:5A:20:B5:67:DA:63:0A:C4:92:08:04:A5:4E:38
Authority key identifier: 9C:D0:69:36:1D:E1:E2:B7:F9:87:CB:37:7D:20:65:CD:07:3D:2B:D6
Certificate issuer: /CN=9CD069361DE1E2B7F987CB377D2065CD073D2BD6
Certificate serial: 698F5481748C59FC05FBB627398B96BE0F02A525
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9CD069361DE1E2B7F987CB377D2065CD073D2BD6.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/9CD069361DE1E2B7F987CB377D2065CD073D2BD6.mft
Manifest number: B8
Signing time: Thu 17 Sep 2026 04:39:13 +0000
Manifest this update: Thu 17 Sep 2026 04:34:13 +0000
Manifest next update: Fri 18 Sep 2026 05:58:13 +0000
Files and hashes: 1: 9CD069361DE1E2B7F987CB377D2065CD073D2BD6.crl (hash: y+7CUW6nOMjTYX3tcbatNuqM4GbPv26OyftsfwC9YI8=)
2: 3130332e3137342e37382e302f32342d3234203d3e20313331363939.roa (hash: TbeMR6DCS8oQZoWLlauGHIZkAoCLHj7Jp79qNO5aAvk=)
3: 3130332e3137342e37392e302f32342d3234203d3e20313331363939.roa (hash: 0YvIC8wCtWvDa2HWmo5ajWyQO0v7nGfkKloFn4oUr5Y=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/9CD069361DE1E2B7F987CB377D2065CD073D2BD6.crl
rsync://rpki-rsync.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/9CD069361DE1E2B7F987CB377D2065CD073D2BD6.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9CD069361DE1E2B7F987CB377D2065CD073D2BD6.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 05:58:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:8f:54:81:74:8c:59:fc:05:fb:b6:27:39:8b:96:be:0f:02:a5:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9CD069361DE1E2B7F987CB377D2065CD073D2BD6
Validity
Not Before: Sep 17 04:34:13 2026 GMT
Not After : Sep 18 05:58:13 2026 GMT
Subject: CN=C537FBE3C63F5A20B567DA630AC4920804A54E38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b3:ad:30:05:a3:d9:84:5a:bb:13:71:ce:93:
5c:5a:1c:b9:5a:f5:46:6b:5b:de:f1:99:58:3a:ea:
7a:92:94:8b:c3:e8:06:8b:66:78:50:a9:4b:d7:d8:
6e:4b:b3:1f:cb:50:0e:18:f6:3a:bd:48:e9:34:21:
45:d7:98:9b:f2:8a:75:e2:a9:fd:09:f0:3a:f0:fe:
0d:a3:58:f1:a9:57:39:f4:16:c3:81:68:a1:34:34:
0d:7e:c5:2c:34:ff:78:99:10:4a:e3:d4:43:68:a0:
37:8f:67:fc:6b:33:10:fd:35:ae:39:9a:20:7e:b6:
5d:34:47:ed:d0:1b:8b:e5:92:25:7f:6f:82:a2:5f:
68:2c:7e:a3:f4:9f:10:8d:13:bb:6b:2c:2f:13:b1:
80:51:a3:cc:ce:86:4a:c9:84:ea:f6:75:da:6f:01:
23:66:b6:79:10:8c:ca:48:b7:99:4e:82:8a:80:99:
47:bb:56:19:9e:3d:8a:f5:97:e0:28:ff:ad:5d:b9:
ca:d4:68:88:cd:0e:28:0c:c4:6c:55:90:35:d0:25:
3c:56:60:52:79:fb:7e:50:35:7e:b4:07:ed:a5:c9:
1a:fa:65:3b:90:a2:d6:99:6a:54:bf:74:b5:4a:d6:
6b:ba:05:12:f5:ca:8e:9a:81:96:29:15:0d:f7:95:
c8:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:37:FB:E3:C6:3F:5A:20:B5:67:DA:63:0A:C4:92:08:04:A5:4E:38
X509v3 Authority Key Identifier:
keyid:9C:D0:69:36:1D:E1:E2:B7:F9:87:CB:37:7D:20:65:CD:07:3D:2B:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/9CD069361DE1E2B7F987CB377D2065CD073D2BD6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9CD069361DE1E2B7F987CB377D2065CD073D2BD6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/9CD069361DE1E2B7F987CB377D2065CD073D2BD6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:87:e3:65:48:51:f2:5c:32:44:11:c7:ef:34:d4:60:91:31:
62:66:ba:03:ee:6f:87:a7:f9:1d:c1:3a:5f:f2:d7:4a:df:e4:
42:0d:cb:7f:9c:38:83:6f:e9:6b:77:28:ae:2c:f8:b6:16:d9:
af:03:3d:ee:1e:3f:2b:b8:66:05:95:78:23:10:fc:2f:a8:f1:
79:70:41:e9:f2:6e:6c:84:7d:f3:d4:8a:39:04:18:e1:b6:31:
5c:ed:f4:5e:23:7b:ce:23:81:ff:03:13:b5:e3:20:6e:6c:88:
8b:bf:22:83:f6:44:74:30:b6:42:23:ca:9a:61:00:46:4a:2a:
ad:ff:a2:89:d4:f7:b4:de:4e:37:cb:d8:07:3e:0e:2b:ad:d9:
6e:7d:1a:e6:9e:26:35:03:f7:49:7e:b7:95:45:e1:66:47:02:
94:85:07:19:86:22:3d:bd:6e:92:48:d5:29:25:2c:e3:32:22:
03:df:9f:89:87:cb:b8:70:12:29:d8:46:fc:ec:74:8d:b9:b2:
40:65:31:d9:d0:8f:ea:b1:0c:3d:52:48:b6:70:dd:75:83:f9:
94:ff:e5:91:2b:c0:65:e2:14:05:fa:b3:e9:14:90:d0:1b:0b:
25:85:74:b4:15:79:bd:0f:fa:d5:bf:a3:cb:d6:5f:3a:59:68:
51:f0:b8:ec
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUaY9UgXSMWfwF+7YnOYuWvg8CpSUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUNEMDY5MzYxREUxRTJCN0Y5ODdDQjM3N0QyMDY1Q0Qw
NzNEMkJENjAeFw0yNjA5MTcwNDM0MTNaFw0yNjA5MTgwNTU4MTNaMDMxMTAvBgNV
BAMTKEM1MzdGQkUzQzYzRjVBMjBCNTY3REE2MzBBQzQ5MjA4MDRBNTRFMzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGs60wBaPZhFq7E3HOk1xaHLla
9UZrW97xmVg66nqSlIvD6AaLZnhQqUvX2G5Lsx/LUA4Y9jq9SOk0IUXXmJvyinXi
qf0J8Drw/g2jWPGpVzn0FsOBaKE0NA1+xSw0/3iZEErj1ENooDePZ/xrMxD9Na45
miB+tl00R+3QG4vlkiV/b4KiX2gsfqP0nxCNE7trLC8TsYBRo8zOhkrJhOr2ddpv
ASNmtnkQjMpIt5lOgoqAmUe7VhmePYr1l+Ao/61ducrUaIjNDigMxGxVkDXQJTxW
YFJ5+35QNX60B+2lyRr6ZTuQotaZalS/dLVK1mu6BRL1yo6agZYpFQ33lcg/AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUxTf748Y/WiC1Z9pjCsSSCASlTjgwHwYDVR0j
BBgwFoAUnNBpNh3h4rf5h8s3fSBlzQc9K9YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZGJjNmRhMTktODRiZS00YTUwLWI0NjYtMWU4NmRkYmNjMzVmLzAvOUNEMDY5MzYx
REUxRTJCN0Y5ODdDQjM3N0QyMDY1Q0QwNzNEMkJENi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85Q0QwNjkzNjFERTFFMkI3Rjk4N0NCMzc3RDIwNjVDRDA3M0Qy
QkQ2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGJjNmRhMTktODRiZS00YTUwLWI0
NjYtMWU4NmRkYmNjMzVmLzAvOUNEMDY5MzYxREUxRTJCN0Y5ODdDQjM3N0QyMDY1
Q0QwNzNEMkJENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADqH42VIUfJcMkQRx+801GCRMWJmugPub4en
+R3BOl/y10rf5EINy3+cOINv6Wt3KK4s+LYW2a8DPe4ePyu4ZgWVeCMQ/C+o8Xlw
QenybmyEffPUijkEGOG2MVzt9F4je84jgf8DE7XjIG5siIu/IoP2RHQwtkIjypph
AEZKKq3/oonU97TeTjfL2Ac+Diut2W59GuaeJjUD90l+t5VF4WZHApSFBxmGIj29
bpJI1SklLOMyIgPfn4mHy7hwEinYRvzsdI25skBlMdnQj+qxDD1SSLZw3XWD+ZT/
5ZErwGXiFAX6s+kUkNAbCyWFdLQVeb0P+tW/o8vWXzpZaFHwuOw=
-----END CERTIFICATE-----
Generated at Thu Sep 17 19:19:56 2026 by rpki-client