
$ rpki-client -vvf rpki-rsync.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/9370AF17CF894C561A727E816DE3B11D5D8AAD9C.mft
File: 9370AF17CF894C561A727E816DE3B11D5D8AAD9C.mft (raw, json)
Hash identifier: DB92X7YsWQ17u+TB/RFo57/3GE7IHC28FENpC9KhUzA=
Subject key identifier: 4E:B6:AA:A3:63:9B:E3:43:30:B6:49:9A:1A:13:BE:ED:FA:7D:55:B6
Authority key identifier: 93:70:AF:17:CF:89:4C:56:1A:72:7E:81:6D:E3:B1:1D:5D:8A:AD:9C
Certificate issuer: /CN=9370AF17CF894C561A727E816DE3B11D5D8AAD9C
Certificate serial: 510F257ACAA6B44743DE30D0B5366E116049BDB0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9370AF17CF894C561A727E816DE3B11D5D8AAD9C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/9370AF17CF894C561A727E816DE3B11D5D8AAD9C.mft
Manifest number: 12
Signing time: Fri 15 May 2026 05:59:36 +0000
Manifest this update: Fri 15 May 2026 05:54:36 +0000
Manifest next update: Sat 16 May 2026 08:35:36 +0000
Files and hashes: 1: 9370AF17CF894C561A727E816DE3B11D5D8AAD9C.crl (hash: 7kJ/Ci/4gMFSuytH+hATQHtqqzjKi7HR/OrlHTZL5no=)
2: 3130332e3138362e33332e302f32342d3234203d3e20313439363930.roa (hash: 66uNmMCT6fkEdO81aZRWkTBSkfQiCejM3k2UxZQSC6k=)
3: 3130332e3138362e33322e302f32342d3234203d3e20313439363930.roa (hash: rp1e1zzn4/8hrijf1AXdkJbP5FeTjYw1wnI20jUxS/k=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/9370AF17CF894C561A727E816DE3B11D5D8AAD9C.crl
rsync://rpki-rsync.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/9370AF17CF894C561A727E816DE3B11D5D8AAD9C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9370AF17CF894C561A727E816DE3B11D5D8AAD9C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 15 May 2026 20:53:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:0f:25:7a:ca:a6:b4:47:43:de:30:d0:b5:36:6e:11:60:49:bd:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9370AF17CF894C561A727E816DE3B11D5D8AAD9C
Validity
Not Before: May 15 05:54:36 2026 GMT
Not After : May 16 08:35:36 2026 GMT
Subject: CN=4EB6AAA3639BE34330B6499A1A13BEEDFA7D55B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:39:d3:a8:b4:db:e9:52:14:44:79:6a:23:3a:
85:38:3c:9a:1f:5b:1b:6d:26:d7:1f:4d:84:80:0d:
9d:f7:92:b3:0a:f8:81:40:64:1b:ea:54:ba:4d:de:
00:f7:6a:d0:79:3e:65:22:af:16:3f:f7:09:83:a9:
9d:df:8b:78:49:b7:4f:66:bf:41:a8:ef:16:07:61:
c0:b4:9c:ab:52:65:de:08:57:a3:d8:d7:5e:3c:09:
d0:71:14:c2:12:fd:21:6a:58:00:fd:ca:61:78:4a:
78:d2:bc:50:ee:58:19:c9:9f:95:1b:a0:c5:ac:c4:
56:2f:4c:e8:67:ad:e1:c7:c4:99:07:5e:a6:d7:03:
d4:f5:53:1e:57:fc:2a:be:55:23:c4:fb:24:ea:4c:
6e:f0:c5:6d:d7:59:36:84:6b:f2:87:d2:1c:ab:b5:
b6:ac:5e:ee:2f:e8:a4:c0:20:3c:5e:10:d2:4b:16:
2a:00:79:af:22:af:1b:0a:71:05:3b:47:8d:68:6b:
fb:cf:87:c1:cf:87:3b:db:60:cd:4b:7b:29:8d:06:
59:d8:99:7d:0b:23:0a:07:76:e2:6b:19:95:25:57:
63:62:03:e5:a3:31:c2:53:f3:9b:5f:e2:25:4d:c2:
15:a7:d4:52:a3:51:af:b8:a3:2f:c1:03:a4:cf:5f:
c0:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:B6:AA:A3:63:9B:E3:43:30:B6:49:9A:1A:13:BE:ED:FA:7D:55:B6
X509v3 Authority Key Identifier:
keyid:93:70:AF:17:CF:89:4C:56:1A:72:7E:81:6D:E3:B1:1D:5D:8A:AD:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/9370AF17CF894C561A727E816DE3B11D5D8AAD9C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9370AF17CF894C561A727E816DE3B11D5D8AAD9C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/9370AF17CF894C561A727E816DE3B11D5D8AAD9C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:17:56:c5:3a:9d:5d:33:1c:a9:cf:e0:81:27:3e:2e:95:8e:
1d:33:ec:84:a1:c3:e4:a4:36:1f:29:00:b9:99:16:cd:9a:6a:
5d:ec:c1:5b:4d:04:df:9b:ab:42:9f:8b:ba:c8:69:13:1f:68:
32:a1:5a:37:60:d5:f6:c0:b6:a9:72:48:96:d4:23:6e:48:45:
ce:6f:a6:ae:ec:f8:97:9b:56:55:8b:43:89:a5:d6:42:c6:f6:
b1:f1:08:75:ff:04:8e:4d:c8:02:ad:66:c2:2a:ab:7f:66:de:
48:87:d5:61:83:a3:c3:20:dd:0f:60:06:8b:42:19:47:60:95:
c7:91:8f:61:d8:7e:4e:a8:e8:cc:38:b0:4d:87:4d:84:4f:08:
9f:ce:64:81:58:c8:38:c9:ce:02:b3:c7:26:47:b2:ee:f1:da:
b1:39:65:f6:83:9c:80:7a:42:76:68:27:89:4e:c2:4c:ac:53:
0b:22:57:13:f8:2a:a1:c8:3a:08:0f:95:b3:cb:96:ce:f5:dc:
18:9b:08:00:a6:c5:92:98:59:25:8a:85:28:c5:ed:b4:af:1e:
56:26:23:de:ca:da:de:32:62:98:25:5d:5d:9f:25:c2:df:69:
8e:4e:1e:8e:7a:e8:5a:48:63:00:19:e5:e8:ca:c5:47:20:92:
9a:25:70:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 09:50:32 2026 by rpki-client