
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/9EDB723FFE084B9B87B5B0A108574335936817FB.mft
File: 9EDB723FFE084B9B87B5B0A108574335936817FB.mft (raw, json)
Hash identifier: W8HMTMSJgOq9JSR+A4rL0xYKEkxJITfcinDWr/4nAl4=
Subject key identifier: 8A:78:0C:36:C2:58:C5:B6:53:9F:4A:23:D8:22:5D:3B:EC:95:82:73
Authority key identifier: 9E:DB:72:3F:FE:08:4B:9B:87:B5:B0:A1:08:57:43:35:93:68:17:FB
Certificate issuer: /CN=9EDB723FFE084B9B87B5B0A108574335936817FB
Certificate serial: 33D8F5E9AC910AE01DEFC1427F80FBAA8FF520E4
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EDB723FFE084B9B87B5B0A108574335936817FB.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/9EDB723FFE084B9B87B5B0A108574335936817FB.mft
Manifest number: 41
Signing time: Fri 19 Jun 2026 17:01:20 +0000
Manifest this update: Fri 19 Jun 2026 16:56:20 +0000
Manifest next update: Sat 20 Jun 2026 20:58:20 +0000
Files and hashes: 1: 3130332e3137342e36362e302f32342d3234203d3e20313431363138.roa (hash: TKijjNdinkZx0yUPQ2piNtCq6wNxlLJwsDj7lMp8o1A=)
2: 3130332e3136312e3130392e302f32342d3234203d3e20313431363138.roa (hash: i1PCAoIZ8GEBtvqZu9y6RsJ/+cUgKfG+tpL6n+2MQ0w=)
3: 9EDB723FFE084B9B87B5B0A108574335936817FB.crl (hash: OwiCHWGExS7ZNk7KAe/8POhHs0H6+G/yvD0B5WYqyK0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/9EDB723FFE084B9B87B5B0A108574335936817FB.crl
rsync://rpki-rsync.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/9EDB723FFE084B9B87B5B0A108574335936817FB.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EDB723FFE084B9B87B5B0A108574335936817FB.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 20:58:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:d8:f5:e9:ac:91:0a:e0:1d:ef:c1:42:7f:80:fb:aa:8f:f5:20:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9EDB723FFE084B9B87B5B0A108574335936817FB
Validity
Not Before: Jun 19 16:56:20 2026 GMT
Not After : Jun 20 20:58:20 2026 GMT
Subject: CN=8A780C36C258C5B6539F4A23D8225D3BEC958273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:45:5d:bd:a2:36:5e:60:b1:3a:99:fa:08:e6:
65:7f:02:82:95:08:79:fa:11:57:55:93:61:62:a2:
53:d2:85:23:45:33:25:f7:11:bc:95:bb:ce:a8:32:
62:c4:94:1b:91:db:87:a4:84:a4:da:ef:2b:d0:70:
f1:78:bb:11:07:1e:92:45:02:66:21:cd:85:64:81:
41:d0:66:d9:1b:03:5f:ca:27:9e:eb:96:3a:b1:28:
15:b3:9b:f3:31:5e:da:28:35:ea:d3:4b:48:d6:5f:
5b:eb:c4:0d:a5:6f:d3:8a:fa:21:4a:f7:00:7d:71:
1e:96:15:35:e8:46:f2:46:a6:7f:ef:d7:0b:96:c2:
ab:06:49:ae:36:e2:12:f2:1a:f6:2b:cd:42:42:14:
17:83:79:c9:c9:16:84:7c:45:c3:8f:ea:90:9b:29:
57:29:f1:30:69:d8:22:e2:a0:6c:a0:18:e5:86:ed:
7b:a5:8e:d4:a6:12:77:6c:85:e0:c2:96:e1:e7:6b:
e8:a2:ef:45:4e:47:ac:4f:b9:01:d7:2f:5a:7f:41:
b8:d4:e7:53:fe:08:9a:5e:4e:74:ae:23:7d:86:2f:
c0:9a:26:46:89:d6:7a:1e:70:6b:cf:ec:89:a3:c2:
87:bf:85:8c:39:fc:b6:8e:db:1c:fd:f2:44:77:9e:
4b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:78:0C:36:C2:58:C5:B6:53:9F:4A:23:D8:22:5D:3B:EC:95:82:73
X509v3 Authority Key Identifier:
keyid:9E:DB:72:3F:FE:08:4B:9B:87:B5:B0:A1:08:57:43:35:93:68:17:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/9EDB723FFE084B9B87B5B0A108574335936817FB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EDB723FFE084B9B87B5B0A108574335936817FB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/9EDB723FFE084B9B87B5B0A108574335936817FB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:e8:0c:05:cc:bf:06:4f:6c:af:90:a8:c7:34:81:ae:ce:8a:
d8:61:22:68:e5:ce:85:c8:fc:d6:15:68:0a:91:a1:8b:bb:9b:
7a:02:b9:03:89:86:60:c0:e3:30:8f:d8:45:69:7d:5e:c7:8b:
50:a7:f0:a8:b9:aa:b5:18:d1:5f:3c:72:37:ce:b4:06:25:9f:
00:e1:16:73:3e:44:cb:bd:79:d6:ea:7f:d6:c1:7e:d9:25:a3:
80:52:af:c0:a1:ad:4c:df:15:08:9d:1e:a9:43:37:fa:f2:c5:
62:a9:fa:82:bb:59:5d:a1:35:84:99:be:76:7f:6b:4a:aa:d7:
d4:5e:a1:98:2f:e6:47:d5:3b:2e:3d:a0:2c:95:ae:af:90:9d:
7b:79:19:f2:3c:53:e4:c7:3e:57:70:f6:02:38:a1:f7:60:a7:
6b:79:89:55:88:bc:e2:bd:ee:ce:fd:ae:16:23:95:7a:64:1f:
07:3a:e5:25:c1:02:8e:72:08:4e:ba:c4:c0:ef:d5:2b:0d:98:
ee:eb:4b:00:5e:03:28:36:25:c5:e7:72:48:74:11:1e:1a:28:
e9:bb:4a:f7:bc:e0:ca:48:90:a1:92:2a:e3:4d:fd:5b:49:97:
2c:4f:82:7c:a4:f8:1c:4b:aa:11:40:4d:71:3e:5d:34:67:62:
06:be:82:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 08:59:59 2026 by rpki-client