
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e1132497-5963-47aa-9de1-6c8496a36eb6/0/9BF4E3BFC90E2E556FB033A6F61DF552E131514B.mft
File: 9BF4E3BFC90E2E556FB033A6F61DF552E131514B.mft (raw, json)
Hash identifier: YmalvW/+rwOtgkGucdu8MoVLEG9+iHfyqD1IlLDS5Ic=
Subject key identifier: B9:D0:08:67:B4:AB:80:18:35:DA:54:FB:35:62:83:22:E0:FE:24:0C
Authority key identifier: 9B:F4:E3:BF:C9:0E:2E:55:6F:B0:33:A6:F6:1D:F5:52:E1:31:51:4B
Certificate issuer: /CN=9BF4E3BFC90E2E556FB033A6F61DF552E131514B
Certificate serial: 683A8C35FD53ED9814FB5DFCBD880EAE86A0D51D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BF4E3BFC90E2E556FB033A6F61DF552E131514B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e1132497-5963-47aa-9de1-6c8496a36eb6/0/9BF4E3BFC90E2E556FB033A6F61DF552E131514B.mft
Manifest number: 9C
Signing time: Thu 27 Aug 2026 06:08:07 +0000
Manifest this update: Thu 27 Aug 2026 06:03:07 +0000
Manifest next update: Fri 28 Aug 2026 09:25:07 +0000
Files and hashes: 1: 9BF4E3BFC90E2E556FB033A6F61DF552E131514B.crl (hash: PSTdWYRBIQAyGOaPs3tqncw+aOQ9sQ0T4wjOil/21jk=)
2: 3130332e3132312e3130322e302f32332d3234203d3e20313335343738.roa (hash: HYL8rmsnXXXs/BoqrngiGYdSN3TKjR8GgZKUfGOUHuE=)
3: 3130332e3132312e3130302e302f32332d3234203d3e20313335343738.roa (hash: c0+q/NVTLzO/hS8+W37na92ADaS9y92HcCmUqDS60d0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e1132497-5963-47aa-9de1-6c8496a36eb6/0/9BF4E3BFC90E2E556FB033A6F61DF552E131514B.crl
rsync://rpki-rsync.idnic.net/repo/e1132497-5963-47aa-9de1-6c8496a36eb6/0/9BF4E3BFC90E2E556FB033A6F61DF552E131514B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BF4E3BFC90E2E556FB033A6F61DF552E131514B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 28 Aug 2026 02:26:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:3a:8c:35:fd:53:ed:98:14:fb:5d:fc:bd:88:0e:ae:86:a0:d5:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9BF4E3BFC90E2E556FB033A6F61DF552E131514B
Validity
Not Before: Aug 27 06:03:07 2026 GMT
Not After : Aug 28 09:25:07 2026 GMT
Subject: CN=B9D00867B4AB801835DA54FB35628322E0FE240C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3e:a0:01:92:2b:ae:b4:61:66:b7:a5:6d:a5:
01:f1:4c:c6:f1:9e:77:17:5d:f4:cf:fb:79:3f:6e:
15:d0:b9:d4:1d:9c:52:07:22:30:27:82:47:a6:cc:
c5:d7:d1:d1:40:3a:78:b0:c2:43:43:f2:a1:de:1e:
29:6b:d4:ee:3d:a2:39:9a:64:65:b4:55:8b:f8:eb:
f6:64:5c:90:0e:74:18:85:44:89:1f:4c:6a:11:22:
80:f6:d4:81:cb:b4:6c:6d:b4:d0:13:80:03:03:d2:
3f:5d:06:eb:b4:4b:4f:5e:bb:e6:78:3f:e7:ff:1e:
1d:eb:83:7d:2e:86:c0:45:93:49:2d:24:4d:b3:86:
77:90:a5:2b:2f:6f:fe:9b:e4:a7:2f:d2:dd:85:14:
02:94:e1:57:f2:c6:d2:b8:27:73:2e:36:c8:ae:d4:
11:63:f0:00:86:62:d3:73:0a:23:61:be:2e:76:4a:
53:27:48:51:e7:5d:ee:c9:db:66:61:6e:da:6d:25:
fe:c2:4c:9a:2c:38:69:2e:6f:5d:a6:fe:23:da:d7:
46:e0:37:da:0b:dc:eb:34:22:40:ca:57:49:fc:73:
26:bd:30:8b:0e:44:42:1c:1f:ca:22:d4:74:57:5b:
3b:fe:fc:03:1c:b1:22:2e:14:5d:50:ab:f4:41:d2:
99:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:D0:08:67:B4:AB:80:18:35:DA:54:FB:35:62:83:22:E0:FE:24:0C
X509v3 Authority Key Identifier:
keyid:9B:F4:E3:BF:C9:0E:2E:55:6F:B0:33:A6:F6:1D:F5:52:E1:31:51:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e1132497-5963-47aa-9de1-6c8496a36eb6/0/9BF4E3BFC90E2E556FB033A6F61DF552E131514B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BF4E3BFC90E2E556FB033A6F61DF552E131514B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e1132497-5963-47aa-9de1-6c8496a36eb6/0/9BF4E3BFC90E2E556FB033A6F61DF552E131514B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:f5:0f:f5:e2:a5:18:99:90:43:4a:cc:fe:92:c7:08:7b:fa:
f6:6e:ee:8c:74:2b:d4:3c:4f:fa:3e:1f:cd:f9:ac:44:1c:f5:
14:14:d0:73:cf:4f:68:fe:eb:66:59:12:a9:e4:34:11:91:df:
3b:db:f6:ad:6d:8c:8c:6e:29:ec:2f:42:7d:b0:b2:82:f5:05:
6c:e4:3c:be:a4:0f:0f:31:0c:b7:c0:4b:e4:d8:25:68:2f:c2:
78:7c:78:06:19:2d:82:eb:60:db:a6:c2:9f:78:e7:90:8a:a8:
2d:bf:93:1e:a3:7a:9e:49:95:e6:9e:9b:5b:5a:35:f9:41:01:
4f:40:f7:a8:96:3e:c2:22:85:2a:71:44:2e:24:b2:6d:70:ff:
18:1f:f0:ea:95:0d:9c:83:b1:43:e7:c7:5f:23:79:2e:54:f4:
39:45:03:08:4c:d1:f4:89:ca:20:5e:25:6b:01:08:f3:d2:c4:
e3:47:27:ca:75:3b:2b:af:1c:e6:c8:72:c9:14:c1:e5:e2:97:
9f:e8:45:f0:45:b9:e7:c7:7f:e8:a8:ea:d0:ba:f4:19:bd:9c:
0d:8d:a1:99:a2:dd:d3:5f:67:de:22:c0:33:45:98:4c:8e:19:
0b:69:f1:03:03:0c:a5:7c:be:d0:9d:32:87:64:2d:30:5a:da:
5b:e7:6b:cb
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUaDqMNf1T7ZgU+138vYgOroag1R0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUJGNEUzQkZDOTBFMkU1NTZGQjAzM0E2RjYxREY1NTJF
MTMxNTE0QjAeFw0yNjA4MjcwNjAzMDdaFw0yNjA4MjgwOTI1MDdaMDMxMTAvBgNV
BAMTKEI5RDAwODY3QjRBQjgwMTgzNURBNTRGQjM1NjI4MzIyRTBGRTI0MEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBPqABkiuutGFmt6VtpQHxTMbx
nncXXfTP+3k/bhXQudQdnFIHIjAngkemzMXX0dFAOniwwkND8qHeHilr1O49ojma
ZGW0VYv46/ZkXJAOdBiFRIkfTGoRIoD21IHLtGxttNATgAMD0j9dBuu0S09eu+Z4
P+f/Hh3rg30uhsBFk0ktJE2zhneQpSsvb/6b5Kcv0t2FFAKU4VfyxtK4J3MuNsiu
1BFj8ACGYtNzCiNhvi52SlMnSFHnXe7J22ZhbtptJf7CTJosOGkub12m/iPa10bg
N9oL3Os0IkDKV0n8cya9MIsOREIcH8oi1HRXWzv+/AMcsSIuFF1Qq/RB0pmdAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUudAIZ7SrgBg12lT7NWKDIuD+JAwwHwYDVR0j
BBgwFoAUm/Tjv8kOLlVvsDOm9h31UuExUUswDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZTExMzI0OTctNTk2My00N2FhLTlkZTEtNmM4NDk2YTM2ZWI2LzAvOUJGNEUzQkZD
OTBFMkU1NTZGQjAzM0E2RjYxREY1NTJFMTMxNTE0Qi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85QkY0RTNCRkM5MEUyRTU1NkZCMDMzQTZGNjFERjU1MkUxMzE1
MTRCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTExMzI0OTctNTk2My00N2FhLTlk
ZTEtNmM4NDk2YTM2ZWI2LzAvOUJGNEUzQkZDOTBFMkU1NTZGQjAzM0E2RjYxREY1
NTJFMTMxNTE0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAAn1D/XipRiZkENKzP6Sxwh7+vZu7ox0K9Q8
T/o+H835rEQc9RQU0HPPT2j+62ZZEqnkNBGR3zvb9q1tjIxuKewvQn2wsoL1BWzk
PL6kDw8xDLfAS+TYJWgvwnh8eAYZLYLrYNumwp9455CKqC2/kx6jep5Jleaem1ta
NflBAU9A96iWPsIihSpxRC4ksm1w/xgf8OqVDZyDsUPnx18jeS5U9DlFAwhM0fSJ
yiBeJWsBCPPSxONHJ8p1OyuvHObIcskUweXil5/oRfBFuefHf+io6tC69Bm9nA2N
oZmi3dNfZ94iwDNFmEyOGQtp8QMDDKV8vtCdModkLTBa2lvna8s=
-----END CERTIFICATE-----
Generated at Thu Aug 27 17:40:03 2026 by rpki-client