
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/A9BFA348A050E46482F4E00C605FF9961247FC64.mft
File: A9BFA348A050E46482F4E00C605FF9961247FC64.mft (raw, json)
Hash identifier: akSHc4HLjJuSkBRhOBnWR4lnJPrL/CX/OWxrME/p/Jc=
Subject key identifier: 09:12:8B:E5:21:AE:69:8C:DE:D7:C6:0E:A1:79:8A:BD:20:70:56:7C
Authority key identifier: A9:BF:A3:48:A0:50:E4:64:82:F4:E0:0C:60:5F:F9:96:12:47:FC:64
Certificate issuer: /CN=A9BFA348A050E46482F4E00C605FF9961247FC64
Certificate serial: 77A3C8A6BB69C228C72F38F95BA9F6FFB3790B1D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9BFA348A050E46482F4E00C605FF9961247FC64.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/A9BFA348A050E46482F4E00C605FF9961247FC64.mft
Manifest number: 38
Signing time: Fri 12 Jun 2026 06:43:46 +0000
Manifest this update: Fri 12 Jun 2026 06:38:46 +0000
Manifest next update: Sat 13 Jun 2026 10:32:46 +0000
Files and hashes: 1: 323430333a623230303a3166653a3a2f34382d3438203d3e203233363731.roa (hash: r6fMNtgJIoHgjV3DFpNsgQ1H8cmQbjMCcbKig24MDXk=)
2: 3131312e39322e3137302e302f32342d3234203d3e203233363731.roa (hash: UwBVAcKHZ4f4hQBOzL0Sd4Fm5LmC4c+ionV2pYmo7/o=)
3: A9BFA348A050E46482F4E00C605FF9961247FC64.crl (hash: 576h0n+xf8fWcnpWOvfZg//U2YdV/6yTM8GNxA/DVi0=)
4: 3131312e39322e3136382e302f32342d3234203d3e203233363731.roa (hash: Zs7TRnZe5BNsoAw7Vlg7d8WTD6Yej6D1y1DZK+qwGSo=)
5: 3131312e39322e3136352e302f32342d3234203d3e203233363731.roa (hash: H7aX+6aTRF1Nj4kzc1OuSxt8gZOvC6ixFR9qSLZfj6Q=)
6: 3131312e39322e3136342e302f32342d3234203d3e203233363731.roa (hash: wNQ3Qkv9biOpVvnJgROiOoJs/1gZSgV49b5TXX2+3Z4=)
7: 3131312e39322e3137342e302f32342d3234203d3e203233363731.roa (hash: GuV6Rg2wTEoGKg9NRtGF/nlE2uCUCHsreSMW9u/k6bA=)
8: 323430333a623230303a3a2f33322d3438203d3e203233363731.roa (hash: 2aLawRYLy3KCYufu2NaJ3HYybrz6F8WpwigQMHaYOu8=)
9: 323430333a623230303a613939633a3a2f34382d3438203d3e203338353036.roa (hash: XAeIzu631fi3CwuOFGNDoY933yMIfsvYuPPKWulTcYM=)
10: 323430333a623230303a3233373a3a2f34382d3438203d3e203233363731.roa (hash: S+jEWzFEnfshlynIM2/L8ivR0r7b8KQ+/HC/tf13JGI=)
11: 3131312e39322e3137342e302f32332d3234203d3e203233363731.roa (hash: w12lGkVliS3y+76XSl6gzHQHimzilNFu+hS9Qt8ntF0=)
12: 323430333a623230303a3233303a3a2f34382d3438203d3e203233363731.roa (hash: GGTpraPioXOfseSGJKXessD1JJQRRiypizczW1Hzdy0=)
13: 3131312e39322e3136372e302f32342d3234203d3e203233363731.roa (hash: 7eo+DUwzfso/gGHNjcQAtGfgWMCxkON/A6PVQqojzIw=)
14: 3131312e39322e3137312e302f32342d3234203d3e203233363731.roa (hash: LSQJykz8Xa8OUBE1CJt+TyLaezRgkEysTciohkEfAhc=)
15: 3131312e39322e3136362e302f32342d3234203d3e203233363731.roa (hash: ZVviuvnexquFN2F18kLTWUBNgOrAM1n1Wa8GZF9ayTM=)
16: 3131312e39322e3136322e302f32342d3234203d3e203338353036.roa (hash: 2dlHVfZFD/szRhd8hUNYHiAVCewx+xASxFEiirRYGTg=)
17: 3230322e3136392e3232342e302f32302d3234203d3e203233363731.roa (hash: 4ByDuJtt3A8/OMYgUMLRW5zT+7DYjf2+SVe78YDt8J8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/A9BFA348A050E46482F4E00C605FF9961247FC64.crl
rsync://rpki-rsync.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/A9BFA348A050E46482F4E00C605FF9961247FC64.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9BFA348A050E46482F4E00C605FF9961247FC64.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 08:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:a3:c8:a6:bb:69:c2:28:c7:2f:38:f9:5b:a9:f6:ff:b3:79:0b:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9BFA348A050E46482F4E00C605FF9961247FC64
Validity
Not Before: Jun 12 06:38:46 2026 GMT
Not After : Jun 13 10:32:46 2026 GMT
Subject: CN=09128BE521AE698CDED7C60EA1798ABD2070567C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4c:ef:0e:1a:fb:52:84:53:de:76:fb:df:9a:
55:f5:8f:3a:f2:41:b7:63:bf:17:e7:56:66:35:c4:
21:11:88:f3:88:d6:ce:57:25:7a:92:83:a4:12:61:
9c:71:e6:9c:c0:f6:8e:bc:29:7a:3c:dd:3a:c5:ac:
ac:07:df:78:66:99:5a:45:72:27:f2:de:8a:a0:c4:
2a:7b:ad:1d:f3:d6:25:5a:fa:55:13:0a:a8:c3:c5:
62:e2:9a:a1:27:12:7f:fe:5e:d2:84:56:d0:d3:0a:
c1:58:a7:ab:89:81:bf:45:31:c2:1f:d7:79:6e:33:
22:d3:b5:80:5b:6a:f4:6e:80:45:2e:1b:86:b8:f8:
7a:cb:65:7d:94:97:51:0f:d9:17:d4:0b:c1:ad:0d:
1d:32:7a:83:4e:aa:e7:9f:18:2f:79:66:44:03:ad:
6b:17:ed:f3:28:54:30:9a:f0:4c:5e:c5:c6:5a:af:
51:4d:1d:fc:35:ea:d4:98:11:d6:9d:d1:f9:37:51:
35:17:4c:7f:8d:7c:38:c9:f2:33:c2:11:9a:9a:94:
17:4a:78:b6:bf:bb:01:14:5f:f9:27:c8:08:85:d7:
34:72:e1:2a:3e:30:c7:40:ee:5e:b0:3d:9e:38:1c:
23:cf:49:d5:38:35:e3:08:53:0b:ee:a0:3f:0c:21:
8b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:12:8B:E5:21:AE:69:8C:DE:D7:C6:0E:A1:79:8A:BD:20:70:56:7C
X509v3 Authority Key Identifier:
keyid:A9:BF:A3:48:A0:50:E4:64:82:F4:E0:0C:60:5F:F9:96:12:47:FC:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/A9BFA348A050E46482F4E00C605FF9961247FC64.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9BFA348A050E46482F4E00C605FF9961247FC64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/A9BFA348A050E46482F4E00C605FF9961247FC64.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:a1:9f:f4:1a:4d:4d:8b:04:f4:e3:31:85:d6:40:0d:3e:bc:
22:8a:36:db:17:9b:14:c7:be:5b:35:f8:e7:fc:c1:6d:fe:da:
61:c8:29:72:99:dd:7d:7d:9b:55:04:54:dd:d0:6f:71:02:3b:
e7:65:b7:70:67:33:ce:b9:cd:bd:7f:15:6d:a7:32:76:8b:24:
08:09:e5:98:25:05:af:03:cb:8e:02:a5:88:76:8c:4f:8c:8e:
46:bc:f2:61:3c:4b:6b:fa:91:35:91:93:cf:b3:3f:0e:9c:47:
c1:f1:00:fe:c0:b3:bc:bc:a1:f9:68:e9:e6:a3:bf:0a:fd:81:
3d:dc:cd:30:16:66:74:67:7b:98:30:af:ae:5f:96:c4:07:7a:
11:d7:b7:78:09:d1:6c:71:3f:48:ad:36:30:bd:14:11:fb:10:
6c:dd:c3:93:86:99:bd:55:f9:d7:67:68:74:89:c1:9f:39:62:
3d:bd:c2:fb:71:48:b3:a3:96:a6:70:4a:57:31:55:e6:1c:27:
66:14:de:d1:46:bc:ec:6f:fd:99:d3:fa:a9:e7:83:88:ab:63:
34:8b:9f:9e:5a:ee:ce:28:76:f1:be:97:82:ce:6a:2b:10:ba:
da:c4:ba:5d:76:7d:36:ff:61:f3:56:16:e4:07:e2:b5:d7:2a:
56:ad:c0:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 14:37:12 2026 by rpki-client