
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.mft
File: 9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.mft (raw, json)
Hash identifier: zK40Y515AfKMyhQ8kwY/2TGI91o1AeReIA2rF6cR9HI=
Subject key identifier: EF:15:85:EF:2A:43:E8:75:36:13:20:09:51:6A:35:20:73:66:AB:F8
Authority key identifier: 9C:23:FB:3E:8B:85:96:1F:D4:8B:C7:80:DA:F4:4C:EF:B6:47:C6:E9
Certificate issuer: /CN=9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9
Certificate serial: 777930C9A90DC145795A5AB2E1D80556EAFA8658
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.mft
Manifest number: 7C
Signing time: Sun 02 Aug 2026 15:36:18 +0000
Manifest this update: Sun 02 Aug 2026 15:31:18 +0000
Manifest next update: Mon 03 Aug 2026 15:45:18 +0000
Files and hashes: 1: 3136302e32322e3230382e302f32332d3234203d3e20313532383239.roa (hash: geTlR2xlRfEtN72u5a2Y4lLKK2jTFc1FYHlhZP1ErB8=)
2: 9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.crl (hash: zmmMvIzf4KICpkiLXh6Oa0YVghVaI/hXp5uMLai0rJ8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.crl
rsync://rpki-rsync.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 15:45:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:79:30:c9:a9:0d:c1:45:79:5a:5a:b2:e1:d8:05:56:ea:fa:86:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9
Validity
Not Before: Aug 2 15:31:18 2026 GMT
Not After : Aug 3 15:45:18 2026 GMT
Subject: CN=EF1585EF2A43E87536132009516A35207366ABF8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e6:59:3b:d9:e0:20:51:95:cb:7d:10:72:ee:
68:ef:56:57:e2:35:04:82:0a:5b:20:e9:a0:e1:a9:
55:d8:ad:fe:c0:8f:2a:33:e0:8b:e0:2c:4b:96:a8:
a4:bc:ad:1b:57:de:15:8e:43:ac:c3:e2:ca:de:84:
2f:cf:f8:2d:46:c9:53:4e:e6:88:ab:b8:0c:dd:ec:
bd:2b:42:42:87:00:bd:88:a1:15:ea:20:30:fa:7d:
5f:e0:40:72:7c:0c:28:73:90:30:44:79:22:9f:26:
26:4d:03:38:af:6f:bc:4a:d0:74:25:e9:b6:da:31:
8c:1e:35:4e:8b:04:6d:a2:a6:18:72:be:38:ec:6e:
ea:50:cf:58:03:0b:bb:2f:22:c2:d9:7b:2a:88:8b:
23:06:0a:2b:48:86:d5:3e:68:01:bc:c5:1a:9a:28:
d3:36:2e:8c:63:8c:ab:a3:c9:8b:35:cb:75:8d:9f:
09:e7:f2:cc:d8:71:5b:07:74:4f:dd:61:b2:40:11:
ef:6e:3b:19:e5:b9:cc:c5:79:09:1d:dd:5c:55:55:
2a:33:4f:c1:39:6b:bb:b3:ab:b2:4e:bd:de:03:84:
6a:f0:1f:5f:a7:25:65:b7:41:f6:da:2a:c5:c2:99:
a2:8d:ec:ec:66:29:72:3f:b2:bb:b9:78:6a:0f:45:
39:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:15:85:EF:2A:43:E8:75:36:13:20:09:51:6A:35:20:73:66:AB:F8
X509v3 Authority Key Identifier:
keyid:9C:23:FB:3E:8B:85:96:1F:D4:8B:C7:80:DA:F4:4C:EF:B6:47:C6:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:69:35:1b:32:d7:cc:0e:13:72:f4:ab:5c:de:32:7b:2a:ca:
de:0a:8f:41:94:02:0a:d9:1d:94:5b:de:53:f6:b4:b3:00:a4:
58:af:6f:b4:39:dc:9a:f6:ef:d7:f6:80:76:fa:72:f6:98:61:
2f:93:ea:10:00:43:f8:59:19:24:46:3a:76:50:c0:74:fa:87:
cc:11:94:7d:7a:be:10:4e:96:1d:94:a8:72:d7:86:8c:94:20:
51:cc:74:a3:3f:6d:f5:fd:f9:ab:fb:a2:c9:de:43:63:08:e9:
95:40:5d:16:0a:00:96:b3:30:a0:da:09:c1:e3:37:3d:b9:57:
1e:03:9b:2e:1d:73:d3:3e:20:0c:a2:d0:e2:0d:cd:e5:35:ea:
d9:b4:6b:59:38:e4:3b:74:8d:12:3a:10:3c:f3:0c:dd:9c:ce:
81:46:88:09:73:81:79:0f:44:a9:07:ac:1a:1b:a9:32:62:2d:
6c:16:25:b3:51:42:00:d0:84:d8:07:6c:3d:12:14:97:15:22:
9f:fa:bc:0b:50:aa:29:ab:da:67:98:a1:4d:28:11:df:80:77:
78:65:82:b6:c0:b5:db:e6:e3:95:97:77:4c:87:15:4f:bf:f7:
a0:86:19:74:1a:6b:39:38:07:f0:9f:3c:d4:38:ed:b5:2e:92:
58:88:49:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 2 20:33:44 2026 by rpki-client