
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/12099D13750CE0704F5D87C255E4B056E703B28D.mft
File: 12099D13750CE0704F5D87C255E4B056E703B28D.mft (raw, json)
Hash identifier: hFcaGMg3kbMa+CL0fp1qacNyCDoCQd3bMdVmGhvP5Xc=
Subject key identifier: CE:94:7A:FF:F4:6E:D0:CA:36:E2:CE:CC:C4:05:8B:49:B7:27:84:4F
Authority key identifier: 12:09:9D:13:75:0C:E0:70:4F:5D:87:C2:55:E4:B0:56:E7:03:B2:8D
Certificate issuer: /CN=12099D13750CE0704F5D87C255E4B056E703B28D
Certificate serial: 369E242A45353B17FA771999A4CADD4479C8C404
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/12099D13750CE0704F5D87C255E4B056E703B28D.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/12099D13750CE0704F5D87C255E4B056E703B28D.mft
Manifest number: B8
Signing time: Wed 16 Sep 2026 19:43:27 +0000
Manifest this update: Wed 16 Sep 2026 19:38:27 +0000
Manifest next update: Thu 17 Sep 2026 20:25:27 +0000
Files and hashes: 1: 3130332e3234372e3234322e302f32332d3234203d3e20313531353337.roa (hash: guj2wYIy2OeBYkQ4ioJGOVZvTeDH758uPYwCniNJbeE=)
2: 12099D13750CE0704F5D87C255E4B056E703B28D.crl (hash: 2KbJCwNtajuZspDhnRfyfTcl6Y1Y8CHUgH9+ju2Uwrg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/12099D13750CE0704F5D87C255E4B056E703B28D.crl
rsync://rpki-rsync.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/12099D13750CE0704F5D87C255E4B056E703B28D.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/12099D13750CE0704F5D87C255E4B056E703B28D.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 20:25:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:9e:24:2a:45:35:3b:17:fa:77:19:99:a4:ca:dd:44:79:c8:c4:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12099D13750CE0704F5D87C255E4B056E703B28D
Validity
Not Before: Sep 16 19:38:27 2026 GMT
Not After : Sep 17 20:25:27 2026 GMT
Subject: CN=CE947AFFF46ED0CA36E2CECCC4058B49B727844F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:2c:0f:a2:62:d9:a9:40:ba:50:45:f9:f8:e6:
0f:3e:8f:d4:38:15:97:a9:c6:b4:c1:f5:fc:27:f6:
b9:23:63:dc:98:d4:18:fc:6b:09:49:20:23:41:11:
2b:3b:72:23:83:f5:9e:d5:37:9e:c5:05:6d:8c:0e:
c5:4e:1e:00:23:b4:b9:0a:5b:38:0c:45:7e:68:84:
41:77:ae:a3:e4:a0:02:06:81:ee:c8:8e:1e:e1:0d:
7c:c4:13:34:c9:ef:f0:4d:6a:14:ba:20:bd:92:5a:
17:bd:99:30:27:51:c0:0c:8b:63:63:e6:83:8c:44:
86:56:be:ec:dc:01:2c:5c:19:79:14:f2:ca:a7:39:
52:36:c9:5b:74:9d:ea:20:50:67:c4:d1:a8:2b:8b:
4a:5c:22:af:8c:a4:4a:9b:46:f3:5f:0b:e8:55:87:
b4:71:a2:76:e1:c4:c2:95:2b:39:f6:cf:df:c1:89:
90:a8:87:0c:b7:21:d7:70:0e:41:b5:e0:e4:3d:fc:
26:cd:94:c7:61:c8:1c:01:b6:6f:6e:81:61:d0:c0:
43:a0:d1:4a:ee:bb:65:1c:c3:79:be:03:8c:9b:2c:
d1:6d:ba:f5:0a:9b:24:55:dc:cf:95:f1:94:c6:ec:
09:aa:8f:85:ce:b6:41:ce:18:f4:ff:f9:33:c4:eb:
27:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:94:7A:FF:F4:6E:D0:CA:36:E2:CE:CC:C4:05:8B:49:B7:27:84:4F
X509v3 Authority Key Identifier:
keyid:12:09:9D:13:75:0C:E0:70:4F:5D:87:C2:55:E4:B0:56:E7:03:B2:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/12099D13750CE0704F5D87C255E4B056E703B28D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/12099D13750CE0704F5D87C255E4B056E703B28D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/12099D13750CE0704F5D87C255E4B056E703B28D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:7b:09:0d:2c:89:41:f4:2f:9c:86:92:b3:dc:b3:01:9f:82:
90:5a:3d:93:ce:3b:72:90:f7:e4:8a:32:44:76:94:38:03:1b:
af:76:83:4a:02:13:8e:48:a5:1f:12:21:cd:46:b8:a5:b7:de:
a0:1b:fd:f9:e0:52:8c:a4:08:99:81:04:01:89:bc:39:68:a6:
51:63:e8:15:5f:67:5d:dd:0e:37:e7:50:00:ea:85:e3:61:7c:
86:17:d6:92:37:f6:3b:43:64:ab:8c:54:9a:ce:e1:02:a6:c2:
63:2d:1c:d9:e0:2b:9d:63:43:ed:48:1a:b8:f6:40:e4:c5:29:
2a:09:57:e3:4e:ca:0c:07:70:dd:a7:06:07:55:bb:79:95:d1:
18:fe:a7:0f:a8:88:7f:b8:ef:31:5b:bd:14:3b:c2:8d:18:40:
10:dd:25:2b:d0:3b:3b:78:91:c6:d8:43:42:78:75:0d:2e:6e:
b9:2d:90:21:f6:9e:bd:06:07:e3:b0:65:7d:9b:90:9a:86:e2:
f9:c1:34:f6:a5:36:94:f5:c9:bb:bf:7a:58:5c:2f:22:77:7f:
74:96:de:68:41:e3:4b:75:7d:d9:29:61:a5:89:f8:03:78:1f:
fb:06:50:ff:34:32:79:48:56:b6:fb:e3:e8:19:64:cb:78:12:
de:d0:ac:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 10:54:13 2026 by rpki-client