
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/9EDD58FB55B45037D75C83359B697B445D7A5AF0.mft
File: 9EDD58FB55B45037D75C83359B697B445D7A5AF0.mft (raw, json)
Hash identifier: Ishv70vsDg2CoH3VrdTnifE/DUwPCagJno7u9fuI8P0=
Subject key identifier: D7:B9:DA:BC:66:32:B3:16:CF:16:A9:C6:6E:56:AF:20:74:93:FB:A6
Authority key identifier: 9E:DD:58:FB:55:B4:50:37:D7:5C:83:35:9B:69:7B:44:5D:7A:5A:F0
Certificate issuer: /CN=9EDD58FB55B45037D75C83359B697B445D7A5AF0
Certificate serial: 54298D4A86415CAB92512EB3F2CA0016ED451AED
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EDD58FB55B45037D75C83359B697B445D7A5AF0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/9EDD58FB55B45037D75C83359B697B445D7A5AF0.mft
Manifest number: 47
Signing time: Wed 24 Jun 2026 04:25:47 +0000
Manifest this update: Wed 24 Jun 2026 04:20:47 +0000
Manifest next update: Thu 25 Jun 2026 07:27:47 +0000
Files and hashes: 1: 34392e302e32342e302f32332d3234203d3e203137393935.roa (hash: JCF66MyDOPPpoP3h97z544G+/kStkUh5SxWxjVUNyZE=)
2: 3130332e3136342e31342e302f32332d3234203d3e20313532303537.roa (hash: mH28ada8E5i3aNud985QIm6IhE3W0Yqx49iijo6/+ho=)
3: 3131302e39322e37322e302f32332d3234203d3e203137393935.roa (hash: EnY0Hs+doVUANIJECCY02CNqFLFOHODN+SHTHjgvg80=)
4: 9EDD58FB55B45037D75C83359B697B445D7A5AF0.crl (hash: OhUJbC12ECu4UwUaUXMf4JP7HTJY2WH4+Ylrww+aszk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/9EDD58FB55B45037D75C83359B697B445D7A5AF0.crl
rsync://rpki-rsync.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/9EDD58FB55B45037D75C83359B697B445D7A5AF0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EDD58FB55B45037D75C83359B697B445D7A5AF0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Jun 2026 06:44:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:29:8d:4a:86:41:5c:ab:92:51:2e:b3:f2:ca:00:16:ed:45:1a:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9EDD58FB55B45037D75C83359B697B445D7A5AF0
Validity
Not Before: Jun 24 04:20:47 2026 GMT
Not After : Jun 25 07:27:47 2026 GMT
Subject: CN=D7B9DABC6632B316CF16A9C66E56AF207493FBA6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:6c:43:53:fd:60:9f:d8:6a:83:5b:d2:17:89:
54:9a:ce:2f:06:56:4f:b7:fb:97:22:3f:f8:e8:51:
7f:cc:5f:7b:65:5d:0a:6d:f5:1d:8c:47:a1:f9:dc:
f9:26:21:04:ea:20:7d:8a:8a:a7:08:b0:96:38:a9:
9e:08:c7:f8:dd:89:81:af:6d:4a:26:50:32:fe:80:
d9:73:0e:c7:75:d6:6c:1d:11:1a:52:d2:8f:ca:1d:
65:47:f5:3d:a0:53:d2:b2:e7:bb:cd:41:d0:4a:ad:
d5:a3:46:bb:a2:75:fb:cc:d3:0a:eb:0e:f4:a7:e6:
23:3a:93:46:41:6a:77:e8:cb:88:7b:12:96:78:31:
df:4f:c3:af:ce:5b:eb:4d:43:aa:d0:91:62:a2:c7:
5f:f4:44:66:aa:56:06:81:5c:7c:fc:1e:ae:4a:51:
5e:8e:e0:e3:cc:7f:ae:01:0b:58:db:fe:88:bf:ca:
2f:50:ff:6e:27:36:02:86:9b:9b:bd:2b:3a:4e:a9:
5e:4e:ec:7a:ed:ed:41:b0:8e:54:c6:5a:4e:33:5d:
62:b5:0f:14:f0:02:c0:29:b2:e2:35:21:b1:5a:d4:
81:25:ae:ef:c6:b1:26:d3:47:1f:4f:89:dc:9e:8c:
68:94:8f:34:31:f3:7b:01:23:65:ed:7e:39:08:7f:
83:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:B9:DA:BC:66:32:B3:16:CF:16:A9:C6:6E:56:AF:20:74:93:FB:A6
X509v3 Authority Key Identifier:
keyid:9E:DD:58:FB:55:B4:50:37:D7:5C:83:35:9B:69:7B:44:5D:7A:5A:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/9EDD58FB55B45037D75C83359B697B445D7A5AF0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EDD58FB55B45037D75C83359B697B445D7A5AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/9EDD58FB55B45037D75C83359B697B445D7A5AF0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:78:64:35:be:24:7c:1b:d9:41:b4:cf:99:da:f5:5b:a3:a7:
a7:37:cb:64:0e:bc:3e:47:f7:3a:47:89:5c:17:d4:be:a1:2e:
d9:e0:5b:77:68:83:5c:35:ff:90:b5:08:32:e2:a1:e3:19:36:
dd:29:39:cf:d1:a8:86:5f:38:e0:2b:31:30:c0:2b:4c:48:4c:
bd:73:4c:68:b8:22:45:54:81:6b:44:d1:8e:2b:1f:3d:fb:bc:
23:a7:36:dd:53:1f:df:a3:7d:04:90:79:f0:f0:0e:2d:71:bb:
64:12:c8:01:66:9b:a4:2d:93:c6:de:49:03:7b:53:72:0e:93:
12:c3:01:3f:99:a1:2f:a3:17:6d:af:2d:c3:1c:b4:32:c4:59:
62:eb:68:86:d2:dc:fb:22:62:70:1a:84:cc:fd:44:f1:7a:09:
13:00:82:81:33:38:e3:a0:dd:9d:8e:07:8f:d9:dc:9e:90:8d:
36:73:7f:b6:e9:43:41:ed:54:e8:91:ff:40:20:4b:3d:c0:30:
6c:5e:9b:66:a7:2e:72:13:60:5a:68:92:e2:a6:8f:06:6c:76:
aa:12:a9:61:a5:1a:ad:3a:4c:71:4d:6b:33:2a:23:2d:83:c8:
d6:40:29:5d:21:65:2c:3a:ec:13:60:40:29:b3:7a:78:75:17:
9b:73:87:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 16:22:12 2026 by rpki-client