
$ rpki-client -vvf rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.mft
File: 9CF05E7024D4A487E0B79E2F57525BF345DB53EC.mft (raw, json)
Hash identifier: WBE5Pqcwxp/V0YRoHiF6TGzZ7FkAAe5/FM5sLY7cvYk=
Subject key identifier: 4D:8A:1C:45:5F:C5:8B:5C:B0:87:61:0B:74:B6:47:D8:56:39:89:B6
Authority key identifier: 9C:F0:5E:70:24:D4:A4:87:E0:B7:9E:2F:57:52:5B:F3:45:DB:53:EC
Certificate issuer: /CN=A9121C330000/serialNumber=9CF05E7024D4A487E0B79E2F57525BF345DB53EC
Certificate serial: 37422BCC8D4D812A13613C3CA1F49E3727E1A41E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer
Subject info access: rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.mft
Manifest number: 04F8
Signing time: Sat 06 Jun 2026 10:31:38 +0000
Manifest this update: Sat 06 Jun 2026 10:26:38 +0000
Manifest next update: Sun 07 Jun 2026 11:28:38 +0000
Files and hashes: 1: 3130332e3137302e3233322e302f32332d3234203d3e20313432363136.roa (hash: VzgTFP3K3ygUqjqoPkC7s7tjeyqTHVnjgq3zWGYCRKg=)
2: 323430373a623963303a623030303a3a2f33362d3438203d3e203233393631.roa (hash: wZpa/GAw/+LZ/5VD3LkDlyxUo6eY0mnlaZ6P5jMgauk=)
3: 323430373a623963303a3a2f33322d3438203d3e203233393631.roa (hash: Chrj9m4BrE2U2pfcWlFNBSg+oO8sOSxTQ6ekpt4BV7I=)
4: 323430373a623963303a3a2f33322d3438203d3e20313432363136.roa (hash: XBT+G1DQ9/F6v2XQZcRxw+M4rvuykMlUtUtQD6DlGXU=)
5: 3130332e3137302e3233322e302f32332d3234203d3e20393137.roa (hash: f/uHdRx9VZqoZk3nqfnUiYoyLo18xCMnrIDjbbMrTto=)
6: 3130332e3137302e3233322e302f32332d3234203d3e203537363935.roa (hash: SPGV8cz23OXVtY1/WBtsxbxXhYFhmyQwGc0AQ879Tzo=)
7: 323430373a623963303a3a2f33322d3438203d3e20393137.roa (hash: EWyx31GnzeEa34YdlCfOKBBLtKjLerW7tETk3ztfEgw=)
8: 323430373a623963303a663030303a3a2f33362d3438203d3e203233393631.roa (hash: Ndg1bmsRuBSL7CF5QQzZOGIFLYIHMSUM05PGM6gpt7I=)
9: 323430373a623963303a666230303a3a2f34342d3438203d3e20393639.roa (hash: jS7uDPReOddZwVCAwtZ435utMhttXzVf5ZdMVbhKurY=)
10: 9CF05E7024D4A487E0B79E2F57525BF345DB53EC.crl (hash: HhGH9LGXchsQZdE0e16lSpeYlHFAwXIu71PYgfKh12c=)
11: 323430373a623963303a3a2f33322d3438203d3e203537363935.roa (hash: tEG9JFKiDdsjMGlGAtGF9ff7/fO0QNV3vFqHY+f6qAc=)
Validation: OK
Signature path: rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.crl
rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 07 Jun 2026 11:28:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:42:2b:cc:8d:4d:81:2a:13:61:3c:3c:a1:f4:9e:37:27:e1:a4:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9121C330000, serialNumber=9CF05E7024D4A487E0B79E2F57525BF345DB53EC
Validity
Not Before: Jun 6 10:26:38 2026 GMT
Not After : Jun 7 11:28:38 2026 GMT
Subject: CN=4D8A1C455FC58B5CB087610B74B647D8563989B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b1:6d:db:20:b7:77:1b:9d:19:f4:6d:93:1c:
b4:39:85:29:7f:a7:9e:da:a3:0f:6b:d2:d4:67:83:
41:a7:c5:a7:8c:15:4c:6d:9e:9b:c9:5d:0c:ff:06:
0c:2c:59:9e:80:83:5e:0d:90:2f:0c:ea:5b:a3:62:
17:70:c7:67:0e:a7:92:de:a2:f5:3d:59:d6:cf:52:
50:c0:cb:9b:11:39:a2:f6:4c:a2:04:c3:ac:38:57:
58:e0:1d:22:d1:e8:7c:fa:0c:38:38:20:1d:2b:ec:
d5:cb:98:29:18:da:82:64:c4:9f:26:0a:26:14:c0:
72:27:ec:0a:c0:c8:62:b5:5c:4b:2d:07:d0:18:d9:
46:5d:4f:29:96:f9:57:82:91:b7:0f:b7:23:51:33:
18:10:7b:af:ce:0d:e1:b6:ec:c6:0e:49:7f:0b:d5:
86:4d:12:f8:b8:1c:56:d7:52:b4:3b:34:24:ff:f2:
05:7b:02:1b:80:07:df:a7:e2:b0:8e:36:64:d1:b2:
9b:75:94:7d:85:ae:f2:e2:54:76:78:9d:5b:03:c5:
a7:c9:24:89:1b:d9:48:62:ff:3e:23:7d:b5:c6:5b:
65:92:51:c7:4f:3d:cd:77:9e:69:5a:a7:b3:4a:7a:
94:1e:9c:cb:ab:98:6f:2e:4a:28:72:50:ef:a0:d0:
49:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:8A:1C:45:5F:C5:8B:5C:B0:87:61:0B:74:B6:47:D8:56:39:89:B6
X509v3 Authority Key Identifier:
keyid:9C:F0:5E:70:24:D4:A4:87:E0:B7:9E:2F:57:52:5B:F3:45:DB:53:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:c0:29:41:42:85:7d:41:49:11:d3:94:33:f4:0c:ba:e0:fc:
a3:b1:09:c3:15:af:d6:40:03:c3:1e:da:2a:89:a8:80:5f:aa:
6b:8a:a0:17:20:31:e0:8a:75:4d:c3:e9:45:21:e6:d8:36:5b:
01:bd:9d:ce:b8:28:ee:39:f0:07:87:ed:be:b9:ed:09:b9:2d:
91:c3:ef:82:55:bd:16:13:8e:ad:af:2b:71:3d:59:3f:5b:1c:
5a:0f:43:98:5a:30:e5:22:03:b5:b3:39:3e:b3:95:bc:3c:1d:
ab:65:9c:6d:20:bc:6a:2c:28:2a:5c:ba:4c:fd:91:d9:5a:9c:
50:f3:d7:8b:36:55:c5:9d:e9:67:bf:27:22:95:c0:f1:08:88:
c1:59:eb:c4:d7:86:e9:a5:7b:c2:75:3e:34:7b:fa:6e:3b:eb:
5f:b1:e8:08:28:a4:5e:8b:33:f2:f0:f6:18:e0:94:21:5d:3f:
44:f9:4a:15:48:26:57:16:81:65:d6:0c:6f:27:28:40:8a:a7:
63:63:36:25:40:67:cc:b1:df:04:3f:e8:7b:4a:0d:cd:3b:94:
44:6b:c1:c4:8c:84:9d:53:7e:85:92:98:c8:cc:29:c8:22:e7:
6f:d3:e3:50:b3:12:61:e9:8f:78:35:c5:47:52:b7:21:90:20:
44:36:03:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 14:57:04 2026 by rpki-client