
$ rpki-client -vvf rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.mft
File: 9CF05E7024D4A487E0B79E2F57525BF345DB53EC.mft (raw, json)
Hash identifier: dXgSQ2V258Bx18g649SKJgtDt43vd2cM4ynNOJsBFI8=
Subject key identifier: 20:7F:8A:11:A9:42:50:CD:82:7C:7D:66:5D:B3:67:23:11:4E:0E:C2
Authority key identifier: 9C:F0:5E:70:24:D4:A4:87:E0:B7:9E:2F:57:52:5B:F3:45:DB:53:EC
Certificate issuer: /CN=A9121C330000/serialNumber=9CF05E7024D4A487E0B79E2F57525BF345DB53EC
Certificate serial: 3968821EADE0302343366BD57E9D4D0441438D55
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer
Subject info access: rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.mft
Manifest number: 03C6
Signing time: Thu 23 Oct 2025 16:58:32 +0000
Manifest this update: Thu 23 Oct 2025 16:53:32 +0000
Manifest next update: Fri 24 Oct 2025 19:22:32 +0000
Files and hashes: 1: 323430373a623963303a666230303a3a2f34342d3438203d3e20393639.roa (hash: jS7uDPReOddZwVCAwtZ435utMhttXzVf5ZdMVbhKurY=)
2: 323430373a623963303a3a2f33322d3438203d3e20313432363136.roa (hash: XBT+G1DQ9/F6v2XQZcRxw+M4rvuykMlUtUtQD6DlGXU=)
3: 3130332e3137302e3233322e302f32332d3234203d3e203537363935.roa (hash: SPGV8cz23OXVtY1/WBtsxbxXhYFhmyQwGc0AQ879Tzo=)
4: 323430373a623963303a663030303a3a2f33362d3438203d3e203233393631.roa (hash: Ndg1bmsRuBSL7CF5QQzZOGIFLYIHMSUM05PGM6gpt7I=)
5: 9CF05E7024D4A487E0B79E2F57525BF345DB53EC.crl (hash: +HTT0WsemNtCABdS9j98nVNr8n93BnPTcgpP/7affRY=)
6: 323430373a623963303a3a2f33322d3438203d3e203537363935.roa (hash: tEG9JFKiDdsjMGlGAtGF9ff7/fO0QNV3vFqHY+f6qAc=)
7: 323430373a623963303a3a2f33322d3438203d3e203233393631.roa (hash: Chrj9m4BrE2U2pfcWlFNBSg+oO8sOSxTQ6ekpt4BV7I=)
8: 323430373a623963303a623030303a3a2f33362d3438203d3e203233393631.roa (hash: wZpa/GAw/+LZ/5VD3LkDlyxUo6eY0mnlaZ6P5jMgauk=)
9: 323430373a623963303a3a2f33322d3438203d3e20393137.roa (hash: EWyx31GnzeEa34YdlCfOKBBLtKjLerW7tETk3ztfEgw=)
10: 3130332e3137302e3233322e302f32332d3234203d3e20313432363136.roa (hash: VzgTFP3K3ygUqjqoPkC7s7tjeyqTHVnjgq3zWGYCRKg=)
11: 3130332e3137302e3233322e302f32332d3234203d3e20393137.roa (hash: f/uHdRx9VZqoZk3nqfnUiYoyLo18xCMnrIDjbbMrTto=)
Validation: OK
Signature path: rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.crl
rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Oct 2025 19:22:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:68:82:1e:ad:e0:30:23:43:36:6b:d5:7e:9d:4d:04:41:43:8d:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9121C330000, serialNumber=9CF05E7024D4A487E0B79E2F57525BF345DB53EC
Validity
Not Before: Oct 23 16:53:32 2025 GMT
Not After : Oct 24 19:22:32 2025 GMT
Subject: CN=207F8A11A94250CD827C7D665DB36723114E0EC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2d:ea:28:4d:fd:93:01:44:0d:52:71:52:4f:
1f:2c:95:28:33:b5:33:f7:4f:37:00:2f:e4:c6:46:
35:66:e2:b6:2b:38:b0:36:90:c6:61:95:da:2e:b4:
e9:31:6a:d1:15:89:71:e4:a9:d8:86:65:1f:bc:71:
e3:0e:0e:25:71:5f:3e:65:de:2b:8f:16:4c:21:14:
36:fe:f0:ad:36:28:6c:d3:ec:19:33:a1:4b:90:13:
91:e3:5c:70:7e:1d:b2:14:02:2e:df:19:8f:2e:c3:
72:6b:ee:5f:4c:c7:01:50:62:e7:83:fb:6f:11:93:
38:3c:d3:0e:d6:5a:21:01:c2:87:a8:1d:0f:a9:07:
58:25:a5:e9:f9:1a:14:5d:cb:e6:37:6e:c1:97:78:
8f:e3:72:ea:41:e1:08:ad:e8:92:5c:01:89:d6:28:
93:f9:c1:09:1e:a0:1b:68:04:69:e4:06:01:14:62:
3d:51:20:f2:61:9e:b8:aa:e3:d2:7e:46:53:7d:aa:
b7:f8:a5:eb:4d:b4:e3:ea:ce:c8:6c:de:c6:53:17:
8f:17:c8:2c:59:06:41:e7:92:8d:84:da:02:c1:06:
11:8d:6f:82:78:08:5d:ad:fb:66:c7:f3:fa:8a:7d:
98:34:16:25:ab:81:92:2c:21:f4:de:09:06:a3:46:
5a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:7F:8A:11:A9:42:50:CD:82:7C:7D:66:5D:B3:67:23:11:4E:0E:C2
X509v3 Authority Key Identifier:
keyid:9C:F0:5E:70:24:D4:A4:87:E0:B7:9E:2F:57:52:5B:F3:45:DB:53:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:35:47:c7:94:b7:91:bc:72:23:66:c3:0f:c6:a2:d5:51:32:
98:92:d1:ba:9b:4b:6d:90:c6:1a:63:7e:be:dc:29:80:c2:ab:
9a:97:91:0c:ee:89:60:f5:20:0c:ab:5f:88:26:1e:9c:3e:46:
64:be:7e:e3:67:e4:d4:84:8c:69:67:5a:f3:a2:cc:60:7b:43:
8c:bb:72:01:fe:0d:53:9f:08:33:20:8b:cf:a3:ad:af:42:de:
25:0a:46:fb:0c:19:75:d6:05:a3:f3:0d:cc:00:a0:75:72:30:
11:7d:b7:de:d0:97:02:3f:67:1f:71:05:ec:5f:81:32:3b:b1:
37:44:7f:18:70:d2:f4:69:64:e3:fc:70:75:78:ef:67:fd:a3:
8e:ff:be:e6:5f:56:7e:fa:84:91:1b:38:5f:75:16:8e:d7:05:
93:64:e5:52:f9:5a:03:f4:f1:a0:4f:e4:dd:71:0b:d1:f4:b9:
28:e7:d3:04:12:98:71:3b:2f:d4:11:3d:7a:d4:e3:b0:30:22:
21:56:96:50:8f:61:0e:3d:42:70:ef:d6:5b:70:03:02:dc:c4:
34:f1:ea:70:2f:3a:7c:39:b8:a8:cd:34:15:64:48:07:4d:07:
b9:90:79:ee:c7:9e:d1:65:ab:ca:2a:f7:62:f1:72:ed:ab:ca:
87:85:15:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 23:59:23 2025 by rpki-client