
$ rpki-client -vvvf rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.mft
File: 9CF05E7024D4A487E0B79E2F57525BF345DB53EC.mft (raw, json)
Hash identifier: 3vjAjCGjObUESsIWVnAi3r6SqYYTyDO98FcMHyZ6dHQ=
Subject key identifier: DD:E3:D9:64:41:FF:D6:CC:CF:27:33:79:3F:55:B3:21:5D:9C:88:07
Authority key identifier: 9C:F0:5E:70:24:D4:A4:87:E0:B7:9E:2F:57:52:5B:F3:45:DB:53:EC
Certificate issuer: /CN=A9121C330000/serialNumber=9CF05E7024D4A487E0B79E2F57525BF345DB53EC
Certificate serial: 5C38C4B17E7E51DFE33F49A69818D91CFE798F6C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer
Subject info access: rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.mft
Manifest number: 05BC
Signing time: Mon 26 Oct 2026 01:18:09 +0000
Manifest this update: Mon 26 Oct 2026 01:13:09 +0000
Manifest next update: Tue 27 Oct 2026 03:10:09 +0000
Files and hashes: 1: 323430373a623963303a3a2f33322d3438203d3e20393137.roa (hash: buB7BeNJJpfUqSepABWtofQu4tnwgLSJabt42xNftz0=)
2: 3130332e3137302e3233322e302f32332d3234203d3e20313432363136.roa (hash: /MeVu4I/Ar0LhsUQGKTcOtlumyGje7mxcMOUg9gwDz4=)
3: 323430373a623963303a623030303a3a2f33362d3438203d3e203233393631.roa (hash: nBiVyk+hSUYptzUCKKVHuojqXhq6+jenhf7H97IcXhc=)
4: 3130332e3137302e3233322e302f32332d3234203d3e20393137.roa (hash: XXgEPlHtjWL+fHvL9DSqkqe72aH2JJsWcxQ705tSA/8=)
5: 9CF05E7024D4A487E0B79E2F57525BF345DB53EC.crl (hash: oqrpcffAg3l4hq7CjBRMy3rXAzTQcPXrLhpFBPRVbTo=)
6: 323430373a623963303a663030303a3a2f33362d3438203d3e203233393631.roa (hash: SMEVCplwC7EMAvVzXbsFKmMmYML+Abae0mtuFiz3m0c=)
7: 323430373a623963303a3a2f33322d3438203d3e203537363935.roa (hash: GJRgAwV+rKI9qKRwvVjQmQmb1Y6MGhE7zB5I5BMHtAw=)
8: 323430373a623963303a666230303a3a2f34342d3438203d3e20393639.roa (hash: aKT7Jg/pwygmHEgWJw5wPp8zqquVo0CE1j8tG5BzFHU=)
9: 323430373a623963303a3a2f33322d3438203d3e20313432363136.roa (hash: L37ORRE8mzcyclEt2VZ4KNKxfnEZTP+JrK70uSUpoIk=)
10: 3130332e3137302e3233322e302f32332d3234203d3e203537363935.roa (hash: JueH/SXRfDPCFByfvMV0wCJIsi8Q6o9jUIjv2j9UOAU=)
11: 323430373a623963303a3a2f33322d3438203d3e203233393631.roa (hash: d8yEkdL7zIIaBoo619bVzb2+SzEwKEqJBlukYE4/Rak=)
Validation: OK
Signature path: rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.crl
rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Oct 2026 03:10:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:38:c4:b1:7e:7e:51:df:e3:3f:49:a6:98:18:d9:1c:fe:79:8f:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9121C330000, serialNumber=9CF05E7024D4A487E0B79E2F57525BF345DB53EC
Validity
Not Before: Oct 26 01:13:09 2026 GMT
Not After : Oct 27 03:10:09 2026 GMT
Subject: CN=DDE3D96441FFD6CCCF2733793F55B3215D9C8807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7d:a7:2c:91:bd:ef:39:a3:8b:58:ed:ec:4d:
ef:64:76:be:1a:03:72:05:45:58:38:30:fe:06:55:
67:62:5c:32:5d:ed:7e:4b:6d:c1:72:05:d6:78:8e:
c3:96:df:fc:f8:1d:82:c6:95:e5:f9:5e:e9:e4:18:
09:7f:96:2a:35:22:4a:28:4a:dd:f5:e0:f9:e4:cf:
ea:c3:2f:79:62:e9:f2:8a:69:8a:75:d9:40:3e:f0:
32:4a:39:33:bd:d0:dd:b2:0f:ae:8b:f5:b8:2a:3c:
b0:26:57:a1:e1:33:7a:8f:2d:4a:8c:2b:81:87:dc:
24:5b:5e:46:d9:f5:70:f4:3f:95:fb:bc:ca:3a:70:
ad:79:5e:e0:43:c7:7e:00:1d:d5:23:ac:73:30:d6:
7d:cf:35:96:b2:5f:01:97:06:7f:d9:38:d3:00:8a:
7e:06:d6:84:67:36:81:f2:73:c8:41:74:bf:aa:5b:
ed:3c:02:49:8a:b0:04:fa:a9:89:fc:62:00:cb:3f:
8a:28:ed:86:91:bf:1d:c4:a3:4c:95:a0:9b:24:a5:
53:1c:9e:8c:2f:a1:68:22:64:5f:a6:d8:e5:5f:59:
ad:d5:b7:57:c2:40:f2:2c:12:5d:6b:f8:d8:ed:07:
91:d1:24:53:d3:e1:ec:f1:ac:b0:f2:2b:04:86:b5:
2d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:E3:D9:64:41:FF:D6:CC:CF:27:33:79:3F:55:B3:21:5D:9C:88:07
X509v3 Authority Key Identifier:
keyid:9C:F0:5E:70:24:D4:A4:87:E0:B7:9E:2F:57:52:5B:F3:45:DB:53:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:77:79:1e:23:8f:51:ae:18:bc:bc:2c:fa:df:9e:75:52:40:
47:48:a7:0d:f7:ce:b4:ec:8b:c5:72:88:ed:6b:43:83:8f:c1:
8a:88:0b:92:03:fd:f6:3f:c5:0a:b1:b7:53:6a:77:42:d5:46:
04:5b:34:8a:62:17:15:08:19:6c:a4:31:91:c6:d4:05:64:74:
b1:7f:38:a0:88:c1:91:a4:8d:91:82:d9:6f:a2:6a:96:d8:6d:
24:81:f4:19:9d:9a:f8:71:7f:d7:c4:ac:f6:d2:1c:f8:24:16:
f1:bf:53:a2:b2:4c:22:40:ac:0a:0f:64:b7:c9:6d:1d:7b:09:
cd:29:a6:c6:a2:f3:0e:68:18:72:35:6e:c1:c5:8d:37:96:35:
8c:44:c8:31:2a:06:27:c9:95:98:1d:89:43:69:ce:4e:7a:aa:
7c:a8:2a:8d:ec:06:32:22:7e:af:5c:55:09:57:3c:5c:d3:5d:
da:eb:9b:c5:e6:b7:45:8a:b4:9e:7a:9a:b0:c5:29:89:c7:2b:
b7:02:9e:5b:d7:fa:a2:cb:85:28:63:d6:57:72:a0:70:e7:1a:
80:50:67:b2:2d:56:bd:e3:9f:ec:c2:2f:e9:95:da:91:3f:54:
13:3e:4d:29:df:d0:3c:45:1a:7a:56:2b:36:11:ca:85:fd:2d:
00:28:e9:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 12:37:36 2026 by rpki-client