
$ rpki-client -vvf rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.mft
File: 9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.mft (raw, json)
Hash identifier: TQFxYIvI4QNHEfpfd+fMt72fmvi7HjcHdtu5CduJ3wc=
Subject key identifier: 61:88:0F:82:3F:8B:91:E0:2B:CB:BA:90:44:96:27:7E:F4:0C:50:7E
Authority key identifier: 9D:B8:C4:72:3E:3B:FD:D0:13:8A:79:16:A8:BB:12:C4:5C:82:CD:9C
Certificate issuer: /CN=9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C
Certificate serial: 161BB89C7D68CBC5389D6DECCAB40AA77B2186E8
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.mft
Manifest number: 0E
Signing time: Tue 12 May 2026 07:08:20 +0000
Manifest this update: Tue 12 May 2026 07:03:20 +0000
Manifest next update: Wed 13 May 2026 09:36:20 +0000
Files and hashes: 1: 3230322e35372e32302e302f32342d3234203d3e20313431363733.roa (hash: byBg5cGc6s1YP8fDSR7s5sO6wrvfj9UFsOHI5fDaKjw=)
2: 3230322e35372e31392e302f32342d3234203d3e20313339393831.roa (hash: G+CJRSAvkLm8DSPQpJTfXwMfnMxnrjXXDvf2WSgrHBE=)
3: 9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.crl (hash: 2UW83aCURJ5cw9a/aUZGwWrR4zNL4hg/hZ7KM0Jloyg=)
4: 3230322e35372e32342e302f32342d3234203d3e20313430343639.roa (hash: o+t6IXXZJ4nVKh7Fjs01qIsZ6gI4rdJ87aU7Y1okiOU=)
5: 3230322e35372e32312e302f32342d3234203d3e20313431363733.roa (hash: 2uayKWV7qVJbZpJZiiGrPFO3R21PwEyriXpTW2MB4pQ=)
6: 3230322e35372e32342e302f32332d3233203d3e20313430343639.roa (hash: d1pFnM2SYbSdXqGP4WVzR+cUntyYSCzP9FKk6VY+PFE=)
7: 3230322e35372e32362e302f32332d3233203d3e20313430343639.roa (hash: 0uTllQF8wo+NL3Ts0DUiJLkGlZst9OmTPcws3XPvVM8=)
8: 3230322e35372e32302e302f32332d3233203d3e20313431363733.roa (hash: ZROdT78fbmpL537DENBklHYp3VQxWrWUn5aHw+r+zyA=)
9: 3230322e35372e32372e302f32342d3234203d3e20313430343639.roa (hash: FVzH7nhWf9HlKEhd9diqlsZY20NWlRxKMpXnnJ7+h6Y=)
10: 3230322e35372e32362e302f32342d3234203d3e20313430343639.roa (hash: C5EXjolwl07zRhpLr0tmhZ7KpZpGgWZO494eyJEQSqk=)
11: 3230322e35372e32352e302f32342d3234203d3e20313430343639.roa (hash: tedUTTSe47lCMR7mgNFb3hX/nrYcz1gvH0zDmHz42Os=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.crl
rsync://rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:1b:b8:9c:7d:68:cb:c5:38:9d:6d:ec:ca:b4:0a:a7:7b:21:86:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C
Validity
Not Before: May 12 07:03:20 2026 GMT
Not After : May 13 09:36:20 2026 GMT
Subject: CN=61880F823F8B91E02BCBBA904496277EF40C507E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:48:07:f2:8e:bc:ea:7d:2f:3c:d0:52:70:ec:
5f:21:72:92:13:33:f1:9f:bc:c4:76:f6:58:f6:4c:
92:ed:88:ad:b7:a8:66:05:0a:fa:64:69:11:37:74:
db:ff:e7:5a:15:2a:95:08:11:c7:a5:b4:3d:ed:05:
ab:d8:20:29:26:f3:6d:fc:87:86:6b:36:cf:f8:25:
46:fc:d6:6c:3a:d6:53:8e:fc:ee:2e:63:48:90:ff:
47:38:21:13:42:60:ee:f8:ec:ca:0f:ad:67:f3:e2:
9b:61:c0:fa:31:b4:f5:5e:8b:79:82:aa:db:8b:e1:
e0:b4:99:13:15:72:a7:53:bf:e8:bf:68:73:e6:86:
af:10:19:00:a0:cc:89:8b:c0:13:59:4d:34:54:0a:
fb:bf:90:04:3d:b2:b6:6f:e8:9b:e1:52:af:2b:0b:
7c:82:1f:46:16:fa:77:9c:c6:21:43:de:42:c6:96:
7f:db:8a:b9:f8:5c:48:23:51:20:4b:6d:e9:bd:6c:
a3:54:f5:b8:a3:37:fa:ee:f2:27:0d:10:7e:21:35:
df:5f:e1:46:e2:a8:e1:db:cf:e1:c9:2e:6f:72:d0:
26:48:31:fa:4c:37:01:4a:91:4f:a0:2a:35:4d:3a:
dc:48:78:1a:b9:66:2f:ed:6e:08:85:5d:ce:6e:85:
f8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:88:0F:82:3F:8B:91:E0:2B:CB:BA:90:44:96:27:7E:F4:0C:50:7E
X509v3 Authority Key Identifier:
keyid:9D:B8:C4:72:3E:3B:FD:D0:13:8A:79:16:A8:BB:12:C4:5C:82:CD:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:97:45:69:e4:c5:e3:4b:b0:a0:b6:b4:23:79:33:e1:8b:05:
37:81:34:37:87:f1:81:0f:ea:b1:2f:d2:25:78:f0:b8:72:a2:
88:ce:93:e0:9a:e0:1f:f4:1c:01:2b:d9:bd:80:86:0e:e2:c0:
34:fb:e2:5c:84:80:ba:84:b2:bb:9f:4b:1a:06:49:09:ef:3f:
5b:c9:c6:6d:eb:8a:7c:70:53:29:5d:10:03:92:5f:45:11:0a:
34:92:51:0c:cc:46:49:52:41:77:49:00:db:f1:29:b1:7a:6b:
ad:11:7a:20:c9:28:91:29:47:47:d0:d4:c2:6b:5c:1a:62:83:
68:be:36:15:aa:20:49:f1:1a:c1:e2:75:c3:d0:d4:c9:50:6f:
99:dc:b6:c0:c8:75:df:67:c4:24:5d:70:e7:73:01:ce:61:34:
34:a0:a9:af:1e:8b:38:f7:f1:33:5e:55:84:38:c5:c0:c1:75:
43:62:57:30:e9:9f:c2:b7:ff:5f:bc:8a:dc:bc:39:99:70:d2:
03:41:70:70:d5:a6:7c:dd:e1:08:ba:26:62:15:97:a5:3b:db:
9d:70:8d:2a:1f:0a:23:48:51:ec:49:67:c4:06:c6:93:3e:bc:
ab:34:fe:aa:4a:5f:36:a3:61:7b:a5:ee:46:d2:2e:1d:21:5b:
d6:bc:d8:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:47:17 2026 by rpki-client