
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0eaa8cbe-718b-4953-b789-60fa857aec8d/0/C9E5EB92DA793B8D8BF89C80541899A148DA3FC7.mft
File: C9E5EB92DA793B8D8BF89C80541899A148DA3FC7.mft (raw, json)
Hash identifier: YlWL9f9k+bvL/zKyHg/1LrVB4L5ob/g3L+kQgaTqvMU=
Subject key identifier: 50:D9:F3:4D:DE:6C:14:F4:75:6E:A1:BF:F7:A1:55:D8:47:92:25:7E
Authority key identifier: C9:E5:EB:92:DA:79:3B:8D:8B:F8:9C:80:54:18:99:A1:48:DA:3F:C7
Certificate issuer: /CN=C9E5EB92DA793B8D8BF89C80541899A148DA3FC7
Certificate serial: 4DB98C3A65F941B2D0BFA1647E4809D646F142B9
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9E5EB92DA793B8D8BF89C80541899A148DA3FC7.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0eaa8cbe-718b-4953-b789-60fa857aec8d/0/C9E5EB92DA793B8D8BF89C80541899A148DA3FC7.mft
Manifest number: C2
Signing time: Thu 24 Sep 2026 00:56:57 +0000
Manifest this update: Thu 24 Sep 2026 00:51:57 +0000
Manifest next update: Fri 25 Sep 2026 04:40:57 +0000
Files and hashes: 1: C9E5EB92DA793B8D8BF89C80541899A148DA3FC7.crl (hash: 5s6QLVHSKXiJXoE+s4yPjGT/tKoDC1/QKpc0sV8W3Yc=)
2: 3130332e3136392e31302e302f32332d3234203d3e20313432333335.roa (hash: Kv2Bwd8eSfvsYR5xc9V1CjJ+ZGmosk9p1qlT46CISoA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0eaa8cbe-718b-4953-b789-60fa857aec8d/0/C9E5EB92DA793B8D8BF89C80541899A148DA3FC7.crl
rsync://rpki-rsync.idnic.net/repo/0eaa8cbe-718b-4953-b789-60fa857aec8d/0/C9E5EB92DA793B8D8BF89C80541899A148DA3FC7.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9E5EB92DA793B8D8BF89C80541899A148DA3FC7.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 04:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:b9:8c:3a:65:f9:41:b2:d0:bf:a1:64:7e:48:09:d6:46:f1:42:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C9E5EB92DA793B8D8BF89C80541899A148DA3FC7
Validity
Not Before: Sep 24 00:51:57 2026 GMT
Not After : Sep 25 04:40:57 2026 GMT
Subject: CN=50D9F34DDE6C14F4756EA1BFF7A155D84792257E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e2:9c:01:7e:06:36:14:1f:ff:06:b0:6a:3b:
fe:cb:c7:e0:b6:96:fe:b2:a2:02:3d:9b:b4:e3:32:
18:90:28:c2:dd:18:75:48:aa:27:ac:49:d9:d7:dc:
a7:e6:56:d4:75:42:8a:22:06:c5:2e:db:f4:75:80:
28:c7:94:97:af:3c:6e:d1:ab:a4:c6:27:4b:2a:f0:
21:99:81:75:8e:74:52:18:80:8f:5e:c4:d7:20:c9:
69:5b:da:78:5b:0c:d6:52:0a:83:16:ca:9a:df:18:
42:35:f7:83:33:2e:41:91:59:22:2b:7f:25:94:f0:
99:4f:ff:4b:ee:ce:49:b3:5f:0b:f6:9d:f8:76:1a:
cd:ea:fa:a2:78:66:c2:5e:10:6b:b4:18:e5:53:d7:
c7:b3:cf:1a:83:ba:b4:d7:f2:f7:fa:56:01:e8:ce:
e2:46:52:49:72:7e:27:85:56:51:8d:97:35:6f:cb:
77:98:dc:45:3b:2e:81:b0:1a:cb:f2:84:42:9e:8e:
70:d3:46:27:7f:b3:e8:42:27:01:59:e9:cf:4f:67:
f8:6f:97:c3:96:18:2a:bc:23:ce:8b:7f:c8:15:c5:
1b:81:e3:c0:24:b1:eb:23:63:75:2f:24:aa:69:54:
1a:ea:2c:3b:ce:af:88:1e:f7:97:ba:30:01:56:9b:
be:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:D9:F3:4D:DE:6C:14:F4:75:6E:A1:BF:F7:A1:55:D8:47:92:25:7E
X509v3 Authority Key Identifier:
keyid:C9:E5:EB:92:DA:79:3B:8D:8B:F8:9C:80:54:18:99:A1:48:DA:3F:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0eaa8cbe-718b-4953-b789-60fa857aec8d/0/C9E5EB92DA793B8D8BF89C80541899A148DA3FC7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9E5EB92DA793B8D8BF89C80541899A148DA3FC7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0eaa8cbe-718b-4953-b789-60fa857aec8d/0/C9E5EB92DA793B8D8BF89C80541899A148DA3FC7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:96:02:27:40:c1:c8:9b:2e:5c:50:6d:b6:a4:b7:1c:2a:35:
15:22:28:dd:0f:e0:ea:58:bc:cf:13:64:ac:40:a1:05:3a:a9:
96:88:f1:99:6b:07:d9:f8:7a:2a:63:fd:26:80:a8:a4:e1:fd:
8c:8e:76:6f:3c:34:41:81:08:a2:a7:1a:4d:81:8a:6b:7d:49:
27:6c:4d:be:30:23:e3:cb:22:1a:dd:29:37:20:74:da:24:5d:
87:43:79:2e:39:1f:80:70:bc:83:75:fc:c5:8b:3c:22:f5:76:
fb:40:50:e8:2e:a6:b9:91:99:9f:c3:92:3e:0b:66:9e:ae:97:
76:6a:9a:6d:28:67:b6:1a:d2:37:12:1c:e6:ee:8e:b4:6c:b1:
c0:1e:dd:1b:90:e9:54:eb:48:39:22:9c:b8:af:11:0e:f7:c2:
6c:4f:70:fc:7f:77:4f:c6:78:79:88:ff:ae:05:e3:7e:88:e3:
d7:b3:a1:e0:42:da:b2:db:7c:38:2a:6c:88:07:d2:ae:d1:71:
66:ed:ac:e1:0c:73:43:30:5a:55:ed:9f:be:c6:73:7c:5a:79:
b9:75:07:5a:87:41:9f:32:67:8c:ec:a0:40:9f:4f:93:ce:7d:
1b:a0:47:fc:a1:82:6b:af:c6:5b:42:67:07:e1:21:bd:e2:e7:
84:37:37:ff
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUTbmMOmX5QbLQv6FkfkgJ1kbxQrkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzlFNUVCOTJEQTc5M0I4RDhCRjg5QzgwNTQxODk5QTE0
OERBM0ZDNzAeFw0yNjA5MjQwMDUxNTdaFw0yNjA5MjUwNDQwNTdaMDMxMTAvBgNV
BAMTKDUwRDlGMzREREU2QzE0RjQ3NTZFQTFCRkY3QTE1NUQ4NDc5MjI1N0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCR4pwBfgY2FB//BrBqO/7Lx+C2
lv6yogI9m7TjMhiQKMLdGHVIqiesSdnX3KfmVtR1QooiBsUu2/R1gCjHlJevPG7R
q6TGJ0sq8CGZgXWOdFIYgI9exNcgyWlb2nhbDNZSCoMWyprfGEI194MzLkGRWSIr
fyWU8JlP/0vuzkmzXwv2nfh2Gs3q+qJ4ZsJeEGu0GOVT18ezzxqDurTX8vf6VgHo
zuJGUklyfieFVlGNlzVvy3eY3EU7LoGwGsvyhEKejnDTRid/s+hCJwFZ6c9PZ/hv
l8OWGCq8I86Lf8gVxRuB48AksesjY3UvJKppVBrqLDvOr4ge95e6MAFWm76TAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUUNnzTd5sFPR1bqG/96FV2EeSJX4wHwYDVR0j
BBgwFoAUyeXrktp5O42L+JyAVBiZoUjaP8cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MGVhYThjYmUtNzE4Yi00OTUzLWI3ODktNjBmYTg1N2FlYzhkLzAvQzlFNUVCOTJE
QTc5M0I4RDhCRjg5QzgwNTQxODk5QTE0OERBM0ZDNy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9DOUU1RUI5MkRBNzkzQjhEOEJGODlDODA1NDE4OTlBMTQ4REEz
RkM3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGVhYThjYmUtNzE4Yi00OTUzLWI3
ODktNjBmYTg1N2FlYzhkLzAvQzlFNUVCOTJEQTc5M0I4RDhCRjg5QzgwNTQxODk5
QTE0OERBM0ZDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAKWWAidAwcibLlxQbbaktxwqNRUiKN0P4OpY
vM8TZKxAoQU6qZaI8ZlrB9n4eipj/SaAqKTh/YyOdm88NEGBCKKnGk2Bimt9SSds
Tb4wI+PLIhrdKTcgdNokXYdDeS45H4BwvIN1/MWLPCL1dvtAUOguprmRmZ/Dkj4L
Zp6ul3Zqmm0oZ7Ya0jcSHObujrRsscAe3RuQ6VTrSDkinLivEQ73wmxPcPx/d0/G
eHmI/64F436I49ezoeBC2rLbfDgqbIgH0q7RcWbtrOEMc0MwWlXtn77Gc3xaebl1
B1qHQZ8yZ4zsoECfT5POfRugR/yhgmuvxltCZwfhIb3i54Q3N/8=
-----END CERTIFICATE-----
Generated at Thu Sep 24 14:41:59 2026 by rpki-client