
$ rpki-client -vvf rpki-rsync.idnic.net/repo/0eaa8cbe-718b-4953-b789-60fa857aec8d/0/C9E5EB92DA793B8D8BF89C80541899A148DA3FC7.mft
File: C9E5EB92DA793B8D8BF89C80541899A148DA3FC7.mft (raw, json)
Hash identifier: wyENI+gMGK7L6d9B3OB4K9t3nG8fZ82gVqhn24Wlai8=
Subject key identifier: 3A:FA:63:98:62:DF:F1:5E:03:51:54:C7:91:07:DA:87:50:60:31:82
Authority key identifier: C9:E5:EB:92:DA:79:3B:8D:8B:F8:9C:80:54:18:99:A1:48:DA:3F:C7
Certificate issuer: /CN=C9E5EB92DA793B8D8BF89C80541899A148DA3FC7
Certificate serial: 59E9532A90F2D35917ADB70843CF864E88972476
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9E5EB92DA793B8D8BF89C80541899A148DA3FC7.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0eaa8cbe-718b-4953-b789-60fa857aec8d/0/C9E5EB92DA793B8D8BF89C80541899A148DA3FC7.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 21:13:39 +0000
Manifest this update: Tue 12 May 2026 21:08:39 +0000
Manifest next update: Thu 14 May 2026 00:29:39 +0000
Files and hashes: 1: 3130332e3136392e31302e302f32332d3234203d3e20313432333335.roa (hash: Kv2Bwd8eSfvsYR5xc9V1CjJ+ZGmosk9p1qlT46CISoA=)
2: C9E5EB92DA793B8D8BF89C80541899A148DA3FC7.crl (hash: OWpwMRPT6qjy3/GW8qy41wBLjwwDTEmzIk9LKQ9QPTc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0eaa8cbe-718b-4953-b789-60fa857aec8d/0/C9E5EB92DA793B8D8BF89C80541899A148DA3FC7.crl
rsync://rpki-rsync.idnic.net/repo/0eaa8cbe-718b-4953-b789-60fa857aec8d/0/C9E5EB92DA793B8D8BF89C80541899A148DA3FC7.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9E5EB92DA793B8D8BF89C80541899A148DA3FC7.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:e9:53:2a:90:f2:d3:59:17:ad:b7:08:43:cf:86:4e:88:97:24:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C9E5EB92DA793B8D8BF89C80541899A148DA3FC7
Validity
Not Before: May 12 21:08:39 2026 GMT
Not After : May 14 00:29:39 2026 GMT
Subject: CN=3AFA639862DFF15E035154C79107DA8750603182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ce:1b:c4:66:3c:3e:63:bf:8e:c9:6e:a5:c5:
0b:5b:32:a3:f8:0f:91:44:b0:cf:f1:d1:ba:ac:4c:
3c:41:0a:da:3e:a0:d6:5c:85:2e:39:a1:96:dc:4e:
b7:e8:3c:a4:c8:77:88:2b:27:77:de:f5:05:03:b9:
ec:3e:80:51:77:f5:17:3c:e7:60:40:d1:8b:25:3f:
76:94:f1:29:be:5c:33:64:49:ae:d1:35:1e:e8:f5:
70:7c:6d:ae:a3:9b:ce:59:73:44:24:98:5e:2b:54:
ba:e6:05:f5:88:33:08:99:64:1b:ed:fc:06:f2:c1:
bf:e4:62:76:7b:79:0f:ab:b2:ed:19:5e:7d:9e:1a:
25:37:a2:db:33:91:e8:50:ea:ed:f8:5e:3b:60:da:
31:a8:ab:6c:6a:e9:03:8c:d7:28:2e:39:10:c0:60:
a3:5a:a7:86:ac:41:c3:04:68:ad:7b:21:f7:65:ed:
3f:a6:47:9e:a7:50:b6:99:f2:07:b2:ba:aa:88:e3:
5d:90:26:11:d0:05:41:e1:d3:b1:6c:1a:45:78:ea:
41:6e:86:57:4d:c7:da:f0:88:2a:e6:e0:5a:c7:ae:
2d:94:65:4f:84:b7:6d:f1:0d:8d:74:96:ce:b2:3c:
0e:aa:b5:50:0e:af:af:8f:a2:4a:58:17:59:40:54:
08:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:FA:63:98:62:DF:F1:5E:03:51:54:C7:91:07:DA:87:50:60:31:82
X509v3 Authority Key Identifier:
keyid:C9:E5:EB:92:DA:79:3B:8D:8B:F8:9C:80:54:18:99:A1:48:DA:3F:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0eaa8cbe-718b-4953-b789-60fa857aec8d/0/C9E5EB92DA793B8D8BF89C80541899A148DA3FC7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9E5EB92DA793B8D8BF89C80541899A148DA3FC7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0eaa8cbe-718b-4953-b789-60fa857aec8d/0/C9E5EB92DA793B8D8BF89C80541899A148DA3FC7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:78:c5:83:ab:40:ee:e4:8b:f6:64:22:f7:9a:b0:36:22:a5:
50:2a:b7:30:3d:3b:5d:9a:a7:ba:ea:b6:0f:d1:52:6d:ee:25:
80:d9:85:5e:7c:0d:00:17:a1:4a:9f:fe:7f:7a:a7:49:94:4e:
d3:ba:4d:1f:97:74:77:1c:2a:2f:3c:28:93:8f:78:2a:d3:a2:
eb:34:c4:0d:8f:2d:dc:78:42:7e:dc:b2:b5:e5:4f:1f:46:13:
76:7a:91:bb:29:4e:f6:8f:1e:e7:d4:d9:5d:cd:30:bf:5b:cd:
a3:f8:f6:00:2e:51:33:1f:34:3d:44:55:50:cd:d9:9d:13:1e:
1a:c0:67:24:9b:c4:6d:67:c0:82:98:7c:d6:69:01:53:c4:07:
f6:f3:31:67:e7:a7:0a:e6:95:7d:56:bc:7d:bb:80:11:a6:8d:
82:70:13:3b:ff:be:c7:93:c6:fd:f1:17:fe:17:e6:dd:30:3c:
2e:5a:8b:b5:b9:63:28:70:49:d9:2b:98:0b:91:29:84:da:1c:
30:a0:3f:09:c1:d1:bb:bc:31:db:b0:1b:c2:7c:d7:e6:54:66:
e2:ef:f6:43:b1:bf:bb:5f:92:6c:74:a3:eb:fa:0d:00:23:ff:
93:48:9a:06:04:d0:60:80:78:e0:a3:63:6f:c9:75:16:e6:77:
ac:50:05:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:11:03 2026 by rpki-client