
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/9376CDF3D2A44CC41764F89F68FD7E4130EB351C.mft
File: 9376CDF3D2A44CC41764F89F68FD7E4130EB351C.mft (raw, json)
Hash identifier: 3wmCrKJ3IQTwSzVWXo9u+PhFVCzeCLdAOVVDeNSLGjc=
Subject key identifier: 99:F5:4A:E0:55:D2:33:33:4C:D3:DF:31:FA:72:78:8A:3D:F0:39:26
Authority key identifier: 93:76:CD:F3:D2:A4:4C:C4:17:64:F8:9F:68:FD:7E:41:30:EB:35:1C
Certificate issuer: /CN=9376CDF3D2A44CC41764F89F68FD7E4130EB351C
Certificate serial: 036EE56F65A1211499B0F409A077092AFF59D037
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9376CDF3D2A44CC41764F89F68FD7E4130EB351C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/9376CDF3D2A44CC41764F89F68FD7E4130EB351C.mft
Manifest number: 0105
Signing time: Sat 14 Nov 2026 07:28:35 +0000
Manifest this update: Sat 14 Nov 2026 07:23:35 +0000
Manifest next update: Sun 15 Nov 2026 11:23:35 +0000
Files and hashes: 1: 3135372e32302e39382e302f32332d3234203d3e20313532343335.roa (hash: 1y2hMqgy1k18v9KwV+64AHSdurxHF23pHNvVVwGqp7s=)
2: 9376CDF3D2A44CC41764F89F68FD7E4130EB351C.crl (hash: wgBY9hKrimvdk52qkAzWH8fdtZy6W19QkwLkKsvY+/w=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/9376CDF3D2A44CC41764F89F68FD7E4130EB351C.crl
rsync://rpki-rsync.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/9376CDF3D2A44CC41764F89F68FD7E4130EB351C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9376CDF3D2A44CC41764F89F68FD7E4130EB351C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 15 Nov 2026 11:23:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:6e:e5:6f:65:a1:21:14:99:b0:f4:09:a0:77:09:2a:ff:59:d0:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9376CDF3D2A44CC41764F89F68FD7E4130EB351C
Validity
Not Before: Nov 14 07:23:35 2026 GMT
Not After : Nov 15 11:23:35 2026 GMT
Subject: CN=99F54AE055D233334CD3DF31FA72788A3DF03926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a2:fa:59:f5:f5:cd:d3:b2:7f:8f:91:c8:d1:
f6:be:ad:b0:82:66:51:bb:1d:f0:32:66:58:53:18:
2b:38:e3:5f:26:04:c8:d3:6e:06:82:bf:5a:bd:40:
9f:97:cc:b5:5e:ee:9b:16:27:d1:f0:3b:ad:2c:de:
a8:35:b8:5a:e7:9e:ae:fe:e6:61:cf:52:c4:9a:4a:
21:9b:06:ce:73:09:f4:77:22:b0:ba:e6:0e:20:08:
a6:73:ee:50:3e:61:e0:d0:a3:a6:ff:a6:ca:ee:cf:
56:36:b4:ad:48:8a:ef:8f:95:cc:56:1f:4d:0f:5c:
77:fd:d1:a2:dd:0d:c0:68:f6:78:f9:23:39:f3:e9:
39:27:0b:37:b7:b4:26:1d:54:ba:8d:42:7b:60:9e:
11:b8:aa:e3:ae:06:de:f0:50:f0:cd:10:86:5a:7e:
c2:11:66:63:3f:8b:78:44:45:27:5e:c5:93:c7:d5:
56:7a:fb:01:f0:6c:eb:5e:ca:0a:46:8d:8b:95:23:
b6:1d:47:b6:64:66:18:7d:fe:c8:15:0d:98:b4:14:
9f:63:de:04:ce:63:af:b3:dc:0d:5f:bf:3d:8c:12:
95:6d:75:ae:e7:b8:b4:63:02:ec:30:80:43:b9:80:
ac:95:7e:0c:0c:8f:0e:95:39:ee:37:55:59:80:8c:
c6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:F5:4A:E0:55:D2:33:33:4C:D3:DF:31:FA:72:78:8A:3D:F0:39:26
X509v3 Authority Key Identifier:
keyid:93:76:CD:F3:D2:A4:4C:C4:17:64:F8:9F:68:FD:7E:41:30:EB:35:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/9376CDF3D2A44CC41764F89F68FD7E4130EB351C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9376CDF3D2A44CC41764F89F68FD7E4130EB351C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/9376CDF3D2A44CC41764F89F68FD7E4130EB351C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:a5:13:bf:8f:6e:2d:84:30:bb:98:40:21:bf:fe:81:55:20:
1e:fb:65:4f:4f:f2:2f:76:8a:c7:43:08:12:9f:1d:98:27:5e:
72:96:5f:24:ac:a4:18:9e:1b:6f:04:27:4f:3a:ac:fc:3e:14:
f9:99:3f:60:b4:c3:a9:0e:10:82:98:d2:89:05:cb:3c:87:cf:
b3:7e:a6:69:ff:fb:63:27:cc:ed:93:17:90:a5:a2:7f:31:73:
c2:92:af:0a:62:1b:60:7e:9f:bd:ea:2c:6f:a1:94:77:ff:0c:
11:1c:12:ff:4c:f0:31:88:35:86:6c:50:3c:0a:08:05:22:d8:
e6:1e:c0:37:0a:ef:bc:b9:44:e6:4f:19:4c:de:40:a5:34:dc:
6b:ba:23:64:ff:a5:d9:73:fc:bd:88:ab:1a:be:0c:ed:53:36:
ad:e1:0a:1e:92:6d:39:85:0f:e0:15:e2:27:fc:03:b0:22:60:
5f:7e:f7:29:49:c9:d1:ce:df:96:6d:5a:2e:e4:01:42:01:8d:
de:83:e1:01:43:f4:80:55:8e:7b:b6:9c:41:35:32:be:80:b8:
34:77:98:cd:bb:c9:98:dd:88:bf:1b:01:e3:5c:4e:10:d2:bb:
86:58:32:51:b1:8a:be:a0:8d:6c:9d:58:14:91:7f:61:1a:29:
00:3c:aa:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:34:57 2026 by rpki-client