
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/10553E9FBD62D012FC01AA60343F1431B2A6A334.mft
File: 10553E9FBD62D012FC01AA60343F1431B2A6A334.mft (raw, json)
Hash identifier: ImcZ2GVh0Lqq6WUZf25rDojg+jhxFq7IBkqqvHUJUsE=
Subject key identifier: 10:CF:97:AD:E6:47:D5:82:F7:83:DF:60:7E:14:69:47:10:9A:64:BD
Authority key identifier: 10:55:3E:9F:BD:62:D0:12:FC:01:AA:60:34:3F:14:31:B2:A6:A3:34
Certificate issuer: /CN=10553E9FBD62D012FC01AA60343F1431B2A6A334
Certificate serial: 293F26A9257087080AA86CBF4CD797405893EE5E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10553E9FBD62D012FC01AA60343F1431B2A6A334.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/10553E9FBD62D012FC01AA60343F1431B2A6A334.mft
Manifest number: C9
Signing time: Wed 30 Sep 2026 06:44:14 +0000
Manifest this update: Wed 30 Sep 2026 06:39:14 +0000
Manifest next update: Thu 01 Oct 2026 09:28:14 +0000
Files and hashes: 1: 3130332e3137362e39382e302f32332d3234203d3e20313439333434.roa (hash: k9nD44XinJnJpBwRMmDV5yfpMBTjz+PYwIGe6HEFz9s=)
2: 3130332e3137362e39382e302f32342d3234203d3e20313439333434.roa (hash: CzpBmVwagEtnKqxKjT1pUSrqGuU3xrwBdruiL5NCJ14=)
3: 10553E9FBD62D012FC01AA60343F1431B2A6A334.crl (hash: hT21STo98iIBLUR2afnzrrqoihzFbm4XILJf/G+hSrU=)
4: 3130332e3137362e39392e302f32342d3234203d3e20313439333434.roa (hash: tbo+ssCZ1GgyC2ZlsuUJYvzfgqZD9OlbY8lym/UKgpA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/10553E9FBD62D012FC01AA60343F1431B2A6A334.crl
rsync://rpki-rsync.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/10553E9FBD62D012FC01AA60343F1431B2A6A334.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10553E9FBD62D012FC01AA60343F1431B2A6A334.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 09:28:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:3f:26:a9:25:70:87:08:0a:a8:6c:bf:4c:d7:97:40:58:93:ee:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10553E9FBD62D012FC01AA60343F1431B2A6A334
Validity
Not Before: Sep 30 06:39:14 2026 GMT
Not After : Oct 1 09:28:14 2026 GMT
Subject: CN=10CF97ADE647D582F783DF607E146947109A64BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f5:f4:53:5e:02:63:57:6a:7f:09:61:f7:d6:
d4:18:8e:f2:0e:f6:95:0d:62:d8:eb:4a:56:b5:65:
03:84:db:44:fd:3f:7f:d5:24:a0:ff:fc:ce:0d:41:
0f:2b:08:3d:7d:43:e4:71:2f:ba:4e:a8:30:33:47:
c6:98:72:e3:6b:4b:c1:c5:0e:57:f6:25:ed:a2:b6:
e8:19:64:2b:ff:7b:98:a6:71:ba:ec:0d:36:62:61:
ec:7b:58:b8:00:e6:52:aa:4d:0d:83:2c:c6:1b:97:
64:34:53:0e:5a:22:c0:0f:52:b5:a4:8a:94:d3:18:
38:c1:ff:9a:35:31:7f:df:c6:8d:81:40:3c:f6:1d:
61:04:3f:48:2c:52:f6:3c:4e:c0:cb:a3:c8:64:50:
e0:00:b3:e5:57:1c:5c:84:c2:5d:4f:18:7a:42:45:
d4:91:24:1a:16:64:83:f9:83:38:52:82:53:87:46:
cc:e7:ba:fc:8a:52:8b:f2:64:dd:b5:54:d3:80:16:
21:fe:44:4f:74:e2:67:87:20:cc:0e:c6:37:7d:b5:
c7:8a:ad:9e:d0:a3:49:42:c1:72:cb:e4:7c:05:81:
25:11:bb:eb:7f:d1:d6:13:dd:b8:be:b7:73:8f:3f:
40:50:be:0a:d0:d5:f6:95:64:af:cb:c9:6a:97:56:
c0:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:CF:97:AD:E6:47:D5:82:F7:83:DF:60:7E:14:69:47:10:9A:64:BD
X509v3 Authority Key Identifier:
keyid:10:55:3E:9F:BD:62:D0:12:FC:01:AA:60:34:3F:14:31:B2:A6:A3:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/10553E9FBD62D012FC01AA60343F1431B2A6A334.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10553E9FBD62D012FC01AA60343F1431B2A6A334.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/10553E9FBD62D012FC01AA60343F1431B2A6A334.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:c7:be:51:44:84:6a:d1:9a:85:68:81:bd:df:45:37:f7:4f:
3f:7f:98:0e:13:00:13:33:f7:36:30:ed:ea:59:e5:5a:2d:84:
a9:ec:bf:83:f0:1e:e7:12:65:0c:60:71:ca:0b:14:98:ce:20:
86:33:83:96:ed:8d:17:ec:cc:57:1d:42:38:19:d3:0a:a0:d2:
14:a6:3c:e5:c0:80:ad:ab:db:5a:49:5b:b0:81:6f:b2:16:4e:
7e:8e:02:74:e6:ea:e4:b5:da:9b:78:d9:5b:ca:a1:fd:ca:f6:
6d:e4:e1:ac:79:e3:38:2a:45:cb:f9:3f:fc:f2:3f:69:28:57:
d9:c3:63:99:99:fb:2e:56:db:da:8d:4e:fc:0b:27:e9:38:40:
df:a8:98:2c:33:2e:a5:22:f9:31:95:43:56:15:c7:6d:a2:12:
e1:4f:98:c1:ae:34:9b:38:c9:a1:5c:f0:54:b5:5f:73:93:68:
e6:20:2a:76:70:8a:8b:51:03:ac:fd:aa:58:3c:b3:50:62:e8:
47:97:e2:16:2c:d7:a5:bc:1d:7b:63:83:cc:c5:73:d5:d7:55:
b9:65:0c:d6:53:4c:42:8a:43:4d:e6:9a:2b:36:6f:8f:c6:e9:
2d:f9:4a:30:e4:71:51:22:78:0f:f5:66:d2:62:69:7d:cc:e8:
f8:4a:2f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 19:35:41 2026 by rpki-client