
$ rpki-client -vvf rpki-rsync.idnic.net/repo/26ead2f5-8b65-4829-884b-d7c06dd0f83a/0/9FD513B00492057DD702CBFFF2619D407373BD86.mft
File: 9FD513B00492057DD702CBFFF2619D407373BD86.mft (raw, json)
Hash identifier: 3lc//hRe3TjvIM02czlvmCfr0R5Xij9TcYrFRzRU8/A=
Subject key identifier: 56:DA:E5:A9:E9:51:25:5F:21:53:E5:E2:AE:FA:9C:88:4A:F0:E6:63
Authority key identifier: 9F:D5:13:B0:04:92:05:7D:D7:02:CB:FF:F2:61:9D:40:73:73:BD:86
Certificate issuer: /CN=9FD513B00492057DD702CBFFF2619D407373BD86
Certificate serial: 7302E808FA4B4FDADCEE17CA6BC55597692C6C67
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FD513B00492057DD702CBFFF2619D407373BD86.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/26ead2f5-8b65-4829-884b-d7c06dd0f83a/0/9FD513B00492057DD702CBFFF2619D407373BD86.mft
Manifest number: 70
Signing time: Fri 24 Jul 2026 08:04:24 +0000
Manifest this update: Fri 24 Jul 2026 07:59:24 +0000
Manifest next update: Sat 25 Jul 2026 11:24:24 +0000
Files and hashes: 1: 3130332e3134342e39302e302f32332d3234203d3e20313339343235.roa (hash: gfPHybU8BlyaLvVhDLsLmDJFHRHXBA3/OIAjSx7yG6o=)
2: 9FD513B00492057DD702CBFFF2619D407373BD86.crl (hash: TJPc/hFqndhINlfiDAAq1EidQyT1Hz5oxK+0tD3lRvQ=)
3: 323430353a366134303a3a2f33322d3332203d3e20313339343235.roa (hash: eiHGmlk5Da29v1+JFkHNmGCFNi5qVnXuS1BVyS7zdCk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/26ead2f5-8b65-4829-884b-d7c06dd0f83a/0/9FD513B00492057DD702CBFFF2619D407373BD86.crl
rsync://rpki-rsync.idnic.net/repo/26ead2f5-8b65-4829-884b-d7c06dd0f83a/0/9FD513B00492057DD702CBFFF2619D407373BD86.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FD513B00492057DD702CBFFF2619D407373BD86.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 07:07:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:02:e8:08:fa:4b:4f:da:dc:ee:17:ca:6b:c5:55:97:69:2c:6c:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9FD513B00492057DD702CBFFF2619D407373BD86
Validity
Not Before: Jul 24 07:59:24 2026 GMT
Not After : Jul 25 11:24:24 2026 GMT
Subject: CN=56DAE5A9E951255F2153E5E2AEFA9C884AF0E663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:65:88:b2:e9:90:6c:81:82:35:9b:aa:d0:4e:
bc:02:2e:99:ff:b0:0d:a9:82:44:29:a2:2e:09:fa:
86:46:34:57:f6:bd:3b:7e:1a:67:3e:7b:e3:e6:30:
b8:96:a9:db:ff:66:29:fc:0c:c3:72:a8:de:81:a6:
cf:4f:09:5a:78:31:e3:8b:51:b7:6a:24:1a:f0:32:
9e:a8:15:3f:30:bf:66:56:28:2f:91:2a:86:88:99:
c0:1d:83:20:c8:5b:af:ca:7c:7c:df:40:b6:91:74:
53:c0:74:4d:9f:77:4a:e0:68:3b:eb:26:43:cb:d1:
3b:ba:9a:f2:6d:60:ca:1b:c1:80:d6:be:7a:94:37:
7b:32:20:43:01:c9:2c:48:bd:ef:85:5f:5c:af:c9:
a0:ee:c0:12:8b:ad:82:9c:d7:a6:c2:6b:d3:d9:70:
ae:8d:d2:76:26:c7:0c:c7:dd:a7:ff:21:f4:85:62:
ea:4b:b8:ce:23:95:43:9f:24:a7:b5:fe:3c:94:ee:
9b:8c:63:36:74:2c:94:b0:5a:4a:37:52:ba:00:be:
9b:0b:3e:15:92:0b:86:e7:4d:bb:51:c8:61:ad:f0:
ce:ce:b8:03:f9:d7:a3:4d:a4:5c:34:ef:92:c3:a6:
53:64:b3:09:4b:2b:40:3f:f2:1f:87:59:d8:1f:f8:
26:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:DA:E5:A9:E9:51:25:5F:21:53:E5:E2:AE:FA:9C:88:4A:F0:E6:63
X509v3 Authority Key Identifier:
keyid:9F:D5:13:B0:04:92:05:7D:D7:02:CB:FF:F2:61:9D:40:73:73:BD:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/26ead2f5-8b65-4829-884b-d7c06dd0f83a/0/9FD513B00492057DD702CBFFF2619D407373BD86.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FD513B00492057DD702CBFFF2619D407373BD86.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/26ead2f5-8b65-4829-884b-d7c06dd0f83a/0/9FD513B00492057DD702CBFFF2619D407373BD86.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:cb:af:c6:fd:97:14:ea:97:c5:8f:b5:85:24:e3:68:53:5a:
b4:d5:74:f1:bf:dc:a0:b2:a1:c0:0a:26:03:60:1c:f5:a1:aa:
79:28:e9:8c:0d:4a:0c:39:3f:fb:93:0f:7e:94:ef:ff:f7:99:
4f:29:62:14:7c:71:06:35:50:d1:e2:f4:d7:8e:93:e1:ef:c2:
cd:1a:5c:03:68:f8:f5:46:89:72:9b:70:9b:22:4d:ee:b9:74:
98:12:e6:9e:b8:ce:40:80:e7:4b:33:77:82:8e:8f:1c:d7:4f:
1d:1f:a4:5b:54:7c:f3:65:90:58:42:dd:21:41:42:53:4c:95:
e0:42:40:1d:44:84:78:53:c7:d8:4e:e4:2d:ec:08:f7:b9:8e:
0d:b1:42:d5:bb:53:75:bb:86:28:3b:93:97:8b:b3:91:35:4d:
93:21:45:8c:19:ea:48:4d:83:b1:5c:63:f4:a1:dc:f9:c3:30:
bc:d0:92:2f:72:d2:a5:de:2f:aa:a8:60:3a:94:c1:31:71:b5:
3c:f6:1a:60:57:18:be:a6:ff:8d:83:64:ab:b3:26:6c:86:d8:
e2:f6:71:79:37:f1:44:1c:cc:40:0b:a8:ed:c8:4f:8c:56:23:
6d:d1:1c:c6:7b:1e:61:82:0d:65:c6:d4:cb:a8:f0:29:c7:9f:
81:f3:e2:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:06:29 2026 by rpki-client