
$ rpki-client -vvf rpki-rsync.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1.mft
File: 9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1.mft (raw, json)
Hash identifier: vZngkANphXdpEb6tWwXimZQWhcdCDlo1d8W3nX+UyUU=
Subject key identifier: BB:56:BE:64:11:36:C2:94:9E:C6:7E:C0:9F:F6:BD:54:AF:47:F3:AA
Authority key identifier: 9F:D7:FF:4D:3F:B3:73:40:FA:A8:C7:EE:71:D1:CB:9E:AF:08:59:C1
Certificate issuer: /CN=9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1
Certificate serial: 03823028F47800F67C55D365FA09AF8309C3B4F1
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1.mft
Manifest number: 6F
Signing time: Thu 23 Jul 2026 17:21:18 +0000
Manifest this update: Thu 23 Jul 2026 17:16:18 +0000
Manifest next update: Fri 24 Jul 2026 19:26:18 +0000
Files and hashes: 1: 3230322e37332e32352e302f32342d3234203d3e20313431383932.roa (hash: ZdJ+uJ+H3LCclcBMDstVIbOnA5HzlWlzhGq8cMXXKag=)
2: 3230322e37332e32372e302f32342d3234203d3e203535373031.roa (hash: BAdz9q0heD7H4d5EINNzizZi9X7k9sip5rKeZrRgrbA=)
3: 3230322e37332e32342e302f32342d3234203d3e203535373031.roa (hash: PInvCtxVVtioPbfgKwU3owF3bAZaDoVKCpPjomKqIrc=)
4: 3130332e33312e3233322e302f32322d3234203d3e203535373031.roa (hash: LXq7hGEpfDwOU/0U2QR8rTojO84R6vUdH42Dh5XJwhA=)
5: 34332e3235322e3233382e302f32342d3234203d3e203535373031.roa (hash: jervWvS7fVPh370uN91AucyVv2pORH48B5fUUflxIjw=)
6: 34332e3235322e3233362e302f32332d3234203d3e203535373031.roa (hash: 9/aJzkpwQD5bM8J0s7lmNbtmibtAmha33amC/3lwiTs=)
7: 3230322e37332e32362e302f32342d3234203d3e20313431383932.roa (hash: 2Omj4R13yIfbTM8O99f4AEQ3eWdecD3Qz56Vk4+EoQE=)
8: 9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1.crl (hash: hlM8fa4JKJvy0iltnZjPhFSDFcOa+OufV2UBmPbaMIs=)
9: 34392e302e302e302f32322d3234203d3e203535373031.roa (hash: sLZQYwwJZGFMTL7izEAM/LPP1kYOTnZL+ruwm/tAWUw=)
10: 3130332e31382e37362e302f32322d3234203d3e203535373031.roa (hash: ZIatr5akU/o2NWBe3N+oXda5TMJkC+DkwhEJDyTCXOU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1.crl
rsync://rpki-rsync.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 19:26:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:82:30:28:f4:78:00:f6:7c:55:d3:65:fa:09:af:83:09:c3:b4:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1
Validity
Not Before: Jul 23 17:16:18 2026 GMT
Not After : Jul 24 19:26:18 2026 GMT
Subject: CN=BB56BE641136C2949EC67EC09FF6BD54AF47F3AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:78:10:58:15:3d:4f:1d:8d:a7:e6:e4:6c:0c:
26:76:ef:fe:f9:0e:75:57:1d:00:4f:b9:09:03:68:
07:46:05:b8:e7:52:26:dd:d0:bb:5b:fd:6a:f9:ff:
63:2a:9e:95:3e:c1:94:ae:44:6e:e4:1d:31:0e:be:
9a:f2:11:b4:d8:cb:b6:b8:66:e8:b4:cc:24:af:6c:
e2:6c:48:2e:ba:aa:1d:7c:a5:0f:49:b5:49:3c:87:
d7:13:ba:31:6f:1a:c7:d0:de:53:73:80:d6:ed:85:
ac:eb:27:35:73:91:8a:9b:a1:9d:d9:da:53:9a:fd:
d8:1b:23:61:42:f2:42:79:fd:73:f1:78:50:a4:e2:
4e:57:68:14:5b:8f:ae:47:2d:17:7f:a6:e4:ed:c7:
f3:06:35:15:f1:5d:af:4c:80:e6:8f:73:79:83:37:
9c:e1:3f:1a:b2:83:ef:3e:a5:70:6a:63:9e:b9:3a:
13:31:c4:b5:80:32:d9:9e:27:d8:d2:b4:e7:d7:24:
72:35:1f:33:fe:61:1c:18:73:4c:01:70:de:9d:13:
74:61:6e:dd:b5:a3:81:d4:06:d7:8f:63:13:74:c9:
4d:e9:70:64:78:5e:c7:04:39:39:f5:91:7e:f2:26:
eb:78:9c:f9:e9:c9:c5:76:94:c8:e7:cf:05:ba:65:
7e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:56:BE:64:11:36:C2:94:9E:C6:7E:C0:9F:F6:BD:54:AF:47:F3:AA
X509v3 Authority Key Identifier:
keyid:9F:D7:FF:4D:3F:B3:73:40:FA:A8:C7:EE:71:D1:CB:9E:AF:08:59:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:2b:1f:b7:43:60:68:79:fa:f5:f1:92:2b:be:f1:46:b7:ce:
aa:dd:46:7a:55:58:22:3c:3f:0e:18:ca:1e:3e:95:6f:89:7c:
53:e0:dd:b4:01:d4:c2:b8:ba:32:f6:18:5d:6a:8d:ff:7e:5d:
92:cb:10:08:cb:b7:ee:25:87:2a:a5:8e:40:69:c9:7f:f5:82:
5f:70:97:9a:1d:34:37:6b:f2:52:e1:c9:65:32:4d:2e:9e:91:
56:7d:dc:0a:ae:66:f8:1f:19:76:c6:21:e2:6f:38:e4:17:61:
9a:a3:ca:af:29:4d:65:a1:39:0a:18:a6:e4:7b:f2:bf:5c:a2:
78:84:00:10:da:12:5e:4c:70:31:24:a4:9b:23:4c:71:47:4a:
77:14:fc:16:72:68:74:1d:28:6c:68:84:25:02:97:75:b2:d9:
6f:bc:50:f6:83:88:de:a9:29:54:14:ed:cf:a4:63:b2:20:d8:
14:0d:22:78:52:11:31:d3:d2:aa:da:bb:4b:0c:78:31:b1:80:
77:bb:12:87:b2:d1:fc:b5:1c:39:bb:36:4b:41:ec:2b:7c:d8:
7e:50:9a:fe:31:f0:e9:7d:b0:fe:a3:a8:b7:17:ac:58:4c:b3:
0c:68:3a:e7:85:73:32:4e:d6:ef:a9:21:e4:b5:a6:cb:1c:6b:
1a:e9:50:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:21:14 2026 by rpki-client