
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/9346713F8C419319E481DBF3CFA54206BF4BE699.mft
File: 9346713F8C419319E481DBF3CFA54206BF4BE699.mft (raw, json)
Hash identifier: TQZ5FSARbmpYM0q/OVPneeW7NExrvNMVetyWwurFHrw=
Subject key identifier: 96:28:56:A9:C1:17:C4:7E:DC:D5:51:19:89:57:E5:0C:FC:71:27:4A
Authority key identifier: 93:46:71:3F:8C:41:93:19:E4:81:DB:F3:CF:A5:42:06:BF:4B:E6:99
Certificate issuer: /CN=9346713F8C419319E481DBF3CFA54206BF4BE699
Certificate serial: 0CB77031F61E6F6D482BFC63B9ED96D35759D64D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9346713F8C419319E481DBF3CFA54206BF4BE699.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/9346713F8C419319E481DBF3CFA54206BF4BE699.mft
Manifest number: D8
Signing time: Sun 11 Oct 2026 08:43:15 +0000
Manifest this update: Sun 11 Oct 2026 08:38:15 +0000
Manifest next update: Mon 12 Oct 2026 09:55:15 +0000
Files and hashes: 1: 9346713F8C419319E481DBF3CFA54206BF4BE699.crl (hash: zHdiFB5jraE71ok6jSgugjfUs7NTVgocIqesQOXdV4k=)
2: 3136302e32322e37302e302f32332d3234203d3e203538333831.roa (hash: HfjxEYgkrqfzHgHj5l+tU2/vWOSWktiutyLJJOsTTUI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/9346713F8C419319E481DBF3CFA54206BF4BE699.crl
rsync://rpki-rsync.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/9346713F8C419319E481DBF3CFA54206BF4BE699.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9346713F8C419319E481DBF3CFA54206BF4BE699.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 09:55:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:b7:70:31:f6:1e:6f:6d:48:2b:fc:63:b9:ed:96:d3:57:59:d6:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9346713F8C419319E481DBF3CFA54206BF4BE699
Validity
Not Before: Oct 11 08:38:15 2026 GMT
Not After : Oct 12 09:55:15 2026 GMT
Subject: CN=962856A9C117C47EDCD551198957E50CFC71274A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ee:f9:4b:25:24:f4:9e:38:1f:e5:ff:83:1c:
1e:0c:13:58:16:8c:91:4d:b7:4e:dc:f9:f5:f4:7a:
48:5a:15:57:37:d2:5c:f6:43:38:30:a5:91:8c:5f:
a8:cf:ee:7b:fc:c7:f7:a8:f6:50:b4:82:78:96:8d:
91:49:23:70:7a:24:90:6c:27:7a:ef:22:71:f2:70:
73:e6:af:f1:c4:a5:c0:e2:a1:d4:16:6a:8c:ba:c0:
51:1e:13:31:5f:77:64:b9:ab:83:b8:a8:57:e8:22:
a7:37:48:bf:5c:b4:14:58:28:95:34:c4:ff:86:3c:
06:ee:d2:f7:ea:f1:d9:38:18:ed:9c:7c:be:16:21:
cc:d8:99:3c:bf:c2:b1:5d:cd:86:a6:1a:94:b3:a2:
06:c6:4a:7d:69:b5:0e:54:36:08:fc:6c:36:33:3b:
fe:81:16:75:04:58:f2:76:f5:72:bc:39:4f:5b:21:
b0:21:07:4c:0a:e4:3d:95:bb:fa:b3:75:35:1e:13:
f6:43:f1:cb:77:31:82:30:1a:72:87:4d:07:f0:75:
47:2f:9a:16:07:3b:6a:81:40:b2:18:8b:c9:0c:ce:
51:52:09:bf:81:9b:da:2b:3f:c5:ee:65:91:df:e4:
0e:76:00:59:c3:5d:3d:ba:71:58:de:70:e4:f5:3f:
09:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:28:56:A9:C1:17:C4:7E:DC:D5:51:19:89:57:E5:0C:FC:71:27:4A
X509v3 Authority Key Identifier:
keyid:93:46:71:3F:8C:41:93:19:E4:81:DB:F3:CF:A5:42:06:BF:4B:E6:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/9346713F8C419319E481DBF3CFA54206BF4BE699.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9346713F8C419319E481DBF3CFA54206BF4BE699.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/9346713F8C419319E481DBF3CFA54206BF4BE699.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:e2:b9:7d:1c:f6:30:03:b2:cd:0c:71:88:68:96:0a:c3:61:
a9:8c:87:a1:65:0c:3f:34:09:18:4d:24:25:5a:83:b7:c1:46:
32:15:a8:6d:b5:32:9c:34:76:1d:05:83:ca:6b:8a:2b:18:85:
f7:46:32:61:3b:9c:08:91:d8:14:35:c2:2a:f0:d1:c5:41:a5:
d0:d9:90:1b:94:21:b5:9b:a8:e1:9e:c8:c3:c4:a7:ec:ba:99:
ce:3f:b0:f8:a0:4e:00:3b:7e:8a:25:a0:8c:95:f0:47:d2:9e:
39:0a:57:7b:a5:f1:a3:e1:43:f8:f6:04:06:b0:8b:fc:3f:67:
2f:a0:76:e2:af:54:38:56:be:b9:d4:be:d5:50:bb:0f:67:20:
c9:a6:8b:cc:5a:44:f3:ec:7d:bd:b0:b7:c8:24:c5:e8:e0:2c:
81:bc:30:b0:a3:bd:30:6b:4c:df:fd:a5:ac:ad:18:f7:01:03:
a4:62:81:05:da:67:f8:27:75:91:11:18:5e:7c:99:62:83:bf:
ec:9f:3e:17:81:50:1f:72:b2:df:28:50:86:42:63:bf:63:f2:
10:71:fd:14:54:93:61:62:a1:b4:26:12:08:4a:e6:42:f4:d5:
57:04:55:7a:5f:31:3c:61:37:9e:f7:b5:c3:14:bc:94:2c:71:
4c:3a:ba:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:38:38 2026 by rpki-client