
$ rpki-client -vvf rpki-rsync.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.mft
File: 9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.mft (raw, json)
Hash identifier: xWRAghc446g7YAN7YrEmuCxgNeFkPNp5hFSV99XCyto=
Subject key identifier: 28:0B:64:D7:26:46:D2:59:8E:38:D6:9F:FA:1A:BC:70:06:AB:0E:20
Authority key identifier: 9F:FB:79:1C:09:C2:A2:BF:53:CF:54:17:4A:8C:A1:AD:67:7B:35:64
Certificate issuer: /CN=9FFB791C09C2A2BF53CF54174A8CA1AD677B3564
Certificate serial: 4494C80394AD8B29B6C41CC58256332068701EB7
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.mft
Manifest number: 6F
Signing time: Thu 23 Jul 2026 16:24:58 +0000
Manifest this update: Thu 23 Jul 2026 16:19:58 +0000
Manifest next update: Fri 24 Jul 2026 17:50:58 +0000
Files and hashes: 1: 9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.crl (hash: Z8MpvO6ap3bLLDn8bknPL3bjnGF5SJ8UamRMIIZDYQU=)
2: 3136302e32352e3234392e302f32342d3234203d3e20313336303939.roa (hash: U0YPo5BGNsV6sfhS2oiy7oPSHdSgcRKevuF2NKX91Xo=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.crl
rsync://rpki-rsync.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 17:50:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:94:c8:03:94:ad:8b:29:b6:c4:1c:c5:82:56:33:20:68:70:1e:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9FFB791C09C2A2BF53CF54174A8CA1AD677B3564
Validity
Not Before: Jul 23 16:19:58 2026 GMT
Not After : Jul 24 17:50:58 2026 GMT
Subject: CN=280B64D72646D2598E38D69FFA1ABC7006AB0E20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fb:14:a7:f8:26:40:df:37:78:2f:1c:8a:c6:
82:24:c0:4f:d1:e4:74:7b:77:03:4c:94:41:44:dd:
54:9e:c0:7b:5c:85:fd:5d:d6:d2:dd:c6:20:c9:da:
d0:79:90:9a:a5:72:55:fa:5f:1d:20:f4:ec:57:cd:
1a:aa:0b:72:9d:ac:db:e2:64:ac:58:b6:25:95:4c:
0d:54:35:d2:4f:9c:8c:a0:45:d8:08:3f:f0:76:9a:
bf:ad:ed:37:4d:c2:d7:ff:7e:cb:ef:4f:e4:a1:1e:
8c:e1:d8:d2:e7:b1:13:25:3b:01:e9:3b:a1:5c:c6:
b6:50:9a:df:aa:12:94:5a:02:c5:ba:ba:ba:07:ec:
dd:05:f3:c2:79:fa:1c:c3:92:9a:f8:fa:54:db:9e:
c9:98:e5:79:6b:8a:1c:4b:57:10:a5:26:ee:1d:47:
ac:2d:e9:87:c5:e2:d6:26:25:5a:06:31:cb:e4:d9:
8e:83:c2:71:a4:bb:b4:6f:fa:77:19:ca:05:ca:1d:
6e:d5:27:5c:97:d1:50:da:b7:fb:b8:32:82:62:29:
c5:f3:1d:01:da:5a:f2:73:a5:54:a9:70:e2:9c:2c:
5c:7c:db:8e:74:0d:41:2d:88:6e:f0:eb:d8:60:a2:
ab:cc:de:cc:7e:96:11:b0:1c:37:58:1f:44:91:2e:
1e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:0B:64:D7:26:46:D2:59:8E:38:D6:9F:FA:1A:BC:70:06:AB:0E:20
X509v3 Authority Key Identifier:
keyid:9F:FB:79:1C:09:C2:A2:BF:53:CF:54:17:4A:8C:A1:AD:67:7B:35:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:57:c6:9d:35:3c:fd:83:f7:d3:37:f5:c4:8f:7a:a0:4f:32:
7f:f2:f8:88:6f:44:1a:37:60:b5:9b:b9:8e:26:d6:de:e4:32:
dc:ef:8b:b8:b6:0f:80:0b:38:78:2f:aa:3a:e9:50:67:46:5e:
88:dc:94:16:7c:f3:a0:b7:d2:38:97:5b:50:f5:98:7f:2a:e8:
d7:62:04:e4:e9:13:ec:8d:0d:be:e6:2e:90:79:69:e8:35:64:
2f:70:c7:32:17:55:6b:98:13:cf:97:aa:1c:a7:47:ed:44:f7:
82:42:5e:52:7c:05:42:f5:31:12:30:c2:3e:8b:a7:40:11:64:
f4:3b:93:24:49:1c:8c:9f:c4:81:98:00:ca:6e:a0:97:33:ad:
a8:16:11:43:1c:0b:77:84:34:f5:c3:8a:82:96:ee:59:cc:81:
6b:09:9e:54:4b:9c:02:9d:98:e4:22:2f:61:c7:77:7c:42:6c:
0d:0d:40:ec:85:bb:e5:c9:f3:a4:76:39:43:92:2f:67:f6:5c:
89:98:76:cd:69:b6:5a:c7:3d:00:d3:f8:ee:75:3a:ac:e7:fe:
c4:f8:79:73:33:53:c3:15:db:7e:af:30:e2:48:44:6c:c1:f2:
96:a4:94:5a:c8:61:c9:fd:9b:db:1d:b7:a6:86:46:3d:f4:02:
72:2f:64:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:17:04 2026 by rpki-client