
$ rpki-client -vvf rpki-rsync.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.mft
File: 9BD7599923B8FB8C83AB3B30287FBCC6A9874800.mft (raw, json)
Hash identifier: zGWW8xzf7694YePtDPiAESEfxC/1uAsjIn1ag8OhN1Q=
Subject key identifier: CC:3D:30:63:50:00:5B:45:DE:B5:8B:03:CB:71:24:78:9A:54:ED:02
Authority key identifier: 9B:D7:59:99:23:B8:FB:8C:83:AB:3B:30:28:7F:BC:C6:A9:87:48:00
Certificate issuer: /CN=9BD7599923B8FB8C83AB3B30287FBCC6A9874800
Certificate serial: 772B34D87F9324C6D5FF9CDA45D25B425D6AE558
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.mft
Manifest number: 6F
Signing time: Fri 24 Jul 2026 03:59:14 +0000
Manifest this update: Fri 24 Jul 2026 03:54:14 +0000
Manifest next update: Sat 25 Jul 2026 06:32:14 +0000
Files and hashes: 1: 3130332e3232372e3138362e302f32332d3233203d3e20313432333730.roa (hash: J9RbUPOqUx6qGs/3TSnBbVnRso5umnmyOklAgJwt1Js=)
2: 9BD7599923B8FB8C83AB3B30287FBCC6A9874800.crl (hash: wHPrr6cfI8joxh99RiGtt2vt2XHZu//e2JSF3u7sGXs=)
3: 3130332e3232372e3138372e302f32342d3234203d3e20313432333730.roa (hash: WkzU0ifpIbp5OQ/6TDxMH+vwFG2tqv2mqNzHskMqmF0=)
4: 3130332e3232372e3138362e302f32342d3234203d3e20313432333730.roa (hash: 2N+TEQ769mQU4C1i4Rld3w1DT7X5Tq5lgzhroXjz5Hg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.crl
rsync://rpki-rsync.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 06:32:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:2b:34:d8:7f:93:24:c6:d5:ff:9c:da:45:d2:5b:42:5d:6a:e5:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9BD7599923B8FB8C83AB3B30287FBCC6A9874800
Validity
Not Before: Jul 24 03:54:14 2026 GMT
Not After : Jul 25 06:32:14 2026 GMT
Subject: CN=CC3D306350005B45DEB58B03CB7124789A54ED02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d3:da:4f:02:38:55:da:d6:8a:57:a9:e3:b5:
82:b3:80:da:36:5b:4b:7c:56:e1:49:74:eb:97:f6:
13:7f:3b:5c:3d:d4:48:a2:88:f9:be:e7:05:9c:ad:
65:ca:2c:f8:57:55:35:6e:15:16:05:63:99:39:74:
6d:30:78:f1:87:d3:bc:fa:35:87:a2:44:77:10:7a:
4e:94:4d:cc:a5:9c:a3:51:5f:25:76:35:64:a9:81:
37:d0:bf:98:2c:99:7e:a5:45:c8:b7:be:b5:57:1b:
36:6a:cf:10:d2:6f:6d:cf:69:62:5d:11:e1:32:78:
26:7a:45:34:60:42:ee:e5:91:a0:31:ff:51:56:1d:
b3:72:fc:af:05:e4:8c:5e:d1:8d:53:0c:3e:11:e2:
77:af:9c:35:8d:8f:16:c0:45:21:34:91:c7:2a:fd:
32:4a:3a:e8:c8:8a:d3:4f:92:72:ab:c9:95:ad:33:
03:8c:ef:42:ec:0e:51:9b:44:e7:4b:3c:03:a5:33:
fa:12:f9:46:b9:1f:d1:ba:cb:bf:c0:b3:27:ff:1a:
d4:b8:32:72:5e:0a:15:37:b9:0b:36:70:98:2c:47:
77:13:fd:5c:f3:37:41:84:56:3f:06:ae:53:6c:85:
35:6c:f6:2d:1c:51:a7:12:53:b6:7f:10:28:e1:f4:
f3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:3D:30:63:50:00:5B:45:DE:B5:8B:03:CB:71:24:78:9A:54:ED:02
X509v3 Authority Key Identifier:
keyid:9B:D7:59:99:23:B8:FB:8C:83:AB:3B:30:28:7F:BC:C6:A9:87:48:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:ed:9a:6b:18:5b:bc:43:c4:79:62:6e:65:fc:bf:f1:b2:ff:
b4:1c:8f:45:b0:fd:2a:b9:6c:85:fa:ec:26:57:db:41:ba:71:
8d:28:4f:08:e2:cf:f5:f3:76:82:e4:6b:4c:2f:66:4f:df:4b:
6a:2b:52:fd:2d:c8:cd:05:1f:da:c8:1e:ac:3d:83:b6:fd:d5:
79:c0:49:ab:a3:b8:6d:5f:e9:e4:9c:17:96:f5:83:db:be:90:
6c:fa:2c:d6:9b:d7:10:96:a0:78:a0:89:82:65:dc:f2:1c:55:
65:02:26:e7:d9:a4:e9:3e:7a:40:82:42:b2:4f:b4:9a:c7:ba:
b7:9a:75:54:34:cb:c6:59:ab:95:a1:b3:09:f0:1c:87:1e:68:
ff:37:c0:0d:41:eb:24:76:07:10:3d:6f:c6:35:a9:26:87:e2:
67:fd:5d:7a:0d:56:5a:17:43:08:dc:9c:2d:d9:e6:a6:bc:10:
12:69:bf:a5:4d:ce:fe:96:1e:44:11:53:cf:c6:35:b7:38:11:
a6:b9:c1:f8:00:07:5b:ce:77:71:3c:65:1d:78:be:56:02:04:
48:bf:21:c0:45:34:9d:06:2c:0d:e2:e7:ce:e4:95:17:c7:e1:
51:14:89:7f:25:27:61:1a:f5:fc:ba:64:ff:c1:ff:69:cb:b7:
23:56:14:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:19:06 2026 by rpki-client