
$ rpki-client -vvf rpki-rsync.idnic.net/repo/59af00ec-d083-4a9f-821f-7da18f815417/0/09C4BA8AF741A51FDD8C550917C96D395CBE0FFD.mft
File: 09C4BA8AF741A51FDD8C550917C96D395CBE0FFD.mft (raw, json)
Hash identifier: kduWrFNew/1pIm9kTNe/WlODLutzDUwkYYrelSVQr+0=
Subject key identifier: DC:08:B0:F6:73:15:50:C6:A2:EF:9A:71:72:84:0A:EF:16:16:AE:0C
Authority key identifier: 09:C4:BA:8A:F7:41:A5:1F:DD:8C:55:09:17:C9:6D:39:5C:BE:0F:FD
Certificate issuer: /CN=09C4BA8AF741A51FDD8C550917C96D395CBE0FFD
Certificate serial: 03F997B7C5EDEB165B98B42FF144DAFEEF1425D0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/09C4BA8AF741A51FDD8C550917C96D395CBE0FFD.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/59af00ec-d083-4a9f-821f-7da18f815417/0/09C4BA8AF741A51FDD8C550917C96D395CBE0FFD.mft
Manifest number: 6F
Signing time: Thu 23 Jul 2026 21:21:05 +0000
Manifest this update: Thu 23 Jul 2026 21:16:05 +0000
Manifest next update: Fri 24 Jul 2026 23:44:05 +0000
Files and hashes: 1: 09C4BA8AF741A51FDD8C550917C96D395CBE0FFD.crl (hash: zd8K3fx9L+4TfOTxPfAziuoyl97BCIbs+LZM7l6864I=)
2: 3131332e32302e3133362e302f32312d3234203d3e203435373136.roa (hash: 9Dp0sbY0tRdXCsPfX1Bi/rh765yhn92aMlIVBuucvDU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/59af00ec-d083-4a9f-821f-7da18f815417/0/09C4BA8AF741A51FDD8C550917C96D395CBE0FFD.crl
rsync://rpki-rsync.idnic.net/repo/59af00ec-d083-4a9f-821f-7da18f815417/0/09C4BA8AF741A51FDD8C550917C96D395CBE0FFD.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/09C4BA8AF741A51FDD8C550917C96D395CBE0FFD.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 23:44:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:f9:97:b7:c5:ed:eb:16:5b:98:b4:2f:f1:44:da:fe:ef:14:25:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09C4BA8AF741A51FDD8C550917C96D395CBE0FFD
Validity
Not Before: Jul 23 21:16:05 2026 GMT
Not After : Jul 24 23:44:05 2026 GMT
Subject: CN=DC08B0F6731550C6A2EF9A7172840AEF1616AE0C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:07:95:83:94:4c:4a:c5:4a:63:e5:32:21:62:
69:bf:ae:b6:4d:ff:15:3f:09:ba:eb:06:fd:f2:e1:
c4:98:f5:54:81:33:ae:e5:ef:4c:18:eb:3e:9a:d9:
b9:20:5d:bf:e0:03:5b:99:75:9c:8c:d1:3c:52:24:
6b:82:5f:17:40:d7:8a:b7:14:52:cc:84:35:55:b1:
91:e3:2e:73:99:03:50:ab:04:92:19:0b:c2:76:a9:
ec:69:94:eb:b1:ca:f3:e8:3d:f7:c0:9e:a3:16:09:
63:2c:71:0c:44:62:24:92:be:e8:2d:7b:65:a5:a9:
9f:28:23:5c:13:4b:78:ad:28:91:3a:e5:d5:c6:5d:
dc:aa:76:c8:60:81:03:c4:52:b1:44:e4:91:6c:b6:
b7:4f:6d:6e:f4:e9:a5:e4:1b:9e:a1:b6:1e:81:08:
5a:aa:e2:65:6c:f1:fc:0b:27:62:5a:2c:ac:af:71:
68:d9:b7:50:cc:7b:35:5e:56:5a:8a:f0:8a:0f:a8:
d0:2e:fa:57:16:81:7f:ab:f4:6c:61:fb:6d:1b:41:
65:37:c2:26:a6:2b:d5:bb:bc:88:6e:6d:73:40:16:
16:48:7d:80:99:61:ee:11:b7:e5:cd:70:90:9b:22:
27:bd:50:38:41:19:69:78:72:b3:6c:80:9a:c8:3c:
63:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:08:B0:F6:73:15:50:C6:A2:EF:9A:71:72:84:0A:EF:16:16:AE:0C
X509v3 Authority Key Identifier:
keyid:09:C4:BA:8A:F7:41:A5:1F:DD:8C:55:09:17:C9:6D:39:5C:BE:0F:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/59af00ec-d083-4a9f-821f-7da18f815417/0/09C4BA8AF741A51FDD8C550917C96D395CBE0FFD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/09C4BA8AF741A51FDD8C550917C96D395CBE0FFD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/59af00ec-d083-4a9f-821f-7da18f815417/0/09C4BA8AF741A51FDD8C550917C96D395CBE0FFD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:69:3b:93:80:dd:49:39:1b:fd:10:ca:0a:99:ec:fd:3a:54:
fd:af:99:a9:0a:61:0c:8e:51:ea:5b:86:d4:ce:6d:87:83:cb:
5f:64:59:72:1e:73:05:1f:51:f7:e8:67:73:c8:fd:5e:9c:dc:
a6:5e:18:cb:10:20:af:90:55:b2:70:ec:b0:81:13:6c:d6:b1:
45:7a:63:ca:fb:ed:61:d7:df:91:cf:7b:32:e6:18:33:7b:4b:
4f:a6:ed:c6:a1:ed:40:d4:65:3e:ed:27:bb:70:b2:f6:56:56:
36:49:56:69:71:37:48:fc:21:84:72:50:99:5f:47:73:7c:cf:
8c:c1:67:dc:27:16:77:0c:b2:f8:27:f3:a9:91:49:58:22:56:
b3:35:99:d1:b9:eb:df:cf:fb:33:04:a2:c9:e8:de:a2:96:d6:
52:61:5c:f8:b8:ef:82:39:dc:c9:a6:5c:18:a5:83:28:32:6f:
1b:15:37:9f:60:b2:1d:8c:5d:b2:94:fe:38:a4:ed:ff:45:29:
2b:09:c2:8f:ef:6d:68:38:c2:d6:f5:80:d5:1d:8e:9e:bb:33:
e1:74:8c:12:fc:41:ab:00:2d:40:1b:d0:9a:96:c8:ee:bd:f6:
52:9e:58:9c:f4:c3:5c:92:b5:cc:4d:a1:fc:79:f3:e5:f6:a8:
f8:68:48:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:17:53 2026 by rpki-client