
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5c219259-ed1a-4d18-bd92-94b60672e6a1/0/34A9B9DCAEEB6DA7BD1F7996CFBAEED1E134F47A.mft
File: 34A9B9DCAEEB6DA7BD1F7996CFBAEED1E134F47A.mft (raw, json)
Hash identifier: csv5M4fjipjLsosigbH19ChdQh4wuoGEVihZjQagYuw=
Subject key identifier: 9C:59:BB:1F:32:EF:FA:64:78:69:20:C7:88:38:B0:F8:E4:55:88:3C
Authority key identifier: 34:A9:B9:DC:AE:EB:6D:A7:BD:1F:79:96:CF:BA:EE:D1:E1:34:F4:7A
Certificate issuer: /CN=34A9B9DCAEEB6DA7BD1F7996CFBAEED1E134F47A
Certificate serial: 756B929749BE12F4CC7EFA8DE2E4F0207E5D7D7D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34A9B9DCAEEB6DA7BD1F7996CFBAEED1E134F47A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5c219259-ed1a-4d18-bd92-94b60672e6a1/0/34A9B9DCAEEB6DA7BD1F7996CFBAEED1E134F47A.mft
Manifest number: C2
Signing time: Thu 24 Sep 2026 02:38:59 +0000
Manifest this update: Thu 24 Sep 2026 02:33:59 +0000
Manifest next update: Fri 25 Sep 2026 04:18:59 +0000
Files and hashes: 1: 34A9B9DCAEEB6DA7BD1F7996CFBAEED1E134F47A.crl (hash: fsW8ILJRrjGxLID2zI0Dr+YkKRuWpv8kkC+Nec2qyE0=)
2: 3130332e3233382e3133382e302f32332d3234203d3e20313333333539.roa (hash: RH7qzceSrisGTT+gbHQrqNwFlHJNMn8OuKHPRRq6v88=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5c219259-ed1a-4d18-bd92-94b60672e6a1/0/34A9B9DCAEEB6DA7BD1F7996CFBAEED1E134F47A.crl
rsync://rpki-rsync.idnic.net/repo/5c219259-ed1a-4d18-bd92-94b60672e6a1/0/34A9B9DCAEEB6DA7BD1F7996CFBAEED1E134F47A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34A9B9DCAEEB6DA7BD1F7996CFBAEED1E134F47A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 04:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:6b:92:97:49:be:12:f4:cc:7e:fa:8d:e2:e4:f0:20:7e:5d:7d:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34A9B9DCAEEB6DA7BD1F7996CFBAEED1E134F47A
Validity
Not Before: Sep 24 02:33:59 2026 GMT
Not After : Sep 25 04:18:59 2026 GMT
Subject: CN=9C59BB1F32EFFA64786920C78838B0F8E455883C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b3:4d:89:02:8d:f5:72:c3:0a:2e:83:40:7b:
18:4e:de:aa:7a:63:1b:8f:01:ad:a1:2b:71:28:e2:
51:67:15:d1:d8:89:18:46:5b:e0:ff:9b:e1:9c:fb:
fe:02:3b:17:c8:f0:33:5b:a0:65:ea:53:80:18:29:
00:88:3b:c0:f4:21:43:e3:5f:95:27:f3:94:c8:40:
bb:64:63:75:bb:b7:16:56:3e:f8:8d:c5:21:b7:40:
82:e2:2d:a3:49:c4:c5:f5:c4:b5:16:77:1b:67:25:
5b:da:ce:ae:08:c1:bc:6f:b1:af:97:f0:6c:4d:32:
8a:dd:d9:37:9d:67:75:fd:59:90:c4:c6:09:07:4a:
80:7e:50:3a:00:f8:f1:4c:ff:a1:fc:ba:99:96:bd:
50:4f:d6:70:e3:82:88:1a:d2:ae:79:cc:bd:6c:4f:
bc:d6:bf:b3:41:6b:17:45:e7:09:15:df:ce:97:17:
72:07:43:59:25:85:4a:dc:24:91:2c:fe:7d:ff:be:
d1:dd:b7:65:6a:9e:74:de:d5:b7:0e:38:0b:89:77:
e9:a4:57:3e:bb:ed:d2:03:4d:da:c3:39:73:32:72:
ea:3a:95:46:d7:df:f6:cc:b7:d1:ec:5b:53:9c:bf:
95:a0:1f:cc:07:03:4a:8e:39:fc:a9:20:df:8c:7b:
6c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:59:BB:1F:32:EF:FA:64:78:69:20:C7:88:38:B0:F8:E4:55:88:3C
X509v3 Authority Key Identifier:
keyid:34:A9:B9:DC:AE:EB:6D:A7:BD:1F:79:96:CF:BA:EE:D1:E1:34:F4:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5c219259-ed1a-4d18-bd92-94b60672e6a1/0/34A9B9DCAEEB6DA7BD1F7996CFBAEED1E134F47A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34A9B9DCAEEB6DA7BD1F7996CFBAEED1E134F47A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5c219259-ed1a-4d18-bd92-94b60672e6a1/0/34A9B9DCAEEB6DA7BD1F7996CFBAEED1E134F47A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:81:78:da:83:63:2f:55:47:cf:7e:7c:2b:11:f5:0a:68:7d:
54:a0:6b:bc:c7:d9:20:91:9d:bd:6f:a0:8e:4c:41:90:cf:8b:
1d:7e:fc:1b:36:64:2f:d3:9a:88:4a:d2:9a:a2:0e:3e:02:b3:
7d:fb:34:15:e9:b7:04:3b:fc:42:76:97:fa:49:aa:5d:18:e6:
34:01:91:9c:a5:8f:59:60:4b:5d:0e:d7:36:ee:bd:4b:b3:47:
b8:17:a7:98:d4:b5:21:e1:5e:eb:ca:23:5e:79:d5:b1:b5:4e:
1b:8a:5d:ec:4c:37:20:60:30:fb:a0:a3:47:90:01:43:cd:07:
88:9e:44:18:c1:39:5e:9e:a7:8d:30:6a:0d:c6:33:8c:d1:47:
10:93:92:bf:a2:e0:3b:88:10:04:35:e7:50:a0:22:5a:0f:cd:
cf:db:a0:42:07:d7:1a:ce:40:06:b2:eb:d4:83:57:fd:b5:47:
9f:ba:69:34:d5:c7:ee:5f:9e:67:e7:08:d5:28:b4:b8:a6:97:
e3:3d:e6:ea:4b:ee:69:4f:ce:0c:7e:5a:b5:b2:d3:6a:44:b3:
fc:15:b3:5b:d6:6c:bd:51:51:a0:bc:75:43:b9:0f:66:b7:7f:
7c:18:73:ba:fa:d9:87:cf:8a:15:c4:bd:33:a3:88:33:8b:b0:
3e:b2:d9:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 19:29:02 2026 by rpki-client