
$ rpki-client -vvf rpki-rsync.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/9B2D9946FF043D1081C26FD38F0817310077BFC7.mft
File: 9B2D9946FF043D1081C26FD38F0817310077BFC7.mft (raw, json)
Hash identifier: 7NFjgj9UhxoDhu5vZadlXAIbFGKeLvqfgGRyoJebcZM=
Subject key identifier: CC:F5:7F:20:F3:A5:C5:F3:3A:97:50:C0:EF:17:1B:8E:24:AF:23:C5
Authority key identifier: 9B:2D:99:46:FF:04:3D:10:81:C2:6F:D3:8F:08:17:31:00:77:BF:C7
Certificate issuer: /CN=9B2D9946FF043D1081C26FD38F0817310077BFC7
Certificate serial: 7A359DB22B29376AFB32F9F9CA2E0D0B8B5220C4
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9B2D9946FF043D1081C26FD38F0817310077BFC7.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/9B2D9946FF043D1081C26FD38F0817310077BFC7.mft
Manifest number: 6E
Signing time: Thu 23 Jul 2026 21:10:54 +0000
Manifest this update: Thu 23 Jul 2026 21:05:54 +0000
Manifest next update: Fri 24 Jul 2026 21:15:54 +0000
Files and hashes: 1: 9B2D9946FF043D1081C26FD38F0817310077BFC7.crl (hash: ZyMIrziqnf/aoWye2+36g9IKgU0azsFpANui1RkQa1k=)
2: 3136302e32322e39322e302f32342d3234203d3e20313532383335.roa (hash: oePR/73r7MSIzHQUks2lMsK7CVUF0CNaDFGyG/xqYVQ=)
3: 3136302e32322e39332e302f32342d3234203d3e20313532383335.roa (hash: nWvsjEg3FhCbHhiH6HxunuDCxB9lgrvkKOpoSSa7E9Q=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/9B2D9946FF043D1081C26FD38F0817310077BFC7.crl
rsync://rpki-rsync.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/9B2D9946FF043D1081C26FD38F0817310077BFC7.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9B2D9946FF043D1081C26FD38F0817310077BFC7.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 21:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:35:9d:b2:2b:29:37:6a:fb:32:f9:f9:ca:2e:0d:0b:8b:52:20:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9B2D9946FF043D1081C26FD38F0817310077BFC7
Validity
Not Before: Jul 23 21:05:54 2026 GMT
Not After : Jul 24 21:15:54 2026 GMT
Subject: CN=CCF57F20F3A5C5F33A9750C0EF171B8E24AF23C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f2:98:c4:b3:7e:62:86:62:07:e3:b0:77:7f:
99:3c:6e:26:7f:48:a9:cf:ce:a1:73:81:79:26:7f:
a8:5f:a0:2b:28:bb:3f:83:5d:01:19:03:1e:f4:ea:
31:c0:fd:d6:29:39:95:d9:e7:bb:8c:5e:b4:5f:dd:
2a:ef:01:b4:3e:db:2c:0d:35:23:70:e1:e4:98:d4:
d5:b7:2e:41:11:87:07:7f:00:1f:b6:9a:22:40:4c:
6d:ae:20:88:8e:6c:93:22:29:3c:65:12:b3:8e:69:
e9:2d:c9:ee:e8:0c:10:3d:f9:2e:a4:dd:c6:0b:f1:
4a:2b:e2:0b:f3:f5:60:7a:22:16:6c:c5:37:55:93:
27:a7:a2:f0:58:9c:00:56:63:fc:0d:4e:a7:1b:57:
1f:40:8b:d1:35:e6:40:b7:4e:ac:63:21:e7:c3:29:
70:b5:82:79:cf:7a:d2:7b:23:95:ee:85:47:4b:72:
61:20:5a:4f:ca:52:76:72:cb:a1:a2:7b:d5:a7:8d:
79:a8:41:4a:63:2d:45:c8:99:f9:dc:a5:99:fe:1a:
c9:05:1c:c0:a1:af:ca:91:a7:30:a7:21:68:ec:ba:
c6:a6:d4:37:7f:34:f1:bb:1b:1c:e1:8f:fc:d7:7a:
a7:1d:3f:8b:6e:50:a8:ac:d8:3d:81:37:3d:ef:1b:
ab:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:F5:7F:20:F3:A5:C5:F3:3A:97:50:C0:EF:17:1B:8E:24:AF:23:C5
X509v3 Authority Key Identifier:
keyid:9B:2D:99:46:FF:04:3D:10:81:C2:6F:D3:8F:08:17:31:00:77:BF:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/9B2D9946FF043D1081C26FD38F0817310077BFC7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9B2D9946FF043D1081C26FD38F0817310077BFC7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/9B2D9946FF043D1081C26FD38F0817310077BFC7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:fd:1b:24:16:72:08:de:42:fb:df:ed:c1:f8:56:55:70:9f:
83:0b:c0:08:21:39:e8:6c:b6:ab:23:42:7d:d8:e4:82:81:54:
0e:ba:b3:16:92:9e:3a:21:08:0d:6b:03:27:94:e6:36:3f:98:
ed:1c:5e:dd:39:10:77:98:37:35:f1:7a:e6:78:65:31:f4:da:
2b:53:80:5e:38:2c:c2:d3:ff:ab:a8:b3:d7:1b:96:2d:72:ef:
45:7c:b0:2e:5d:d1:32:02:f9:ae:e6:c2:8d:ba:92:0e:bc:d7:
c2:2e:60:0a:53:d2:5b:d1:60:38:1c:37:a3:58:f5:73:2e:42:
92:4b:50:bd:31:62:36:af:ae:5a:ad:4e:1d:2e:a3:ae:c9:18:
79:86:d6:05:70:13:6a:6d:46:92:c6:b1:d3:ec:2d:7c:0b:ab:
e3:bd:93:8c:9b:1f:bc:06:22:8f:11:e7:42:dd:ed:d8:79:64:
b6:aa:49:46:5c:63:56:01:7f:76:35:8a:a7:05:a5:4c:cb:13:
dd:43:d0:fa:8c:e4:34:ba:35:d0:84:41:76:51:51:ab:c2:de:
4f:60:c0:ed:7b:55:99:23:81:d2:fb:dc:fb:fe:ae:cf:07:5f:
15:68:72:97:7f:a2:5d:f3:51:3d:8a:c5:56:d1:a9:e5:20:60:
39:06:11:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:52:51 2026 by rpki-client