
$ rpki-client -vvf rpki-rsync.idnic.net/repo/6cd24b05-269e-4784-b935-f27665830fda/0/9CCE2197D83CFA0979E79295EFEE5D486FB3A23E.mft
File: 9CCE2197D83CFA0979E79295EFEE5D486FB3A23E.mft (raw, json)
Hash identifier: HLgYH8kdnrENpCqZfhzlixfzUu/hEo/ErcVdJHV8dFU=
Subject key identifier: 3A:55:7F:3F:00:99:07:0E:C6:38:C9:3A:B9:F8:AC:87:A3:ED:86:D5
Authority key identifier: 9C:CE:21:97:D8:3C:FA:09:79:E7:92:95:EF:EE:5D:48:6F:B3:A2:3E
Certificate issuer: /CN=9CCE2197D83CFA0979E79295EFEE5D486FB3A23E
Certificate serial: 42A1E12C10A82EE1B575C2975C2C52D4991FEC4E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9CCE2197D83CFA0979E79295EFEE5D486FB3A23E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6cd24b05-269e-4784-b935-f27665830fda/0/9CCE2197D83CFA0979E79295EFEE5D486FB3A23E.mft
Manifest number: 0F
Signing time: Wed 13 May 2026 00:29:05 +0000
Manifest this update: Wed 13 May 2026 00:24:05 +0000
Manifest next update: Thu 14 May 2026 01:18:05 +0000
Files and hashes: 1: 9CCE2197D83CFA0979E79295EFEE5D486FB3A23E.crl (hash: 0Ct3b3Y9JvpWWg8B6aaFY/aHFMgqHa23yF1Z/VvTP6s=)
2: 3130332e3132362e32362e302f32342d3234203d3e20313530353038.roa (hash: 6Awu2Ik5tqvQ6rEKLN4Gy/qaMR8Y4RuJeJcgKdpNQtw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6cd24b05-269e-4784-b935-f27665830fda/0/9CCE2197D83CFA0979E79295EFEE5D486FB3A23E.crl
rsync://rpki-rsync.idnic.net/repo/6cd24b05-269e-4784-b935-f27665830fda/0/9CCE2197D83CFA0979E79295EFEE5D486FB3A23E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9CCE2197D83CFA0979E79295EFEE5D486FB3A23E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:18:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:a1:e1:2c:10:a8:2e:e1:b5:75:c2:97:5c:2c:52:d4:99:1f:ec:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9CCE2197D83CFA0979E79295EFEE5D486FB3A23E
Validity
Not Before: May 13 00:24:05 2026 GMT
Not After : May 14 01:18:05 2026 GMT
Subject: CN=3A557F3F0099070EC638C93AB9F8AC87A3ED86D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:8e:eb:02:f1:48:f7:ea:61:6b:91:9b:ae:b9:
90:cf:eb:4a:7d:7f:8a:a2:b3:ea:c5:bd:29:80:ff:
7a:89:cd:83:3f:c7:47:20:55:00:c1:56:70:f3:d2:
c7:0f:7c:75:f9:93:30:af:75:33:43:68:f8:65:03:
75:c8:c0:df:ae:70:80:c9:30:86:61:66:c5:33:ed:
dc:fb:58:cf:07:57:84:36:5c:9d:03:24:81:ba:56:
2c:02:63:f7:bc:31:0e:fd:bc:b6:c0:5c:f6:0b:44:
d1:19:bf:63:2a:20:0d:cd:69:ba:b8:30:45:85:5d:
89:62:c6:a5:be:f0:d5:00:aa:d0:8d:cd:6e:fc:60:
1f:4d:19:5e:fb:b1:ff:de:d4:58:07:40:88:dc:7b:
14:0a:11:99:5d:04:22:c0:45:5d:2a:8f:37:8a:79:
9a:6f:f7:8b:3e:89:e9:ab:b4:64:dd:9b:02:55:ce:
b5:47:84:dd:ae:d9:35:43:04:07:f3:13:b0:83:a6:
67:0c:8e:da:99:24:48:bd:cc:ac:30:15:3d:cc:a3:
bd:09:3a:61:83:42:ee:a0:3a:62:61:38:90:1f:7b:
6d:7a:e2:a3:fa:6f:bf:2d:1e:ed:aa:43:d9:ae:cf:
5f:c5:5b:c6:93:33:70:fc:d7:c0:3b:4b:bf:d3:0b:
04:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:55:7F:3F:00:99:07:0E:C6:38:C9:3A:B9:F8:AC:87:A3:ED:86:D5
X509v3 Authority Key Identifier:
keyid:9C:CE:21:97:D8:3C:FA:09:79:E7:92:95:EF:EE:5D:48:6F:B3:A2:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6cd24b05-269e-4784-b935-f27665830fda/0/9CCE2197D83CFA0979E79295EFEE5D486FB3A23E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9CCE2197D83CFA0979E79295EFEE5D486FB3A23E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6cd24b05-269e-4784-b935-f27665830fda/0/9CCE2197D83CFA0979E79295EFEE5D486FB3A23E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:89:76:4c:8e:8f:a2:1f:67:e7:42:3f:00:cf:d9:a3:aa:1d:
89:c1:14:55:26:5b:bc:cb:f6:26:94:ad:0e:5e:57:6a:58:d8:
d7:4f:c9:55:c7:54:cc:53:05:f1:13:3a:38:51:80:0c:f2:cb:
ee:64:d0:bb:16:0b:8f:7c:e1:35:3a:06:9c:4c:2a:99:e4:88:
db:84:37:37:d5:ce:78:ae:f8:0a:80:67:4f:eb:51:11:bd:c7:
54:24:a9:56:a1:37:49:c9:b1:e3:5f:82:c4:11:ce:68:77:0c:
52:36:99:ae:57:4d:21:9f:8a:dd:e7:ad:0e:b7:61:de:64:5a:
1d:ba:dc:50:85:d1:71:7f:ef:1d:98:a2:e9:ce:86:b7:5d:bd:
30:64:c7:28:5b:24:f7:98:82:86:2e:58:61:93:2d:6e:9f:41:
d5:b6:e8:20:a5:cc:5c:65:87:50:fe:43:78:53:2d:0a:c2:47:
e7:9f:67:14:70:33:d6:34:9a:ed:a6:ca:c0:2c:69:c7:01:85:
7e:54:7d:8a:85:bc:06:e9:ad:01:b1:e0:f5:74:34:5d:0a:c6:
56:2d:ff:61:ea:57:e6:5a:68:ec:4f:09:1d:6f:cf:3d:fe:76:
8c:1f:41:97:ce:90:67:c2:cd:3b:7a:60:20:19:56:0b:a2:b3:
da:28:75:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:56:04 2026 by rpki-client