
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/0CCF948F3DA2CC08F062DFCB57CA07067D419783.mft
File: 0CCF948F3DA2CC08F062DFCB57CA07067D419783.mft (raw, json)
Hash identifier: S87DmIv9O6amKVtb71YUoMOhIjikEcorldK6MpSIjBY=
Subject key identifier: 92:60:37:9A:71:6E:1C:3D:60:20:2F:03:6B:26:15:B6:A9:1F:09:D1
Authority key identifier: 0C:CF:94:8F:3D:A2:CC:08:F0:62:DF:CB:57:CA:07:06:7D:41:97:83
Certificate issuer: /CN=0CCF948F3DA2CC08F062DFCB57CA07067D419783
Certificate serial: 44C3B8774AFBCEBB789FED181907822996340C71
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0CCF948F3DA2CC08F062DFCB57CA07067D419783.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/0CCF948F3DA2CC08F062DFCB57CA07067D419783.mft
Manifest number: C0
Signing time: Wed 23 Sep 2026 13:38:01 +0000
Manifest this update: Wed 23 Sep 2026 13:33:01 +0000
Manifest next update: Thu 24 Sep 2026 15:53:01 +0000
Files and hashes: 1: 3130332e3135352e3136392e302f32342d3234203d3e20313431303635.roa (hash: yMPJNSkMGIl2UvT1CYNlCKulD32gYlJwLvlyIrBqbfE=)
2: 3130332e3135352e3136382e302f32342d3234203d3e20313431303635.roa (hash: jn+K6WOORye+NOCB1GXieBBnyp4klMVwEtXChM9Gflg=)
3: 3130332e3135352e3136382e302f32332d3233203d3e20313431303635.roa (hash: 0buGIXn5F8o+JhXrXgmfNJ2sJWtjHLxvA64EOEEpl5Q=)
4: 0CCF948F3DA2CC08F062DFCB57CA07067D419783.crl (hash: rmjbUmbsL1258UHWvhp5se3eqypn2KwhtRujVSNlUoc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/0CCF948F3DA2CC08F062DFCB57CA07067D419783.crl
rsync://rpki-rsync.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/0CCF948F3DA2CC08F062DFCB57CA07067D419783.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0CCF948F3DA2CC08F062DFCB57CA07067D419783.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 15:53:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:c3:b8:77:4a:fb:ce:bb:78:9f:ed:18:19:07:82:29:96:34:0c:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0CCF948F3DA2CC08F062DFCB57CA07067D419783
Validity
Not Before: Sep 23 13:33:01 2026 GMT
Not After : Sep 24 15:53:01 2026 GMT
Subject: CN=9260379A716E1C3D60202F036B2615B6A91F09D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:ca:df:7b:05:4e:2c:8d:ec:23:73:ff:fb:92:
8d:c5:e6:04:5c:f1:42:de:ce:ec:05:ba:39:ce:78:
00:19:67:2c:46:a9:75:6b:72:64:dd:8d:b2:e6:fd:
53:49:c5:4d:1b:b9:0a:e8:ef:7f:70:03:38:3a:30:
70:75:72:25:36:8b:93:5c:04:72:b6:87:3d:c7:4b:
9e:0c:98:30:ee:81:ae:cc:52:2f:1d:06:d8:39:9d:
29:1f:08:fe:36:66:34:d5:77:34:64:5a:c8:89:9e:
37:c0:40:07:06:d8:68:c4:97:c2:68:6d:88:be:d2:
75:8a:ea:03:0e:71:dc:0c:f3:fa:26:5a:5b:30:67:
c8:a9:ab:8d:1b:94:4a:0e:20:32:c6:b3:26:a0:44:
87:62:fa:bb:41:e1:15:0c:13:fd:05:cd:8f:f8:39:
81:10:85:17:93:7b:a0:ff:99:6a:57:15:cb:6f:e5:
f2:3b:8a:3b:76:8b:3b:73:31:ad:70:2b:c8:be:cd:
80:e4:ad:f8:da:85:58:88:a9:f7:1e:f3:f0:ac:1f:
91:d2:de:28:09:6b:fe:ba:a8:39:af:c6:50:e0:37:
70:4e:82:6f:21:bb:cc:ee:88:91:21:47:f2:6b:c1:
18:ca:b6:fc:31:5c:28:fd:da:a8:54:29:19:42:d1:
2c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:60:37:9A:71:6E:1C:3D:60:20:2F:03:6B:26:15:B6:A9:1F:09:D1
X509v3 Authority Key Identifier:
keyid:0C:CF:94:8F:3D:A2:CC:08:F0:62:DF:CB:57:CA:07:06:7D:41:97:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/0CCF948F3DA2CC08F062DFCB57CA07067D419783.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0CCF948F3DA2CC08F062DFCB57CA07067D419783.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/0CCF948F3DA2CC08F062DFCB57CA07067D419783.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:4b:df:4c:85:99:34:42:f0:2e:07:47:70:f0:a2:79:68:ad:
0a:c8:1d:5e:c7:06:a0:19:63:30:3b:91:45:ad:be:05:b3:4f:
46:77:13:67:a4:33:f3:c2:9f:76:aa:ca:03:31:95:fb:96:da:
dd:93:66:7f:b2:a3:13:91:3c:29:89:9b:7b:96:5f:8e:c3:2c:
b2:ef:a6:6a:f6:58:9a:75:95:d1:2b:80:be:db:41:f2:d4:c6:
41:44:d7:4a:dd:22:50:a7:c2:3a:c4:fb:fa:91:ec:76:a2:ba:
d7:43:8f:29:8d:17:1f:ff:8b:15:6e:81:32:06:12:c2:d1:7b:
52:13:ba:3b:e8:cf:54:1f:72:cd:97:28:69:1b:02:b8:fa:1a:
3e:7a:bc:a1:5b:97:65:cc:99:37:72:96:70:93:15:0b:8b:60:
26:92:0f:2c:50:c8:eb:f3:6a:ba:3d:26:29:e0:41:38:30:01:
83:60:25:25:f0:2b:97:60:92:32:ca:91:f8:2c:6a:ca:7a:99:
b2:95:b2:a0:41:8c:72:74:8f:07:26:ff:2f:f7:fd:c7:ae:2b:
0f:b9:92:9d:94:a5:c3:dc:05:c2:10:4f:24:aa:c0:02:4b:18:
11:c4:f2:c0:3a:b7:a2:fd:49:c6:f8:0f:0c:84:73:94:d1:a0:
c6:4b:19:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:07:27 2026 by rpki-client