
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD.mft
File: 9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD.mft (raw, json)
Hash identifier: SvaNFGEc4cdGwUj/uHv8uTQvgmwSZ9/qc7lLXVn8UPg=
Subject key identifier: E2:85:41:BD:01:AC:03:92:C0:FB:EC:E6:F5:12:57:99:8B:68:BF:59
Authority key identifier: 9F:2D:47:C2:7A:04:66:64:7C:9A:8F:AF:24:6A:C8:5A:9F:2B:1F:BD
Certificate issuer: /CN=9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD
Certificate serial: 05DF4F3CD4D36FEB16E4438CEF4D5F23F908EB15
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD.mft
Manifest number: C2
Signing time: Wed 23 Sep 2026 19:04:37 +0000
Manifest this update: Wed 23 Sep 2026 18:59:37 +0000
Manifest next update: Thu 24 Sep 2026 19:14:37 +0000
Files and hashes: 1: 3130332e3132322e3135342e302f32342d3234203d3e20313430343037.roa (hash: 38Xm9PyU4xIsiex90hJwlQrnnXy77AnXzl8H3OHJdtc=)
2: 3130332e3132322e3135342e302f32332d3233203d3e20313430343037.roa (hash: bTctqXrHoddHLmiHRZEAbvepwDnyNZuBmN3yjSF/QUg=)
3: 9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD.crl (hash: +585eff5F8oQmpY1zZGRlEXsWqSXQB888hxDm1a8BWo=)
4: 3130332e3132322e3135322e302f32322d3232203d3e20313430343037.roa (hash: eE9KfhHZMD39d40KbY7oSEFpRtTmkSjOZgjX7V3PP3E=)
5: 3130332e3132322e3135322e302f32342d3234203d3e20313430343037.roa (hash: 7UHUG49KeSvdqIfX5Q2/sjN4aSqQC/7iFrJSNv+5Ax4=)
6: 3130332e3132322e3135332e302f32342d3234203d3e20313430343037.roa (hash: ueytpOIHoXmrHTRXDms0z+mkyIFFMatKweHFitzqnbY=)
7: 323430333a393063303a3a2f33322d3430203d3e20313430343037.roa (hash: Yg7MUDs8e7RtjcON84BP67HQDd4RbJW/QQRbIefF+fk=)
8: 3130332e3132322e3135322e302f32332d3233203d3e20313430343037.roa (hash: wjQlJjUfkbt1n7Rc6SHSm1K1dY+H6SCMIIZnXPYbFUQ=)
9: 323430333a393063303a3a2f33322d3332203d3e20313430343037.roa (hash: evwEHBL+Efz58EUm4jU4ct9sLmawRVLDyaUcdYukI+g=)
10: 3130332e3132322e3135352e302f32342d3234203d3e20313430343037.roa (hash: XHc5XJ3BNfkaI/lsgwiIo3VZ/lOhS7oABSPc/TOM6ZY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD.crl
rsync://rpki-rsync.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 19:14:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:df:4f:3c:d4:d3:6f:eb:16:e4:43:8c:ef:4d:5f:23:f9:08:eb:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD
Validity
Not Before: Sep 23 18:59:37 2026 GMT
Not After : Sep 24 19:14:37 2026 GMT
Subject: CN=E28541BD01AC0392C0FBECE6F51257998B68BF59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0c:26:f4:33:67:3e:1d:7d:f3:57:5d:d4:0e:
9e:1d:d4:18:1b:77:1b:78:e7:19:7f:47:84:1c:80:
91:19:34:a0:de:9d:30:aa:5e:53:10:51:a8:ae:6a:
7a:43:9a:f7:31:dc:0b:b0:cd:9b:e8:d1:02:d8:d7:
5f:98:ab:6a:fe:b1:47:d8:14:ab:5b:27:8a:76:b8:
ce:0f:22:25:9b:51:2c:7c:27:5a:92:73:71:93:cf:
45:58:f7:a3:2d:31:dd:91:aa:c8:14:f2:64:6c:67:
f2:f7:d1:e8:41:91:63:9a:a8:39:85:de:a3:05:c2:
fe:4a:65:67:f2:e9:19:3e:70:90:fb:f1:29:72:ae:
c9:42:a5:47:8d:c6:5d:95:45:2a:c9:16:5c:81:53:
1a:09:f8:90:5e:bf:02:3c:56:54:0f:77:aa:8d:d0:
e1:d8:f7:b9:b0:4f:09:89:b1:2c:4d:25:6d:95:32:
16:1d:af:15:d6:ff:98:4e:ef:b5:8a:31:80:ea:1c:
70:91:57:dd:5d:b3:f2:e1:9f:e4:4f:34:50:ba:61:
1d:30:be:18:4e:9e:a1:c3:6d:26:a0:2c:07:98:c4:
8c:53:54:7a:db:f6:5f:2a:ee:e1:62:60:12:ba:1c:
88:ed:8e:b0:5d:b2:ce:e6:f4:a9:b5:04:9c:10:ac:
70:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:85:41:BD:01:AC:03:92:C0:FB:EC:E6:F5:12:57:99:8B:68:BF:59
X509v3 Authority Key Identifier:
keyid:9F:2D:47:C2:7A:04:66:64:7C:9A:8F:AF:24:6A:C8:5A:9F:2B:1F:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:ee:90:37:77:fe:57:cb:75:32:a8:87:d3:c3:cb:90:e9:3a:
c1:c6:4b:5b:4e:63:f7:5d:d7:73:c8:56:e4:15:84:1a:0b:84:
8d:d5:19:17:9f:21:b6:37:1b:be:82:82:1c:89:8e:58:b0:57:
d7:b4:23:fa:6f:03:18:61:96:0f:e7:1e:46:02:c6:a0:54:28:
ed:45:d7:94:20:5b:bd:97:0a:20:aa:9f:17:46:47:8e:76:54:
50:56:74:c5:6f:f7:6a:5b:8a:f3:77:cc:15:73:3a:85:99:2e:
b4:a9:e7:6d:11:22:51:b6:b9:87:1c:91:f8:3f:3d:73:93:bf:
f4:38:77:18:13:67:ef:b8:80:a9:68:06:2f:2d:13:5b:de:ff:
b8:40:3c:44:ad:48:81:26:0d:2e:72:1e:3a:26:cd:be:d4:aa:
f6:ae:a9:1e:8e:f1:03:a8:aa:f2:f9:55:19:f8:1d:1e:e3:24:
7a:3c:9d:3a:8c:34:f6:44:2b:34:20:a5:cf:ed:ef:90:4f:95:
43:59:8b:8c:50:d5:5e:43:63:4d:94:b6:1b:58:e9:fc:a2:4e:
f6:e6:ff:12:a5:83:6d:db:b2:18:5e:02:4e:c1:e9:0d:d0:68:
dd:0d:58:e2:91:73:3d:1a:53:4b:37:1f:d6:29:4b:cd:e3:ec:
b3:f5:97:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:40:51 2026 by rpki-client