
$ rpki-client -vvf rpki-rsync.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9A4283F96B701EC60EA45F124F88819D76D7E8FC.mft
File: 9A4283F96B701EC60EA45F124F88819D76D7E8FC.mft (raw, json)
Hash identifier: 5StKde5KGXHcdaB+M9lROIQrB1ctRD5ldMmQAvxNdfw=
Subject key identifier: 8F:54:0D:3C:37:F0:23:54:0B:48:9A:0F:19:B3:60:03:88:41:28:91
Authority key identifier: 9A:42:83:F9:6B:70:1E:C6:0E:A4:5F:12:4F:88:81:9D:76:D7:E8:FC
Certificate issuer: /CN=9A4283F96B701EC60EA45F124F88819D76D7E8FC
Certificate serial: 7EE431924318C23C0D9801664C891E247A5840B4
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A4283F96B701EC60EA45F124F88819D76D7E8FC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9A4283F96B701EC60EA45F124F88819D76D7E8FC.mft
Manifest number: 0E
Signing time: Tue 12 May 2026 05:00:03 +0000
Manifest this update: Tue 12 May 2026 04:55:03 +0000
Manifest next update: Wed 13 May 2026 06:29:03 +0000
Files and hashes: 1: 3130332e3136392e3139342e302f32342d3234203d3e20313432333536.roa (hash: lqSxCFv5WmyrxicOkawzjV/AVzQFgoIxemd6g7X5MqQ=)
2: 3130332e3136392e3139352e302f32342d3234203d3e20313339393637.roa (hash: 8HBG0p89815vWKkauI6Wn4NeMLGP4fCVAgDc4tDqrGk=)
3: 9A4283F96B701EC60EA45F124F88819D76D7E8FC.crl (hash: veqiVQ0P+X+A77JHgtHED0q3xu15WuJpjSxOKZekEwA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9A4283F96B701EC60EA45F124F88819D76D7E8FC.crl
rsync://rpki-rsync.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9A4283F96B701EC60EA45F124F88819D76D7E8FC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A4283F96B701EC60EA45F124F88819D76D7E8FC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 06:29:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:e4:31:92:43:18:c2:3c:0d:98:01:66:4c:89:1e:24:7a:58:40:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9A4283F96B701EC60EA45F124F88819D76D7E8FC
Validity
Not Before: May 12 04:55:03 2026 GMT
Not After : May 13 06:29:03 2026 GMT
Subject: CN=8F540D3C37F023540B489A0F19B3600388412891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3f:8b:0e:d4:a3:54:99:78:14:80:be:eb:0f:
4a:b4:63:93:2f:14:19:13:2c:bd:b1:c2:e6:aa:1d:
e0:3e:89:b4:d4:d3:1a:3b:f9:30:c8:af:7d:3f:7d:
87:fb:b8:78:a6:0d:94:86:2c:43:16:45:cf:ef:50:
f9:ec:4a:49:da:00:d9:1f:6f:37:ec:9c:68:95:8e:
d7:a4:1a:4e:0e:1b:1f:9c:ae:af:71:5b:8b:0d:1f:
98:44:17:8a:3e:34:0d:04:c4:10:21:dc:fa:58:83:
5e:b4:71:1d:0c:5c:b7:99:ea:de:c1:d3:5a:7a:20:
2a:6c:fb:56:45:a6:2a:50:54:f6:c3:d5:ef:8d:38:
ed:70:95:9a:28:fe:02:1d:54:9c:18:a8:76:4e:ce:
62:be:34:a9:67:ac:fc:26:e3:a1:69:42:10:2f:cf:
60:23:aa:41:12:79:18:31:2a:8e:ea:36:fc:a6:fa:
5f:ba:89:e9:f5:b9:84:f9:cb:35:1f:1a:c0:5b:8b:
84:3b:2f:53:52:7f:bd:ae:8e:e2:44:ba:51:69:cd:
d1:ed:e1:17:0a:a7:f0:fc:03:50:6a:34:65:1c:d6:
3c:a3:6e:7a:2d:6f:68:1c:46:d2:bd:9c:71:0c:65:
dc:4a:bf:2a:77:7e:95:23:5c:fc:11:7b:90:08:93:
67:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:54:0D:3C:37:F0:23:54:0B:48:9A:0F:19:B3:60:03:88:41:28:91
X509v3 Authority Key Identifier:
keyid:9A:42:83:F9:6B:70:1E:C6:0E:A4:5F:12:4F:88:81:9D:76:D7:E8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9A4283F96B701EC60EA45F124F88819D76D7E8FC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A4283F96B701EC60EA45F124F88819D76D7E8FC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9A4283F96B701EC60EA45F124F88819D76D7E8FC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:d3:4d:90:1c:ec:d1:cc:dd:57:65:29:4c:17:b2:ae:f3:19:
43:6d:4a:80:30:d9:08:26:06:76:e0:22:01:ce:7e:51:e6:84:
43:c0:e9:2a:98:29:79:da:2c:04:8e:d2:64:31:37:c8:0b:61:
33:1c:b9:52:45:e3:24:75:ce:52:64:47:c5:75:7f:ca:39:1b:
50:18:36:f7:8b:91:91:8a:34:f3:bf:29:a0:cd:9d:36:8f:f6:
c7:40:ae:f5:44:18:bb:4d:a6:d8:d5:5b:02:92:a8:21:4b:2c:
3e:b2:4b:f6:f6:64:54:85:75:a2:fa:af:4e:84:90:fc:c0:27:
68:02:fa:d9:f5:65:7e:89:9f:f9:8f:59:7e:bb:cc:e3:30:63:
fb:34:79:1b:4d:56:86:bb:af:d6:05:ba:c4:85:41:11:b9:49:
21:65:d9:b0:ae:89:02:54:e9:1a:37:cd:3f:69:a6:b9:56:3d:
97:4b:e5:8e:51:5d:84:b7:1f:de:f6:c3:f3:ce:5b:1c:88:13:
91:d5:b2:03:98:de:ba:46:e8:94:84:e9:66:59:ae:d4:47:10:
e2:1d:20:6c:e1:99:59:35:4e:d4:31:3d:81:a4:95:ae:f8:b7:
00:b7:09:dc:d2:9f:22:38:61:8d:d4:88:98:81:98:f6:8b:f8:
22:ba:c8:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:46:50 2026 by rpki-client