
$ rpki-client -vvf rpki-rsync.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/9F2FD5F0222A2310193682C9DC2CAB6A7F4CEEF0.mft
File: 9F2FD5F0222A2310193682C9DC2CAB6A7F4CEEF0.mft (raw, json)
Hash identifier: FRHHZHf2YbXVt9jrI9xNllSqlYW8d/z+Ez9KZoGfcao=
Subject key identifier: 13:F1:6D:2C:15:3E:C3:17:C0:C2:12:FE:29:36:FB:65:1E:18:93:16
Authority key identifier: 9F:2F:D5:F0:22:2A:23:10:19:36:82:C9:DC:2C:AB:6A:7F:4C:EE:F0
Certificate issuer: /CN=9F2FD5F0222A2310193682C9DC2CAB6A7F4CEEF0
Certificate serial: 5C83CDEC4117DAFCEBEE5E1D949FFC97B657158E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F2FD5F0222A2310193682C9DC2CAB6A7F4CEEF0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/9F2FD5F0222A2310193682C9DC2CAB6A7F4CEEF0.mft
Manifest number: 6E
Signing time: Thu 23 Jul 2026 20:55:34 +0000
Manifest this update: Thu 23 Jul 2026 20:50:34 +0000
Manifest next update: Fri 24 Jul 2026 22:45:34 +0000
Files and hashes: 1: 3130332e3137342e36342e302f32342d3234203d3e20313437313236.roa (hash: ZGD3gvwBGhA/oYppfcua832gpcsap+01GHOd/NYuTUc=)
2: 9F2FD5F0222A2310193682C9DC2CAB6A7F4CEEF0.crl (hash: /sGbdtL/g8NIiMe13QCdstpOdzDdzGAY5bgdoYYWU2k=)
3: 3130332e3137342e36352e302f32342d3234203d3e20313437313236.roa (hash: wlJasn9sEpBfYIb16xYXhPNZ1TeKQ7fHYr3qJmH4nLE=)
4: 3130332e3137342e36342e302f32332d3234203d3e20313437313236.roa (hash: BwYpBlP3m28Tfj+hQxoec6R8e4UN5PECSBz/IAuPt0w=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/9F2FD5F0222A2310193682C9DC2CAB6A7F4CEEF0.crl
rsync://rpki-rsync.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/9F2FD5F0222A2310193682C9DC2CAB6A7F4CEEF0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F2FD5F0222A2310193682C9DC2CAB6A7F4CEEF0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 22:45:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:83:cd:ec:41:17:da:fc:eb:ee:5e:1d:94:9f:fc:97:b6:57:15:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9F2FD5F0222A2310193682C9DC2CAB6A7F4CEEF0
Validity
Not Before: Jul 23 20:50:34 2026 GMT
Not After : Jul 24 22:45:34 2026 GMT
Subject: CN=13F16D2C153EC317C0C212FE2936FB651E189316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a2:87:fb:fe:b6:19:03:31:62:8d:0c:7f:e4:
89:5d:0e:4b:1f:da:49:4b:b5:e2:b9:4d:62:65:e4:
a6:85:06:89:e9:88:51:c5:b8:70:02:18:0e:3b:df:
b1:25:2f:a3:47:7a:13:eb:88:be:e7:56:86:95:28:
de:fb:45:50:62:4a:ca:f9:69:37:68:bd:7a:f3:ed:
af:1b:53:64:e8:0e:0f:26:90:eb:d4:53:50:50:5f:
e3:5f:11:dd:3d:1b:22:da:10:0d:66:c3:ca:e8:2d:
69:68:3c:a4:79:5d:05:7f:ea:df:9e:dd:f9:b0:97:
de:4e:17:db:68:5f:ba:d0:ec:75:1e:7e:65:dd:6b:
d8:d1:78:50:32:b4:88:19:06:58:ae:26:65:56:56:
21:81:cc:96:32:9a:f0:0d:43:a0:ca:5e:b4:2c:9a:
6a:da:e2:5d:58:34:12:e3:25:6a:ad:fa:10:16:f2:
cf:f2:29:7d:ad:6d:d8:fc:94:8c:f9:75:52:19:d6:
e2:db:84:50:31:9a:04:79:91:c1:d5:37:77:8c:29:
bb:e3:a1:97:71:31:48:66:69:16:0e:a0:a7:37:5d:
40:3e:86:08:13:8f:1f:6a:6b:f8:ec:17:67:1d:94:
4c:36:e4:bb:fa:bc:7e:e9:5e:51:29:7d:99:84:12:
c2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:F1:6D:2C:15:3E:C3:17:C0:C2:12:FE:29:36:FB:65:1E:18:93:16
X509v3 Authority Key Identifier:
keyid:9F:2F:D5:F0:22:2A:23:10:19:36:82:C9:DC:2C:AB:6A:7F:4C:EE:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/9F2FD5F0222A2310193682C9DC2CAB6A7F4CEEF0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F2FD5F0222A2310193682C9DC2CAB6A7F4CEEF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/9F2FD5F0222A2310193682C9DC2CAB6A7F4CEEF0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:46:7c:e6:82:20:da:f2:87:07:5a:04:26:f3:ce:ba:f3:f0:
ef:83:9d:e7:10:65:b0:aa:85:27:e1:f4:2e:ec:00:10:fe:50:
44:25:c7:86:03:aa:38:b1:a3:2f:a3:aa:cf:41:fc:2c:6b:90:
48:c4:c0:08:45:3f:ec:aa:b6:9f:1a:56:91:8b:fa:44:46:01:
53:c6:a9:5c:16:66:c5:80:ed:04:66:f2:27:a9:35:0f:b6:d9:
2a:ef:83:9e:5e:60:54:0a:93:5b:04:23:46:7b:9d:a6:6c:7c:
72:18:76:ea:b4:4d:de:28:1f:1a:37:c3:c3:5b:c7:aa:db:7d:
0c:07:87:61:47:93:97:5d:70:9b:04:b0:69:4d:95:82:1e:bc:
d7:67:d8:97:2f:80:b6:08:87:18:01:a2:9c:42:1e:77:31:84:
c0:dc:2a:ed:2a:73:7c:37:a3:2c:c8:a7:b1:bd:b8:f5:4d:9a:
a2:b4:55:72:8f:49:23:81:7e:ab:94:6e:a0:3a:d1:39:33:fa:
6c:90:49:d2:d2:ab:e2:83:74:f4:20:55:c4:de:49:c3:4c:47:
e7:8a:a0:ce:58:18:ac:7e:37:c7:3c:d3:d1:63:c7:70:5f:ff:
29:e7:be:a7:f1:d6:e2:ee:48:46:20:55:8a:3b:25:b4:37:6a:
ee:ed:f4:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:03:08 2026 by rpki-client