
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/C3CDEFC1D42DBC526894B49382D693AB81922151.mft
File: C3CDEFC1D42DBC526894B49382D693AB81922151.mft (raw, json)
Hash identifier: Gdp/Cv6HagS0iKMPccQ7UECgqRUUg3yVf4314wMhmHM=
Subject key identifier: 84:05:79:25:35:D5:DF:6F:B7:84:3E:00:0B:12:FE:6B:02:38:E3:18
Authority key identifier: C3:CD:EF:C1:D4:2D:BC:52:68:94:B4:93:82:D6:93:AB:81:92:21:51
Certificate issuer: /CN=C3CDEFC1D42DBC526894B49382D693AB81922151
Certificate serial: 6DBE27C27A1CCF66C4D1B43DB1BB0EA0D6E93E78
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3CDEFC1D42DBC526894B49382D693AB81922151.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/C3CDEFC1D42DBC526894B49382D693AB81922151.mft
Manifest number: C9
Signing time: Mon 28 Sep 2026 22:32:42 +0000
Manifest this update: Mon 28 Sep 2026 22:27:42 +0000
Manifest next update: Tue 29 Sep 2026 23:07:42 +0000
Files and hashes: 1: 3130332e3136332e31332e302f32342d3234203d3e20313431383839.roa (hash: U7/0nIu+Bj5x9bRwZDPcfh3tl44rRdCnsM5J63akTiA=)
2: C3CDEFC1D42DBC526894B49382D693AB81922151.crl (hash: kFZNAUIzJ0Xq6zAE9Edpba4H49IypWHrq82okTmwaZM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/C3CDEFC1D42DBC526894B49382D693AB81922151.crl
rsync://rpki-rsync.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/C3CDEFC1D42DBC526894B49382D693AB81922151.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3CDEFC1D42DBC526894B49382D693AB81922151.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 23:07:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:be:27:c2:7a:1c:cf:66:c4:d1:b4:3d:b1:bb:0e:a0:d6:e9:3e:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3CDEFC1D42DBC526894B49382D693AB81922151
Validity
Not Before: Sep 28 22:27:42 2026 GMT
Not After : Sep 29 23:07:42 2026 GMT
Subject: CN=8405792535D5DF6FB7843E000B12FE6B0238E318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:88:1f:83:52:fd:41:f5:f6:29:56:13:20:49:
6b:c1:3b:f1:23:83:39:e1:08:d9:1d:cd:4f:ae:5b:
81:03:32:97:8d:07:f7:f6:df:e0:46:c0:88:9a:b7:
a5:0e:79:0e:0d:87:20:96:bd:ed:5a:18:b3:02:d3:
3c:9a:af:c1:87:71:30:be:65:85:b1:33:5d:89:09:
03:b5:cc:b0:45:96:3e:b5:97:7c:52:76:54:24:2f:
eb:f1:2a:7f:34:eb:77:63:1a:6a:47:e7:1b:cd:cf:
60:f4:8c:bb:30:51:71:34:0f:70:e1:fd:23:0d:aa:
29:76:46:a6:7c:4e:b5:64:6e:46:97:79:cb:7c:64:
4e:f9:16:e4:00:bb:57:7c:93:38:da:44:ef:7d:83:
dc:6f:a0:cc:23:de:53:58:c3:7f:7f:35:af:55:31:
86:49:43:64:93:ce:7c:22:25:d2:e3:aa:9a:a0:d2:
83:99:83:10:d9:85:7e:09:3a:b5:c2:6b:77:e4:bb:
06:6b:ca:98:de:21:8b:8b:eb:7b:fe:00:55:53:16:
d4:d2:0f:c6:db:de:ad:dd:9a:e8:c2:26:41:2e:3d:
32:5a:94:53:f3:db:2a:52:d6:b3:8c:29:3b:c6:3e:
86:d1:90:d5:14:3e:59:64:ff:16:a5:bd:7b:41:98:
ff:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:05:79:25:35:D5:DF:6F:B7:84:3E:00:0B:12:FE:6B:02:38:E3:18
X509v3 Authority Key Identifier:
keyid:C3:CD:EF:C1:D4:2D:BC:52:68:94:B4:93:82:D6:93:AB:81:92:21:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/C3CDEFC1D42DBC526894B49382D693AB81922151.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3CDEFC1D42DBC526894B49382D693AB81922151.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/C3CDEFC1D42DBC526894B49382D693AB81922151.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:5d:d7:7e:b0:57:d1:5b:71:19:ff:69:68:fb:9e:23:0f:f0:
48:ff:62:7e:65:c5:ca:ad:95:2d:9d:85:a5:e7:66:7c:7e:3d:
b7:93:e5:12:ba:4d:40:78:cf:c9:53:b8:8e:66:24:6b:c4:ea:
a9:ec:6d:a4:a4:c1:72:c2:10:ec:0b:8d:47:fc:01:9f:92:e4:
e8:47:c3:df:18:93:a5:17:dc:b7:d9:96:d2:e7:3b:02:b5:48:
47:18:93:c6:7f:5e:a3:12:04:0e:ee:25:eb:77:7f:ff:1a:8f:
20:b8:be:44:5d:07:d2:78:c8:76:3f:2a:dc:f5:ed:c6:e2:7a:
fa:69:64:73:7d:06:e8:de:84:b7:70:0c:a7:da:e9:fa:f2:bf:
80:a0:b8:85:d5:eb:ec:ee:93:43:ae:2e:08:df:25:c2:65:f8:
d2:fd:6a:fe:52:11:47:97:b0:f9:13:73:17:a9:42:6a:32:b5:
91:a1:ce:2a:10:2e:21:0d:8b:47:e0:d4:69:5d:69:c4:d7:43:
ed:92:6c:fc:4f:4e:23:9d:20:36:e2:0a:dc:d9:45:a3:e0:01:
83:04:65:b2:49:ca:c4:c5:a0:bc:56:78:df:f4:f0:80:0f:5e:
a0:2c:fa:dd:47:3f:49:82:a4:80:44:b2:a7:65:dd:65:bb:77:
6c:a8:ec:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 04:54:15 2026 by rpki-client