
$ rpki-client -vvf rpki-rsync.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/C9C56B3341FC31139F57F78A815CF9851E91375E.mft
File: C9C56B3341FC31139F57F78A815CF9851E91375E.mft (raw, json)
Hash identifier: JlMuXqSLB06bt481wGdmvrlFvv2QosRMqLevKuoHDdw=
Subject key identifier: 4E:04:AA:A5:67:76:27:49:1F:99:E2:BA:E8:16:01:06:BD:68:A5:B4
Authority key identifier: C9:C5:6B:33:41:FC:31:13:9F:57:F7:8A:81:5C:F9:85:1E:91:37:5E
Certificate issuer: /CN=C9C56B3341FC31139F57F78A815CF9851E91375E
Certificate serial: 2A8866D7982B1F1E33A754E094CFBDF560026BC3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9C56B3341FC31139F57F78A815CF9851E91375E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/C9C56B3341FC31139F57F78A815CF9851E91375E.mft
Manifest number: 6E
Signing time: Fri 24 Jul 2026 09:20:52 +0000
Manifest this update: Fri 24 Jul 2026 09:15:52 +0000
Manifest next update: Sat 25 Jul 2026 10:12:52 +0000
Files and hashes: 1: C9C56B3341FC31139F57F78A815CF9851E91375E.crl (hash: 0CWWHSuofMDBgzTPkEETCeGlzR4fw45tVqxEXyBKSGI=)
2: 33362e35302e35362e302f32332d3233203d3e20313532303239.roa (hash: YDyhEGDnWg4aoTzQ4Kj70ioCxeiG+fWs6BKdMJUBP40=)
3: 33362e35302e35372e302f32342d3234203d3e20313532303239.roa (hash: ++K50lF9/3pIjVc4GT4lTLKYd8Uj+kdHUPhBXnfZ3JA=)
4: 33362e35302e35362e302f32342d3234203d3e20313532303239.roa (hash: UvvLQHaYsHEf6H/EOqibK//gY5katYyU5vu1/kohXeI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/C9C56B3341FC31139F57F78A815CF9851E91375E.crl
rsync://rpki-rsync.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/C9C56B3341FC31139F57F78A815CF9851E91375E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9C56B3341FC31139F57F78A815CF9851E91375E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 07:07:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:88:66:d7:98:2b:1f:1e:33:a7:54:e0:94:cf:bd:f5:60:02:6b:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C9C56B3341FC31139F57F78A815CF9851E91375E
Validity
Not Before: Jul 24 09:15:52 2026 GMT
Not After : Jul 25 10:12:52 2026 GMT
Subject: CN=4E04AAA5677627491F99E2BAE8160106BD68A5B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a5:56:c8:6d:c7:88:48:2d:4e:23:1f:44:a9:
27:07:a8:02:2a:6b:5b:1a:45:8a:cf:b2:8d:53:db:
20:3c:c7:fa:5f:6d:0b:19:8e:20:fa:88:96:33:aa:
ff:e7:15:35:ab:86:3d:07:36:99:2f:38:35:88:fa:
32:0e:e9:42:14:30:d1:51:f2:60:5a:21:34:e3:30:
85:23:fd:83:b4:5b:d0:9e:3c:c2:cd:11:3c:96:2d:
e1:95:d3:22:9d:82:52:ea:b2:2d:cc:00:ac:18:35:
e3:3e:6a:db:f4:4d:70:76:e3:69:c3:6d:98:c0:ea:
81:46:97:7f:73:d1:83:58:f2:d8:7e:c0:40:8d:a1:
e0:8d:69:6f:a1:82:fc:82:3c:21:2f:95:15:5e:24:
de:52:df:1d:20:b2:82:6f:78:ea:1a:b3:8f:63:28:
18:22:a3:32:53:b5:ca:56:3a:23:4a:52:77:61:ea:
f7:be:2c:71:34:a4:b2:4f:43:fa:62:08:0b:a0:3e:
2a:66:89:3d:aa:15:10:4c:b0:74:cf:49:81:ea:c6:
7c:2a:d6:c2:9b:00:e0:ac:b4:48:75:f4:87:c0:6e:
1a:28:71:a4:63:60:2d:06:a2:d8:7a:fd:8f:5d:05:
77:98:83:c6:59:ac:54:c5:58:67:69:76:5e:8e:ca:
39:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:04:AA:A5:67:76:27:49:1F:99:E2:BA:E8:16:01:06:BD:68:A5:B4
X509v3 Authority Key Identifier:
keyid:C9:C5:6B:33:41:FC:31:13:9F:57:F7:8A:81:5C:F9:85:1E:91:37:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/C9C56B3341FC31139F57F78A815CF9851E91375E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9C56B3341FC31139F57F78A815CF9851E91375E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/C9C56B3341FC31139F57F78A815CF9851E91375E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:04:3a:c8:2f:03:8f:44:2d:35:e6:24:9b:34:fd:3e:50:26:
2c:14:20:6a:4c:a1:49:98:42:d6:b0:93:12:e0:5e:94:94:b8:
c2:45:dc:86:7b:d3:ef:5d:af:69:0a:3f:2c:fe:d1:98:4d:0b:
a4:b5:3b:24:dc:4f:0e:67:9a:fb:8a:75:bc:e1:ce:74:1f:1b:
fc:cb:9b:4c:7c:6a:55:c8:c7:84:68:81:2b:2e:37:ea:94:a6:
47:75:bc:00:4e:da:a9:a7:69:2c:8c:4e:a0:8f:5c:86:01:8a:
97:4b:5e:ca:a9:f9:9e:dd:47:33:4a:92:5d:a3:37:f5:af:c2:
60:09:0a:a1:b7:85:cf:e7:6f:38:75:f8:f2:01:25:8a:1f:b2:
f0:43:df:3f:b3:e9:b4:74:ee:04:5a:78:96:e1:ab:b9:8b:6d:
d7:78:e1:77:64:a4:5e:47:a8:82:d0:bc:04:39:38:7f:0b:75:
ed:af:8b:8a:78:fe:b7:41:38:e7:78:87:89:88:08:ee:94:76:
db:44:b9:cd:80:22:83:9e:c0:f7:1a:28:eb:cc:81:56:e7:9d:
26:be:8c:7e:a3:c2:34:09:ff:f1:6e:af:21:e1:cd:94:b2:da:
e2:84:7d:47:3c:22:f8:f7:bf:37:f5:93:ad:30:7b:aa:54:c2:
0f:ac:69:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:20:58 2026 by rpki-client