
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/9D0779C339B77C1A9E7292F6D90FF812DB4D996E.mft
File: 9D0779C339B77C1A9E7292F6D90FF812DB4D996E.mft (raw, json)
Hash identifier: wA478t0OpxqC5G0orMuPZPnDIyfI9h/ZKbLYaLkquTQ=
Subject key identifier: 58:EC:D1:56:E0:BF:E9:EE:B8:4B:0F:ED:47:EF:AE:FC:F6:C7:5C:9D
Authority key identifier: 9D:07:79:C3:39:B7:7C:1A:9E:72:92:F6:D9:0F:F8:12:DB:4D:99:6E
Certificate issuer: /CN=9D0779C339B77C1A9E7292F6D90FF812DB4D996E
Certificate serial: 547AE785765BA06F69C6F2858E36CA0960DBC4D0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D0779C339B77C1A9E7292F6D90FF812DB4D996E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/9D0779C339B77C1A9E7292F6D90FF812DB4D996E.mft
Manifest number: C3
Signing time: Fri 25 Sep 2026 12:56:26 +0000
Manifest this update: Fri 25 Sep 2026 12:51:26 +0000
Manifest next update: Sat 26 Sep 2026 15:48:26 +0000
Files and hashes: 1: 9D0779C339B77C1A9E7292F6D90FF812DB4D996E.crl (hash: jnexTrPU/+x5Q7QwHo+0s/T+9k+R69sSekeqnM3HD4w=)
2: 323430363a316230303a3a2f33322d3438203d3e203435333137.roa (hash: 1l7BLLHS+TGyR07xEVlu5VYGZCuMxLn7HlZoUt+u8AM=)
3: 3230332e3139302e34302e302f32312d3234203d3e203435333137.roa (hash: qsT0+VavPcHM0/0OWpLNw++GFhjVrktegs30W7OSHuM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/9D0779C339B77C1A9E7292F6D90FF812DB4D996E.crl
rsync://rpki-rsync.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/9D0779C339B77C1A9E7292F6D90FF812DB4D996E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D0779C339B77C1A9E7292F6D90FF812DB4D996E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 26 Sep 2026 15:48:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:7a:e7:85:76:5b:a0:6f:69:c6:f2:85:8e:36:ca:09:60:db:c4:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9D0779C339B77C1A9E7292F6D90FF812DB4D996E
Validity
Not Before: Sep 25 12:51:26 2026 GMT
Not After : Sep 26 15:48:26 2026 GMT
Subject: CN=58ECD156E0BFE9EEB84B0FED47EFAEFCF6C75C9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1f:d0:03:06:ec:c6:a5:a7:9e:5e:b2:0f:6f:
68:4b:ee:79:1c:66:5e:38:cc:d3:e0:15:9b:a9:de:
56:6c:48:27:93:aa:42:bd:ab:51:72:31:43:b4:d7:
a8:7a:09:4c:88:89:39:6d:f1:49:b8:a6:23:06:65:
3a:44:61:ff:da:0d:1b:9d:b6:37:71:63:67:49:7e:
02:8c:60:1f:d4:d5:b2:c3:96:93:85:6f:cb:ed:38:
8f:e4:9b:c0:75:9f:0d:20:d3:17:62:ec:b8:36:5d:
ef:59:e7:2e:77:cf:28:cd:31:71:5d:e2:44:a4:43:
ee:b6:e5:07:2c:60:f0:ca:3a:86:ae:99:6e:3d:2b:
a5:1f:5b:7e:b8:5d:c1:b4:b0:6c:39:3b:7c:cd:af:
21:0a:1f:74:55:01:2a:0a:96:6b:b0:c4:54:f7:b7:
62:c9:2f:92:46:b0:86:99:3d:2d:c9:71:16:67:b7:
35:80:ee:6b:f4:88:d3:c6:4e:2a:6e:39:d4:58:e4:
f1:d2:81:1e:50:a0:c4:23:fd:77:44:ef:ad:ea:19:
70:e1:04:d5:e8:a8:07:46:ca:85:fb:da:92:93:a8:
cc:c5:4b:44:a4:6b:ac:e2:08:03:fc:1e:a2:c8:5d:
8e:7e:58:fb:d1:c3:fc:1e:4f:b6:eb:1f:c1:df:3e:
06:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:EC:D1:56:E0:BF:E9:EE:B8:4B:0F:ED:47:EF:AE:FC:F6:C7:5C:9D
X509v3 Authority Key Identifier:
keyid:9D:07:79:C3:39:B7:7C:1A:9E:72:92:F6:D9:0F:F8:12:DB:4D:99:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/9D0779C339B77C1A9E7292F6D90FF812DB4D996E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D0779C339B77C1A9E7292F6D90FF812DB4D996E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/9D0779C339B77C1A9E7292F6D90FF812DB4D996E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:6e:22:6d:9e:c3:2c:13:a7:0b:4f:1e:f5:63:5a:52:09:75:
b2:f0:5a:58:b9:9b:58:c3:ff:d2:68:16:23:17:17:58:0e:a0:
33:3e:43:59:e8:a8:66:1d:e7:31:03:3d:14:cb:cf:6a:f0:f7:
b9:98:43:ee:32:cd:bc:16:09:6a:75:ab:15:e4:f5:b3:ca:26:
4b:a8:87:ea:92:a5:f2:2c:7c:7f:a5:48:41:e7:b9:7f:2d:05:
ab:21:31:65:3c:5d:2a:c3:b3:eb:3b:b7:02:60:fa:3e:93:a4:
35:37:ef:c8:6d:67:f7:ec:46:82:76:aa:c5:07:ea:45:d6:da:
d2:b3:b2:f9:d0:40:8e:78:d3:df:d1:df:aa:f0:b8:95:ec:24:
1d:8d:f4:fd:27:af:6a:11:01:80:8b:67:df:7a:44:30:28:d5:
f7:97:60:c1:10:46:87:16:a6:34:fb:75:73:2e:d7:98:9d:0c:
00:49:cb:94:55:5d:49:e0:5c:69:8b:95:a3:c7:3b:15:6b:51:
84:f2:36:89:c0:b7:35:6a:a0:b5:be:a8:b3:d6:58:76:f6:9a:
09:dd:12:fa:7a:82:0e:e0:fd:35:da:87:a4:28:39:2a:2c:fd:
20:27:88:4c:f5:64:c1:4d:8f:cd:cf:15:c4:a2:5f:00:d0:50:
c2:1a:35:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:19:43 2026 by rpki-client