
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/CF55E7412871AB0F42347E2FEE1F6815035C7C39.mft
File: CF55E7412871AB0F42347E2FEE1F6815035C7C39.mft (raw, json)
Hash identifier: FuZPyHOOnFXmgm0gOP+o/k9VpY920wZ7QNjKXMR3DpM=
Subject key identifier: F3:1C:91:E1:DC:F1:23:A9:56:81:B4:AA:58:D6:7B:38:1D:42:7D:7A
Authority key identifier: CF:55:E7:41:28:71:AB:0F:42:34:7E:2F:EE:1F:68:15:03:5C:7C:39
Certificate issuer: /CN=CF55E7412871AB0F42347E2FEE1F6815035C7C39
Certificate serial: 12384141C960803E75A3E90809775BB2C44CE576
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF55E7412871AB0F42347E2FEE1F6815035C7C39.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/CF55E7412871AB0F42347E2FEE1F6815035C7C39.mft
Manifest number: C1
Signing time: Wed 23 Sep 2026 12:16:11 +0000
Manifest this update: Wed 23 Sep 2026 12:11:11 +0000
Manifest next update: Thu 24 Sep 2026 15:35:11 +0000
Files and hashes: 1: 3130332e3131372e31302e302f32342d3234203d3e20313530343738.roa (hash: Om/3/8RVQVP4CmrlSjOFvYcq6slIyV0KgfonhTO00tc=)
2: CF55E7412871AB0F42347E2FEE1F6815035C7C39.crl (hash: zzg3jAg6Me68OLIM8NUDvf113wUZj3vvKHMz30FQlBY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/CF55E7412871AB0F42347E2FEE1F6815035C7C39.crl
rsync://rpki-rsync.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/CF55E7412871AB0F42347E2FEE1F6815035C7C39.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF55E7412871AB0F42347E2FEE1F6815035C7C39.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 15:35:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:38:41:41:c9:60:80:3e:75:a3:e9:08:09:77:5b:b2:c4:4c:e5:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CF55E7412871AB0F42347E2FEE1F6815035C7C39
Validity
Not Before: Sep 23 12:11:11 2026 GMT
Not After : Sep 24 15:35:11 2026 GMT
Subject: CN=F31C91E1DCF123A95681B4AA58D67B381D427D7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b4:d9:a8:4d:00:5f:04:61:1d:9c:83:31:c8:
ac:45:ac:11:31:2b:d4:a9:96:43:64:5c:7f:53:69:
86:bf:ed:e0:e8:31:2e:53:1d:fc:93:af:8c:85:60:
fd:d8:4e:f0:c0:eb:0a:14:68:50:e2:6e:fe:66:c2:
de:68:43:2c:89:92:19:f0:63:65:42:5e:86:e7:73:
63:bc:5b:cb:dd:e6:09:96:c4:04:76:a6:33:5c:a7:
e1:d8:8b:e5:b4:c7:ab:36:c3:89:d5:c6:f2:ee:fa:
ff:97:5c:d1:d1:14:a5:ac:eb:42:da:55:9e:46:6f:
9e:7e:55:be:b2:19:bb:3a:5a:28:32:47:df:5f:07:
cb:98:a5:a0:dd:1b:fe:7e:2d:04:b6:6f:62:e8:d2:
b4:ff:cd:40:62:d0:83:d3:eb:68:a5:ba:3c:82:6f:
99:48:00:6c:c4:63:aa:46:39:5b:e2:e2:0a:87:4e:
cd:6c:da:c8:95:d7:69:98:84:7c:d1:38:4d:83:b6:
85:6a:65:42:4f:80:f5:6e:cc:29:8a:95:1f:16:20:
d3:c9:9f:88:a2:0c:69:ab:c4:09:b6:30:38:56:76:
6d:e0:0a:9f:b0:80:c9:d4:d1:98:63:7c:de:e4:bb:
d2:d2:6e:e8:3c:48:52:b6:f1:d4:ae:d8:98:9b:40:
b0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:1C:91:E1:DC:F1:23:A9:56:81:B4:AA:58:D6:7B:38:1D:42:7D:7A
X509v3 Authority Key Identifier:
keyid:CF:55:E7:41:28:71:AB:0F:42:34:7E:2F:EE:1F:68:15:03:5C:7C:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/CF55E7412871AB0F42347E2FEE1F6815035C7C39.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF55E7412871AB0F42347E2FEE1F6815035C7C39.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/CF55E7412871AB0F42347E2FEE1F6815035C7C39.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:56:a7:8b:cf:66:6f:3e:96:fc:fd:03:da:73:bc:70:2a:da:
33:95:1d:64:4a:b7:e4:19:02:e6:4a:34:bb:e0:84:87:f5:9d:
9b:a4:76:b7:6e:60:d3:60:3d:6d:a2:d0:97:89:2b:c9:5c:46:
3c:58:32:b0:04:02:a5:da:69:1a:c7:ab:af:c7:de:9d:d4:4b:
90:70:d2:b1:28:af:f6:fd:f9:06:ac:15:7a:65:ae:0a:21:2e:
99:2c:9c:88:22:bb:bb:2c:9e:6c:46:e2:80:7b:60:4b:6d:cf:
63:e4:1d:c9:54:5e:83:11:38:88:90:a2:a1:4e:42:55:51:23:
f6:b7:9d:d6:35:1f:3c:2d:a2:03:dc:27:73:a3:2e:18:aa:5a:
17:eb:82:c0:4d:5a:65:93:0e:87:ec:de:08:3e:54:c8:e1:6f:
b9:03:50:e8:9e:71:0e:65:81:db:12:9f:30:8c:1e:cb:87:3a:
f6:c6:1a:2c:7d:83:a2:54:20:22:45:50:17:8f:0c:96:b9:d2:
e0:0d:22:80:86:f6:8b:ec:e7:d9:82:42:09:62:51:a5:1f:e0:
95:9e:2e:e6:a6:b5:17:1e:f8:bc:98:5f:c4:80:b1:74:80:4d:
c4:87:e4:2c:ac:49:80:ba:c9:eb:30:a9:15:ca:ea:c8:cc:f4:
44:6b:18:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:39:20 2026 by rpki-client