
$ rpki-client -vvf rpki-rsync.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/9F73031DF049FCEAB5E8BD5242747E7D7DC4B4DD.mft
File: 9F73031DF049FCEAB5E8BD5242747E7D7DC4B4DD.mft (raw, json)
Hash identifier: QFKfG/ou5Bcd26/51enAUzt0xkwDYfDtgpj8a5NAR+Y=
Subject key identifier: AD:D6:5D:61:F4:7C:AF:2C:06:B5:59:76:CB:A2:F2:82:DF:88:37:90
Authority key identifier: 9F:73:03:1D:F0:49:FC:EA:B5:E8:BD:52:42:74:7E:7D:7D:C4:B4:DD
Certificate issuer: /CN=9F73031DF049FCEAB5E8BD5242747E7D7DC4B4DD
Certificate serial: 6A45F199F38F2EFCC049B4702D4CCF6BC556CB68
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F73031DF049FCEAB5E8BD5242747E7D7DC4B4DD.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/9F73031DF049FCEAB5E8BD5242747E7D7DC4B4DD.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 13:58:54 +0000
Manifest this update: Tue 12 May 2026 13:53:54 +0000
Manifest next update: Wed 13 May 2026 17:04:54 +0000
Files and hashes: 1: 9F73031DF049FCEAB5E8BD5242747E7D7DC4B4DD.crl (hash: BA72BnHbfc8DpgFKiA2s1idW/dZCTsg76MjX9qIcUeE=)
2: 323030313a6466353a653238303a3a2f34382d3438203d3e20313431363430.roa (hash: hxbNx1sHpQ2uA7gDNNgf9BYGTMjlNV/I+vSevN2AYMQ=)
3: 3130332e3136322e31392e302f32342d3234203d3e20313431363430.roa (hash: 96iWJc2ow6yzAUODuhe0zI0zVFmk0TX0H28U4QCHRcE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/9F73031DF049FCEAB5E8BD5242747E7D7DC4B4DD.crl
rsync://rpki-rsync.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/9F73031DF049FCEAB5E8BD5242747E7D7DC4B4DD.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F73031DF049FCEAB5E8BD5242747E7D7DC4B4DD.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 17:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:45:f1:99:f3:8f:2e:fc:c0:49:b4:70:2d:4c:cf:6b:c5:56:cb:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9F73031DF049FCEAB5E8BD5242747E7D7DC4B4DD
Validity
Not Before: May 12 13:53:54 2026 GMT
Not After : May 13 17:04:54 2026 GMT
Subject: CN=ADD65D61F47CAF2C06B55976CBA2F282DF883790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:51:9f:62:10:0f:c3:c5:10:d3:de:be:23:09:
1d:08:41:23:1a:e6:5c:a8:2c:d0:c1:2f:ae:8f:12:
bb:05:88:04:48:d6:df:c3:b4:2f:1f:09:40:99:4b:
77:75:03:d5:7c:44:88:fa:aa:fb:94:04:a2:30:74:
06:f4:ca:dd:88:ed:be:92:5d:6d:d9:ff:a7:7b:34:
35:a2:43:cd:b4:d1:12:f5:8f:2c:16:33:10:e6:c3:
31:21:88:38:2f:4a:f6:13:e8:28:6f:f1:2f:08:7e:
f6:af:a0:88:2f:73:d2:2d:ef:f9:60:7f:6b:1b:c0:
dd:0d:38:ba:50:78:8c:e1:20:69:4d:49:52:e8:07:
ad:36:77:ee:50:36:83:ac:81:bd:91:d7:5d:73:ce:
b1:10:79:56:72:06:15:63:c3:d8:d6:d1:a0:75:55:
fe:14:33:1f:59:83:f6:5b:3d:4d:4d:81:78:44:d3:
f4:50:b9:8f:8f:78:b2:b2:a3:cd:2b:ec:8e:28:dc:
7a:05:a4:67:13:7b:90:d2:b6:b9:92:74:6b:51:5a:
57:d4:e4:08:5f:36:a9:41:8f:91:56:6f:e0:5a:ca:
18:b1:da:67:94:17:67:b3:25:ec:ae:47:0f:83:1a:
e2:29:ef:4b:58:22:f4:cb:45:8d:f9:6e:8e:a0:7c:
d2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:D6:5D:61:F4:7C:AF:2C:06:B5:59:76:CB:A2:F2:82:DF:88:37:90
X509v3 Authority Key Identifier:
keyid:9F:73:03:1D:F0:49:FC:EA:B5:E8:BD:52:42:74:7E:7D:7D:C4:B4:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/9F73031DF049FCEAB5E8BD5242747E7D7DC4B4DD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F73031DF049FCEAB5E8BD5242747E7D7DC4B4DD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/9F73031DF049FCEAB5E8BD5242747E7D7DC4B4DD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:0b:52:dd:4e:61:ef:7e:77:2c:41:88:00:6e:a5:d2:6a:97:
a3:90:50:07:e2:5a:5c:0c:3e:b6:6b:58:82:9a:73:03:75:e9:
f3:b3:82:e9:92:22:ef:be:ae:9f:72:a4:66:96:42:3d:55:bb:
e3:7c:0f:7d:25:64:95:f0:9a:35:87:21:8a:c3:5d:aa:9e:3c:
1a:81:a6:cb:fa:c0:1f:c2:ee:20:52:62:5c:0e:d5:f6:1d:19:
dc:12:d4:8b:3b:b1:1d:f9:f3:24:91:6c:15:7e:12:e0:73:49:
6c:26:3e:f3:96:5e:9d:cb:95:1d:32:ad:ee:1a:45:96:c8:1a:
e0:f4:7f:00:49:66:c1:87:59:7a:c7:9a:de:7b:d4:0a:a4:6d:
05:5c:f2:9f:35:33:6e:a8:62:6e:a4:91:16:38:62:18:ac:e4:
de:f4:22:61:3d:30:0d:84:cb:ac:2f:25:f6:27:d9:86:16:d1:
3c:a6:da:c3:b1:76:71:d3:d0:bf:5f:1e:62:89:2d:1d:64:bf:
6a:e3:32:1a:ae:2a:98:44:77:45:27:00:18:9f:e4:c0:da:43:
4d:51:29:bb:20:c0:77:c2:6b:19:11:f2:99:4b:46:69:8c:75:
f4:14:80:18:9d:2e:da:95:b8:f8:7e:51:b1:57:a5:c0:c6:01:
3b:90:45:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:25:48 2026 by rpki-client