
$ rpki-client -vvf rpki-rsync.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/9A9D4BDD4311519F6A96141040EA1E98B3363388.mft
File: 9A9D4BDD4311519F6A96141040EA1E98B3363388.mft (raw, json)
Hash identifier: yFxoy2iRKnKZz9CuyV3jJtvrL9I0Vqg+pjuhK5gCAhk=
Subject key identifier: 08:09:36:3B:FC:9C:08:32:92:EB:B9:11:89:2B:EE:EC:EB:3B:40:35
Authority key identifier: 9A:9D:4B:DD:43:11:51:9F:6A:96:14:10:40:EA:1E:98:B3:36:33:88
Certificate issuer: /CN=9A9D4BDD4311519F6A96141040EA1E98B3363388
Certificate serial: 76FECA3395A7A52DA5E572DB91E5F2B7947C6F1B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A9D4BDD4311519F6A96141040EA1E98B3363388.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/9A9D4BDD4311519F6A96141040EA1E98B3363388.mft
Manifest number: 6F
Signing time: Thu 23 Jul 2026 23:33:30 +0000
Manifest this update: Thu 23 Jul 2026 23:28:30 +0000
Manifest next update: Fri 24 Jul 2026 23:46:30 +0000
Files and hashes: 1: 3130332e3133342e36362e302f32332d3234203d3e203435333132.roa (hash: jEIwfeqUw3Ty0aBUNoGyFFLgparqhCueZmPPzJmpnn8=)
2: 9A9D4BDD4311519F6A96141040EA1E98B3363388.crl (hash: hZ5VVzBB2FLfnn03orRSrSvhp5mxpGNdgCxAFeXyysI=)
3: 3130332e3133342e36362e302f32342d3234203d3e203435333132.roa (hash: DKDIZFIIa7OPxQWCaUBiuhGDeGm6kz/UIChkAD3FgzA=)
4: 3130332e3133342e36372e302f32342d3234203d3e203435333132.roa (hash: Rjd2vE2zGKftmY05BM4C0TjHIPA+ii1Rf27f+odCFqc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/9A9D4BDD4311519F6A96141040EA1E98B3363388.crl
rsync://rpki-rsync.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/9A9D4BDD4311519F6A96141040EA1E98B3363388.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A9D4BDD4311519F6A96141040EA1E98B3363388.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 23:46:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:fe:ca:33:95:a7:a5:2d:a5:e5:72:db:91:e5:f2:b7:94:7c:6f:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9A9D4BDD4311519F6A96141040EA1E98B3363388
Validity
Not Before: Jul 23 23:28:30 2026 GMT
Not After : Jul 24 23:46:30 2026 GMT
Subject: CN=0809363BFC9C083292EBB911892BEEECEB3B4035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:71:bf:cd:fe:1c:2f:dc:5e:cf:87:10:8d:13:
9c:a4:43:2a:6e:48:b5:13:90:75:3c:68:f9:bf:e5:
69:75:c8:df:44:76:9d:5a:e0:e2:85:90:af:9b:70:
43:b6:aa:0d:84:d5:47:fb:2b:5a:76:db:02:6d:aa:
7c:0f:75:9d:c5:01:b9:8e:62:80:80:ed:ad:01:02:
22:aa:70:24:5e:a7:3d:fc:cb:e5:13:6f:4a:b8:04:
d4:69:0b:81:be:5c:90:05:d8:e7:c9:5e:99:f1:05:
5a:20:3b:83:7b:de:2f:d7:16:1f:ab:72:4d:63:61:
83:84:b2:07:3c:13:b2:bb:26:d0:2e:a4:ce:81:4a:
90:d7:74:39:6f:e7:5a:6e:3a:6f:c0:47:19:b5:87:
e8:cd:f4:14:a9:33:40:18:39:a5:e1:27:f2:d9:a4:
a2:0d:21:e5:80:cd:99:22:a0:92:5d:ad:10:b2:ef:
0c:a3:90:af:8b:ac:91:7f:06:2a:27:e8:a5:e8:68:
c8:74:44:25:e4:91:cd:1d:aa:85:27:a7:1a:be:92:
fa:0e:16:a5:49:30:9e:46:61:43:9e:34:f7:b1:9b:
cf:4a:d1:54:f2:a0:8e:90:3b:87:eb:8a:b1:c8:b3:
17:ad:34:6d:d4:03:55:80:ac:d9:14:d6:68:5b:8e:
34:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:09:36:3B:FC:9C:08:32:92:EB:B9:11:89:2B:EE:EC:EB:3B:40:35
X509v3 Authority Key Identifier:
keyid:9A:9D:4B:DD:43:11:51:9F:6A:96:14:10:40:EA:1E:98:B3:36:33:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/9A9D4BDD4311519F6A96141040EA1E98B3363388.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A9D4BDD4311519F6A96141040EA1E98B3363388.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/9A9D4BDD4311519F6A96141040EA1E98B3363388.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:3a:07:23:4f:79:9f:c7:8c:1c:d6:c0:06:72:e3:6c:86:11:
de:02:bf:2e:53:dd:31:08:ac:90:da:5f:82:fe:58:80:6c:15:
86:d5:d3:2e:24:93:99:85:ec:bb:85:70:26:fe:22:f1:41:46:
e5:d4:fb:ad:f5:fb:e6:29:80:ea:aa:83:42:ae:23:d3:18:68:
b1:37:f8:df:d8:91:90:9d:8a:ca:7b:25:4f:29:cf:5d:8c:1a:
5d:d6:7a:d5:88:0f:48:35:88:d8:d6:a9:d1:2a:5f:3a:6a:31:
82:1e:ae:cb:d6:51:54:8f:16:e0:72:48:e7:d5:27:97:6b:82:
2c:58:47:9c:76:e8:b6:57:b4:f6:5d:ce:fe:f1:9f:4a:2f:3b:
27:ad:38:8d:e2:9d:d4:18:b0:61:94:0c:22:ce:41:cf:c6:cd:
01:f3:06:79:28:a0:ae:d8:cc:d5:84:59:0e:ac:e3:ea:d0:21:
54:74:b9:49:1a:af:c4:e3:d0:e8:37:a0:4a:06:7d:39:25:2a:
2e:10:92:97:b5:f0:fb:a3:6d:f4:9a:95:79:75:79:fb:5b:94:
54:5e:40:95:08:e7:90:ca:2c:55:39:7d:d6:0e:40:3c:c8:df:
ef:fd:f8:3a:c2:fb:22:1b:a2:a3:9b:4e:e2:76:db:f4:31:51:
e3:59:05:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:19:54 2026 by rpki-client