
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/9635F0724E9717C889D5604679E31DA89F807CC1.mft
File: 9635F0724E9717C889D5604679E31DA89F807CC1.mft (raw, json)
Hash identifier: I/vEMbX1lpBJW1esxChce3kHd5JlBJkiYQZspVJxp24=
Subject key identifier: 2B:69:91:AB:C3:F4:CE:A1:AC:14:8C:D1:47:3E:22:67:47:BF:30:7F
Authority key identifier: 96:35:F0:72:4E:97:17:C8:89:D5:60:46:79:E3:1D:A8:9F:80:7C:C1
Certificate issuer: /CN=9635F0724E9717C889D5604679E31DA89F807CC1
Certificate serial: 490C2885CB12E2F0930583F22EAC81C61577AC1E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9635F0724E9717C889D5604679E31DA89F807CC1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/9635F0724E9717C889D5604679E31DA89F807CC1.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 21:08:34 +0000
Manifest this update: Tue 12 May 2026 21:03:34 +0000
Manifest next update: Wed 13 May 2026 22:35:34 +0000
Files and hashes: 1: 3130332e39372e3139392e302f32342d3234203d3e20313530393135.roa (hash: XboM/GVCHUPVqpn45N0upXfql+dI6DpgJ/Slav4V/kE=)
2: 9635F0724E9717C889D5604679E31DA89F807CC1.crl (hash: o7G/HZ0TNI/Ef21ges2gMOHDmafrD2J2U4afk+tmuLs=)
3: 3130332e39372e3139382e302f32342d3234203d3e20313530393135.roa (hash: 8TsJDUFf5xwZJs6EgPJxyciB9/EWUhvPgtxe1fcDLMI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/9635F0724E9717C889D5604679E31DA89F807CC1.crl
rsync://rpki-rsync.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/9635F0724E9717C889D5604679E31DA89F807CC1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9635F0724E9717C889D5604679E31DA89F807CC1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 22:35:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:0c:28:85:cb:12:e2:f0:93:05:83:f2:2e:ac:81:c6:15:77:ac:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9635F0724E9717C889D5604679E31DA89F807CC1
Validity
Not Before: May 12 21:03:34 2026 GMT
Not After : May 13 22:35:34 2026 GMT
Subject: CN=2B6991ABC3F4CEA1AC148CD1473E226747BF307F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:63:f3:63:3a:b1:a2:a9:cd:de:cc:e0:8c:e8:
24:3a:99:93:ad:5b:a4:a3:c0:53:da:d4:c0:32:99:
e1:22:c9:c1:19:87:cd:80:02:e5:20:6c:97:10:ba:
20:99:0b:fb:a4:b6:8e:60:52:83:05:8f:81:8c:ca:
2a:a5:95:4d:5a:98:95:a5:91:5a:0c:19:cf:98:1c:
70:cf:70:a8:21:fb:e3:0a:b0:c3:c5:fc:52:6f:21:
97:e0:06:c8:bb:54:cd:68:f6:05:94:e7:96:38:06:
eb:ee:c7:82:76:32:4e:bc:8e:d8:c1:3a:1e:24:52:
21:8b:32:d3:b5:ec:c2:ab:06:63:68:9d:d2:f8:b4:
6a:d9:62:20:8e:15:06:8a:8e:a9:73:4b:d5:f3:94:
6a:74:05:75:a4:80:bc:44:4c:84:38:0c:b3:c0:f4:
03:80:fb:35:67:cc:ca:d9:20:cf:96:39:ec:df:22:
c9:17:1d:78:2e:4c:3a:a0:87:3a:66:57:eb:ec:0a:
4c:47:b9:0b:1b:e1:e1:6d:91:2c:fc:86:77:73:b5:
89:ec:c1:cc:39:73:8c:26:10:17:6f:49:ae:17:a2:
c7:35:36:38:c2:70:0d:8f:16:00:af:2b:2f:84:45:
c4:77:21:4b:ce:66:09:42:f9:ae:93:36:72:1f:b4:
ce:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:69:91:AB:C3:F4:CE:A1:AC:14:8C:D1:47:3E:22:67:47:BF:30:7F
X509v3 Authority Key Identifier:
keyid:96:35:F0:72:4E:97:17:C8:89:D5:60:46:79:E3:1D:A8:9F:80:7C:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/9635F0724E9717C889D5604679E31DA89F807CC1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9635F0724E9717C889D5604679E31DA89F807CC1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/9635F0724E9717C889D5604679E31DA89F807CC1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:ce:53:e8:44:16:6f:97:ba:8b:56:89:70:71:67:a8:dc:67:
03:50:f1:4a:e8:77:c0:ef:9d:aa:c4:0e:98:25:12:1c:0d:4b:
98:40:55:b7:3d:29:d6:23:da:b3:f5:9f:3c:4e:89:44:41:e0:
18:50:f9:a5:c1:2b:d1:73:2a:6d:a4:01:6a:3c:e9:c7:8b:b2:
87:5c:e5:45:9e:bc:39:bd:54:2d:a6:b7:a9:8e:d1:03:7c:15:
59:e4:0a:2f:e8:8c:ab:20:2a:de:3a:fb:0b:90:e3:4a:48:cd:
9e:76:00:46:64:2e:20:d8:84:16:72:02:76:a2:3c:43:12:6b:
25:de:5c:3c:bb:54:c6:7d:41:c1:05:03:01:ee:6e:ce:ca:e0:
57:05:73:2e:36:11:bc:37:74:f7:5c:bd:f8:42:6c:1d:d0:f1:
45:12:52:ec:7c:f0:90:52:80:27:1e:f6:86:28:b0:6f:0b:99:
f0:7f:76:70:4b:81:47:20:e8:d9:e8:01:be:cb:bf:4c:f0:0d:
25:f4:86:98:7e:c1:b5:fa:e3:0d:49:e8:88:24:4c:1f:4c:5f:
4c:81:a6:5d:d1:ed:b2:d7:3e:ac:1f:02:63:1c:c4:d9:00:66:
7a:f0:a7:ec:13:fd:ac:f2:95:04:8b:8d:db:1e:9f:ce:95:a2:
a7:cd:dc:2b
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUSQwohcsS4vCTBYPyLqyBxhV3rB4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTYzNUYwNzI0RTk3MTdDODg5RDU2MDQ2NzlFMzFEQTg5
RjgwN0NDMTAeFw0yNjA1MTIyMTAzMzRaFw0yNjA1MTMyMjM1MzRaMDMxMTAvBgNV
BAMTKDJCNjk5MUFCQzNGNENFQTFBQzE0OENEMTQ3M0UyMjY3NDdCRjMwN0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Y/NjOrGiqc3ezOCM6CQ6mZOt
W6SjwFPa1MAymeEiycEZh82AAuUgbJcQuiCZC/ukto5gUoMFj4GMyiqllU1amJWl
kVoMGc+YHHDPcKgh++MKsMPF/FJvIZfgBsi7VM1o9gWU55Y4Buvux4J2Mk68jtjB
Oh4kUiGLMtO17MKrBmNondL4tGrZYiCOFQaKjqlzS9XzlGp0BXWkgLxETIQ4DLPA
9AOA+zVnzMrZIM+WOezfIskXHXguTDqghzpmV+vsCkxHuQsb4eFtkSz8hndztYns
wcw5c4wmEBdvSa4Xosc1NjjCcA2PFgCvKy+ERcR3IUvOZglC+a6TNnIftM7pAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUK2mRq8P0zqGsFIzRRz4iZ0e/MH8wHwYDVR0j
BBgwFoAUljXwck6XF8iJ1WBGeeMdqJ+AfMEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZDg0NjNhZDUtMTc0NS00NDNlLWIxNjUtZDE5NGVlZDg5ZTZiLzAvOTYzNUYwNzI0
RTk3MTdDODg5RDU2MDQ2NzlFMzFEQTg5RjgwN0NDMS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85NjM1RjA3MjRFOTcxN0M4ODlENTYwNDY3OUUzMURBODlGODA3
Q0MxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDg0NjNhZDUtMTc0NS00NDNlLWIx
NjUtZDE5NGVlZDg5ZTZiLzAvOTYzNUYwNzI0RTk3MTdDODg5RDU2MDQ2NzlFMzFE
QTg5RjgwN0NDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAKPOU+hEFm+XuotWiXBxZ6jcZwNQ8Urod8Dv
narEDpglEhwNS5hAVbc9KdYj2rP1nzxOiURB4BhQ+aXBK9FzKm2kAWo86ceLsodc
5UWevDm9VC2mt6mO0QN8FVnkCi/ojKsgKt46+wuQ40pIzZ52AEZkLiDYhBZyAnai
PEMSayXeXDy7VMZ9QcEFAwHubs7K4FcFcy42Ebw3dPdcvfhCbB3Q8UUSUux88JBS
gCce9oYosG8LmfB/dnBLgUcg6NnoAb7Lv0zwDSX0hph+wbX64w1J6IgkTB9MX0yB
pl3R7bLXPqwfAmMcxNkAZnrwp+wT/azylQSLjdsen86VoqfN3Cs=
-----END CERTIFICATE-----
Generated at Wed May 13 04:19:50 2026 by rpki-client