
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.mft
File: 9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.mft (raw, json)
Hash identifier: gdgD8dkpAq6XwNIORMdX0x/n7tojgiYxDPNSQyQx08E=
Subject key identifier: 50:15:FE:8B:96:87:ED:F7:AB:84:E7:F5:E9:EF:AC:99:DB:AE:21:7D
Authority key identifier: 9D:72:8C:A3:33:07:36:90:F2:A7:F6:B7:7D:2C:F3:FE:AE:49:AA:B0
Certificate issuer: /CN=9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0
Certificate serial: 010C4157076CDA87643F300CBFE331144C13D3E5
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.mft
Manifest number: C1
Signing time: Thu 24 Sep 2026 07:14:38 +0000
Manifest this update: Thu 24 Sep 2026 07:09:38 +0000
Manifest next update: Fri 25 Sep 2026 07:50:38 +0000
Files and hashes: 1: 9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.crl (hash: wNdLWqZr/w2MZoTpsMr0Ll2k4jA1uDSvCcViPBOp6Zo=)
2: 3130332e3134372e3131382e302f32332d3234203d3e20313339393632.roa (hash: g3Z9fptq9GjJPdegO4ng7rY8ayX1C1nitJgBmqVwMJ4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.crl
rsync://rpki-rsync.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 07:50:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0c:41:57:07:6c:da:87:64:3f:30:0c:bf:e3:31:14:4c:13:d3:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0
Validity
Not Before: Sep 24 07:09:38 2026 GMT
Not After : Sep 25 07:50:38 2026 GMT
Subject: CN=5015FE8B9687EDF7AB84E7F5E9EFAC99DBAE217D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:17:b9:14:92:3c:d2:e4:cb:62:11:d2:57:35:
44:38:db:8b:2f:52:0b:35:e4:cc:3b:ea:93:f9:23:
f1:1b:9d:53:c9:a8:75:b6:56:34:2d:bc:f2:4e:30:
dc:05:d5:41:98:63:1a:0e:da:04:19:93:d8:6e:95:
5f:fd:46:b1:78:16:a6:45:94:eb:4c:d2:c5:7c:45:
2e:80:45:0c:af:c5:47:5b:da:70:f8:f5:de:a9:26:
ed:64:a2:fb:02:ad:8b:51:09:5c:98:76:9a:a6:65:
4a:23:aa:65:bb:45:b5:81:00:ba:60:3d:d3:54:90:
5c:25:76:f1:58:98:33:2b:49:b7:f5:e5:bd:6d:03:
00:df:1d:83:74:0e:11:72:1d:1c:1a:1e:38:28:50:
86:d2:b0:5f:5a:b3:88:16:a0:24:bf:35:2d:fb:9f:
46:70:b7:b3:9a:ec:75:fd:3c:be:72:b1:04:3c:e2:
3e:f3:7b:2a:ef:14:f3:99:c8:e9:6b:34:b9:63:85:
67:97:79:39:f6:02:24:21:f3:65:3c:5e:07:53:09:
fa:60:96:4f:7c:01:0b:63:dc:8f:78:33:60:2b:14:
21:46:83:50:47:44:3a:16:8e:28:b7:b5:93:fb:90:
90:19:da:0f:7a:20:4a:2a:34:85:1b:ad:67:65:bc:
11:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:15:FE:8B:96:87:ED:F7:AB:84:E7:F5:E9:EF:AC:99:DB:AE:21:7D
X509v3 Authority Key Identifier:
keyid:9D:72:8C:A3:33:07:36:90:F2:A7:F6:B7:7D:2C:F3:FE:AE:49:AA:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:06:17:ec:b8:88:9d:74:f5:b7:6e:f5:4f:cb:00:56:d2:fe:
36:6a:d6:40:e1:89:34:77:a4:7f:ff:4f:ef:51:89:07:dc:38:
10:03:84:b5:f1:34:ba:47:b4:f3:06:bd:bb:39:1b:58:a4:dc:
ee:2b:a9:8c:59:7f:9b:f9:03:cc:a7:f3:86:00:21:37:18:fe:
6a:9b:d6:3d:e2:45:33:35:50:a5:0e:7d:24:37:06:c5:25:6c:
a2:01:9c:00:26:5b:82:d5:40:c9:50:32:e4:10:0e:22:65:c6:
ca:b1:c6:df:4b:1b:77:4f:85:e9:9d:c4:0a:37:e1:33:2b:e0:
9c:e6:f1:09:f8:eb:84:b1:67:7d:82:35:3e:d6:17:dc:5a:9c:
d4:ad:18:be:ef:16:5f:e1:be:d9:48:ec:6d:f6:30:eb:bb:76:
22:e7:ef:77:e8:50:99:e1:9b:7e:e4:a3:09:d8:39:f5:40:0f:
64:7d:79:a3:c4:d0:9c:f6:48:7b:41:c5:79:0a:3e:c4:5c:bf:
06:f7:09:c9:f9:9d:c5:47:cf:88:1c:91:04:68:7f:25:01:ed:
26:89:40:4e:c2:2a:92:28:06:0d:09:d0:dd:2e:6a:30:b2:93:
64:81:d6:ec:9d:98:a5:bf:13:d9:e6:15:f4:b8:df:56:ce:6d:
4b:0a:b0:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:54:55 2026 by rpki-client