
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/9C0AD7062A3E060D75A55B4E5047F6AFD88C1344.mft
File: 9C0AD7062A3E060D75A55B4E5047F6AFD88C1344.mft (raw, json)
Hash identifier: iuGyhtzoBCtS6BUyv7r9P22J+IUmA2JPpTBy54vGyD0=
Subject key identifier: 97:66:C0:EE:64:6A:FE:F8:DB:85:09:8C:9B:AA:D5:90:12:1E:05:FD
Authority key identifier: 9C:0A:D7:06:2A:3E:06:0D:75:A5:5B:4E:50:47:F6:AF:D8:8C:13:44
Certificate issuer: /CN=9C0AD7062A3E060D75A55B4E5047F6AFD88C1344
Certificate serial: 6031E8FD45451D5DCE2D27EFB48CD2D912FC3A50
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C0AD7062A3E060D75A55B4E5047F6AFD88C1344.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/9C0AD7062A3E060D75A55B4E5047F6AFD88C1344.mft
Manifest number: C1
Signing time: Wed 23 Sep 2026 14:23:52 +0000
Manifest this update: Wed 23 Sep 2026 14:18:52 +0000
Manifest next update: Thu 24 Sep 2026 17:13:52 +0000
Files and hashes: 1: 9C0AD7062A3E060D75A55B4E5047F6AFD88C1344.crl (hash: IUL5Mpboma3sByenwxZ3gTiyGyUzc8LvMy0AhWBh5yM=)
2: 3130332e3139312e3230302e302f32342d3234203d3e20313432333636.roa (hash: zW2qkXEpoz4y3CxwswSc/8npi9VR1vmLGxgHBmxtWZc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/9C0AD7062A3E060D75A55B4E5047F6AFD88C1344.crl
rsync://rpki-rsync.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/9C0AD7062A3E060D75A55B4E5047F6AFD88C1344.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C0AD7062A3E060D75A55B4E5047F6AFD88C1344.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 17:13:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:31:e8:fd:45:45:1d:5d:ce:2d:27:ef:b4:8c:d2:d9:12:fc:3a:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9C0AD7062A3E060D75A55B4E5047F6AFD88C1344
Validity
Not Before: Sep 23 14:18:52 2026 GMT
Not After : Sep 24 17:13:52 2026 GMT
Subject: CN=9766C0EE646AFEF8DB85098C9BAAD590121E05FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:01:05:1c:81:54:56:bd:3f:88:e8:97:48:9c:
df:2f:3c:05:33:df:9c:c0:60:cc:27:80:89:79:bb:
5a:13:59:a7:5e:34:f2:8b:76:81:b6:f8:00:ff:3c:
e3:6a:f8:84:6d:10:11:43:7a:fe:f5:36:65:d0:9f:
48:39:dc:c1:10:f8:7f:f2:80:17:c4:34:93:4d:bd:
89:8a:79:e1:b2:dc:3d:be:89:41:ea:02:a8:ce:94:
e1:99:ce:52:66:da:2a:a8:16:fe:90:ec:53:54:df:
7f:eb:f6:67:d2:36:31:ef:30:22:67:0b:5c:27:8e:
22:64:3e:f0:13:16:35:d6:a6:30:b8:5a:de:3d:70:
27:ee:df:52:a7:fe:8c:67:93:35:a4:46:fc:85:7f:
0d:a1:e1:32:39:e5:34:2c:76:f6:b6:b8:28:58:09:
e6:3e:cb:c1:83:a1:c9:e0:0b:d6:cb:1c:29:8d:91:
ff:bd:77:49:48:d8:d4:45:60:d4:f2:96:ec:10:99:
8c:f6:ce:5d:5b:18:04:db:35:a2:a9:b4:f0:8b:25:
04:90:c2:35:e1:71:97:d7:e4:8d:5c:1d:d1:23:00:
90:60:7a:ff:9c:bf:78:eb:6d:cc:ac:51:85:12:dc:
6e:53:e4:84:66:50:9a:76:50:fd:bd:aa:5a:ba:ec:
6a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:66:C0:EE:64:6A:FE:F8:DB:85:09:8C:9B:AA:D5:90:12:1E:05:FD
X509v3 Authority Key Identifier:
keyid:9C:0A:D7:06:2A:3E:06:0D:75:A5:5B:4E:50:47:F6:AF:D8:8C:13:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/9C0AD7062A3E060D75A55B4E5047F6AFD88C1344.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C0AD7062A3E060D75A55B4E5047F6AFD88C1344.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/9C0AD7062A3E060D75A55B4E5047F6AFD88C1344.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:c2:e7:79:07:40:4b:1b:a6:cf:83:b5:3e:24:a6:d0:aa:de:
79:91:8b:83:00:c3:e0:c2:92:81:a3:c8:8c:58:8f:8d:bd:b2:
43:18:9c:75:b9:bb:6f:8f:56:bf:95:02:13:93:2a:41:02:61:
d1:c8:62:87:c5:04:33:75:9b:8e:b6:43:dc:02:24:03:8d:f9:
79:84:da:d8:ac:9d:bb:42:32:43:f4:ab:c5:b7:b1:f2:70:26:
38:13:63:df:5f:75:63:1b:53:0b:e6:fb:9e:6c:ba:8c:13:cc:
6f:a3:c9:2a:4a:24:71:83:c0:f3:3c:03:ae:6e:48:35:03:af:
be:ae:86:1b:08:7e:19:74:6a:e8:f2:28:1c:dc:3f:03:62:8a:
7b:e2:74:5c:c9:b7:d4:62:99:aa:88:05:4f:00:23:dc:97:c1:
73:61:98:f0:88:90:49:2b:43:77:1a:c7:99:9e:df:a0:0f:7f:
ad:13:2d:46:01:5f:ad:d6:64:7a:f4:54:aa:b8:b2:01:e1:c9:
39:e6:5e:b5:73:d6:31:8a:a6:d9:c9:19:1e:4c:4c:53:8d:a5:
97:c9:ed:06:dd:3b:d7:2c:7f:16:fe:51:23:b8:54:0c:20:68:
73:84:fc:96:2a:8e:b3:8a:1d:9b:96:a4:97:16:69:4a:61:ed:
8b:a2:0b:7e
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUYDHo/UVFHV3OLSfvtIzS2RL8OlAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUMwQUQ3MDYyQTNFMDYwRDc1QTU1QjRFNTA0N0Y2QUZE
ODhDMTM0NDAeFw0yNjA5MjMxNDE4NTJaFw0yNjA5MjQxNzEzNTJaMDMxMTAvBgNV
BAMTKDk3NjZDMEVFNjQ2QUZFRjhEQjg1MDk4QzlCQUFENTkwMTIxRTA1RkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYAQUcgVRWvT+I6JdInN8vPAUz
35zAYMwngIl5u1oTWadeNPKLdoG2+AD/PONq+IRtEBFDev71NmXQn0g53MEQ+H/y
gBfENJNNvYmKeeGy3D2+iUHqAqjOlOGZzlJm2iqoFv6Q7FNU33/r9mfSNjHvMCJn
C1wnjiJkPvATFjXWpjC4Wt49cCfu31Kn/oxnkzWkRvyFfw2h4TI55TQsdva2uChY
CeY+y8GDocngC9bLHCmNkf+9d0lI2NRFYNTyluwQmYz2zl1bGATbNaKptPCLJQSQ
wjXhcZfX5I1cHdEjAJBgev+cv3jrbcysUYUS3G5T5IRmUJp2UP29qlq67GqnAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUl2bA7mRq/vjbhQmMm6rVkBIeBf0wHwYDVR0j
BBgwFoAUnArXBio+Bg11pVtOUEf2r9iME0QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZTAzZTcxZmUtYWQzMy00ZDEyLTg3MjAtNDMxNDNmZjAxZGJmLzAvOUMwQUQ3MDYy
QTNFMDYwRDc1QTU1QjRFNTA0N0Y2QUZEODhDMTM0NC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85QzBBRDcwNjJBM0UwNjBENzVBNTVCNEU1MDQ3RjZBRkQ4OEMx
MzQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTAzZTcxZmUtYWQzMy00ZDEyLTg3
MjAtNDMxNDNmZjAxZGJmLzAvOUMwQUQ3MDYyQTNFMDYwRDc1QTU1QjRFNTA0N0Y2
QUZEODhDMTM0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHLC53kHQEsbps+DtT4kptCq3nmRi4MAw+DC
koGjyIxYj429skMYnHW5u2+PVr+VAhOTKkECYdHIYofFBDN1m462Q9wCJAON+XmE
2tisnbtCMkP0q8W3sfJwJjgTY99fdWMbUwvm+55suowTzG+jySpKJHGDwPM8A65u
SDUDr76uhhsIfhl0aujyKBzcPwNiinvidFzJt9RimaqIBU8AI9yXwXNhmPCIkEkr
Q3cax5me36APf60TLUYBX63WZHr0VKq4sgHhyTnmXrVz1jGKptnJGR5MTFONpZfJ
7QbdO9csfxb+USO4VAwgaHOE/JYqjrOKHZuWpJcWaUph7YuiC34=
-----END CERTIFICATE-----
Generated at Thu Sep 24 10:27:00 2026 by rpki-client