
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/9C0AD7062A3E060D75A55B4E5047F6AFD88C1344.mft
File: 9C0AD7062A3E060D75A55B4E5047F6AFD88C1344.mft (raw, json)
Hash identifier: eKdbVbHreP40CtnA+wWBZ0oXdjHurapmKhUjTSXCrM0=
Subject key identifier: 02:4C:A0:8D:78:B5:23:BD:1A:DD:E7:44:20:11:64:CE:EB:28:DA:9C
Authority key identifier: 9C:0A:D7:06:2A:3E:06:0D:75:A5:5B:4E:50:47:F6:AF:D8:8C:13:44
Certificate issuer: /CN=9C0AD7062A3E060D75A55B4E5047F6AFD88C1344
Certificate serial: 12E856B10654DD015DE8CE2A324A9ABF5E915047
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C0AD7062A3E060D75A55B4E5047F6AFD88C1344.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/9C0AD7062A3E060D75A55B4E5047F6AFD88C1344.mft
Manifest number: 0E
Signing time: Tue 12 May 2026 07:08:19 +0000
Manifest this update: Tue 12 May 2026 07:03:19 +0000
Manifest next update: Wed 13 May 2026 11:00:19 +0000
Files and hashes: 1: 9C0AD7062A3E060D75A55B4E5047F6AFD88C1344.crl (hash: BlBBBQSmvYbdhPyBw52RRvExlSBFv1HQSr4FBLUmY6g=)
2: 3130332e3139312e3230302e302f32342d3234203d3e20313432333636.roa (hash: zW2qkXEpoz4y3CxwswSc/8npi9VR1vmLGxgHBmxtWZc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/9C0AD7062A3E060D75A55B4E5047F6AFD88C1344.crl
rsync://rpki-rsync.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/9C0AD7062A3E060D75A55B4E5047F6AFD88C1344.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C0AD7062A3E060D75A55B4E5047F6AFD88C1344.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:e8:56:b1:06:54:dd:01:5d:e8:ce:2a:32:4a:9a:bf:5e:91:50:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9C0AD7062A3E060D75A55B4E5047F6AFD88C1344
Validity
Not Before: May 12 07:03:19 2026 GMT
Not After : May 13 11:00:19 2026 GMT
Subject: CN=024CA08D78B523BD1ADDE744201164CEEB28DA9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e0:a7:6f:4b:7d:67:86:f9:cf:a0:e7:f8:ed:
20:60:e2:e7:5a:cc:f6:66:4b:c2:fa:e9:ec:d2:42:
b9:37:8e:51:87:7a:63:4a:9c:3d:dd:60:4a:7d:cb:
94:68:59:ed:54:66:90:c5:1d:bf:13:cb:c4:1d:58:
93:7f:db:ac:0b:68:99:60:08:b3:21:4d:3f:40:f4:
d9:e5:9f:7f:48:fa:ec:f4:f5:79:25:ba:f1:83:40:
42:94:63:98:dc:b6:7f:b2:34:06:da:45:12:a8:9f:
bd:9b:da:4d:9a:a0:cc:f0:5f:8d:41:c4:83:e9:1d:
c3:69:eb:0a:44:1f:ca:e7:cb:13:41:80:ee:66:44:
53:1b:d3:c2:d1:8d:0c:fb:ac:0c:2b:4b:4d:d9:eb:
ed:af:1a:a4:ca:11:66:ab:bb:a3:5a:48:d0:88:b3:
d4:b2:1e:e2:df:4f:b7:f9:36:e2:b2:3e:c9:20:37:
fb:ef:ae:e3:d2:b5:d2:06:0e:57:b4:ff:bc:8e:df:
4b:3d:47:bb:b3:8a:10:2d:da:62:28:10:53:59:ec:
59:2e:96:92:5e:93:db:b7:a2:1d:c2:10:af:81:c9:
68:87:e4:be:8f:d9:34:87:e3:35:b5:1b:f3:64:6d:
8b:61:a1:6f:32:a1:69:3f:6b:d3:34:46:ba:a7:90:
7c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:4C:A0:8D:78:B5:23:BD:1A:DD:E7:44:20:11:64:CE:EB:28:DA:9C
X509v3 Authority Key Identifier:
keyid:9C:0A:D7:06:2A:3E:06:0D:75:A5:5B:4E:50:47:F6:AF:D8:8C:13:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/9C0AD7062A3E060D75A55B4E5047F6AFD88C1344.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C0AD7062A3E060D75A55B4E5047F6AFD88C1344.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/9C0AD7062A3E060D75A55B4E5047F6AFD88C1344.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:fd:3e:08:25:d1:c8:d5:0c:e7:c6:bf:4c:33:38:2c:df:57:
b4:0c:c5:87:87:5d:ab:cf:69:8f:98:96:09:f6:81:06:16:34:
24:52:c6:c0:7d:61:f9:51:17:98:64:e0:23:a8:09:70:43:ca:
6a:25:ae:d0:59:1f:4f:df:a2:0b:1f:67:14:65:88:5f:b3:3a:
f5:23:af:f0:02:e5:dc:8b:8a:e5:29:94:3d:45:b8:42:2c:ab:
10:df:ac:bb:0c:96:b4:7e:91:2c:17:da:85:36:75:3f:ad:92:
42:14:1e:5d:6c:5e:b7:fd:19:05:97:c5:87:05:3e:42:9a:f1:
36:94:2d:01:ce:d3:2b:90:06:8f:ae:fe:03:70:84:4e:94:b3:
f5:39:a0:eb:7e:be:97:f9:64:20:18:f2:1d:ad:ea:75:59:04:
a6:5c:7f:7c:05:23:ca:49:c8:a5:cf:68:77:5e:e7:05:16:a8:
e3:4b:f5:fa:b6:fb:55:f0:a3:2a:02:1e:99:38:50:fd:63:c9:
77:cd:16:62:e3:57:c6:00:b9:6a:33:bb:4e:ad:e5:dd:9a:cf:
dc:3c:1a:29:22:5e:39:a8:9d:7c:0f:0c:91:c5:f7:47:bb:4f:
72:7e:92:9e:55:df:5c:f5:c7:c4:8e:87:4d:67:0c:4a:d4:a1:
15:15:64:a8
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUEuhWsQZU3QFd6M4qMkqav16RUEcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUMwQUQ3MDYyQTNFMDYwRDc1QTU1QjRFNTA0N0Y2QUZE
ODhDMTM0NDAeFw0yNjA1MTIwNzAzMTlaFw0yNjA1MTMxMTAwMTlaMDMxMTAvBgNV
BAMTKDAyNENBMDhENzhCNTIzQkQxQURERTc0NDIwMTE2NENFRUIyOERBOUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo4KdvS31nhvnPoOf47SBg4uda
zPZmS8L66ezSQrk3jlGHemNKnD3dYEp9y5RoWe1UZpDFHb8Ty8QdWJN/26wLaJlg
CLMhTT9A9Nnln39I+uz09XkluvGDQEKUY5jctn+yNAbaRRKon72b2k2aoMzwX41B
xIPpHcNp6wpEH8rnyxNBgO5mRFMb08LRjQz7rAwrS03Z6+2vGqTKEWaru6NaSNCI
s9SyHuLfT7f5NuKyPskgN/vvruPStdIGDle0/7yO30s9R7uzihAt2mIoEFNZ7Fku
lpJek9u3oh3CEK+ByWiH5L6P2TSH4zW1G/NkbYthoW8yoWk/a9M0RrqnkHx9AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUAkygjXi1I70a3edEIBFkzuso2pwwHwYDVR0j
BBgwFoAUnArXBio+Bg11pVtOUEf2r9iME0QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZTAzZTcxZmUtYWQzMy00ZDEyLTg3MjAtNDMxNDNmZjAxZGJmLzAvOUMwQUQ3MDYy
QTNFMDYwRDc1QTU1QjRFNTA0N0Y2QUZEODhDMTM0NC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85QzBBRDcwNjJBM0UwNjBENzVBNTVCNEU1MDQ3RjZBRkQ4OEMx
MzQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTAzZTcxZmUtYWQzMy00ZDEyLTg3
MjAtNDMxNDNmZjAxZGJmLzAvOUMwQUQ3MDYyQTNFMDYwRDc1QTU1QjRFNTA0N0Y2
QUZEODhDMTM0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGX9Pggl0cjVDOfGv0wzOCzfV7QMxYeHXavP
aY+Ylgn2gQYWNCRSxsB9YflRF5hk4COoCXBDymolrtBZH0/fogsfZxRliF+zOvUj
r/AC5dyLiuUplD1FuEIsqxDfrLsMlrR+kSwX2oU2dT+tkkIUHl1sXrf9GQWXxYcF
PkKa8TaULQHO0yuQBo+u/gNwhE6Us/U5oOt+vpf5ZCAY8h2t6nVZBKZcf3wFI8pJ
yKXPaHde5wUWqONL9fq2+1XwoyoCHpk4UP1jyXfNFmLjV8YAuWozu06t5d2az9w8
GikiXjmonXwPDJHF90e7T3J+kp5V31z1x8SOh01nDErUoRUVZKg=
-----END CERTIFICATE-----
Generated at Wed May 13 01:44:57 2026 by rpki-client