
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/9EDB723FFE084B9B87B5B0A108574335936817FB.mft
File: 9EDB723FFE084B9B87B5B0A108574335936817FB.mft (raw, json)
Hash identifier: rhr0by1rscdnIpv1YZN30V2+RdIctEBUMimixg0eWpQ=
Subject key identifier: 59:75:67:F7:46:D9:26:CF:99:5A:F9:15:C6:F4:D5:F0:6E:B5:44:CE
Authority key identifier: 9E:DB:72:3F:FE:08:4B:9B:87:B5:B0:A1:08:57:43:35:93:68:17:FB
Certificate issuer: /CN=9EDB723FFE084B9B87B5B0A108574335936817FB
Certificate serial: 538B7918AE77E3B156AFA88252CC6E0B8EB7710C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EDB723FFE084B9B87B5B0A108574335936817FB.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/9EDB723FFE084B9B87B5B0A108574335936817FB.mft
Manifest number: 6E
Signing time: Thu 23 Jul 2026 21:10:53 +0000
Manifest this update: Thu 23 Jul 2026 21:05:53 +0000
Manifest next update: Fri 24 Jul 2026 23:45:53 +0000
Files and hashes: 1: 3130332e3136312e3130392e302f32342d3234203d3e20313431363138.roa (hash: i1PCAoIZ8GEBtvqZu9y6RsJ/+cUgKfG+tpL6n+2MQ0w=)
2: 3130332e3137342e36362e302f32342d3234203d3e20313431363138.roa (hash: TKijjNdinkZx0yUPQ2piNtCq6wNxlLJwsDj7lMp8o1A=)
3: 9EDB723FFE084B9B87B5B0A108574335936817FB.crl (hash: noKhUGXI2iaR7/q2R4cgJtdisSdQouuFY9EKzSiHQLw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/9EDB723FFE084B9B87B5B0A108574335936817FB.crl
rsync://rpki-rsync.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/9EDB723FFE084B9B87B5B0A108574335936817FB.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EDB723FFE084B9B87B5B0A108574335936817FB.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 23:45:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:8b:79:18:ae:77:e3:b1:56:af:a8:82:52:cc:6e:0b:8e:b7:71:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9EDB723FFE084B9B87B5B0A108574335936817FB
Validity
Not Before: Jul 23 21:05:53 2026 GMT
Not After : Jul 24 23:45:53 2026 GMT
Subject: CN=597567F746D926CF995AF915C6F4D5F06EB544CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:78:64:bc:f1:e4:d8:db:27:ba:82:08:14:1f:
d2:ff:03:09:08:4d:10:ee:f6:1a:3c:64:30:08:91:
76:73:2c:1b:67:4d:a6:e8:4c:69:5e:db:22:73:54:
35:2c:e1:ec:f6:04:f1:75:d7:5f:a4:5f:8d:de:6b:
b6:d1:5d:78:82:78:69:74:6f:5f:c1:79:18:fd:61:
0f:73:c7:8c:88:24:51:b2:24:49:f3:3b:6b:1d:6e:
63:a2:19:94:1e:8a:8e:76:89:65:08:60:7c:d4:fa:
70:b3:94:be:92:98:ee:91:09:5b:43:d1:03:9f:bb:
73:14:70:af:7f:89:96:52:7b:71:73:c1:70:cf:3c:
3c:7c:e2:b2:26:8c:ed:69:59:70:a9:60:20:8d:6e:
36:73:d6:ad:e4:cc:ef:8b:a2:a8:c9:b4:89:b5:b9:
00:68:2d:4b:3a:a7:18:e1:44:33:6f:63:81:7e:a1:
c7:e1:6d:bb:b0:5d:04:32:5d:a6:0e:92:aa:0a:fa:
4f:7e:42:2b:71:bd:78:98:6c:da:51:1a:8a:9e:70:
16:fd:8c:90:5b:23:7a:3b:2b:c0:29:1f:dd:97:13:
ce:08:b7:26:0c:b6:08:22:78:d2:29:ba:da:2e:6f:
4b:6d:fe:4e:74:cd:46:7d:31:4f:98:63:5c:b0:07:
a1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:75:67:F7:46:D9:26:CF:99:5A:F9:15:C6:F4:D5:F0:6E:B5:44:CE
X509v3 Authority Key Identifier:
keyid:9E:DB:72:3F:FE:08:4B:9B:87:B5:B0:A1:08:57:43:35:93:68:17:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/9EDB723FFE084B9B87B5B0A108574335936817FB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EDB723FFE084B9B87B5B0A108574335936817FB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/9EDB723FFE084B9B87B5B0A108574335936817FB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:b2:78:fb:09:f5:73:a9:f9:00:26:29:f0:7f:eb:76:ee:08:
f4:fa:e5:bf:7e:ff:fd:5b:90:38:23:b4:47:fa:73:6c:e5:62:
2c:39:b0:e6:4d:51:1a:41:6c:71:b9:94:44:ee:2f:48:44:34:
d7:dd:37:48:a4:85:c4:23:8a:8a:51:14:73:ff:68:7e:a7:54:
0a:dd:2b:8d:b6:6d:22:0e:fc:fa:a4:bd:4e:b5:69:57:a1:fe:
04:c9:21:19:2c:59:3a:9c:b7:9f:f9:10:3d:3c:f8:40:f5:6a:
1a:b0:be:c5:66:17:6a:e3:45:44:19:1e:eb:37:9c:4a:bf:7b:
f9:85:42:fe:db:3d:91:07:36:44:bd:84:05:5d:58:22:54:db:
03:04:72:32:8a:5a:da:b1:d9:49:05:db:b8:ab:c1:eb:47:3f:
57:62:e6:f1:82:7d:45:c4:7a:01:f0:43:0d:eb:b5:17:44:63:
40:aa:c4:f3:35:1b:36:bc:e3:e8:7c:39:6b:0b:06:7c:cc:ed:
19:b6:42:57:42:fb:a9:1f:2f:09:45:a2:39:05:40:d8:fa:b3:
81:2a:27:da:bb:68:b6:c6:47:fd:cf:dc:5e:39:c0:17:76:ab:
b5:6c:7a:0b:c6:a1:a0:78:c4:9b:17:a6:bb:af:8b:e2:cf:21:
45:57:98:8f
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUU4t5GK5347FWr6iCUsxuC463cQwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUVEQjcyM0ZGRTA4NEI5Qjg3QjVCMEExMDg1NzQzMzU5
MzY4MTdGQjAeFw0yNjA3MjMyMTA1NTNaFw0yNjA3MjQyMzQ1NTNaMDMxMTAvBgNV
BAMTKDU5NzU2N0Y3NDZEOTI2Q0Y5OTVBRjkxNUM2RjRENUYwNkVCNTQ0Q0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeeGS88eTY2ye6gggUH9L/AwkI
TRDu9ho8ZDAIkXZzLBtnTaboTGle2yJzVDUs4ez2BPF111+kX43ea7bRXXiCeGl0
b1/BeRj9YQ9zx4yIJFGyJEnzO2sdbmOiGZQeio52iWUIYHzU+nCzlL6SmO6RCVtD
0QOfu3MUcK9/iZZSe3FzwXDPPDx84rImjO1pWXCpYCCNbjZz1q3kzO+LoqjJtIm1
uQBoLUs6pxjhRDNvY4F+ocfhbbuwXQQyXaYOkqoK+k9+QitxvXiYbNpRGoqecBb9
jJBbI3o7K8ApH92XE84ItyYMtggieNIputoub0tt/k50zUZ9MU+YY1ywB6EJAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUWXVn90bZJs+ZWvkVxvTV8G61RM4wHwYDVR0j
BBgwFoAUnttyP/4IS5uHtbChCFdDNZNoF/swDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZTBiYTk3ZWYtN2JjOC00NWI4LTgyYWItZjg1NTMzY2FlZGY0LzAvOUVEQjcyM0ZG
RTA4NEI5Qjg3QjVCMEExMDg1NzQzMzU5MzY4MTdGQi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85RURCNzIzRkZFMDg0QjlCODdCNUIwQTEwODU3NDMzNTkzNjgx
N0ZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTBiYTk3ZWYtN2JjOC00NWI4LTgy
YWItZjg1NTMzY2FlZGY0LzAvOUVEQjcyM0ZGRTA4NEI5Qjg3QjVCMEExMDg1NzQz
MzU5MzY4MTdGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEeyePsJ9XOp+QAmKfB/63buCPT65b9+//1b
kDgjtEf6c2zlYiw5sOZNURpBbHG5lETuL0hENNfdN0ikhcQjiopRFHP/aH6nVArd
K422bSIO/PqkvU61aVeh/gTJIRksWTqct5/5ED08+ED1ahqwvsVmF2rjRUQZHus3
nEq/e/mFQv7bPZEHNkS9hAVdWCJU2wMEcjKKWtqx2UkF27irwetHP1di5vGCfUXE
egHwQw3rtRdEY0CqxPM1Gza84+h8OWsLBnzM7Rm2QldC+6kfLwlFojkFQNj6s4Eq
J9q7aLbGR/3P3F45wBd2q7VsegvGoaB4xJsXpruvi+LPIUVXmI8=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:32:05 2026 by rpki-client