
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/9EDB723FFE084B9B87B5B0A108574335936817FB.mft
File: 9EDB723FFE084B9B87B5B0A108574335936817FB.mft (raw, json)
Hash identifier: VRrgjh/yIbHBw7FtZICUMn3INLZrsUIsf+tt4kChbNI=
Subject key identifier: 6B:47:22:8D:DF:B2:F6:36:7F:59:3C:19:4D:D2:A2:15:D7:14:4F:02
Authority key identifier: 9E:DB:72:3F:FE:08:4B:9B:87:B5:B0:A1:08:57:43:35:93:68:17:FB
Certificate issuer: /CN=9EDB723FFE084B9B87B5B0A108574335936817FB
Certificate serial: 28D7026D86C4431EB90EFC382C32B6369EF606D0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EDB723FFE084B9B87B5B0A108574335936817FB.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/9EDB723FFE084B9B87B5B0A108574335936817FB.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 22:00:09 +0000
Manifest this update: Tue 12 May 2026 21:55:09 +0000
Manifest next update: Thu 14 May 2026 00:52:09 +0000
Files and hashes: 1: 3130332e3137342e36362e302f32342d3234203d3e20313431363138.roa (hash: TKijjNdinkZx0yUPQ2piNtCq6wNxlLJwsDj7lMp8o1A=)
2: 3130332e3136312e3130392e302f32342d3234203d3e20313431363138.roa (hash: i1PCAoIZ8GEBtvqZu9y6RsJ/+cUgKfG+tpL6n+2MQ0w=)
3: 9EDB723FFE084B9B87B5B0A108574335936817FB.crl (hash: 6ahI02jfAQ5WuT24wxB+u3/P/T/AUNidRFLmD8soc10=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/9EDB723FFE084B9B87B5B0A108574335936817FB.crl
rsync://rpki-rsync.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/9EDB723FFE084B9B87B5B0A108574335936817FB.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EDB723FFE084B9B87B5B0A108574335936817FB.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:d7:02:6d:86:c4:43:1e:b9:0e:fc:38:2c:32:b6:36:9e:f6:06:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9EDB723FFE084B9B87B5B0A108574335936817FB
Validity
Not Before: May 12 21:55:09 2026 GMT
Not After : May 14 00:52:09 2026 GMT
Subject: CN=6B47228DDFB2F6367F593C194DD2A215D7144F02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:33:ae:22:b6:81:0d:09:20:6a:77:ce:2c:06:
9b:5d:15:a3:0c:15:14:48:6f:14:4f:4d:10:ef:24:
0b:c7:f0:ad:11:f1:84:fd:9b:72:98:4e:5e:8d:5a:
ba:f7:c1:df:08:44:b9:f3:f2:da:5a:6b:f7:7d:07:
f3:47:fe:40:17:cd:ed:99:f4:63:22:ea:f1:63:1a:
8a:75:c6:65:db:f0:c4:8c:29:27:02:82:1c:38:69:
45:4f:05:cd:a7:55:e2:89:2b:81:c1:2a:5e:6b:f3:
09:c9:bd:ff:61:b4:89:4e:c5:6e:75:ac:b8:f0:bc:
82:59:03:b4:29:5b:f2:aa:e1:4e:bc:80:65:37:6f:
45:0c:a8:71:06:5f:7c:7c:54:01:09:a2:3e:99:9d:
ba:f3:4d:62:34:35:66:bd:72:b9:40:c8:db:cf:a6:
3e:b6:85:78:d0:a3:be:3f:c0:37:9e:4e:07:d5:17:
49:53:8a:82:3a:fc:17:a7:78:84:8a:db:83:06:d2:
d8:65:8e:66:e2:10:84:26:37:34:67:f5:82:2a:c5:
0c:ae:14:0e:75:e0:bc:de:0b:43:3a:fb:fe:1e:b1:
4b:f0:02:aa:cd:34:56:82:b9:88:22:75:e1:ee:8e:
75:35:e9:92:c2:a2:7a:8e:51:68:a2:0f:92:c2:e0:
f6:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:47:22:8D:DF:B2:F6:36:7F:59:3C:19:4D:D2:A2:15:D7:14:4F:02
X509v3 Authority Key Identifier:
keyid:9E:DB:72:3F:FE:08:4B:9B:87:B5:B0:A1:08:57:43:35:93:68:17:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/9EDB723FFE084B9B87B5B0A108574335936817FB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EDB723FFE084B9B87B5B0A108574335936817FB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/9EDB723FFE084B9B87B5B0A108574335936817FB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:c9:aa:ef:94:fc:14:ac:9a:00:8b:9a:a9:22:39:dc:c7:ea:
2e:b7:0c:49:7e:16:36:f9:04:13:8b:ce:5d:c9:c4:e4:c9:36:
9f:5f:b1:29:f2:01:56:8a:0e:b2:94:58:31:fc:63:13:02:f8:
b1:ee:99:de:f7:88:ac:6a:7c:2d:15:de:8a:59:10:fd:fd:8e:
e7:44:ae:81:2c:7e:12:67:6f:ee:d1:7d:29:7e:04:ff:92:e4:
77:eb:ed:dd:26:eb:74:fd:61:1e:ca:9e:3b:0a:41:5c:d8:a4:
88:5c:e0:dc:3a:c0:43:ec:7b:29:64:78:f8:3d:cc:c2:3b:4a:
d1:ec:e6:3c:e2:d1:8c:36:c1:45:8f:08:e8:a4:41:b8:13:96:
b0:a6:c4:eb:b7:83:c0:58:20:71:eb:82:a8:97:fe:ae:73:d5:
c1:6f:bf:83:6a:73:52:2e:63:29:6f:38:bb:c9:47:96:77:25:
f1:54:bf:58:d8:2f:b8:ff:7c:2f:10:30:7d:3d:2e:4c:ac:b4:
11:8a:39:e3:d4:7c:7f:87:70:f7:3f:a5:47:f8:7c:72:74:87:
78:b3:04:b2:93:1a:c0:05:99:96:d4:dc:a9:c3:95:b6:10:3b:
2e:51:61:2d:f2:05:57:87:8f:b2:19:eb:bc:8b:a7:5d:7f:a2:
50:15:4c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:48:59 2026 by rpki-client