
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/9AEB58DCD82BE9C8496A5061296B769FD6CE5723.mft
File: 9AEB58DCD82BE9C8496A5061296B769FD6CE5723.mft (raw, json)
Hash identifier: ZUrEWtkO7ydOmxd07ag3nclkwZOWPaIJMUpPFS4fnbI=
Subject key identifier: EE:D4:AD:2B:29:68:A6:BB:50:D4:E6:8A:5A:26:62:4C:41:DF:70:A8
Authority key identifier: 9A:EB:58:DC:D8:2B:E9:C8:49:6A:50:61:29:6B:76:9F:D6:CE:57:23
Certificate issuer: /CN=9AEB58DCD82BE9C8496A5061296B769FD6CE5723
Certificate serial: 2C8673285C5B35392AFC520C277906448C00FC69
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9AEB58DCD82BE9C8496A5061296B769FD6CE5723.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/9AEB58DCD82BE9C8496A5061296B769FD6CE5723.mft
Manifest number: 6F
Signing time: Thu 23 Jul 2026 21:10:55 +0000
Manifest this update: Thu 23 Jul 2026 21:05:55 +0000
Manifest next update: Fri 24 Jul 2026 21:50:55 +0000
Files and hashes: 1: 9AEB58DCD82BE9C8496A5061296B769FD6CE5723.crl (hash: 8i6fUV5azaOBfrVwMlqA+/w/5bExB/r4WujplQddW8o=)
2: 3130332e37332e3139332e302f32342d3234203d3e20313439393434.roa (hash: R4MBAYAEX9Tv0xootJiGEA1eln9suXnVGRSSaR5WyEA=)
3: 3130332e37332e3139322e302f32342d3234203d3e20313439393434.roa (hash: G6mJxfPd30UDcz5ag6UPMmbiQqjncxx0XmGW9whSIV4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/9AEB58DCD82BE9C8496A5061296B769FD6CE5723.crl
rsync://rpki-rsync.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/9AEB58DCD82BE9C8496A5061296B769FD6CE5723.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9AEB58DCD82BE9C8496A5061296B769FD6CE5723.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 21:50:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:86:73:28:5c:5b:35:39:2a:fc:52:0c:27:79:06:44:8c:00:fc:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9AEB58DCD82BE9C8496A5061296B769FD6CE5723
Validity
Not Before: Jul 23 21:05:55 2026 GMT
Not After : Jul 24 21:50:55 2026 GMT
Subject: CN=EED4AD2B2968A6BB50D4E68A5A26624C41DF70A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7f:1b:75:23:96:77:0b:5a:6b:67:ec:7e:08:
b2:d0:db:2a:9b:9d:39:a4:c5:ba:0a:e0:6c:a9:a7:
e5:5b:c8:01:32:71:4d:0f:9d:b8:db:2c:48:8a:49:
15:b8:47:7a:c5:a1:09:de:fc:87:68:a3:f1:a5:4b:
3c:1b:40:67:87:4b:29:b0:fd:de:d5:9c:b6:a1:ff:
37:02:fa:d2:cf:43:89:2b:0d:31:52:fd:8b:39:2a:
f1:e0:fa:a0:80:63:81:8a:b0:6b:cd:d8:d5:9f:17:
5b:72:7e:f8:84:05:f2:5c:ba:3f:37:0c:20:08:c8:
fb:1c:9b:16:98:11:47:50:e0:ed:f9:fe:1b:25:ba:
92:f4:f9:c0:26:b8:f7:5b:73:36:ec:46:46:94:b0:
e3:b8:e0:da:b9:56:6e:55:19:e7:69:ad:72:2d:b4:
f9:d0:0b:57:32:3e:8b:ba:91:e6:2a:60:ce:f8:03:
80:3a:22:3b:57:bb:98:cc:00:45:9f:f8:85:67:77:
48:b7:fe:06:04:aa:dc:f6:c5:c1:0c:53:6f:c5:ae:
53:68:52:8a:e5:9e:9a:40:a2:db:23:0f:2b:01:0b:
0d:27:32:0a:a9:b6:f6:d5:07:d8:6d:ad:20:5b:c4:
cd:d3:87:38:60:f4:b4:67:57:bc:ce:33:e1:93:09:
b9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D4:AD:2B:29:68:A6:BB:50:D4:E6:8A:5A:26:62:4C:41:DF:70:A8
X509v3 Authority Key Identifier:
keyid:9A:EB:58:DC:D8:2B:E9:C8:49:6A:50:61:29:6B:76:9F:D6:CE:57:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/9AEB58DCD82BE9C8496A5061296B769FD6CE5723.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9AEB58DCD82BE9C8496A5061296B769FD6CE5723.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/9AEB58DCD82BE9C8496A5061296B769FD6CE5723.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:c3:c3:38:c0:24:94:f3:12:c7:e6:01:50:87:7e:6d:e4:27:
c1:b3:bd:99:35:b6:f1:62:ee:0e:b6:71:56:63:3d:ca:c0:17:
e7:ce:b7:eb:e7:a3:f9:57:5e:bd:cb:12:26:ef:70:dc:87:b5:
28:f0:e6:25:ee:74:db:e2:e4:48:26:af:4d:57:e4:cf:cf:71:
4c:04:30:3b:80:fc:9e:91:73:c7:2f:46:18:49:65:c3:90:59:
c9:b2:1b:ec:aa:4f:77:91:85:35:a8:7d:1f:40:62:f9:8a:e6:
b9:32:d2:46:87:39:9d:25:30:be:4f:50:6e:02:61:92:e3:7d:
fc:df:69:17:24:e8:7b:f7:e1:24:c8:9b:56:ef:82:5d:66:1a:
f0:f3:51:42:32:5f:14:50:27:38:f1:54:23:7b:ce:cc:0e:52:
d1:10:a6:d1:24:da:f7:90:1c:e6:45:2d:46:3f:9b:28:d0:de:
d0:d8:7c:35:02:d3:02:c2:60:f7:1b:82:a2:66:21:89:49:a4:
db:7f:25:66:13:1c:04:b1:ce:96:fa:06:a5:4e:b8:fe:55:08:
c8:84:37:7c:89:56:e4:45:18:4f:85:bd:22:93:dd:42:43:f0:
73:1a:29:f4:02:96:24:3f:5e:a1:42:c8:d1:f3:86:cf:28:5f:
25:1a:dc:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:17:42 2026 by rpki-client