
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/9EDD58FB55B45037D75C83359B697B445D7A5AF0.mft
File: 9EDD58FB55B45037D75C83359B697B445D7A5AF0.mft (raw, json)
Hash identifier: zcHMlFCIqVZxf9az49lhdEC8kI2Nb3teQtriH+8sS44=
Subject key identifier: 7B:B2:BF:D5:9F:7B:EA:4B:42:97:F5:73:46:69:F6:46:A9:63:27:06
Authority key identifier: 9E:DD:58:FB:55:B4:50:37:D7:5C:83:35:9B:69:7B:44:5D:7A:5A:F0
Certificate issuer: /CN=9EDD58FB55B45037D75C83359B697B445D7A5AF0
Certificate serial: 716FAD19F846C5C72228CF3CF07F5D2859B98CEB
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EDD58FB55B45037D75C83359B697B445D7A5AF0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/9EDD58FB55B45037D75C83359B697B445D7A5AF0.mft
Manifest number: 6F
Signing time: Fri 24 Jul 2026 01:00:20 +0000
Manifest this update: Fri 24 Jul 2026 00:55:20 +0000
Manifest next update: Sat 25 Jul 2026 03:47:20 +0000
Files and hashes: 1: 3131302e39322e37322e302f32332d3234203d3e203137393935.roa (hash: EnY0Hs+doVUANIJECCY02CNqFLFOHODN+SHTHjgvg80=)
2: 3130332e3136342e31342e302f32332d3234203d3e20313532303537.roa (hash: mH28ada8E5i3aNud985QIm6IhE3W0Yqx49iijo6/+ho=)
3: 9EDD58FB55B45037D75C83359B697B445D7A5AF0.crl (hash: Z5Sdsh3SLfH68L8txyT/OsripYUuQTLqfg6MV/tl+/M=)
4: 34392e302e32342e302f32332d3234203d3e203137393935.roa (hash: JCF66MyDOPPpoP3h97z544G+/kStkUh5SxWxjVUNyZE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/9EDD58FB55B45037D75C83359B697B445D7A5AF0.crl
rsync://rpki-rsync.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/9EDD58FB55B45037D75C83359B697B445D7A5AF0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EDD58FB55B45037D75C83359B697B445D7A5AF0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 03:47:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:6f:ad:19:f8:46:c5:c7:22:28:cf:3c:f0:7f:5d:28:59:b9:8c:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9EDD58FB55B45037D75C83359B697B445D7A5AF0
Validity
Not Before: Jul 24 00:55:20 2026 GMT
Not After : Jul 25 03:47:20 2026 GMT
Subject: CN=7BB2BFD59F7BEA4B4297F5734669F646A9632706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2c:2f:e4:ae:e7:68:72:08:d8:6f:1d:21:65:
f1:dd:96:e4:5a:6e:1e:99:6f:f4:ea:a1:50:f5:4b:
18:95:9a:9d:4f:00:be:74:7c:dc:3b:8c:5c:44:b8:
c4:e8:46:70:09:f1:48:cf:2d:56:82:7a:ff:08:dd:
32:d2:c4:d1:1c:b8:b5:12:dd:78:ff:17:1f:a2:b1:
e4:8f:36:92:51:a0:9c:87:74:44:89:d1:f1:59:05:
9f:94:4b:90:d5:18:e4:46:3c:8c:90:4f:b5:32:f6:
ac:04:d0:d3:ab:fc:10:74:88:ef:7f:59:32:9e:ce:
95:44:16:2b:c0:5c:7f:da:f2:ed:0d:1d:a5:90:c5:
af:30:ff:40:2a:3b:9d:28:24:f7:a1:a3:5e:96:fe:
e9:c9:e1:d3:b6:03:a6:ae:84:89:0e:96:19:79:98:
36:68:a6:ad:65:12:82:90:60:ca:3e:c8:eb:5d:f3:
1a:e9:37:cd:33:98:9b:ab:05:53:04:ec:fd:dc:3e:
84:85:e3:d5:e8:f5:fc:70:3c:2f:78:e0:41:22:b7:
b5:51:e7:b1:df:fe:9f:bb:1b:ab:74:83:4e:7a:53:
12:59:3f:72:bc:e4:aa:4e:3a:87:07:50:d2:54:4d:
f2:0d:e8:fb:7d:e3:db:a3:b9:e1:12:82:ca:b0:5d:
bc:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:B2:BF:D5:9F:7B:EA:4B:42:97:F5:73:46:69:F6:46:A9:63:27:06
X509v3 Authority Key Identifier:
keyid:9E:DD:58:FB:55:B4:50:37:D7:5C:83:35:9B:69:7B:44:5D:7A:5A:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/9EDD58FB55B45037D75C83359B697B445D7A5AF0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EDD58FB55B45037D75C83359B697B445D7A5AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/9EDD58FB55B45037D75C83359B697B445D7A5AF0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:ad:86:fc:5d:65:52:bb:aa:b6:be:8c:b4:e3:9a:a9:18:9c:
2c:98:cb:21:ab:7b:57:4c:ff:4a:17:1d:f5:cc:5f:70:a7:35:
cf:e7:79:4b:2b:ab:f5:27:46:68:de:91:5e:5a:d3:e5:8c:7f:
14:fa:44:af:78:73:55:61:cc:78:73:a5:29:56:58:8b:5b:66:
47:23:03:60:86:8e:f7:cb:c5:95:f8:eb:d7:c8:49:cc:0d:08:
f6:33:68:5d:d9:a3:88:d6:4d:97:61:fe:0e:6e:1c:cb:75:ec:
26:dd:4a:36:ea:a4:b0:e5:0b:03:5e:2e:ba:01:c2:84:c9:65:
1c:bb:02:88:d2:9e:8a:be:24:07:15:f4:7f:41:bd:3f:53:6b:
e0:33:45:05:55:fb:db:05:0d:e4:b2:34:af:d9:2d:4a:9b:61:
51:7d:24:d0:3b:85:f6:1a:d6:a3:c4:48:74:9f:48:bb:c5:2f:
dc:e3:75:8d:0a:91:7a:20:3f:49:c0:ca:46:55:1b:12:bc:4c:
d7:e8:e1:18:43:24:60:12:e2:88:a3:03:bd:52:cb:04:26:2d:
63:6d:cf:70:54:ca:f1:3a:16:15:68:d5:73:23:46:55:9e:44:
ff:da:b6:6c:59:75:d3:4f:bb:10:8f:8c:f8:5e:41:b7:0e:f9:
08:06:cd:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:17:23 2026 by rpki-client