
$ rpki-client -vvf rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.mft
File: 9CF05E7024D4A487E0B79E2F57525BF345DB53EC.mft (raw, json)
Hash identifier: 62wd5C7D2r9iEtiJesY65YeCqkDGrb3EvjeeljJFPeY=
Subject key identifier: 4C:93:A5:82:8B:84:A9:90:16:13:CD:11:98:81:41:BD:4E:59:C0:05
Authority key identifier: 9C:F0:5E:70:24:D4:A4:87:E0:B7:9E:2F:57:52:5B:F3:45:DB:53:EC
Certificate issuer: /CN=A9121C330000/serialNumber=9CF05E7024D4A487E0B79E2F57525BF345DB53EC
Certificate serial: 43399AEAF022E0C1D96AE8451D3B8CEBEBA268FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer
Subject info access: rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.mft
Manifest number: 0499
Signing time: Sat 28 Mar 2026 02:31:19 +0000
Manifest this update: Sat 28 Mar 2026 02:26:19 +0000
Manifest next update: Sun 29 Mar 2026 02:40:19 +0000
Files and hashes: 1: 3130332e3137302e3233322e302f32332d3234203d3e20313432363136.roa (hash: VzgTFP3K3ygUqjqoPkC7s7tjeyqTHVnjgq3zWGYCRKg=)
2: 323430373a623963303a3a2f33322d3438203d3e20313432363136.roa (hash: XBT+G1DQ9/F6v2XQZcRxw+M4rvuykMlUtUtQD6DlGXU=)
3: 323430373a623963303a663030303a3a2f33362d3438203d3e203233393631.roa (hash: Ndg1bmsRuBSL7CF5QQzZOGIFLYIHMSUM05PGM6gpt7I=)
4: 323430373a623963303a3a2f33322d3438203d3e203233393631.roa (hash: Chrj9m4BrE2U2pfcWlFNBSg+oO8sOSxTQ6ekpt4BV7I=)
5: 323430373a623963303a623030303a3a2f33362d3438203d3e203233393631.roa (hash: wZpa/GAw/+LZ/5VD3LkDlyxUo6eY0mnlaZ6P5jMgauk=)
6: 323430373a623963303a3a2f33322d3438203d3e203537363935.roa (hash: tEG9JFKiDdsjMGlGAtGF9ff7/fO0QNV3vFqHY+f6qAc=)
7: 3130332e3137302e3233322e302f32332d3234203d3e20393137.roa (hash: f/uHdRx9VZqoZk3nqfnUiYoyLo18xCMnrIDjbbMrTto=)
8: 323430373a623963303a3a2f33322d3438203d3e20393137.roa (hash: EWyx31GnzeEa34YdlCfOKBBLtKjLerW7tETk3ztfEgw=)
9: 323430373a623963303a666230303a3a2f34342d3438203d3e20393639.roa (hash: jS7uDPReOddZwVCAwtZ435utMhttXzVf5ZdMVbhKurY=)
10: 3130332e3137302e3233322e302f32332d3234203d3e203537363935.roa (hash: SPGV8cz23OXVtY1/WBtsxbxXhYFhmyQwGc0AQ879Tzo=)
11: 9CF05E7024D4A487E0B79E2F57525BF345DB53EC.crl (hash: mn6jy5R/AL6mF1j96eglBcu5tMqDch83Bik0O/+aobk=)
Validation: OK
Signature path: rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.crl
rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 29 Mar 2026 02:40:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:39:9a:ea:f0:22:e0:c1:d9:6a:e8:45:1d:3b:8c:eb:eb:a2:68:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9121C330000, serialNumber=9CF05E7024D4A487E0B79E2F57525BF345DB53EC
Validity
Not Before: Mar 28 02:26:19 2026 GMT
Not After : Mar 29 02:40:19 2026 GMT
Subject: CN=4C93A5828B84A9901613CD11988141BD4E59C005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:50:64:76:c7:0a:a5:77:7a:19:14:8c:4a:27:
70:f0:42:97:d2:70:42:53:50:9d:4f:41:dd:ad:ee:
96:fb:44:59:c3:18:15:4e:37:55:87:a5:9e:a4:60:
39:1c:ba:ce:1f:04:a4:7f:e0:f3:55:b5:52:01:89:
7f:9f:b6:94:c1:51:e2:58:56:00:81:0d:fc:69:6b:
7e:b7:a2:fa:ee:c4:17:83:2d:33:de:7a:45:e9:8b:
35:ab:db:d5:65:71:69:34:bf:e5:af:c0:c8:27:59:
dc:8f:b3:d0:4b:31:a5:af:2f:a1:e9:55:0d:27:79:
e9:32:84:40:9c:c4:9d:e5:3f:39:62:b2:94:01:60:
98:e9:e9:52:df:df:5a:11:c1:4c:ab:03:5f:34:d7:
28:f4:23:ac:60:de:2b:84:dc:f9:7b:cc:c0:68:b2:
80:f5:9d:cc:42:c4:22:77:2d:05:47:ef:78:e4:e2:
96:b0:6f:03:1e:91:bf:ae:24:c2:5e:c9:1c:20:27:
89:c4:fc:81:77:21:7f:d2:f7:f8:88:11:68:6b:fa:
68:c5:39:21:8c:55:04:16:fd:80:e8:65:4b:7a:41:
95:e3:f3:39:cb:13:3b:bf:63:cb:b0:7d:ff:cb:f4:
92:48:5c:df:fd:ec:2b:77:18:0b:43:85:f5:99:89:
18:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:93:A5:82:8B:84:A9:90:16:13:CD:11:98:81:41:BD:4E:59:C0:05
X509v3 Authority Key Identifier:
keyid:9C:F0:5E:70:24:D4:A4:87:E0:B7:9E:2F:57:52:5B:F3:45:DB:53:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:42:8e:a5:d1:40:f6:e9:e8:f4:f4:71:76:80:6d:58:35:8e:
7d:aa:4c:03:37:26:7b:df:cf:17:fc:d9:ea:11:73:59:2a:4b:
a4:f9:cc:f3:64:df:76:ab:38:87:f2:6d:6b:91:1a:00:f1:62:
c2:9c:67:04:a9:af:4e:59:9d:9a:4b:db:6d:0c:31:04:df:59:
13:5f:b2:ef:26:f9:f7:ac:64:ec:ad:1e:c7:4d:e2:6d:10:62:
97:65:a4:ba:7f:0e:bb:c0:d6:d0:28:5c:e7:f2:7f:3b:73:43:
b2:0e:37:29:67:03:ab:a3:af:79:5f:dd:da:3e:14:c4:f7:37:
eb:b3:a8:be:36:91:9f:ae:31:55:02:75:6c:84:1d:06:b6:37:
40:c5:67:78:ed:71:4e:7c:f5:3e:1e:f2:e5:fd:8f:db:6b:9e:
5f:18:54:8f:f4:5e:c5:a7:7f:9b:af:96:2a:fe:c2:08:1b:6f:
d3:64:99:a3:c2:0a:d3:f7:b3:77:7e:a0:32:7f:9c:a0:16:db:
90:70:37:e6:85:52:68:39:04:e3:1f:5d:b4:3d:c8:5c:14:64:
09:78:75:ec:bf:04:d5:ed:87:38:6c:e4:d1:a3:47:01:7b:34:
7c:e4:55:a2:9c:79:b6:81:9f:9f:c1:a0:d9:b5:18:49:63:2f:
1b:55:58:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:16:50 2026 by rpki-client