
$ rpki-client -vvf repo-rpki.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.mft
File: E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.mft (raw, json)
Hash identifier: Euzy6WgoLl5Bc8UQGHICVvGPhna6fX5+gd8PYPWRyLg=
Subject key identifier: 55:7E:96:3E:0C:E2:A3:6D:64:A8:0A:7B:24:47:8B:4D:A8:10:37:83
Authority key identifier: E9:FC:7A:F3:FF:BA:00:98:63:D1:04:ED:E1:B4:5D:A0:59:25:35:E6
Certificate issuer: /CN=E9FC7AF3FFBA009863D104EDE1B45DA0592535E6
Certificate serial: 0C5ED01BE9B41CE005D6250D3F82416D181C15D3
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.mft
Manifest number: 028F
Signing time: Fri 17 Apr 2026 14:03:16 +0000
Manifest this update: Fri 17 Apr 2026 13:58:16 +0000
Manifest next update: Mon 20 Apr 2026 20:17:16 +0000
Files and hashes: 1: 3130332e3137352e3233362e302f32332d3234203d3e20313437313231.roa (hash: aCDG0lrlh4WtnIcxV8xhMFOvj5nqiDG0NeV95EvZchY=)
2: E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.crl (hash: lHxSMWkuHNdjIWKLoGzoLpwp9w0evAZ3qrPz1FcUcn4=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.crl
rsync://repo-rpki.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 20:17:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:5e:d0:1b:e9:b4:1c:e0:05:d6:25:0d:3f:82:41:6d:18:1c:15:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E9FC7AF3FFBA009863D104EDE1B45DA0592535E6
Validity
Not Before: Apr 17 13:58:16 2026 GMT
Not After : Apr 20 20:17:16 2026 GMT
Subject: CN=557E963E0CE2A36D64A80A7B24478B4DA8103783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b0:a0:b9:23:ad:15:f1:d7:df:4f:f0:3e:40:
a2:63:d2:6e:02:1d:b8:02:4e:d3:5f:3a:2a:3c:72:
43:7f:58:1f:32:90:65:6d:38:d4:d5:62:f2:05:a9:
04:a5:89:e5:4f:ec:e5:87:ee:cf:cc:eb:90:33:7c:
79:90:5b:9e:c2:4e:60:97:f2:e9:5f:e8:aa:81:ba:
1b:94:d1:29:71:53:87:34:98:f3:19:5a:07:11:2a:
6e:db:8e:84:d5:a8:54:4b:56:fd:86:99:6e:7e:2e:
56:6a:30:6f:b4:79:e1:53:ae:16:78:04:10:55:66:
e0:5f:b9:cc:37:d1:f1:a6:9e:93:22:81:60:b7:1d:
1a:38:57:d1:f4:2a:70:50:75:8a:77:7f:93:d1:e2:
6a:ff:d0:16:f2:0e:38:48:ca:af:6f:11:a3:ac:61:
c8:93:b4:12:f7:7c:34:36:d0:71:23:af:5f:5e:1b:
4d:23:af:de:6a:a0:40:1b:47:06:22:6c:ce:04:34:
3b:e8:96:c3:1e:3b:04:54:aa:6f:c0:fa:94:67:3c:
8b:fb:10:9e:57:87:39:21:60:29:7d:e8:ff:fe:bd:
0b:68:4a:fd:4c:db:f1:cb:0a:6a:32:22:7f:36:5d:
db:54:d2:40:14:a8:f0:03:fe:c2:a1:85:de:a2:ec:
1c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:7E:96:3E:0C:E2:A3:6D:64:A8:0A:7B:24:47:8B:4D:A8:10:37:83
X509v3 Authority Key Identifier:
keyid:E9:FC:7A:F3:FF:BA:00:98:63:D1:04:ED:E1:B4:5D:A0:59:25:35:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:c5:2c:d6:2b:24:03:4a:f0:06:81:01:3c:89:66:ad:aa:8f:
22:8f:72:39:a4:b4:91:ee:83:6e:4b:9d:80:43:7b:49:c1:c0:
4f:bf:e9:9b:74:04:25:43:fa:74:43:e7:46:f3:c3:30:08:b5:
50:76:54:40:3d:0a:17:e3:40:8b:fa:ff:5e:b2:8e:1c:89:48:
0c:b9:6e:da:72:4f:49:ac:ae:6e:f8:93:93:f6:9d:6a:fb:6b:
c5:7c:37:db:4c:13:3c:58:e4:3c:c3:68:d8:67:44:03:ab:1e:
c7:b1:78:d8:45:85:88:12:90:f3:3a:f9:ea:71:f7:cf:b6:15:
32:35:6e:63:32:bf:39:28:fb:21:5c:b4:d8:5d:51:db:45:7e:
06:e6:b0:2d:00:70:c0:08:0a:02:25:69:b9:ce:f8:0c:ac:55:
5d:0a:10:7f:8c:ab:48:07:38:72:34:4a:e5:9e:2e:53:39:10:
f6:2e:e0:8c:68:07:d5:33:c2:c9:26:58:6a:88:56:6f:52:de:
c7:94:b9:d0:e9:e8:b7:db:fc:fb:57:19:2a:a2:a9:c0:68:f5:
79:ef:6b:f7:76:cd:36:80:27:1c:4c:3a:8e:3f:1a:52:04:09:
a3:af:7e:56:80:8a:d2:25:5f:40:e6:54:f6:c6:83:8e:fa:a1:
55:52:0b:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 08:06:41 2026 by rpki-client