
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/E5AD37F58FE5B7B2D6C878CC6572DCD97F3260ED.mft
File: E5AD37F58FE5B7B2D6C878CC6572DCD97F3260ED.mft (raw, json)
Hash identifier: SUQH0WaOrTNrTg9Ci4QQxXRPB4alCRom2xE8zCPhFLM=
Subject key identifier: CB:DC:76:9A:EC:CD:DA:BD:24:E6:0B:BF:71:E4:B3:9A:B6:E6:41:9D
Authority key identifier: E5:AD:37:F5:8F:E5:B7:B2:D6:C8:78:CC:65:72:DC:D9:7F:32:60:ED
Certificate issuer: /CN=E5AD37F58FE5B7B2D6C878CC6572DCD97F3260ED
Certificate serial: 14BCB980EB0C670CBCC6E9AA5DBEC093AEF9721F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E5AD37F58FE5B7B2D6C878CC6572DCD97F3260ED.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/E5AD37F58FE5B7B2D6C878CC6572DCD97F3260ED.mft
Manifest number: BC
Signing time: Sun 20 Sep 2026 15:56:46 +0000
Manifest this update: Sun 20 Sep 2026 15:51:46 +0000
Manifest next update: Mon 21 Sep 2026 18:40:46 +0000
Files and hashes: 1: 3132302e38392e39342e302f32332d3234203d3e203536323333.roa (hash: Ywxuhkdga9hO4itaG+v5I5zsagA1Lbo8qR7ItHh5q8A=)
2: 3130332e31342e3131302e302f32332d3234203d3e203536323333.roa (hash: qjYTuEDU2WsEHRQKFziNHqHoI5n5tkB89sliYPfe+2U=)
3: 3130332e3233332e38382e302f32332d3234203d3e203536323333.roa (hash: Gu7VKEObYusttjKWf2p2TmQYuB7pNrv24WI6rKxgrY0=)
4: 34332e3235322e3134342e302f32332d3234203d3e203536323333.roa (hash: +7LdedJhuPY+xo3rq8YD2pVQmA3XwTXZAE9pIrm2QyM=)
5: 3139322e3134302e3232342e302f32332d3234203d3e203536323333.roa (hash: Q4P3JJdyz+sguA+ShSmoSl4Uj2/ltj/HEOGjPDV46Ws=)
6: E5AD37F58FE5B7B2D6C878CC6572DCD97F3260ED.crl (hash: Q9m1NDbO0PFuqxQSGf28K1yS9tTWkehsIbBtSmJ3yJs=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/E5AD37F58FE5B7B2D6C878CC6572DCD97F3260ED.crl
rsync://rpki-rsync.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/E5AD37F58FE5B7B2D6C878CC6572DCD97F3260ED.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E5AD37F58FE5B7B2D6C878CC6572DCD97F3260ED.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 21 Sep 2026 18:40:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:bc:b9:80:eb:0c:67:0c:bc:c6:e9:aa:5d:be:c0:93:ae:f9:72:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E5AD37F58FE5B7B2D6C878CC6572DCD97F3260ED
Validity
Not Before: Sep 20 15:51:46 2026 GMT
Not After : Sep 21 18:40:46 2026 GMT
Subject: CN=CBDC769AECCDDABD24E60BBF71E4B39AB6E6419D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:35:39:9e:ca:21:4c:55:f6:a5:a3:de:7d:6e:
a2:e8:63:bb:54:58:2f:d5:b0:8b:11:71:22:81:7f:
51:34:e3:e6:09:01:33:81:2b:2c:92:71:55:c8:0a:
2f:de:d0:81:f7:a0:5e:43:65:4d:e5:ac:6f:93:ef:
76:98:ae:bc:0f:43:ea:75:06:0d:bf:a4:8f:8d:e7:
dd:14:78:eb:b1:01:4e:e0:4b:fe:ad:86:aa:65:cf:
27:22:82:cd:56:03:17:1f:16:13:7e:3c:47:12:0f:
f1:3a:a6:36:ed:c8:a0:c8:d3:63:4d:56:c1:57:52:
46:bd:7f:0c:a3:74:9b:9e:7e:5a:ee:04:3e:6e:e8:
f0:34:3b:03:80:d0:ae:5e:7d:f1:77:80:c4:cc:bd:
46:dd:f2:86:0a:0c:05:82:b0:62:b0:15:09:f9:ee:
3a:8e:93:c7:8a:a0:0a:d7:63:94:0e:9b:3a:93:fc:
a0:c4:98:5c:8d:9f:9e:eb:96:6d:27:60:62:a5:3c:
1c:3b:1f:1d:25:35:4e:82:72:fd:a2:fa:b0:47:6a:
b2:b8:46:bf:21:99:89:bf:3a:76:77:84:2a:93:e7:
cd:e5:97:3a:ec:7f:26:86:fc:43:c7:e2:f2:c0:cf:
3b:7a:a4:ec:17:a4:5a:fb:eb:ac:fc:5d:2d:70:bf:
70:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:DC:76:9A:EC:CD:DA:BD:24:E6:0B:BF:71:E4:B3:9A:B6:E6:41:9D
X509v3 Authority Key Identifier:
keyid:E5:AD:37:F5:8F:E5:B7:B2:D6:C8:78:CC:65:72:DC:D9:7F:32:60:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/E5AD37F58FE5B7B2D6C878CC6572DCD97F3260ED.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E5AD37F58FE5B7B2D6C878CC6572DCD97F3260ED.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/E5AD37F58FE5B7B2D6C878CC6572DCD97F3260ED.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:a7:e8:89:d2:10:70:3e:e5:d7:86:83:64:c9:0d:b2:6a:99:
d6:f8:91:c2:03:d1:74:12:ee:04:96:c5:05:d7:84:d2:fd:82:
94:d7:b6:1a:9e:f3:a1:33:22:91:68:cf:8a:05:76:ac:48:e6:
89:65:cb:f8:18:f7:a2:45:59:60:be:5b:53:5c:f8:86:43:86:
05:4f:bf:30:30:06:fb:67:67:d2:7d:28:91:10:30:5b:70:46:
f7:3e:ad:f9:f0:03:67:9d:78:42:4d:14:2c:f3:48:b2:1e:d3:
e2:fc:ed:39:31:ec:c5:88:66:e9:58:46:ec:d0:1c:60:69:46:
66:b3:5f:c2:56:0a:11:d8:2f:96:f3:96:68:81:b5:d3:33:14:
8a:33:43:2a:5a:00:81:c3:ea:de:21:84:0f:38:c2:8e:39:6b:
30:65:e4:81:81:d4:90:6f:87:4b:da:86:d7:d4:82:bb:6c:0b:
4a:f0:b7:ae:40:25:85:04:5b:68:af:d2:7c:e7:9e:62:0a:28:
16:05:d4:7a:56:ca:12:78:de:55:d4:bd:51:e5:8d:b5:75:61:
9a:ba:a5:2a:85:08:11:ab:c5:40:4f:7d:2e:3a:9c:38:04:4d:
51:6c:eb:c4:ac:dc:b0:45:2e:a8:7f:fd:60:80:54:2f:24:db:
42:3d:7b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:28:15 2026 by rpki-client