
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/E5AD37F58FE5B7B2D6C878CC6572DCD97F3260ED.mft
File: E5AD37F58FE5B7B2D6C878CC6572DCD97F3260ED.mft (raw, json)
Hash identifier: LlgNl52Yk3qfqER0CyJm7fKgzDbsR7VvbBN0+rn2e5s=
Subject key identifier: E2:4C:E3:E5:07:48:2C:8A:A8:E6:34:E6:C3:BF:F7:A3:EF:8C:F5:33
Authority key identifier: E5:AD:37:F5:8F:E5:B7:B2:D6:C8:78:CC:65:72:DC:D9:7F:32:60:ED
Certificate issuer: /CN=E5AD37F58FE5B7B2D6C878CC6572DCD97F3260ED
Certificate serial: 72AEB3C042EA750CD08BD6452DA068400A2695B0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E5AD37F58FE5B7B2D6C878CC6572DCD97F3260ED.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/E5AD37F58FE5B7B2D6C878CC6572DCD97F3260ED.mft
Manifest number: FE
Signing time: Mon 09 Nov 2026 07:55:35 +0000
Manifest this update: Mon 09 Nov 2026 07:50:35 +0000
Manifest next update: Tue 10 Nov 2026 10:02:35 +0000
Files and hashes: 1: 3139322e3134302e3232342e302f32332d3234203d3e203536323333.roa (hash: Q4P3JJdyz+sguA+ShSmoSl4Uj2/ltj/HEOGjPDV46Ws=)
2: 3130332e31342e3131302e302f32332d3234203d3e203536323333.roa (hash: qjYTuEDU2WsEHRQKFziNHqHoI5n5tkB89sliYPfe+2U=)
3: 3132302e38392e39342e302f32332d3234203d3e203536323333.roa (hash: Ywxuhkdga9hO4itaG+v5I5zsagA1Lbo8qR7ItHh5q8A=)
4: 34332e3235322e3134342e302f32332d3234203d3e203536323333.roa (hash: +7LdedJhuPY+xo3rq8YD2pVQmA3XwTXZAE9pIrm2QyM=)
5: E5AD37F58FE5B7B2D6C878CC6572DCD97F3260ED.crl (hash: 9KKXziwRQR8S1lWFjodjiaKjwGLKiredvFj6t3wfYg4=)
6: 3130332e3233332e38382e302f32332d3234203d3e203536323333.roa (hash: Gu7VKEObYusttjKWf2p2TmQYuB7pNrv24WI6rKxgrY0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/E5AD37F58FE5B7B2D6C878CC6572DCD97F3260ED.crl
rsync://rpki-rsync.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/E5AD37F58FE5B7B2D6C878CC6572DCD97F3260ED.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E5AD37F58FE5B7B2D6C878CC6572DCD97F3260ED.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Nov 2026 08:27:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:ae:b3:c0:42:ea:75:0c:d0:8b:d6:45:2d:a0:68:40:0a:26:95:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E5AD37F58FE5B7B2D6C878CC6572DCD97F3260ED
Validity
Not Before: Nov 9 07:50:35 2026 GMT
Not After : Nov 10 10:02:35 2026 GMT
Subject: CN=E24CE3E507482C8AA8E634E6C3BFF7A3EF8CF533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cf:82:dc:11:60:36:15:42:4b:96:d0:06:17:
3e:50:5c:7a:23:cb:fe:f7:3f:0f:7a:40:a2:69:d8:
0f:d4:1a:f8:64:85:8a:01:cd:f3:8f:2e:00:1a:ce:
c8:11:1f:8d:bd:62:11:e1:e2:35:57:9d:42:8b:37:
42:50:30:53:db:be:fb:76:b0:bf:a3:bc:30:7c:d7:
b4:93:a1:92:8b:9b:22:14:c7:bf:97:57:14:34:0d:
f1:82:99:b6:8e:55:2f:2c:cc:e2:24:5f:f2:9e:23:
c5:5f:56:3f:06:28:c0:a7:ba:9d:1b:eb:28:04:d6:
1b:b3:e8:6b:ea:5f:6e:bb:4b:05:87:d1:e9:41:66:
94:ff:2b:36:97:29:42:02:f3:4f:c5:01:2b:c0:5a:
c2:97:3b:79:07:f6:8a:cf:d4:79:26:06:40:b5:20:
1a:13:5e:d1:b1:b4:4f:27:ca:34:0e:a6:47:9b:1f:
46:14:74:7d:54:13:3b:86:8d:64:ee:12:dc:42:64:
f2:7a:c7:eb:0e:bc:a6:3a:73:b2:17:5c:1f:21:dd:
7b:39:52:01:86:11:23:a8:4b:e0:8f:27:b1:6d:0f:
4d:fe:75:1c:0a:a1:2a:d5:e1:ee:62:b4:b5:17:07:
4d:72:6d:c2:be:9c:18:a5:09:14:88:5b:23:02:a6:
0d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:4C:E3:E5:07:48:2C:8A:A8:E6:34:E6:C3:BF:F7:A3:EF:8C:F5:33
X509v3 Authority Key Identifier:
keyid:E5:AD:37:F5:8F:E5:B7:B2:D6:C8:78:CC:65:72:DC:D9:7F:32:60:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/E5AD37F58FE5B7B2D6C878CC6572DCD97F3260ED.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E5AD37F58FE5B7B2D6C878CC6572DCD97F3260ED.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/E5AD37F58FE5B7B2D6C878CC6572DCD97F3260ED.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:44:33:db:80:9c:ce:3b:16:bb:c4:a5:7a:d9:00:dd:78:62:
03:eb:bc:b0:43:c6:3c:12:e7:6e:9d:ce:9f:cc:ea:76:88:e1:
7d:5b:12:3d:d4:47:8f:b2:5c:73:c9:5e:ed:65:a4:7e:72:9d:
28:13:d9:49:71:ca:41:a6:a7:9d:d6:f6:2d:94:c8:30:28:81:
54:7f:4d:ec:a5:9f:f4:56:89:1e:05:a6:9f:3e:6b:94:2a:74:
dc:6f:01:31:30:4e:c4:f2:79:3d:5d:ad:b6:56:2d:09:05:b8:
b7:24:ea:68:00:0b:b1:74:99:f6:ff:dc:dc:f7:d6:6b:61:44:
69:b1:a7:a6:79:d9:7a:f3:d5:61:55:01:1d:c2:78:7a:22:76:
4c:9c:6f:ef:bd:e6:30:c2:d8:b8:74:7e:f1:3e:80:4e:a6:13:
bf:64:32:d1:60:dc:b3:25:d0:c2:04:b2:3b:56:ad:1a:8a:7a:
ca:8e:29:58:80:7a:48:eb:2c:bd:10:b2:ac:72:9f:14:09:b0:
aa:e3:ea:80:6d:1c:ad:8e:77:a9:0f:0c:cd:52:ed:f5:5c:44:
18:68:0d:d2:db:7f:07:97:a5:82:ac:d1:cb:7d:96:ce:e6:16:
92:e6:74:d3:92:b3:e6:66:b5:5c:b2:e0:5b:dd:3f:2b:f4:6e:
d4:80:89:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 9 22:46:43 2026 by rpki-client