
$ rpki-client -vvf rpki-rsync.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.mft
File: E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.mft (raw, json)
Hash identifier: ev8Kr/j/xST8zcnDlri0lHV4p90mDkxwbwZVSM8Z5PA=
Subject key identifier: 53:DB:45:EC:63:AA:F7:96:6E:AC:AD:4B:17:4B:39:F0:A6:08:C5:92
Authority key identifier: E5:F6:F9:E5:DD:9D:34:BD:A0:8C:45:31:BA:70:87:61:A3:5A:DE:60
Certificate issuer: /CN=E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60
Certificate serial: 76772E0C71BE9B3AE673EE3DFA29EF7355BF4028
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.mft
Manifest number: 39
Signing time: Sat 13 Jun 2026 16:55:02 +0000
Manifest this update: Sat 13 Jun 2026 16:50:02 +0000
Manifest next update: Sun 14 Jun 2026 16:58:02 +0000
Files and hashes: 1: 3130332e3137382e3137302e302f32342d3234203d3e20313339393532.roa (hash: Q+Zpu9s7FFAblJfI/9bq1CU9BNldDzB+MO83xGJv/O8=)
2: 3130332e3137382e3137312e302f32342d3234203d3e20313339393532.roa (hash: aDinqjPhgNq50kNy+lg2Iba0bDegBSFkr3DIakb0nTU=)
3: E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.crl (hash: rFTPr09Vwql3GqONaVIiaT1gR1MWpyLyh7hF6fAd34E=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.crl
rsync://rpki-rsync.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:77:2e:0c:71:be:9b:3a:e6:73:ee:3d:fa:29:ef:73:55:bf:40:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60
Validity
Not Before: Jun 13 16:50:02 2026 GMT
Not After : Jun 14 16:58:02 2026 GMT
Subject: CN=53DB45EC63AAF7966EACAD4B174B39F0A608C592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ae:f8:d4:16:df:74:85:89:97:9d:08:f2:cb:
0f:be:7d:b2:d2:15:c4:52:48:ac:7a:e1:67:8d:25:
f1:15:e1:a2:5f:1d:dc:a2:1f:6e:03:64:bb:d4:33:
d8:65:fb:8b:aa:9f:d4:c7:85:6a:9f:f3:dd:4d:84:
67:53:a8:92:d5:c1:84:a0:ce:5a:a8:2c:38:29:a5:
da:a5:5a:e9:64:2a:63:90:f5:b5:70:c2:d7:be:65:
fe:04:d3:fc:9f:74:4e:ca:cc:0a:56:2b:22:a5:d8:
c1:15:8a:00:c0:e2:f4:b4:a6:ae:18:8d:98:ab:a5:
10:bc:fd:7a:66:e9:46:19:b8:5f:e7:5f:af:9f:5b:
39:94:ff:fc:bd:ab:e6:98:3a:8c:e3:dd:e5:8a:9f:
fb:0d:31:d8:90:ef:bf:0a:2c:47:99:44:49:90:66:
8f:4f:f7:92:4e:86:0e:3a:3c:54:72:a7:7b:c2:69:
ee:38:58:d1:46:73:92:7c:62:21:21:dd:ab:3f:75:
fd:b5:1a:73:bc:84:30:64:3b:46:55:87:93:39:64:
c1:a7:c4:59:6c:98:c4:05:1b:f0:46:c3:a9:4f:5e:
9d:0a:5a:e0:e4:f6:46:cb:72:bb:77:dc:6c:ed:a7:
52:c9:8c:7f:84:60:e4:62:3f:2c:da:96:d9:ea:87:
44:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:DB:45:EC:63:AA:F7:96:6E:AC:AD:4B:17:4B:39:F0:A6:08:C5:92
X509v3 Authority Key Identifier:
keyid:E5:F6:F9:E5:DD:9D:34:BD:A0:8C:45:31:BA:70:87:61:A3:5A:DE:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:bd:0e:1e:2f:24:43:51:f4:c4:cc:90:af:34:54:d0:75:62:
35:07:df:05:b0:bb:61:c5:42:bc:3a:1f:67:47:43:2e:e4:76:
5c:9a:54:1d:8c:9b:87:ae:00:9a:5a:73:b3:6a:4f:65:10:64:
cb:61:c7:40:a4:7b:04:c3:59:fd:b3:e4:0e:c8:be:95:6c:24:
ba:6d:86:be:bb:f1:55:85:09:03:67:29:96:f9:2b:da:dd:16:
0a:69:fc:27:6a:a7:30:ac:49:41:c7:2f:47:57:95:73:85:12:
a7:40:a9:7d:26:c6:c9:02:98:69:2c:ef:8d:fe:28:e0:fb:c2:
66:2e:8a:68:20:c2:91:a4:85:ac:3f:77:2c:16:65:1d:0d:8b:
e6:76:2b:02:86:4f:9b:64:d0:f5:47:1a:c6:97:76:39:19:02:
33:d7:64:a8:b8:4e:6b:bf:33:0b:5f:b1:85:87:e6:28:87:b4:
d3:41:08:9d:c2:a0:bd:c8:6c:9e:8c:6a:ff:6f:ee:97:d8:b9:
af:91:b4:74:a7:90:cb:e1:8e:95:0a:d5:8b:8b:78:d0:b5:c5:
ec:b0:69:f5:55:e4:34:a5:4a:b3:6f:15:ca:dc:00:e8:3f:76:
a3:dd:da:c8:08:2b:eb:3a:fa:e7:ce:40:55:21:61:82:e5:99:
e2:7a:e0:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:31:04 2026 by rpki-client