
$ rpki-client -vvf rpki-rsync.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/E83F205BF306DAF53F99D7D0596E19991D122A75.mft
File: E83F205BF306DAF53F99D7D0596E19991D122A75.mft (raw, json)
Hash identifier: 0Zk+rXTOGv5UoWMTCRyhM9YwhjpwhtBpJCiRsS0rn70=
Subject key identifier: C3:7D:09:63:4F:D8:52:34:40:D2:21:C2:9E:FF:A4:09:FB:66:F9:64
Authority key identifier: E8:3F:20:5B:F3:06:DA:F5:3F:99:D7:D0:59:6E:19:99:1D:12:2A:75
Certificate issuer: /CN=E83F205BF306DAF53F99D7D0596E19991D122A75
Certificate serial: 3757BE6A7F51BD6E5B3498956628772CD3D38192
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E83F205BF306DAF53F99D7D0596E19991D122A75.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/E83F205BF306DAF53F99D7D0596E19991D122A75.mft
Manifest number: 39
Signing time: Sat 13 Jun 2026 11:48:52 +0000
Manifest this update: Sat 13 Jun 2026 11:43:52 +0000
Manifest next update: Sun 14 Jun 2026 13:17:52 +0000
Files and hashes: 1: 3130332e3137342e3131332e302f32342d3234203d3e20313339393532.roa (hash: qr0g5LVzrVb3dBi48fKGU2IZ+49TkkVc1Y82FpKn5Mk=)
2: 3130332e3137342e3131322e302f32342d3234203d3e20313339393532.roa (hash: hxtIKOBEaXvvEhPlm4EoLMj05xZmKO9tH3GRDWA9ERg=)
3: 3130332e3137342e3131322e302f32332d3233203d3e20313339393532.roa (hash: 4/4i0yLfh0SYWVvIB+ls28jcDhOwmL2zwW2k6ffDKik=)
4: E83F205BF306DAF53F99D7D0596E19991D122A75.crl (hash: hqsOYNcCCZYFfjG4raCiZgs79C2V+Rb0nzstyvmUVhA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/E83F205BF306DAF53F99D7D0596E19991D122A75.crl
rsync://rpki-rsync.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/E83F205BF306DAF53F99D7D0596E19991D122A75.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E83F205BF306DAF53F99D7D0596E19991D122A75.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:57:be:6a:7f:51:bd:6e:5b:34:98:95:66:28:77:2c:d3:d3:81:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E83F205BF306DAF53F99D7D0596E19991D122A75
Validity
Not Before: Jun 13 11:43:52 2026 GMT
Not After : Jun 14 13:17:52 2026 GMT
Subject: CN=C37D09634FD8523440D221C29EFFA409FB66F964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:37:2b:60:58:16:99:c5:e2:20:c7:7c:eb:00:
85:10:c0:03:d5:b5:0e:ff:c2:a1:f8:e4:9f:ad:33:
9a:20:87:98:5f:4b:ff:2e:e1:0e:00:6e:d8:39:59:
67:06:0a:f3:4b:e6:d5:82:8b:41:94:55:99:00:53:
31:09:40:6b:92:db:ad:bc:75:84:53:10:aa:b5:82:
22:54:c0:3e:ac:b1:bd:20:5c:4e:10:40:6a:5a:d0:
35:b6:f8:92:96:0a:f5:17:e2:31:21:69:d1:a2:79:
c9:81:2a:fe:53:5d:e6:be:ba:44:4f:41:b5:4f:d7:
e1:0c:91:18:f2:12:97:60:be:e8:ad:6e:58:31:41:
44:84:59:b0:85:31:ba:13:ec:a8:08:4f:5b:87:eb:
53:e6:94:a2:4f:4c:26:8d:39:a9:91:79:c6:5a:1b:
e6:3a:bd:9f:df:55:27:d9:11:16:aa:b7:8b:0d:61:
a7:23:56:9d:60:6e:94:3d:8d:9b:7e:58:73:b5:1c:
a6:23:bc:1c:25:08:a9:43:61:99:5c:82:c4:70:0e:
9f:1c:c5:2d:82:33:67:75:25:f2:9b:dd:d7:23:a9:
68:ef:49:50:a3:73:72:c5:f6:57:97:ab:f7:4b:60:
8f:cb:f1:ec:a0:67:51:a0:47:b5:79:c8:d3:16:b5:
89:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:7D:09:63:4F:D8:52:34:40:D2:21:C2:9E:FF:A4:09:FB:66:F9:64
X509v3 Authority Key Identifier:
keyid:E8:3F:20:5B:F3:06:DA:F5:3F:99:D7:D0:59:6E:19:99:1D:12:2A:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/E83F205BF306DAF53F99D7D0596E19991D122A75.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E83F205BF306DAF53F99D7D0596E19991D122A75.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/E83F205BF306DAF53F99D7D0596E19991D122A75.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:95:e4:da:64:02:51:c5:a6:90:c5:dd:eb:65:a2:99:a5:eb:
83:71:46:e0:89:de:e9:69:16:5c:6d:15:4f:79:4d:a1:4c:fd:
10:63:8c:d9:76:6d:5f:da:8b:50:21:1b:fb:61:0a:30:2f:21:
0e:30:bb:32:43:28:9a:7e:e9:f4:cb:4e:a8:da:f7:2c:4f:35:
53:45:46:56:1f:0f:36:b3:b9:4b:15:77:9e:e1:35:b6:0c:89:
11:63:c2:b4:91:66:d1:98:fb:e1:e6:3a:04:2b:20:86:87:7a:
0f:c4:44:e7:0d:63:13:0c:4a:62:a4:d1:77:3d:55:44:22:c7:
78:0d:dd:8f:8d:47:68:dd:fb:7d:5f:fc:da:5f:76:60:d9:f4:
05:f7:35:8b:8a:a0:42:9e:9a:3e:1d:54:67:a9:7e:cf:2d:85:
39:cc:e5:b8:25:ce:52:57:f3:86:6e:8b:11:3e:d4:57:5f:e0:
5f:c1:ee:46:3f:21:f6:47:e4:e8:94:86:78:a5:22:aa:b9:7f:
9f:e4:30:d6:7e:b8:6b:50:cd:a8:3f:a1:45:21:a6:a3:0f:88:
ac:cc:74:1c:23:2f:2a:29:cd:29:9e:74:4f:21:f7:a4:b5:a5:
06:81:cf:1f:f7:87:8e:43:12:66:7a:a3:f8:95:37:f0:86:d9:
c1:f1:ea:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:22:16 2026 by rpki-client