
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/E4916A38F928B049A7533CB4FE25B8FA9D96DF74.mft
File: E4916A38F928B049A7533CB4FE25B8FA9D96DF74.mft (raw, json)
Hash identifier: sMD1qt2NA5zuCFjlEvOugGE7dyjQOqKlWmfRKWposkA=
Subject key identifier: 57:19:B0:F2:06:56:25:93:FD:5C:6D:F9:D5:A2:28:70:00:71:F7:C4
Authority key identifier: E4:91:6A:38:F9:28:B0:49:A7:53:3C:B4:FE:25:B8:FA:9D:96:DF:74
Certificate issuer: /CN=E4916A38F928B049A7533CB4FE25B8FA9D96DF74
Certificate serial: 035E5901F39F38EE8F4278D46CB189DAEE5154D9
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4916A38F928B049A7533CB4FE25B8FA9D96DF74.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/E4916A38F928B049A7533CB4FE25B8FA9D96DF74.mft
Manifest number: BE
Signing time: Mon 21 Sep 2026 21:12:54 +0000
Manifest this update: Mon 21 Sep 2026 21:07:54 +0000
Manifest next update: Tue 22 Sep 2026 23:59:54 +0000
Files and hashes: 1: 3130332e31332e3136342e302f32332d3234203d3e2034383030.roa (hash: LV3eS8DWx/O74oQ0CzVazcwm3a7uu6GLraOIjVHVQ5o=)
2: E4916A38F928B049A7533CB4FE25B8FA9D96DF74.crl (hash: ibimgPuKtpTyVGJVoH+bJH33YaZwcsQnVGdXWiaZ2AI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/E4916A38F928B049A7533CB4FE25B8FA9D96DF74.crl
rsync://rpki-rsync.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/E4916A38F928B049A7533CB4FE25B8FA9D96DF74.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4916A38F928B049A7533CB4FE25B8FA9D96DF74.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 23:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:5e:59:01:f3:9f:38:ee:8f:42:78:d4:6c:b1:89:da:ee:51:54:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4916A38F928B049A7533CB4FE25B8FA9D96DF74
Validity
Not Before: Sep 21 21:07:54 2026 GMT
Not After : Sep 22 23:59:54 2026 GMT
Subject: CN=5719B0F206562593FD5C6DF9D5A228700071F7C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:76:24:2d:bb:48:0e:10:65:41:b2:f4:f9:09:
65:91:8d:c0:fe:a5:c9:60:92:4a:f4:94:27:3a:6f:
44:bc:a5:b8:05:5c:93:ec:f9:cd:b0:20:b7:dc:8c:
d3:6f:31:04:7e:ba:a1:b8:49:c9:d7:4b:16:cc:be:
55:a7:5d:d3:74:8d:3d:d1:3f:3e:74:9a:65:7f:3c:
5b:dc:bc:4c:b0:6d:45:a1:05:fb:62:f2:31:e4:79:
47:ce:28:34:c8:44:e3:80:9a:8e:ad:51:e3:d4:96:
35:2a:18:63:37:53:6e:3b:b5:4a:26:12:59:12:76:
9a:b2:3e:46:1e:e6:7e:93:0d:ea:eb:c6:31:58:bf:
55:80:55:14:66:89:06:e8:d9:28:5e:82:4b:00:73:
5c:33:5f:0f:b2:15:38:56:4f:10:b7:5c:9b:37:f0:
81:a3:36:1c:99:dd:86:64:68:f5:a7:66:dd:59:16:
8d:d3:bf:4e:2f:4f:90:99:60:86:0c:e4:1a:80:5e:
b2:e5:16:88:46:69:68:b3:e3:d9:51:4d:22:46:25:
ba:e6:30:44:ac:01:d5:7e:38:b4:5a:0a:59:d5:97:
a0:9e:c2:c5:4b:c7:2e:25:f9:6b:1e:8e:de:3d:87:
d5:66:a7:76:29:3c:e7:0b:8d:a8:3f:0f:06:f7:b0:
89:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:19:B0:F2:06:56:25:93:FD:5C:6D:F9:D5:A2:28:70:00:71:F7:C4
X509v3 Authority Key Identifier:
keyid:E4:91:6A:38:F9:28:B0:49:A7:53:3C:B4:FE:25:B8:FA:9D:96:DF:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/E4916A38F928B049A7533CB4FE25B8FA9D96DF74.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4916A38F928B049A7533CB4FE25B8FA9D96DF74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/E4916A38F928B049A7533CB4FE25B8FA9D96DF74.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:c8:9f:8f:9d:b2:7a:bf:77:64:7c:73:bc:0d:33:7e:6f:6f:
de:81:e7:f6:3a:89:eb:a6:88:b8:67:20:42:89:13:16:4e:18:
06:cb:2f:3f:87:96:1a:db:da:fd:16:e0:b4:90:8a:c8:62:66:
25:de:ea:7e:bc:13:bb:f7:f6:33:93:47:35:63:ff:de:72:d2:
30:97:2d:4c:77:cb:75:ef:bd:fe:91:5a:99:78:e3:0c:b2:d8:
d8:de:83:5e:5d:61:86:7f:74:60:86:4b:f6:22:95:f5:57:1f:
a8:f2:bb:97:17:b0:9e:6a:4b:4f:c6:bb:ec:3e:58:07:21:c0:
91:e1:25:0f:b9:9b:7b:84:6e:76:6e:32:67:9b:ae:fc:94:27:
a6:12:da:f5:77:d9:1d:0a:c9:9d:b8:41:2b:ce:8a:ae:f8:6d:
93:d5:ff:1f:6f:4e:3f:44:23:de:85:a7:ed:fb:b8:72:4f:a7:
00:0c:37:3e:a7:1d:14:f4:b0:4b:ae:f7:47:33:1e:b1:4d:8b:
97:77:d0:cc:0f:84:6c:30:e2:77:7d:e6:db:1e:46:63:f7:f2:
4e:46:ac:fa:9d:56:b2:b2:ae:53:c6:4b:82:7d:8a:88:3c:5f:
e1:9e:44:cb:bd:a3:5a:c5:80:49:2d:51:14:a1:5e:62:ba:5a:
06:81:c1:73
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUA15ZAfOfOO6PQnjUbLGJ2u5RVNkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTQ5MTZBMzhGOTI4QjA0OUE3NTMzQ0I0RkUyNUI4RkE5
RDk2REY3NDAeFw0yNjA5MjEyMTA3NTRaFw0yNjA5MjIyMzU5NTRaMDMxMTAvBgNV
BAMTKDU3MTlCMEYyMDY1NjI1OTNGRDVDNkRGOUQ1QTIyODcwMDA3MUY3QzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDodiQtu0gOEGVBsvT5CWWRjcD+
pclgkkr0lCc6b0S8pbgFXJPs+c2wILfcjNNvMQR+uqG4ScnXSxbMvlWnXdN0jT3R
Pz50mmV/PFvcvEywbUWhBfti8jHkeUfOKDTIROOAmo6tUePUljUqGGM3U247tUom
ElkSdpqyPkYe5n6TDerrxjFYv1WAVRRmiQbo2ShegksAc1wzXw+yFThWTxC3XJs3
8IGjNhyZ3YZkaPWnZt1ZFo3Tv04vT5CZYIYM5BqAXrLlFohGaWiz49lRTSJGJbrm
MESsAdV+OLRaClnVl6CewsVLxy4l+Wsejt49h9Vmp3YpPOcLjag/Dwb3sIkzAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUVxmw8gZWJZP9XG351aIocABx98QwHwYDVR0j
BBgwFoAU5JFqOPkosEmnUzy0/iW4+p2W33QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MmY4ZDE1OTQtNDNlOS00MzJkLWJlODItZGMwYjk3NjdkY2I2LzAvRTQ5MTZBMzhG
OTI4QjA0OUE3NTMzQ0I0RkUyNUI4RkE5RDk2REY3NC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FNDkxNkEzOEY5MjhCMDQ5QTc1MzNDQjRGRTI1QjhGQTlEOTZE
Rjc0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmY4ZDE1OTQtNDNlOS00MzJkLWJl
ODItZGMwYjk3NjdkY2I2LzAvRTQ5MTZBMzhGOTI4QjA0OUE3NTMzQ0I0RkUyNUI4
RkE5RDk2REY3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGfIn4+dsnq/d2R8c7wNM35vb96B5/Y6ieum
iLhnIEKJExZOGAbLLz+Hlhrb2v0W4LSQishiZiXe6n68E7v39jOTRzVj/95y0jCX
LUx3y3Xvvf6RWpl44wyy2Njeg15dYYZ/dGCGS/YilfVXH6jyu5cXsJ5qS0/Gu+w+
WAchwJHhJQ+5m3uEbnZuMmebrvyUJ6YS2vV32R0KyZ24QSvOiq74bZPV/x9vTj9E
I96Fp+37uHJPpwAMNz6nHRT0sEuu90czHrFNi5d30MwPhGww4nd95tseRmP38k5G
rPqdVrKyrlPGS4J9iog8X+GeRMu9o1rFgEktURShXmK6WgaBwXM=
-----END CERTIFICATE-----
Generated at Tue Sep 22 06:32:29 2026 by rpki-client