
$ rpki-client -vvf rpki-rsync.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/E09CA942BC63A46AC14108FB56751F1D3DB2B40D.mft
File: E09CA942BC63A46AC14108FB56751F1D3DB2B40D.mft (raw, json)
Hash identifier: FocdZsJmrtBD8BIDSGTS6CVQTCZyHNCTf/pht0omMyY=
Subject key identifier: 1B:48:4E:5D:D1:C1:83:C4:18:A8:3A:39:83:65:B8:EF:5E:CB:39:F7
Authority key identifier: E0:9C:A9:42:BC:63:A4:6A:C1:41:08:FB:56:75:1F:1D:3D:B2:B4:0D
Certificate issuer: /CN=E09CA942BC63A46AC14108FB56751F1D3DB2B40D
Certificate serial: 40CAB637AC582DC01AAFE47D8868F72729245363
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E09CA942BC63A46AC14108FB56751F1D3DB2B40D.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/E09CA942BC63A46AC14108FB56751F1D3DB2B40D.mft
Manifest number: 3E
Signing time: Wed 17 Jun 2026 02:10:23 +0000
Manifest this update: Wed 17 Jun 2026 02:05:23 +0000
Manifest next update: Thu 18 Jun 2026 02:45:23 +0000
Files and hashes: 1: 3130332e36352e39362e302f32332d3234203d3e203536323539.roa (hash: AhptuUeczIXxYrYpEUFqYLa6JweMv5oyItdy1/amU/c=)
2: E09CA942BC63A46AC14108FB56751F1D3DB2B40D.crl (hash: 1VaSNVMnnzOLMJUHFRYPFGtU2cOu8aEMowyR230Da7o=)
3: 3130332e32382e3136332e302f32342d3234203d3e203536323539.roa (hash: f3/5ZWIk2JVAliu7yKS60dOELpXPYdbw36ijNFDWyYM=)
4: 3130332e31302e3235332e302f32342d3234203d3e203536323539.roa (hash: RVVP//q3vuwKuV+Q10lzaWaVgGwp0nEvsOc4ZWyOH5o=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/E09CA942BC63A46AC14108FB56751F1D3DB2B40D.crl
rsync://rpki-rsync.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/E09CA942BC63A46AC14108FB56751F1D3DB2B40D.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E09CA942BC63A46AC14108FB56751F1D3DB2B40D.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 02:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:ca:b6:37:ac:58:2d:c0:1a:af:e4:7d:88:68:f7:27:29:24:53:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E09CA942BC63A46AC14108FB56751F1D3DB2B40D
Validity
Not Before: Jun 17 02:05:23 2026 GMT
Not After : Jun 18 02:45:23 2026 GMT
Subject: CN=1B484E5DD1C183C418A83A398365B8EF5ECB39F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:df:74:6a:2d:3a:fe:d4:3e:65:7b:7b:b4:20:
0f:37:ea:e7:34:b4:8c:0b:eb:fa:36:c9:0b:3f:89:
95:b8:58:e6:ee:f7:a5:fb:fc:28:c7:c4:36:6f:49:
01:66:b8:ea:3b:71:fd:a5:ae:2c:c4:7f:fe:1b:9e:
33:70:c9:e8:ce:c4:7f:c2:f0:cf:f4:b7:02:68:e1:
a9:09:8b:39:ef:cf:3c:13:6d:7b:66:dc:0a:4f:97:
0f:a9:eb:7a:94:9d:eb:5d:32:d3:dd:39:c8:8f:41:
34:eb:7f:c3:80:4c:45:b7:44:c1:f3:3b:82:ca:5d:
a4:16:c2:9a:1a:4c:5a:a9:4b:0a:b3:c6:ec:a5:99:
d5:ad:82:99:5f:d1:2a:74:84:0f:86:31:70:b8:ac:
39:d5:09:10:9e:3b:97:47:3a:cf:9f:55:d3:dc:74:
3e:8c:52:b4:e1:8c:1f:35:b3:65:ab:24:67:1c:a5:
93:e9:68:e4:69:a0:5f:f6:f3:11:33:ae:5a:cd:14:
db:65:9d:fd:48:3f:4f:f1:cd:3d:2d:95:81:2a:aa:
bf:8b:be:c6:01:47:50:89:49:4d:1d:c1:49:d3:5f:
b1:11:b1:5b:0b:33:de:13:a6:9b:e2:ae:f5:04:e4:
8e:e3:67:fc:7f:74:94:7c:81:ab:c1:cb:d1:48:aa:
60:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:48:4E:5D:D1:C1:83:C4:18:A8:3A:39:83:65:B8:EF:5E:CB:39:F7
X509v3 Authority Key Identifier:
keyid:E0:9C:A9:42:BC:63:A4:6A:C1:41:08:FB:56:75:1F:1D:3D:B2:B4:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/E09CA942BC63A46AC14108FB56751F1D3DB2B40D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E09CA942BC63A46AC14108FB56751F1D3DB2B40D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/E09CA942BC63A46AC14108FB56751F1D3DB2B40D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:37:b8:bd:7b:4a:76:22:58:53:09:f5:cc:32:7e:13:20:e6:
5e:16:b6:2a:e9:b2:95:02:98:45:57:ee:ba:62:b1:36:7e:f2:
0e:55:75:bf:4a:e8:15:53:59:74:41:93:cf:d4:4c:84:2f:88:
ff:52:1a:bc:8e:8b:76:8c:26:6f:92:6a:36:37:4e:b8:80:21:
68:18:06:29:f0:8e:e7:88:13:c3:85:69:6c:42:da:50:41:0f:
54:7e:7a:66:bb:ac:f7:c3:8e:52:d9:c8:25:26:9e:e9:8d:61:
ab:cc:d4:2b:8b:4f:33:3e:70:33:6d:03:3c:e3:1a:42:72:5e:
dd:d7:10:99:3c:4e:42:52:4c:0b:e0:7a:ec:a5:79:10:ff:0d:
cd:f6:59:fb:fd:9e:04:00:b7:97:00:c9:62:5c:e1:68:ea:5a:
fa:80:44:11:e8:b7:74:37:b1:6e:0b:f7:3d:2e:55:9f:58:bb:
af:9a:f3:9b:1b:d3:b3:3b:d4:3b:f0:ed:36:f3:41:37:4c:fe:
28:42:e8:6c:ae:81:ef:39:63:a4:a9:cd:3f:27:c2:56:8b:5c:
be:71:23:34:64:44:0a:d8:44:32:70:f8:7c:90:1e:18:5a:48:
02:c7:dc:a5:e2:81:0b:97:82:c7:d6:fb:26:99:67:66:33:b3:
77:2d:47:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:03:06 2026 by rpki-client