
$ rpki-client -vvf rpki-rsync.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/0E0EBBBA7E22C85B3473A013CFDD321254D568AC.mft
File: 0E0EBBBA7E22C85B3473A013CFDD321254D568AC.mft (raw, json)
Hash identifier: NSnNJTIKiwGrDCUCo1GbK7wlGk2L83uaFIjtB5bElJo=
Subject key identifier: 79:4D:53:95:BC:43:C7:D7:F0:E0:9F:E2:2D:61:FA:BA:B7:A2:A6:F0
Authority key identifier: 0E:0E:BB:BA:7E:22:C8:5B:34:73:A0:13:CF:DD:32:12:54:D5:68:AC
Certificate issuer: /CN=0E0EBBBA7E22C85B3473A013CFDD321254D568AC
Certificate serial: 2206442D0642F6069439ABB18B431364CD9E4C15
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0E0EBBBA7E22C85B3473A013CFDD321254D568AC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/0E0EBBBA7E22C85B3473A013CFDD321254D568AC.mft
Manifest number: 3E
Signing time: Tue 16 Jun 2026 22:06:04 +0000
Manifest this update: Tue 16 Jun 2026 22:01:04 +0000
Manifest next update: Thu 18 Jun 2026 00:54:04 +0000
Files and hashes: 1: 3136302e31392e3131302e302f32332d3234203d3e20313532373733.roa (hash: GvfJPx0m84FZdwqXoN6lWJ86xXd2jONGdjvxcJWy97o=)
2: 0E0EBBBA7E22C85B3473A013CFDD321254D568AC.crl (hash: 9HEKIhSV1AiIzBtI2KgH5smswJraJjsWyxFdWEYsaeo=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/0E0EBBBA7E22C85B3473A013CFDD321254D568AC.crl
rsync://rpki-rsync.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/0E0EBBBA7E22C85B3473A013CFDD321254D568AC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0E0EBBBA7E22C85B3473A013CFDD321254D568AC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 00:54:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:06:44:2d:06:42:f6:06:94:39:ab:b1:8b:43:13:64:cd:9e:4c:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0E0EBBBA7E22C85B3473A013CFDD321254D568AC
Validity
Not Before: Jun 16 22:01:04 2026 GMT
Not After : Jun 18 00:54:04 2026 GMT
Subject: CN=794D5395BC43C7D7F0E09FE22D61FABAB7A2A6F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2d:c6:4d:13:7a:14:9c:b6:aa:36:f2:2d:cc:
d8:ba:67:80:68:84:99:79:6e:37:19:8b:df:70:08:
60:14:5d:4e:d4:24:ba:32:55:6d:12:39:ce:fb:2b:
7d:e2:5f:3e:13:63:84:20:8a:f8:6d:5e:5e:c1:97:
90:89:98:89:27:b9:85:68:c5:fc:82:df:3e:89:a7:
ab:15:2c:7c:8a:db:66:63:18:90:05:c7:d2:fb:55:
b9:51:79:20:79:c4:a2:31:78:c1:ae:f6:ee:5d:26:
b8:0c:bd:03:06:94:86:5c:c0:b9:b5:d3:a8:61:7d:
73:fb:e7:af:95:5f:9d:4c:ae:5c:d1:5c:ad:ba:9e:
1b:13:eb:ca:11:56:9f:a4:0b:98:da:85:e2:02:86:
7a:1a:1f:b4:18:74:10:a5:9d:06:d9:81:db:3b:f8:
c1:3b:e3:1b:0d:b5:6f:8b:a1:6a:53:13:50:f3:96:
1d:ec:52:a2:37:a1:22:bc:a2:e8:43:6b:9c:ed:88:
30:09:fa:a4:8e:cb:e6:57:71:a1:13:17:8e:88:e0:
18:05:a5:ee:53:28:a4:b1:18:d9:da:40:19:fe:2a:
85:3c:a5:5a:aa:12:33:53:5e:59:cc:52:34:41:1c:
75:35:1c:57:02:20:53:a6:65:30:7d:62:9f:c7:e5:
5e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:4D:53:95:BC:43:C7:D7:F0:E0:9F:E2:2D:61:FA:BA:B7:A2:A6:F0
X509v3 Authority Key Identifier:
keyid:0E:0E:BB:BA:7E:22:C8:5B:34:73:A0:13:CF:DD:32:12:54:D5:68:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/0E0EBBBA7E22C85B3473A013CFDD321254D568AC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0E0EBBBA7E22C85B3473A013CFDD321254D568AC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/0E0EBBBA7E22C85B3473A013CFDD321254D568AC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:be:b9:86:68:b7:dc:0f:92:32:24:e1:d2:6c:a6:45:c5:1e:
fe:b7:e5:0a:80:bd:d2:56:f4:82:24:44:ac:2c:b7:d7:8b:ce:
6c:55:db:9c:43:22:f7:d9:2b:84:6e:73:c1:b8:3e:02:5f:ea:
70:db:00:11:54:1d:94:4c:52:a5:a1:fd:92:d4:94:8a:a3:ed:
27:7d:24:98:63:06:d2:2e:3a:71:30:da:95:93:ad:72:ff:01:
35:58:f6:c3:d2:a2:16:f4:db:da:64:70:e7:e8:62:de:81:62:
5d:12:ff:11:35:32:a7:7e:51:b6:24:c9:73:a0:58:c4:31:d2:
93:ff:dc:99:06:2a:75:6d:16:1b:0d:74:0f:0d:91:c9:07:36:
7e:20:c0:c4:24:1b:60:f1:1c:be:ef:1b:aa:cb:aa:9f:2d:cf:
4f:6a:fc:88:8d:00:4d:ff:bb:90:af:19:d3:4d:b4:e2:99:63:
1e:65:42:20:1f:a6:32:49:db:f0:38:ff:85:72:57:28:8f:35:
39:07:66:0d:bd:b2:ac:2e:24:65:3b:b4:54:ce:b9:2f:eb:71:
e9:ac:22:d1:c7:a1:a4:a0:1a:61:39:1f:50:31:68:a2:c0:04:
94:d9:fe:7a:9e:51:dc:3c:04:76:89:f2:ec:ee:ce:b3:d9:32:
cf:22:b8:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:44:10 2026 by rpki-client