
$ rpki-client -vvf rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.mft
File: E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.mft (raw, json)
Hash identifier: CVNVivzMSCzm4ZsWm0ulqoKeTjtyfHsGa7ju3bHspUg=
Subject key identifier: 2B:C9:31:1F:B6:A7:56:78:12:13:8C:12:1A:3C:A3:A4:9E:C1:F2:12
Authority key identifier: E4:50:1E:7F:DB:C5:71:60:C6:DA:F0:D3:BE:92:FB:D3:B1:32:4A:B9
Certificate issuer: /CN=E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9
Certificate serial: 0B5E3E1D24AA69CEFFD0226293CE1E0734D9F893
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.mft
Manifest number: 3E
Signing time: Tue 16 Jun 2026 13:56:08 +0000
Manifest this update: Tue 16 Jun 2026 13:51:08 +0000
Manifest next update: Wed 17 Jun 2026 17:30:08 +0000
Files and hashes: 1: 3230332e38302e31322e302f32342d3234203d3e203234323034.roa (hash: h2tT8uN39aiQAWcw3BdGn9c/xBwZZb5nFDTta01r+Os=)
2: 3230332e38302e392e302f32342d3234203d3e203234323034.roa (hash: ctsdmpn5r5VUvDq4FMqshtD+HVeYmHxVfhu5eYtcuDY=)
3: 3230332e38302e31352e302f32342d3234203d3e203234323034.roa (hash: nN8alNrnuAC96uGmiPX7P2NYnsdlkO57xsP55iMfUwk=)
4: E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.crl (hash: A25ApXmPTWEE4z40VS2+vmqbLgEtLa3K+qXC8Fd0LYk=)
5: 3230332e38302e31332e302f32342d3234203d3e203234323034.roa (hash: v5fNxHZnP1wOLH3moKO1JSlLZXs/nZienvrRCarDRlk=)
6: 3230332e38302e31312e302f32342d3234203d3e203234323034.roa (hash: Z8294bGV1BqnPHshmggOhT7N0D0yzpQrvHBjc8hglpQ=)
7: 3230332e38302e382e302f32342d3234203d3e203234323034.roa (hash: 0Yyl1JFAblaXf8Yb0JCPy2SmOr5D/U6YS39l5rE81q0=)
8: 3230332e38302e31302e302f32342d3234203d3e203234323034.roa (hash: 1WqLfIO26zKRMIVkfVN7TnPFzjNdo3+29X6uUFeeV7A=)
9: 3230332e38302e31342e302f32342d3234203d3e203234323034.roa (hash: 4fpWKKYBY0nnGQkJs0R+bmSKgdPRaMES9zE1728pF2E=)
10: 323430353a386530303a3a2f33322d3332203d3e203234323034.roa (hash: sqWc0G+az7rG1OKeMlrjkBetXfc6E3+lsrE6DeDNqXY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.crl
rsync://rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 17:30:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:5e:3e:1d:24:aa:69:ce:ff:d0:22:62:93:ce:1e:07:34:d9:f8:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9
Validity
Not Before: Jun 16 13:51:08 2026 GMT
Not After : Jun 17 17:30:08 2026 GMT
Subject: CN=2BC9311FB6A7567812138C121A3CA3A49EC1F212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7a:30:87:f8:f4:f4:39:f5:bf:a8:a5:44:c7:
f4:12:3f:70:3d:4d:db:a3:51:01:2d:6f:94:f0:88:
df:b7:f1:ac:38:92:47:7d:5a:fa:62:49:12:cd:7c:
cb:a6:52:93:a0:b8:6b:9b:65:17:57:d6:41:6e:bd:
74:68:63:a1:21:b5:c0:7a:8d:9f:ea:05:f2:c5:ae:
76:db:4f:a0:8c:7b:87:50:4e:77:b8:1e:13:f2:28:
b7:43:c5:fe:c4:12:b6:fb:b0:7d:5d:15:6c:f2:c8:
59:f6:d8:73:61:75:9b:f0:82:b4:a4:e7:93:5d:2b:
00:8b:b0:bf:55:bc:45:e2:47:f5:74:54:f9:ec:1a:
7c:d3:b5:30:c3:77:aa:60:de:53:52:15:1c:6b:fa:
9c:e1:2a:4e:dc:37:e9:c6:08:d1:9c:c8:9d:8a:05:
aa:16:17:c5:1d:99:2b:30:4d:53:74:29:37:5b:b9:
6f:3e:f3:52:fc:f8:e6:47:5c:d6:02:cd:90:7c:d1:
de:73:f7:ad:a0:7d:86:06:b1:e8:27:38:a8:87:81:
50:b6:8b:48:e9:fe:4c:36:57:7c:9f:d6:49:78:78:
58:d1:03:af:e4:c0:c7:1b:3d:ce:de:29:bd:0d:61:
77:78:04:99:25:59:30:c2:e5:09:33:19:43:fd:32:
e3:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:C9:31:1F:B6:A7:56:78:12:13:8C:12:1A:3C:A3:A4:9E:C1:F2:12
X509v3 Authority Key Identifier:
keyid:E4:50:1E:7F:DB:C5:71:60:C6:DA:F0:D3:BE:92:FB:D3:B1:32:4A:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:77:0e:a9:35:56:60:27:01:f0:97:44:15:81:da:5d:82:c1:
55:d3:db:cc:6a:7a:6b:72:54:d7:56:cc:f1:9b:1e:0a:d4:66:
21:00:a8:bf:ed:13:66:d5:a7:a3:7e:c9:b1:25:04:c3:a9:7e:
04:96:35:c8:97:3a:45:a4:4a:31:41:cf:e1:79:69:52:c8:98:
f5:34:c5:5e:d4:6c:5d:29:10:43:ef:16:2a:38:24:9d:69:2d:
2f:52:a4:49:d5:95:b7:e1:d0:8a:f1:c9:c1:b8:69:b7:0a:ac:
a9:69:13:c4:30:ca:7a:17:dc:3c:72:75:7f:78:9c:1d:f1:ca:
05:fa:b7:99:99:16:fc:4a:24:13:8d:12:2d:5b:db:b5:f8:d2:
ab:36:32:b4:92:a3:ed:72:7f:a5:df:11:6c:20:00:f1:57:db:
90:84:e5:f6:6c:40:bb:62:3e:b1:24:24:2a:90:36:95:73:fe:
7c:4c:96:2b:96:ca:e4:ca:d2:5f:86:cb:d2:ce:d6:e7:10:40:
30:b4:7e:ef:2c:68:da:6a:e3:71:9f:54:28:e6:30:f3:35:c8:
76:2a:44:13:bd:62:5b:96:6a:20:d9:b8:55:c8:b8:20:00:28:
be:4e:e4:12:e5:bb:0c:91:9f:3f:9f:f4:a6:71:fb:4c:31:a1:
ac:df:02:aa
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUC14+HSSqac7/0CJik84eBzTZ+JMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTQ1MDFFN0ZEQkM1NzE2MEM2REFGMEQzQkU5MkZCRDNC
MTMyNEFCOTAeFw0yNjA2MTYxMzUxMDhaFw0yNjA2MTcxNzMwMDhaMDMxMTAvBgNV
BAMTKDJCQzkzMTFGQjZBNzU2NzgxMjEzOEMxMjFBM0NBM0E0OUVDMUYyMTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtejCH+PT0OfW/qKVEx/QSP3A9
TdujUQEtb5TwiN+38aw4kkd9WvpiSRLNfMumUpOguGubZRdX1kFuvXRoY6EhtcB6
jZ/qBfLFrnbbT6CMe4dQTne4HhPyKLdDxf7EErb7sH1dFWzyyFn22HNhdZvwgrSk
55NdKwCLsL9VvEXiR/V0VPnsGnzTtTDDd6pg3lNSFRxr+pzhKk7cN+nGCNGcyJ2K
BaoWF8UdmSswTVN0KTdbuW8+81L8+OZHXNYCzZB80d5z962gfYYGsegnOKiHgVC2
i0jp/kw2V3yf1kl4eFjRA6/kwMcbPc7eKb0NYXd4BJklWTDC5QkzGUP9MuNRAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUK8kxH7anVngSE4wSGjyjpJ7B8hIwHwYDVR0j
BBgwFoAU5FAef9vFcWDG2vDTvpL707EySrkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NTI0YTkxMDUtOGQyYS00YjM4LWE2YWUtMDVlYWQ2OTcxOWEzLzAvRTQ1MDFFN0ZE
QkM1NzE2MEM2REFGMEQzQkU5MkZCRDNCMTMyNEFCOS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FNDUwMUU3RkRCQzU3MTYwQzZEQUYwRDNCRTkyRkJEM0IxMzI0
QUI5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTI0YTkxMDUtOGQyYS00YjM4LWE2
YWUtMDVlYWQ2OTcxOWEzLzAvRTQ1MDFFN0ZEQkM1NzE2MEM2REFGMEQzQkU5MkZC
RDNCMTMyNEFCOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAC53Dqk1VmAnAfCXRBWB2l2CwVXT28xqemty
VNdWzPGbHgrUZiEAqL/tE2bVp6N+ybElBMOpfgSWNciXOkWkSjFBz+F5aVLImPU0
xV7UbF0pEEPvFio4JJ1pLS9SpEnVlbfh0IrxycG4abcKrKlpE8QwynoX3DxydX94
nB3xygX6t5mZFvxKJBONEi1b27X40qs2MrSSo+1yf6XfEWwgAPFX25CE5fZsQLti
PrEkJCqQNpVz/nxMliuWyuTK0l+Gy9LO1ucQQDC0fu8saNpq43GfVCjmMPM1yHYq
RBO9YluWaiDZuFXIuCAAKL5O5BLluwyRnz+f9KZx+0wxoazfAqo=
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:02:04 2026 by rpki-client