
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5d59b822-5c08-46f1-b25e-758dc18e9905/0/E594107BADC6C8DBED3F533855138968247BB6AF.mft
File: E594107BADC6C8DBED3F533855138968247BB6AF.mft (raw, json)
Hash identifier: ZKSpjyr6RNNI2ltvsmb8G5RDcL39WLUuC39odFlWTAY=
Subject key identifier: DF:F7:1B:43:B3:DB:B7:D7:D3:89:FF:A3:DC:03:82:98:35:3F:44:C0
Authority key identifier: E5:94:10:7B:AD:C6:C8:DB:ED:3F:53:38:55:13:89:68:24:7B:B6:AF
Certificate issuer: /CN=E594107BADC6C8DBED3F533855138968247BB6AF
Certificate serial: 04F2837D1BB17158CE996DC38C7362B579E10AB2
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E594107BADC6C8DBED3F533855138968247BB6AF.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5d59b822-5c08-46f1-b25e-758dc18e9905/0/E594107BADC6C8DBED3F533855138968247BB6AF.mft
Manifest number: C0
Signing time: Tue 22 Sep 2026 17:48:33 +0000
Manifest this update: Tue 22 Sep 2026 17:43:33 +0000
Manifest next update: Wed 23 Sep 2026 19:55:33 +0000
Files and hashes: 1: E594107BADC6C8DBED3F533855138968247BB6AF.crl (hash: Fm+K0CCwr68HPzVo6fN32oqMmJyBwK6P2RAczZ1wrx8=)
2: 3135372e32302e3135362e302f32332d3234203d3e20313532343131.roa (hash: EwbiWmhldgu2k+5LdUuHuGepn6bmBxTKHuu9s+kl8SY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5d59b822-5c08-46f1-b25e-758dc18e9905/0/E594107BADC6C8DBED3F533855138968247BB6AF.crl
rsync://rpki-rsync.idnic.net/repo/5d59b822-5c08-46f1-b25e-758dc18e9905/0/E594107BADC6C8DBED3F533855138968247BB6AF.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E594107BADC6C8DBED3F533855138968247BB6AF.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 23 Sep 2026 15:18:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:f2:83:7d:1b:b1:71:58:ce:99:6d:c3:8c:73:62:b5:79:e1:0a:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E594107BADC6C8DBED3F533855138968247BB6AF
Validity
Not Before: Sep 22 17:43:33 2026 GMT
Not After : Sep 23 19:55:33 2026 GMT
Subject: CN=DFF71B43B3DBB7D7D389FFA3DC038298353F44C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ba:06:76:82:e4:7c:a1:c6:a8:7b:04:ff:11:
73:95:ed:60:3b:e0:ce:e7:4b:80:2b:50:4b:a6:86:
7a:40:0b:b6:68:8d:51:28:85:51:33:70:a1:2e:68:
76:25:7f:7b:13:3e:19:db:0b:46:79:b1:cf:55:71:
1a:b6:55:02:b1:86:ad:37:b9:43:9f:4b:22:1b:04:
db:e4:db:e8:40:4f:77:a8:c1:6d:ab:59:6b:2f:32:
99:0e:7e:0b:4a:ee:af:f5:00:bd:f8:27:32:77:94:
d3:e6:a3:d2:95:72:25:42:e3:7d:64:af:55:75:4a:
25:ad:39:0b:f8:e6:d7:e3:ec:77:93:bc:0e:83:ed:
25:44:a4:02:21:0b:9b:94:70:2c:9e:5d:87:85:33:
4d:99:d7:71:5c:42:22:42:f9:dd:b7:a9:94:03:47:
17:92:75:fa:fe:0c:5b:6f:ce:b0:a2:74:37:71:c7:
4d:02:65:00:48:7f:be:63:bd:82:e1:82:35:5d:bf:
6c:37:e8:f8:de:3f:cb:c1:94:e1:6c:09:de:1e:7d:
77:6b:a4:3a:b6:c6:f4:6e:3f:68:09:5c:23:ef:9d:
81:e2:fb:b8:95:2e:09:1b:99:b5:d6:1e:b4:c8:4b:
df:8c:6e:f2:d0:a1:bf:9a:fe:a9:ea:30:25:8e:73:
62:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:F7:1B:43:B3:DB:B7:D7:D3:89:FF:A3:DC:03:82:98:35:3F:44:C0
X509v3 Authority Key Identifier:
keyid:E5:94:10:7B:AD:C6:C8:DB:ED:3F:53:38:55:13:89:68:24:7B:B6:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5d59b822-5c08-46f1-b25e-758dc18e9905/0/E594107BADC6C8DBED3F533855138968247BB6AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E594107BADC6C8DBED3F533855138968247BB6AF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5d59b822-5c08-46f1-b25e-758dc18e9905/0/E594107BADC6C8DBED3F533855138968247BB6AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:81:88:ef:11:c7:4f:20:6b:32:b2:6a:f6:ae:61:c8:f0:d1:
c8:a0:eb:fe:01:fa:85:1a:fc:87:89:05:64:c3:48:93:75:68:
49:6c:f3:dd:ee:c0:41:6e:ab:e6:4c:07:df:3a:4c:b6:0c:db:
71:19:eb:48:44:aa:e3:75:a0:26:74:26:91:23:26:85:3b:87:
1b:c6:6e:8a:86:4f:e4:bb:fc:c9:4b:03:a3:84:02:ce:92:71:
43:06:13:3c:8e:56:24:92:ff:d0:a0:41:99:f4:3b:84:e4:85:
9f:60:2d:67:9f:5b:25:d0:e6:d1:cf:94:9e:cd:7a:0c:62:b6:
89:2a:ba:16:8f:4a:1b:cc:89:20:f3:b1:51:a5:26:c9:6e:fc:
bb:86:fc:f9:ec:8f:21:7c:68:ef:9c:cd:4e:fb:82:cc:f6:94:
f0:88:04:11:69:19:e7:ac:1e:20:5d:a4:18:4d:18:f0:bc:6c:
07:ea:92:04:a1:23:a0:75:ea:92:ee:86:17:40:49:ba:02:9d:
b4:39:4c:19:b7:12:69:66:6f:f5:c4:eb:75:55:d5:dd:fe:2f:
18:d9:0e:9b:79:02:8b:af:2b:9c:4a:d8:a2:41:5d:1a:7f:f8:
30:02:65:fb:fb:49:20:c8:8e:97:27:90:bb:1e:82:c8:2e:a6:
44:df:f7:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:23:56 2026 by rpki-client