
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/E16393AC88E5DBEEB9429903B2E0EB729C677B05.mft
File: E16393AC88E5DBEEB9429903B2E0EB729C677B05.mft (raw, json)
Hash identifier: zkLq61aXJUx2vQNGRqqHGnlQW4q9RJG3HDM2QVl4MYQ=
Subject key identifier: 15:3D:B1:59:53:65:E4:62:BA:5A:F0:67:73:35:16:D2:36:E5:C1:42
Authority key identifier: E1:63:93:AC:88:E5:DB:EE:B9:42:99:03:B2:E0:EB:72:9C:67:7B:05
Certificate issuer: /CN=E16393AC88E5DBEEB9429903B2E0EB729C677B05
Certificate serial: 3EA17DB1DE4F6A43877231BE62AF279CF1A83447
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E16393AC88E5DBEEB9429903B2E0EB729C677B05.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/E16393AC88E5DBEEB9429903B2E0EB729C677B05.mft
Manifest number: C0
Signing time: Tue 22 Sep 2026 08:01:31 +0000
Manifest this update: Tue 22 Sep 2026 07:56:31 +0000
Manifest next update: Wed 23 Sep 2026 10:36:31 +0000
Files and hashes: 1: 3130332e3136302e3231322e302f32332d3233203d3e20313430333839.roa (hash: LOf1A+/Ws/h9DMvY/QrE3vs2jRFuJ1lQwAwdpdoNvRc=)
2: E16393AC88E5DBEEB9429903B2E0EB729C677B05.crl (hash: p+RDl1jfkkUOHvtT9gbvvspn4JM9B6jpCDGkYwuAos8=)
3: 3130332e3136302e3231332e302f32342d3234203d3e20313430333839.roa (hash: YUN+BY5pcnBVMiCm7rVh9YVL1oMMPlCxBU9cg/9p1D0=)
4: 3130332e3136302e3231322e302f32342d3234203d3e20313430333839.roa (hash: EhNVRNwBN9rmTh1XBPBt7PuHkNC/TzJTTCRJrkNcKrw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/E16393AC88E5DBEEB9429903B2E0EB729C677B05.crl
rsync://rpki-rsync.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/E16393AC88E5DBEEB9429903B2E0EB729C677B05.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E16393AC88E5DBEEB9429903B2E0EB729C677B05.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 23 Sep 2026 03:47:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:a1:7d:b1:de:4f:6a:43:87:72:31:be:62:af:27:9c:f1:a8:34:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E16393AC88E5DBEEB9429903B2E0EB729C677B05
Validity
Not Before: Sep 22 07:56:31 2026 GMT
Not After : Sep 23 10:36:31 2026 GMT
Subject: CN=153DB1595365E462BA5AF067733516D236E5C142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:34:26:90:64:63:c6:35:30:ae:ea:24:9a:72:
04:56:7e:75:e6:51:1b:e6:cb:29:cc:21:81:53:f8:
ad:16:60:49:55:77:ea:e8:48:33:88:bc:58:9e:f8:
1d:6c:6a:72:45:ae:52:f0:7a:e9:63:76:13:62:c4:
82:4a:2b:be:d9:96:19:fc:81:fc:22:37:c4:ce:c1:
dc:c4:98:df:41:60:03:b7:09:1f:16:6d:c2:1f:0e:
13:5e:dc:d0:3a:ce:ef:79:84:a5:2a:91:a7:a4:73:
55:d9:cb:dc:da:8b:a3:11:a5:8c:5f:dc:37:df:31:
e5:26:7a:30:2c:ef:5e:f8:99:78:76:ce:8a:8c:66:
a5:aa:30:73:6c:eb:4c:17:ba:00:22:f2:12:73:50:
91:d4:96:f0:c6:79:4d:17:39:e5:f0:79:9e:12:09:
52:ff:e1:20:2f:f3:1a:78:41:95:4f:15:95:a7:c3:
6c:7b:ac:90:02:c9:a4:16:7c:a4:f0:9a:e1:94:4f:
f5:2f:b7:00:6b:b7:a3:dc:c4:97:56:48:c1:7b:a1:
e9:f5:22:a2:1a:ac:65:43:66:43:d4:39:02:25:60:
77:fd:f2:36:a3:e8:cb:ba:eb:90:5d:5a:d9:ab:0f:
61:00:56:25:d5:82:c3:53:60:9f:42:cc:11:70:97:
bd:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:3D:B1:59:53:65:E4:62:BA:5A:F0:67:73:35:16:D2:36:E5:C1:42
X509v3 Authority Key Identifier:
keyid:E1:63:93:AC:88:E5:DB:EE:B9:42:99:03:B2:E0:EB:72:9C:67:7B:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/E16393AC88E5DBEEB9429903B2E0EB729C677B05.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E16393AC88E5DBEEB9429903B2E0EB729C677B05.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/E16393AC88E5DBEEB9429903B2E0EB729C677B05.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:7b:a9:af:0e:e2:fc:e7:99:b8:b4:da:1f:47:76:02:e7:1e:
f3:88:69:7f:6f:f7:97:60:ca:78:75:00:86:18:c1:3b:10:f0:
c4:14:ed:ac:2b:75:17:6e:bd:a6:b3:b7:f8:51:ba:e8:0e:33:
14:da:8f:ab:1a:24:86:df:3b:41:e7:45:98:fb:95:88:59:78:
d2:7b:6d:e3:47:70:f7:da:71:09:b1:9e:65:13:8b:f5:98:ac:
b7:2a:74:a2:27:29:d0:39:37:a8:74:4b:6f:49:ab:a6:6d:e5:
34:3b:f6:27:2d:57:b2:51:64:72:ba:3d:9b:58:4a:71:ab:2c:
c2:12:50:15:f6:1a:e8:55:0a:bb:af:4f:ab:bc:8b:4f:c5:15:
e9:77:d1:91:d5:df:6d:7e:20:1d:ec:52:ff:db:5e:50:6e:c9:
f0:ac:c4:84:51:f2:95:1f:77:c9:26:32:c4:ae:49:68:23:17:
b4:33:09:a3:1c:5e:d6:35:c1:79:50:3c:e7:84:aa:fa:87:3d:
0a:eb:50:7a:52:5c:74:0e:02:4d:b7:e2:4b:b4:77:dc:09:35:
27:bb:7a:21:64:af:16:bb:52:ce:89:50:3b:10:4b:7c:e1:4c:
38:80:4a:44:ea:ee:68:58:f1:6d:61:24:2d:8b:b4:69:af:b2:
78:7a:e3:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:13:46 2026 by rpki-client