
$ rpki-client -vvf rpki-rsync.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/E9A8A6B9E08D026673630DC1A26DBE73DFA16132.mft
File: E9A8A6B9E08D026673630DC1A26DBE73DFA16132.mft (raw, json)
Hash identifier: oDorQy1IIVuUan5tAd/ca9EKQLag5bJbKcdLa2m02qg=
Subject key identifier: D9:DD:5E:CD:92:A1:4F:48:4A:96:17:87:8D:48:DC:D5:C0:FB:E1:40
Authority key identifier: E9:A8:A6:B9:E0:8D:02:66:73:63:0D:C1:A2:6D:BE:73:DF:A1:61:32
Certificate issuer: /CN=E9A8A6B9E08D026673630DC1A26DBE73DFA16132
Certificate serial: 171D4F7E7FD73BD183B246A7E9E28C07EB983F0B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9A8A6B9E08D026673630DC1A26DBE73DFA16132.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/E9A8A6B9E08D026673630DC1A26DBE73DFA16132.mft
Manifest number: 3E
Signing time: Wed 17 Jun 2026 01:14:25 +0000
Manifest this update: Wed 17 Jun 2026 01:09:25 +0000
Manifest next update: Thu 18 Jun 2026 04:06:25 +0000
Files and hashes: 1: E9A8A6B9E08D026673630DC1A26DBE73DFA16132.crl (hash: i9A0SRJ5c4dxjKW0ggNFx6KkptsyHEPeLdL15n2ahLU=)
2: 3130332e3136302e33372e302f32342d3234203d3e20313431353834.roa (hash: 5XEDOOrbyLaQ3rvBerNKeMoDupncLVY5Kqo+4A1sTYY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/E9A8A6B9E08D026673630DC1A26DBE73DFA16132.crl
rsync://rpki-rsync.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/E9A8A6B9E08D026673630DC1A26DBE73DFA16132.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9A8A6B9E08D026673630DC1A26DBE73DFA16132.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:1d:4f:7e:7f:d7:3b:d1:83:b2:46:a7:e9:e2:8c:07:eb:98:3f:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E9A8A6B9E08D026673630DC1A26DBE73DFA16132
Validity
Not Before: Jun 17 01:09:25 2026 GMT
Not After : Jun 18 04:06:25 2026 GMT
Subject: CN=D9DD5ECD92A14F484A9617878D48DCD5C0FBE140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:22:e0:9d:17:fd:4c:79:e3:38:50:93:e3:7e:
2a:fa:6f:6f:42:f2:3d:03:2f:fe:81:b8:81:5f:d7:
61:b5:f3:f4:fd:c2:fe:72:b8:da:17:2e:8f:7c:32:
69:43:09:91:09:2b:91:a5:14:03:95:74:84:00:71:
3b:21:c2:6e:2e:18:11:75:16:b5:49:a7:be:5d:64:
a9:ce:da:e7:90:a9:38:c5:93:ab:2b:04:b2:82:4d:
02:33:5d:6f:72:32:c0:72:13:14:4b:69:1f:57:0d:
a0:37:20:20:8e:c7:c4:2b:24:36:54:33:67:6f:dc:
72:56:87:4f:1a:ad:97:2e:3a:70:ec:20:e1:2a:75:
aa:20:04:8f:95:af:c7:c4:04:fb:57:6c:92:46:86:
95:af:eb:8e:4e:e2:0a:c5:31:d2:46:11:18:d1:64:
9e:07:87:fb:1a:57:22:8c:1c:3a:ef:99:1a:35:88:
6e:04:39:a3:59:98:76:a3:d9:59:df:63:20:59:ae:
9f:b9:e9:f4:9e:d6:51:e7:78:3e:ae:93:68:05:cb:
f6:bd:78:c6:f1:1f:f9:e6:2a:b0:2f:cf:e4:47:04:
c3:45:83:85:01:6d:b5:90:df:ee:bd:79:3d:f8:7c:
fe:f5:93:27:9b:4e:ca:cb:07:dc:f9:53:8b:73:d1:
eb:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:DD:5E:CD:92:A1:4F:48:4A:96:17:87:8D:48:DC:D5:C0:FB:E1:40
X509v3 Authority Key Identifier:
keyid:E9:A8:A6:B9:E0:8D:02:66:73:63:0D:C1:A2:6D:BE:73:DF:A1:61:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/E9A8A6B9E08D026673630DC1A26DBE73DFA16132.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9A8A6B9E08D026673630DC1A26DBE73DFA16132.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/E9A8A6B9E08D026673630DC1A26DBE73DFA16132.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:8d:68:4b:6f:04:90:d8:47:b3:ee:01:9c:d4:99:1a:0f:c7:
79:4e:ba:de:9d:5d:7a:0e:8d:e7:37:fa:00:2b:f1:a2:2d:d6:
cf:08:79:17:f9:f5:74:95:71:c6:98:aa:80:4d:ad:43:61:21:
56:76:a4:9e:82:99:c5:e6:3b:5a:1c:f8:56:46:41:f5:9e:ee:
66:05:79:d1:40:c0:54:f0:05:ac:94:fa:26:ec:a3:f1:5d:39:
66:9d:90:0e:63:32:3a:82:2e:c3:70:cb:3b:22:80:b9:73:54:
ea:e0:5d:71:dd:f8:c0:9b:25:af:23:dd:10:00:b8:43:13:c2:
ad:df:bd:45:e4:ab:82:29:1f:61:f4:2c:13:d7:99:09:a5:01:
aa:4a:f9:58:4a:43:2a:c4:85:9f:75:fd:e8:b0:cc:ba:a7:d2:
a8:c9:94:93:a1:31:b0:e1:c5:30:b6:96:b9:bb:9f:ee:7d:31:
36:bf:36:ee:a5:43:57:0c:c9:0a:51:2e:dc:b8:b0:84:73:b1:
b5:f6:95:7e:33:fb:4d:0b:0f:25:e7:9d:4e:8c:4a:20:c8:9d:
0c:e3:47:57:91:46:93:c6:a8:9f:95:4c:c6:65:10:94:1e:26:
c3:f7:92:77:e8:7e:07:c2:7e:01:b4:9b:f9:5f:f2:e6:61:31:
f4:0e:b1:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:30:58 2026 by rpki-client