
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/E2807BC52478D8B3952B24F68408B7477218FD9C.mft
File: E2807BC52478D8B3952B24F68408B7477218FD9C.mft (raw, json)
Hash identifier: 1ylA4Jl2tuhC7DSxusgprpdHX4H2LOjxBnNSRq0th8A=
Subject key identifier: 2A:B5:01:60:60:B0:2A:F3:4A:E2:61:B9:67:B8:20:3A:1E:F9:A8:35
Authority key identifier: E2:80:7B:C5:24:78:D8:B3:95:2B:24:F6:84:08:B7:47:72:18:FD:9C
Certificate issuer: /CN=E2807BC52478D8B3952B24F68408B7477218FD9C
Certificate serial: 42208F182A89F4E89A4DE128D988954DFF733914
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E2807BC52478D8B3952B24F68408B7477218FD9C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/E2807BC52478D8B3952B24F68408B7477218FD9C.mft
Manifest number: BE
Signing time: Mon 21 Sep 2026 13:28:13 +0000
Manifest this update: Mon 21 Sep 2026 13:23:13 +0000
Manifest next update: Tue 22 Sep 2026 15:32:13 +0000
Files and hashes: 1: E2807BC52478D8B3952B24F68408B7477218FD9C.crl (hash: PCqJGmFgKgve8h89uKplebty3QGpZOYmuH/pGwAt4w0=)
2: 3130332e38372e36302e302f32322d3234203d3e20313336303932.roa (hash: dt4pmE76WMWzPNZkKU1y0T8GmeM++xgUm8+x5NAeCc4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/E2807BC52478D8B3952B24F68408B7477218FD9C.crl
rsync://rpki-rsync.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/E2807BC52478D8B3952B24F68408B7477218FD9C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E2807BC52478D8B3952B24F68408B7477218FD9C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 05:24:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:20:8f:18:2a:89:f4:e8:9a:4d:e1:28:d9:88:95:4d:ff:73:39:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E2807BC52478D8B3952B24F68408B7477218FD9C
Validity
Not Before: Sep 21 13:23:13 2026 GMT
Not After : Sep 22 15:32:13 2026 GMT
Subject: CN=2AB5016060B02AF34AE261B967B8203A1EF9A835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a6:74:28:b3:b8:2d:5a:d1:7b:e9:09:6d:0a:
54:62:86:c5:1c:0e:a3:ce:15:2b:64:c8:6c:05:f8:
71:50:2f:a4:f2:2a:97:53:46:9d:81:96:c3:37:14:
47:f8:a1:ed:b0:3e:b1:d9:e7:87:4a:7b:a1:b3:4b:
60:e4:f3:6c:ac:76:e7:e5:fc:45:60:2f:76:f8:f4:
a3:95:06:3b:9e:00:29:d8:8a:09:38:c6:93:cf:6b:
df:b5:b9:08:b4:ae:df:b3:61:15:fa:87:38:bb:96:
03:0e:5b:bc:8b:88:9b:76:0a:f9:8d:43:49:67:ed:
cb:ad:7c:5c:57:de:48:04:aa:97:e3:72:c3:2e:41:
42:61:ce:71:60:d5:1f:21:fa:a7:d9:c0:2c:1c:78:
fc:c9:5b:86:0a:45:2e:26:d5:ac:50:4b:77:bf:e8:
f5:73:b4:8d:74:44:b5:d2:64:0b:ec:e0:22:1f:a9:
eb:b4:a4:0d:f0:97:b4:c5:55:5f:36:06:ce:16:20:
ca:7f:6d:53:17:04:09:bf:4b:d7:da:60:cd:b2:7e:
7a:0f:0d:d9:e3:4a:7d:81:47:0c:08:cb:c7:02:64:
70:9e:e7:0f:9c:e7:f3:f4:f6:07:87:fb:0f:a1:a7:
f1:b7:b8:73:d0:d8:ce:f3:06:3e:40:5b:01:24:2e:
78:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:B5:01:60:60:B0:2A:F3:4A:E2:61:B9:67:B8:20:3A:1E:F9:A8:35
X509v3 Authority Key Identifier:
keyid:E2:80:7B:C5:24:78:D8:B3:95:2B:24:F6:84:08:B7:47:72:18:FD:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/E2807BC52478D8B3952B24F68408B7477218FD9C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E2807BC52478D8B3952B24F68408B7477218FD9C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/E2807BC52478D8B3952B24F68408B7477218FD9C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:85:23:2e:84:b3:6a:32:36:27:01:1b:4e:da:ed:18:e2:eb:
af:69:52:fa:82:fe:cb:71:70:fe:67:8c:e0:9d:a9:11:11:7c:
58:84:49:88:a6:a3:86:de:f6:76:77:e3:0a:f0:6f:ee:a8:2c:
21:0d:e8:e3:65:57:cd:39:6b:d9:35:2f:cd:55:4b:dd:87:4e:
00:36:79:12:90:3f:41:2f:ed:61:76:a6:76:e7:98:c0:e8:42:
67:98:93:82:2b:4c:16:2c:4f:a2:e1:8e:51:7b:98:c4:af:59:
66:54:9a:32:20:7d:af:73:dc:87:c2:6b:6f:f1:df:d4:42:96:
c1:a2:d4:38:7b:eb:dd:b4:81:f3:d0:ba:c3:26:2d:d5:be:7c:
8c:74:68:51:b5:2a:57:b7:3d:23:7d:6f:f1:f4:2a:20:d8:e0:
52:04:d4:76:a8:63:19:54:29:a6:ee:86:00:c0:54:e3:42:6d:
ee:2c:f9:dd:d1:01:75:1f:29:f7:bf:02:16:b7:44:45:60:63:
6c:fc:47:57:62:17:f8:88:b4:f8:74:c0:d3:37:29:6e:a7:ff:
1d:80:ca:ef:74:ac:ad:d4:25:a8:e2:b0:83:45:34:b1:bf:fc:
61:18:f8:88:c2:ba:06:53:f0:77:f4:0e:66:a3:5d:d4:a8:79:
4e:b8:18:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:56:39 2026 by rpki-client