
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/85f9002d-9267-4f8b-859a-dfa7d89143b4/0/E13177CE4E5C1407466936B4193E0B11E39AA6F8.mft
File: E13177CE4E5C1407466936B4193E0B11E39AA6F8.mft (raw, json)
Hash identifier: fX9/OwsH0gjbijuQvekz/LF4ER2jUA5uvD/alJz8yLI=
Subject key identifier: 61:41:BA:0E:B5:A4:A4:9B:84:4E:2C:99:D6:21:A3:D5:C0:6F:60:03
Authority key identifier: E1:31:77:CE:4E:5C:14:07:46:69:36:B4:19:3E:0B:11:E3:9A:A6:F8
Certificate issuer: /CN=E13177CE4E5C1407466936B4193E0B11E39AA6F8
Certificate serial: 335BC7309735B802F2C613BD405209C39E5EE7F9
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E13177CE4E5C1407466936B4193E0B11E39AA6F8.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/85f9002d-9267-4f8b-859a-dfa7d89143b4/0/E13177CE4E5C1407466936B4193E0B11E39AA6F8.mft
Manifest number: C2
Signing time: Thu 24 Sep 2026 02:18:34 +0000
Manifest this update: Thu 24 Sep 2026 02:13:34 +0000
Manifest next update: Fri 25 Sep 2026 05:46:34 +0000
Files and hashes: 1: 3130332e3136362e3234302e302f32332d3233203d3e20313431393639.roa (hash: gGUcfX35JR6LWByHoWtXoWvCull7LxM91Z3jg16aSlo=)
2: 3130332e3136362e3234312e302f32342d3234203d3e20313431393639.roa (hash: HkWboPR/l28Qd/gjZFN0EmMYcGZiEVTHPsAa19NTjWI=)
3: E13177CE4E5C1407466936B4193E0B11E39AA6F8.crl (hash: XN3LQAKpGwCh9MhdNQ4PLLMSxBtKjFlQHDd2g2VKTJQ=)
4: 3130332e3136362e3234302e302f32342d3234203d3e20313431393639.roa (hash: zZxXDi8iy3KS/uupWW0nVAXq3kN53K+3nF+iOYvJuas=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/85f9002d-9267-4f8b-859a-dfa7d89143b4/0/E13177CE4E5C1407466936B4193E0B11E39AA6F8.crl
rsync://rpki-rsync.idnic.net/repo/85f9002d-9267-4f8b-859a-dfa7d89143b4/0/E13177CE4E5C1407466936B4193E0B11E39AA6F8.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E13177CE4E5C1407466936B4193E0B11E39AA6F8.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 05:46:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:5b:c7:30:97:35:b8:02:f2:c6:13:bd:40:52:09:c3:9e:5e:e7:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E13177CE4E5C1407466936B4193E0B11E39AA6F8
Validity
Not Before: Sep 24 02:13:34 2026 GMT
Not After : Sep 25 05:46:34 2026 GMT
Subject: CN=6141BA0EB5A4A49B844E2C99D621A3D5C06F6003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e5:11:90:0c:ec:2f:d4:26:95:2f:a8:15:a0:
97:93:d2:2f:e9:0a:cc:4b:89:a5:51:22:ac:8a:52:
2c:7d:03:0e:90:56:8f:99:be:85:51:05:a3:dd:c5:
85:3f:9f:2d:1b:9c:21:36:6b:ec:de:4b:14:41:11:
64:e6:f6:12:28:14:11:d2:6e:9f:3f:9b:b2:75:06:
ae:4d:c4:44:1c:4e:dc:1b:78:8c:63:c8:04:a6:c6:
54:7f:9d:9d:c4:03:1c:3c:83:a1:7d:05:fe:d7:34:
99:1c:30:63:51:4a:e0:4a:08:09:3f:57:41:ea:9e:
37:6f:5e:f4:67:07:02:cb:30:97:84:f8:f2:b3:69:
a3:8d:e6:f3:f1:77:44:3e:f7:ed:ec:85:05:02:55:
98:e2:79:5c:bd:59:3e:94:36:63:c1:1e:af:56:29:
38:27:84:00:da:b2:aa:f5:02:e7:4e:54:e5:68:e5:
74:6f:b0:35:18:7d:ec:93:44:2e:be:e1:b6:54:b5:
84:4f:a3:37:a5:e9:84:4f:8e:42:06:fd:60:c8:5a:
4c:de:f9:82:7b:47:b8:a4:3d:03:94:51:e6:85:7c:
56:23:60:52:51:55:b5:e9:9f:d8:54:ce:50:61:84:
e5:a3:81:7e:0e:13:b1:f6:ad:6e:ff:59:e0:b4:32:
29:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:41:BA:0E:B5:A4:A4:9B:84:4E:2C:99:D6:21:A3:D5:C0:6F:60:03
X509v3 Authority Key Identifier:
keyid:E1:31:77:CE:4E:5C:14:07:46:69:36:B4:19:3E:0B:11:E3:9A:A6:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/85f9002d-9267-4f8b-859a-dfa7d89143b4/0/E13177CE4E5C1407466936B4193E0B11E39AA6F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E13177CE4E5C1407466936B4193E0B11E39AA6F8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/85f9002d-9267-4f8b-859a-dfa7d89143b4/0/E13177CE4E5C1407466936B4193E0B11E39AA6F8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:1a:7e:6d:23:bc:fb:81:4b:4a:3c:cf:4c:4a:9b:5c:a6:4e:
2b:72:6a:a6:00:ce:bf:9e:04:93:cc:89:28:41:b1:12:76:a8:
db:e9:4f:da:a8:6e:c7:a6:8d:aa:cf:c6:48:64:51:53:37:39:
3c:c7:c7:70:73:ab:e8:54:0d:8b:00:18:3b:20:45:bd:a9:65:
77:47:44:c3:92:30:e6:c2:52:4d:8d:68:f6:2f:70:7b:98:1c:
00:8f:1b:a9:90:b3:f8:57:f4:bc:d0:17:46:6a:05:fc:80:51:
fc:a1:a2:2e:37:e2:16:11:a9:67:ba:05:b5:37:2d:0e:92:f7:
05:4e:8d:1e:7a:ec:d4:43:ac:e2:46:eb:3f:14:54:06:9e:05:
03:5e:2d:9f:04:c6:ec:21:58:66:23:b2:d8:b7:b4:76:3b:99:
68:ed:0f:d2:ca:33:52:1a:a6:6c:6a:fe:f4:d6:e3:3e:15:b8:
5e:15:89:dd:0e:b3:d5:0f:6f:43:31:25:55:b7:bb:52:a9:24:
9d:dd:cd:50:c0:af:68:04:81:c4:4b:61:67:a6:8d:a1:6e:c0:
c8:1b:90:e6:e8:af:88:f3:17:66:66:81:7d:b0:cc:da:b5:f9:
da:b6:cd:05:ac:fa:6b:41:05:7a:ca:f3:36:4d:bc:7c:18:36:
ce:8a:2a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:59:44 2026 by rpki-client