
$ rpki-client -vvf rpki-rsync.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/E97B01E9B103A0595C106FBDB4EA9635F3812B44.mft
File: E97B01E9B103A0595C106FBDB4EA9635F3812B44.mft (raw, json)
Hash identifier: ehaDKOir8qFLoFPfIGgbeRlnmO7guxWF/T6tYr/h80w=
Subject key identifier: FA:2E:80:19:8E:9E:B9:47:4B:57:66:F9:97:60:18:F8:AD:9B:7D:4D
Authority key identifier: E9:7B:01:E9:B1:03:A0:59:5C:10:6F:BD:B4:EA:96:35:F3:81:2B:44
Certificate issuer: /CN=E97B01E9B103A0595C106FBDB4EA9635F3812B44
Certificate serial: 15CF2DB9E7E2A24CF6CEFFE51B3AD5384B76AA09
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E97B01E9B103A0595C106FBDB4EA9635F3812B44.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/E97B01E9B103A0595C106FBDB4EA9635F3812B44.mft
Manifest number: 3B
Signing time: Sun 14 Jun 2026 09:24:17 +0000
Manifest this update: Sun 14 Jun 2026 09:19:17 +0000
Manifest next update: Mon 15 Jun 2026 09:26:17 +0000
Files and hashes: 1: E97B01E9B103A0595C106FBDB4EA9635F3812B44.crl (hash: Y8LbmyqnExu+tHmkt9NCJQCs+TOYPnnXydEoTtDawZ4=)
2: 3130332e3134382e38382e302f32342d3234203d3e20313430343231.roa (hash: 17JZlywqEJeGYZvXZ5p1XRwbIJcNG0ARBxLeQExtlUI=)
3: 3130332e3134382e38392e302f32342d3234203d3e20313430343231.roa (hash: vqX/mtnN0W8RLZb7l8bNIZx8LnJh0g2gbraFilNseKo=)
4: 323030313a6466323a633938303a3a2f34382d3438203d3e20313430343231.roa (hash: eE2EjWF5JyFRMHUXcgYuX1KiOGjP1McRgQBH4Ci3bis=)
5: 3130332e3134382e38382e302f32332d3233203d3e20313430343231.roa (hash: 3u4SqpMZHOiN005smob5L/czZ7TrAkEBbioYuGaCo6o=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/E97B01E9B103A0595C106FBDB4EA9635F3812B44.crl
rsync://rpki-rsync.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/E97B01E9B103A0595C106FBDB4EA9635F3812B44.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E97B01E9B103A0595C106FBDB4EA9635F3812B44.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 15 Jun 2026 07:27:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:cf:2d:b9:e7:e2:a2:4c:f6:ce:ff:e5:1b:3a:d5:38:4b:76:aa:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E97B01E9B103A0595C106FBDB4EA9635F3812B44
Validity
Not Before: Jun 14 09:19:17 2026 GMT
Not After : Jun 15 09:26:17 2026 GMT
Subject: CN=FA2E80198E9EB9474B5766F9976018F8AD9B7D4D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:29:22:d7:9a:84:72:01:a9:36:e8:0b:44:de:
20:21:88:ae:cf:3c:b9:91:31:80:7f:2c:b2:9e:17:
7e:aa:98:b0:bb:46:5d:29:b4:89:84:89:88:5a:8b:
e0:11:4d:fb:fc:cb:61:30:c8:3b:e7:d3:07:90:6f:
06:03:5b:95:62:f1:18:5a:84:20:3a:e4:fe:29:53:
a7:cd:59:4a:c2:9a:5c:3f:c8:3e:f6:03:c2:2c:27:
b6:28:d3:bb:9a:b3:b1:9c:21:21:4b:0c:22:62:9f:
c3:2c:4f:66:04:f2:61:91:13:62:78:dd:fa:b0:4a:
08:b0:31:bf:c0:b2:3e:d0:61:4b:da:5e:d4:c8:9e:
bc:4c:4b:86:7a:ab:ab:9a:67:86:bc:ed:43:1d:52:
93:ab:1d:81:fa:24:b5:53:df:7e:1a:51:12:5a:8f:
e4:eb:6e:8b:c4:28:b1:40:9a:97:e3:e2:d5:c7:fd:
50:8c:e3:ee:c7:02:c3:3a:0c:fb:22:ee:bf:63:37:
0b:6f:91:6a:a7:af:24:24:5a:49:0c:be:d3:0a:aa:
5e:33:9c:74:08:ef:3b:9d:37:9b:0f:73:77:ef:5b:
44:49:7d:22:5c:09:03:f4:59:f1:ef:0b:1a:9d:e9:
a6:fc:9d:99:17:cb:2b:9f:a2:23:f3:34:e1:60:74:
2f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:2E:80:19:8E:9E:B9:47:4B:57:66:F9:97:60:18:F8:AD:9B:7D:4D
X509v3 Authority Key Identifier:
keyid:E9:7B:01:E9:B1:03:A0:59:5C:10:6F:BD:B4:EA:96:35:F3:81:2B:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/E97B01E9B103A0595C106FBDB4EA9635F3812B44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E97B01E9B103A0595C106FBDB4EA9635F3812B44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/E97B01E9B103A0595C106FBDB4EA9635F3812B44.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:09:6e:39:94:34:80:1a:e9:9e:95:4c:59:cb:8d:b6:3c:df:
3e:e9:1c:42:30:f8:e5:92:d2:d9:78:b4:7e:91:75:fd:bf:71:
98:99:4e:12:f6:1a:65:9e:f1:c7:ea:a1:94:de:f1:a8:f4:a2:
86:00:76:88:a0:6d:45:74:cd:86:62:6d:43:34:f4:5d:72:bd:
2b:b2:72:3b:50:5a:32:0d:0a:4d:eb:80:48:d8:d0:2d:85:25:
98:f8:f9:db:18:97:7c:1e:9c:99:79:b4:d2:aa:0d:0c:de:66:
51:a2:04:60:1e:60:29:7d:3c:fc:68:4c:36:f2:31:16:2e:86:
24:93:82:0b:23:0e:7d:59:23:97:ff:89:ad:a2:57:73:9c:42:
0a:e0:fa:2a:d9:d2:24:61:ba:43:03:53:f4:27:c3:0b:95:85:
c4:79:49:1b:93:9a:4c:aa:b9:5a:78:02:f2:02:69:76:03:20:
16:5f:ab:f0:26:b2:a7:96:06:8d:9f:66:08:15:f5:73:58:78:
24:05:1f:58:3c:b5:c0:db:de:47:19:4b:bf:5f:e3:16:14:eb:
80:23:05:28:26:2c:d7:02:c8:ba:44:63:5b:3a:a0:b8:8e:00:
43:bc:5b:3f:a0:87:ee:67:9b:5b:77:dd:01:81:23:de:b9:e3:
e2:bb:8a:79
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUFc8tuefiokz2zv/lGzrVOEt2qgkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTk3QjAxRTlCMTAzQTA1OTVDMTA2RkJEQjRFQTk2MzVG
MzgxMkI0NDAeFw0yNjA2MTQwOTE5MTdaFw0yNjA2MTUwOTI2MTdaMDMxMTAvBgNV
BAMTKEZBMkU4MDE5OEU5RUI5NDc0QjU3NjZGOTk3NjAxOEY4QUQ5QjdENEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhKSLXmoRyAak26AtE3iAhiK7P
PLmRMYB/LLKeF36qmLC7Rl0ptImEiYhai+ARTfv8y2EwyDvn0weQbwYDW5Vi8Rha
hCA65P4pU6fNWUrCmlw/yD72A8IsJ7Yo07uas7GcISFLDCJin8MsT2YE8mGRE2J4
3fqwSgiwMb/Asj7QYUvaXtTInrxMS4Z6q6uaZ4a87UMdUpOrHYH6JLVT334aURJa
j+TrbovEKLFAmpfj4tXH/VCM4+7HAsM6DPsi7r9jNwtvkWqnryQkWkkMvtMKql4z
nHQI7zudN5sPc3fvW0RJfSJcCQP0WfHvCxqd6ab8nZkXyyufoiPzNOFgdC9BAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU+i6AGY6euUdLV2b5l2AY+K2bfU0wHwYDVR0j
BBgwFoAU6XsB6bEDoFlcEG+9tOqWNfOBK0QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OGI3MmVjYTQtNzNhZC00ZTBiLWE2YTYtN2E2NTY5OGI3M2JlLzAvRTk3QjAxRTlC
MTAzQTA1OTVDMTA2RkJEQjRFQTk2MzVGMzgxMkI0NC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FOTdCMDFFOUIxMDNBMDU5NUMxMDZGQkRCNEVBOTYzNUYzODEy
QjQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGI3MmVjYTQtNzNhZC00ZTBiLWE2
YTYtN2E2NTY5OGI3M2JlLzAvRTk3QjAxRTlCMTAzQTA1OTVDMTA2RkJEQjRFQTk2
MzVGMzgxMkI0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJIJbjmUNIAa6Z6VTFnLjbY83z7pHEIw+OWS
0tl4tH6Rdf2/cZiZThL2GmWe8cfqoZTe8aj0ooYAdoigbUV0zYZibUM09F1yvSuy
cjtQWjINCk3rgEjY0C2FJZj4+dsYl3wenJl5tNKqDQzeZlGiBGAeYCl9PPxoTDby
MRYuhiSTggsjDn1ZI5f/ia2iV3OcQgrg+irZ0iRhukMDU/QnwwuVhcR5SRuTmkyq
uVp4AvICaXYDIBZfq/AmsqeWBo2fZggV9XNYeCQFH1g8tcDb3kcZS79f4xYU64Aj
BSgmLNcCyLpEY1s6oLiOAEO8Wz+gh+5nm1t33QGBI9654+K7ink=
-----END CERTIFICATE-----
Generated at Sun Jun 14 12:16:54 2026 by rpki-client