
$ rpki-client -vvf rpki-rsync.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.mft
File: DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.mft (raw, json)
Hash identifier: JVjF3KXoDqpHu+/FyayHCkoak/R/lLP44KO3Z8FjIlY=
Subject key identifier: 9F:E9:F1:3F:5F:EF:8C:37:A6:8A:D4:74:E9:45:F7:0B:22:EC:3F:74
Authority key identifier: DE:4E:99:EA:03:0A:F8:AE:BF:B7:B6:A7:A0:E9:16:74:DD:B2:9A:C3
Certificate issuer: /CN=DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3
Certificate serial: 4739F1771D515259266D95BB2B99298A6AD2CA48
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.mft
Manifest number: 39
Signing time: Sat 13 Jun 2026 15:43:39 +0000
Manifest this update: Sat 13 Jun 2026 15:38:39 +0000
Manifest next update: Sun 14 Jun 2026 17:39:39 +0000
Files and hashes: 1: 3232332e32352e3130342e302f32342d3234203d3e20313530323238.roa (hash: ovVBKtJH+Wixf+bjFfGN0BaqhZuS+FBdLYnDH3wV8vw=)
2: 3232332e32352e3130392e302f32342d3234203d3e20313439373138.roa (hash: D8gdQFYf8NnWhum3Srq97Jkm5hnXUuKFuTsge2OROqA=)
3: DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.crl (hash: iCc7GaC86uSpHCCjN+DHoL0+qjvHr2bslI+sxBGGxTE=)
4: 3232332e32352e3131302e302f32342d3234203d3e20313336383733.roa (hash: d26NLF/sKVXadNSIsUNq9koHjOM/iTFNcX1v1zkyxRU=)
5: 3232332e32352e3131312e302f32342d3234203d3e20313431363037.roa (hash: 2xJo8vO5RtzGv7BkUmxulZhOANWhCfhuYoau31MaZh0=)
6: 3232332e32352e3130372e302f32342d3234203d3e20313439373138.roa (hash: f+1xV3V7eIo4yjJqos+xUQVvX1GIUuOZUCoIKtF+llo=)
7: 323430323a613530303a3a2f33322d3332203d3e2034383231.roa (hash: BDfl1ljAlzUeNiFgOAogNvfZpmtNq6Kp37cGWuK0R5E=)
8: 3232332e32352e3130362e302f32342d3234203d3e20313336383733.roa (hash: zZohFjEfg5KbgTKUDn03P4ViER6I84zu0tvUUBWCbms=)
9: 3232332e32352e3130352e302f32342d3234203d3e2034383231.roa (hash: zkjugBCGR1RTN3rv+4fVMMpCR+DjhaqSm22RICfrfmA=)
10: 3232332e32352e39362e302f32312d3234203d3e2039333431.roa (hash: 7Jy3y4ltltsmzNhSvINfLmQPgIpSxy3LDWGrSnNQ3Zk=)
11: 3232332e32352e3130382e302f32342d3234203d3e2034383231.roa (hash: lZy/D3zEI+V1zNnvBB6OJZ7BzAoFD7HSvYryTbhRU2s=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.crl
rsync://rpki-rsync.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:39:f1:77:1d:51:52:59:26:6d:95:bb:2b:99:29:8a:6a:d2:ca:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3
Validity
Not Before: Jun 13 15:38:39 2026 GMT
Not After : Jun 14 17:39:39 2026 GMT
Subject: CN=9FE9F13F5FEF8C37A68AD474E945F70B22EC3F74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:cc:3c:18:72:af:42:5d:4b:c4:0c:a2:54:a8:
e6:00:33:80:30:4e:18:f8:d8:7c:9a:8b:e0:cd:4d:
5e:00:a9:f6:1b:d7:45:20:c2:8e:b7:ad:42:ee:36:
20:9e:6f:c0:25:1d:89:18:19:73:42:cf:fc:6b:19:
db:4a:e2:d6:3c:1b:9b:2e:64:6b:ef:d1:c6:56:15:
d6:17:df:cb:88:d2:d1:e3:eb:2a:48:a9:ff:82:e5:
7a:45:f9:a6:a2:0d:df:2b:f0:7d:5a:c1:b4:c0:05:
43:2a:32:31:f8:ee:77:42:36:80:42:8d:13:9f:be:
3d:8e:e6:c5:4d:ad:64:f0:c0:7e:4c:75:6c:ce:8d:
7f:b5:f4:2f:0a:75:fd:89:21:47:05:ff:cb:4b:01:
46:e5:5d:e6:2e:2d:a0:74:b1:9a:cb:42:fb:bf:83:
32:c8:9b:75:36:db:42:cd:a8:86:2d:f2:a7:a3:a3:
1b:fe:7f:73:e5:62:43:00:71:42:1c:a1:b7:02:9f:
91:84:1e:36:a8:06:85:50:fa:02:d5:a0:d2:d5:62:
ab:37:21:f2:80:7c:72:8d:04:ed:1c:62:a2:2c:c0:
c6:00:bf:86:40:78:05:81:ec:8b:5f:54:24:80:ef:
b6:c6:83:c4:12:70:5c:d6:46:56:a4:1b:80:52:2b:
4f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:E9:F1:3F:5F:EF:8C:37:A6:8A:D4:74:E9:45:F7:0B:22:EC:3F:74
X509v3 Authority Key Identifier:
keyid:DE:4E:99:EA:03:0A:F8:AE:BF:B7:B6:A7:A0:E9:16:74:DD:B2:9A:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:be:ba:cb:d8:40:00:7f:d8:58:93:c4:04:6d:00:49:b1:c6:
4f:a3:c1:33:38:8c:fd:f1:ca:5c:bb:4c:80:c5:c1:7a:4f:c1:
32:4f:92:e0:c4:49:37:a9:36:0d:63:ec:f7:cb:68:f9:07:48:
61:c7:bb:51:52:01:38:92:cb:ec:be:d5:3b:76:3c:5a:e9:da:
d2:e5:6e:54:7a:d1:f3:2b:b4:24:9a:09:10:bc:2a:d0:5a:be:
f5:3f:6f:cb:29:89:b5:6b:de:95:77:e4:63:0e:93:7e:72:fa:
46:c9:04:db:71:53:38:64:05:02:ed:53:9e:83:7e:9a:0e:d1:
68:01:fc:8e:19:93:92:4a:4f:e0:a0:b2:55:57:2d:47:48:01:
66:38:95:d7:6d:f2:29:08:a1:ad:61:b6:3b:5c:c4:8f:26:35:
54:1d:af:bf:7f:54:23:0e:b2:dc:77:60:98:73:ea:8d:7c:68:
5e:6c:f6:b1:33:8b:1d:07:c0:80:4f:95:0e:86:9e:c0:86:86:
db:c3:4f:2e:47:94:fb:13:d0:b9:d5:46:b5:c8:40:09:3e:14:
60:98:fc:5c:13:13:0d:36:b8:54:b0:9e:09:72:04:b7:32:a0:
00:80:99:57:1d:8e:8b:c6:b6:47:ae:0f:d5:5b:7c:ea:48:50:
8d:56:dd:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:01:51 2026 by rpki-client