
$ rpki-client -vvf rpki-rsync.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/E9EEF08AA8356D769BA16B981FE69DB5DE203409.mft
File: E9EEF08AA8356D769BA16B981FE69DB5DE203409.mft (raw, json)
Hash identifier: H2ckX2dax4vyLjalERUxL/OeNkwTjFNFePPoXJ+Pmp4=
Subject key identifier: 28:FE:78:ED:59:1A:F7:0E:2C:54:22:83:0D:53:C3:9E:4A:46:4F:1F
Authority key identifier: E9:EE:F0:8A:A8:35:6D:76:9B:A1:6B:98:1F:E6:9D:B5:DE:20:34:09
Certificate issuer: /CN=E9EEF08AA8356D769BA16B981FE69DB5DE203409
Certificate serial: 269A34E5348634DD8634ABFBCF65790E51A51D22
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9EEF08AA8356D769BA16B981FE69DB5DE203409.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/E9EEF08AA8356D769BA16B981FE69DB5DE203409.mft
Manifest number: 3D
Signing time: Tue 16 Jun 2026 19:37:52 +0000
Manifest this update: Tue 16 Jun 2026 19:32:52 +0000
Manifest next update: Wed 17 Jun 2026 21:00:52 +0000
Files and hashes: 1: 3130332e3137342e31332e302f32342d3234203d3e20313437313730.roa (hash: xCU5A2qMTm4OgALTP8opeqK/3efnC4H4bV18tfZlMHk=)
2: E9EEF08AA8356D769BA16B981FE69DB5DE203409.crl (hash: hsCejJcCXWWPmgL75a2dOflEVKfYrVTOIoq3RTp1ebM=)
3: 3130332e3137382e38332e302f32342d3234203d3e20313437313730.roa (hash: UaaNiDpFBSvOxzLMpx1eGc8touUo5VTmZX/HVEAL/G4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/E9EEF08AA8356D769BA16B981FE69DB5DE203409.crl
rsync://rpki-rsync.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/E9EEF08AA8356D769BA16B981FE69DB5DE203409.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9EEF08AA8356D769BA16B981FE69DB5DE203409.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 21:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:9a:34:e5:34:86:34:dd:86:34:ab:fb:cf:65:79:0e:51:a5:1d:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E9EEF08AA8356D769BA16B981FE69DB5DE203409
Validity
Not Before: Jun 16 19:32:52 2026 GMT
Not After : Jun 17 21:00:52 2026 GMT
Subject: CN=28FE78ED591AF70E2C5422830D53C39E4A464F1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:72:03:ad:f3:da:a4:9b:38:e0:74:91:4b:c7:
bb:ef:84:84:c2:4c:9c:05:7b:f3:6f:d7:1f:c8:f5:
c9:69:2f:9f:55:66:e5:e5:f5:48:3d:28:2f:12:2b:
14:26:37:e7:04:5c:8e:f2:14:e9:97:2a:fc:05:09:
f4:5a:4b:ec:55:49:df:8f:9a:60:d1:88:fe:b2:c4:
73:5e:a2:89:1c:d1:44:27:be:64:f0:44:66:aa:ea:
66:ca:2b:8d:52:be:76:36:1f:67:94:e6:f2:10:b8:
f0:39:bb:48:d2:9e:da:ea:5d:28:7a:b3:16:07:1a:
97:16:eb:97:17:dd:fd:3d:3e:73:66:87:f9:d5:1a:
8f:00:a6:36:f8:50:40:7b:56:43:f9:da:6d:cc:27:
45:cf:03:a6:bd:fa:6e:02:9a:d1:9d:c8:4f:f5:07:
d7:9c:d9:60:20:b8:c1:c9:ab:eb:46:66:02:00:f2:
7a:df:4a:36:6f:b5:e0:52:76:5c:df:e3:6c:47:7c:
fb:ff:91:2b:aa:e7:67:82:32:3d:ff:ab:66:db:df:
5c:3e:bd:b4:6e:52:a9:a7:e2:d2:cd:66:f7:98:0c:
f8:36:94:eb:68:63:9a:f6:01:70:cd:1d:63:71:40:
12:9a:ab:56:fb:22:06:26:cd:12:e4:17:39:ad:88:
f2:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:FE:78:ED:59:1A:F7:0E:2C:54:22:83:0D:53:C3:9E:4A:46:4F:1F
X509v3 Authority Key Identifier:
keyid:E9:EE:F0:8A:A8:35:6D:76:9B:A1:6B:98:1F:E6:9D:B5:DE:20:34:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/E9EEF08AA8356D769BA16B981FE69DB5DE203409.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9EEF08AA8356D769BA16B981FE69DB5DE203409.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/E9EEF08AA8356D769BA16B981FE69DB5DE203409.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:e8:7b:81:51:df:ad:07:d2:6d:38:b8:0d:c7:ed:24:ee:4d:
0d:27:23:6d:9f:b3:de:61:7d:4e:c1:14:5a:ce:e3:16:41:cc:
49:48:ca:04:f3:23:2d:fe:b3:5b:d5:a1:11:50:2b:c2:6f:0a:
72:99:e0:8b:05:0d:6d:2c:50:be:e1:bd:5f:22:49:da:7e:2a:
03:d6:05:d5:07:f8:a9:d9:6f:a8:43:67:23:71:99:41:dd:2b:
d2:64:26:21:63:f0:f7:f2:96:22:55:c0:2c:0d:5e:09:ef:a4:
dd:44:4f:ad:32:15:1e:4c:e3:f5:0b:e8:f8:ab:96:36:a5:13:
7b:e4:a7:25:da:fa:35:dc:28:a3:b2:cc:02:b5:e6:f0:a8:a2:
fd:dc:20:80:97:d5:db:81:53:b3:24:a3:aa:05:92:4f:3f:ab:
be:7b:89:93:33:11:8b:83:7c:f5:ea:8b:15:c2:20:6d:cd:5d:
4d:9d:11:be:44:72:2d:4b:f8:4e:09:35:01:39:a4:50:60:70:
5b:36:ac:d5:99:d9:76:57:27:bd:38:c5:86:7d:0e:d9:bc:27:
62:7e:78:81:f1:32:b5:5f:e8:dd:c3:f8:75:78:91:15:a5:47:
a3:38:f3:fd:80:d8:0b:6e:d8:fe:05:c7:92:56:f3:34:fd:5c:
62:eb:aa:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:01:57 2026 by rpki-client