
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b5eabacd-28eb-4b96-8610-dbb4b06fc8bd/0/E2C4DFA7C9ACCF0D5E3550846B4FD7648AF59829.mft
File: E2C4DFA7C9ACCF0D5E3550846B4FD7648AF59829.mft (raw, json)
Hash identifier: qNg6qZcIrD7x6ujcChM7bt5RMTbCku2g7ceVV2eA9P8=
Subject key identifier: A9:36:65:F2:C7:DB:9A:33:F6:94:00:F2:A7:61:62:EC:2F:39:55:28
Authority key identifier: E2:C4:DF:A7:C9:AC:CF:0D:5E:35:50:84:6B:4F:D7:64:8A:F5:98:29
Certificate issuer: /CN=E2C4DFA7C9ACCF0D5E3550846B4FD7648AF59829
Certificate serial: 6973E71058D9D9732AD6E68175D4906CB81C4FB5
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E2C4DFA7C9ACCF0D5E3550846B4FD7648AF59829.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b5eabacd-28eb-4b96-8610-dbb4b06fc8bd/0/E2C4DFA7C9ACCF0D5E3550846B4FD7648AF59829.mft
Manifest number: BD
Signing time: Mon 21 Sep 2026 06:29:41 +0000
Manifest this update: Mon 21 Sep 2026 06:24:41 +0000
Manifest next update: Tue 22 Sep 2026 10:07:41 +0000
Files and hashes: 1: 3130332e3139312e3135352e302f32342d3234203d3e20313439393236.roa (hash: cYom1MPHQVGdhZnlRacbk/Al2JcVJhr0BqbkjsZoDkI=)
2: 3130332e3139312e3135342e302f32342d3234203d3e20313439393236.roa (hash: B9vjSD4xlqQG0P6W1yM2st0HnliY/J6hgpX93qj/1sg=)
3: E2C4DFA7C9ACCF0D5E3550846B4FD7648AF59829.crl (hash: dyVNxbRpwcTjLc5EtS9CV4POhpnn1nY+Xz/UEMxY6oI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b5eabacd-28eb-4b96-8610-dbb4b06fc8bd/0/E2C4DFA7C9ACCF0D5E3550846B4FD7648AF59829.crl
rsync://rpki-rsync.idnic.net/repo/b5eabacd-28eb-4b96-8610-dbb4b06fc8bd/0/E2C4DFA7C9ACCF0D5E3550846B4FD7648AF59829.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E2C4DFA7C9ACCF0D5E3550846B4FD7648AF59829.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 10:07:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:73:e7:10:58:d9:d9:73:2a:d6:e6:81:75:d4:90:6c:b8:1c:4f:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E2C4DFA7C9ACCF0D5E3550846B4FD7648AF59829
Validity
Not Before: Sep 21 06:24:41 2026 GMT
Not After : Sep 22 10:07:41 2026 GMT
Subject: CN=A93665F2C7DB9A33F69400F2A76162EC2F395528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:5d:f1:ce:bb:11:20:e2:27:69:7b:b8:65:49:
c3:e7:92:ac:1e:8a:0e:54:d2:7b:e5:d3:19:4a:ba:
55:14:7d:90:c8:81:1e:ed:34:b9:5a:da:27:ee:6c:
7b:82:80:31:3b:75:c0:d4:b6:ca:59:4d:60:8b:3b:
bc:e9:52:4e:00:38:b3:5a:6a:a8:32:43:8d:16:c3:
97:04:04:60:09:e8:cb:b9:73:53:9a:5b:b2:37:9a:
39:17:a6:7c:45:30:46:d5:9c:b8:f1:8b:0b:10:f9:
da:f0:a9:68:48:94:89:60:2a:e8:81:45:aa:7d:fd:
e5:be:91:99:28:a4:c0:72:0b:42:c2:76:25:0e:bf:
7f:cb:ff:63:a9:cd:9f:9d:8b:5d:d1:34:b4:99:9d:
95:66:4d:43:7f:be:dd:92:f9:ee:19:85:1f:e0:2c:
6a:4f:51:a7:5c:b9:44:9b:1f:01:5d:87:fc:cd:45:
ac:51:25:70:e4:d4:b6:d5:4d:1c:bb:fe:b1:7c:a7:
24:cd:25:9f:bc:ea:7d:c7:c7:90:d2:a2:97:24:09:
af:f0:1f:8e:fd:a9:71:fd:39:53:83:4e:fe:6e:92:
62:51:6c:c1:54:fa:a4:fe:07:be:30:7c:99:85:ef:
17:f1:e8:99:c3:c6:b4:4d:bc:07:13:d6:a7:42:ff:
06:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:36:65:F2:C7:DB:9A:33:F6:94:00:F2:A7:61:62:EC:2F:39:55:28
X509v3 Authority Key Identifier:
keyid:E2:C4:DF:A7:C9:AC:CF:0D:5E:35:50:84:6B:4F:D7:64:8A:F5:98:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b5eabacd-28eb-4b96-8610-dbb4b06fc8bd/0/E2C4DFA7C9ACCF0D5E3550846B4FD7648AF59829.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E2C4DFA7C9ACCF0D5E3550846B4FD7648AF59829.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b5eabacd-28eb-4b96-8610-dbb4b06fc8bd/0/E2C4DFA7C9ACCF0D5E3550846B4FD7648AF59829.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:b8:2f:4b:3f:5d:22:15:cc:58:cf:50:d5:43:48:6d:d7:da:
d2:40:fb:f1:dd:e6:d0:c1:8d:fc:86:48:2a:6b:5a:b0:10:7f:
ff:ef:50:34:d4:77:83:4f:f3:59:e4:0d:a0:64:7c:d2:76:e5:
4f:53:46:54:db:b3:c3:0f:fd:de:7b:a4:be:9a:29:8c:83:f9:
30:ca:ab:89:53:2f:cf:64:18:a8:06:36:df:7c:9c:ae:b2:9e:
cb:38:8b:48:f1:64:01:ce:8b:2e:07:f6:4f:c7:43:88:90:54:
91:c2:7c:e2:e9:c2:34:27:3f:b3:7b:17:19:d8:ca:cc:af:73:
a3:4f:11:53:9d:a2:c9:d8:78:d2:29:b5:8b:2a:a1:5f:cd:f6:
a1:ab:00:7a:68:8f:ac:56:4e:91:c3:a9:e2:69:d2:49:e6:50:
23:93:a0:6f:20:0c:85:33:ed:e0:14:03:fd:ae:e4:d8:0b:27:
81:2f:d4:7d:ca:2e:0f:59:1a:e0:49:34:f6:0b:21:55:73:ce:
6a:67:6f:50:d7:47:5f:9b:f4:5f:73:53:e4:e2:c6:09:f6:80:
07:db:eb:20:be:23:e8:99:c4:ec:4b:24:03:d9:30:d5:9f:c5:
35:35:e7:04:af:57:ba:4c:4b:a8:97:27:d7:d8:50:4d:b2:3c:
77:94:95:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 00:02:18 2026 by rpki-client