
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b5eabacd-28eb-4b96-8610-dbb4b06fc8bd/0/E2C4DFA7C9ACCF0D5E3550846B4FD7648AF59829.mft
File: E2C4DFA7C9ACCF0D5E3550846B4FD7648AF59829.mft (raw, json)
Hash identifier: jS0vRu02neL24oJB1+BVgBpukewZdn8TtZW6htFGCLE=
Subject key identifier: F6:A8:73:8D:E5:55:05:B9:19:E6:61:F6:09:EB:B6:3D:2C:73:5F:E3
Authority key identifier: E2:C4:DF:A7:C9:AC:CF:0D:5E:35:50:84:6B:4F:D7:64:8A:F5:98:29
Certificate issuer: /CN=E2C4DFA7C9ACCF0D5E3550846B4FD7648AF59829
Certificate serial: 154A941545822392A31F1E19A07FD23423755F61
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E2C4DFA7C9ACCF0D5E3550846B4FD7648AF59829.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b5eabacd-28eb-4b96-8610-dbb4b06fc8bd/0/E2C4DFA7C9ACCF0D5E3550846B4FD7648AF59829.mft
Manifest number: 0100
Signing time: Tue 10 Nov 2026 14:44:37 +0000
Manifest this update: Tue 10 Nov 2026 14:39:37 +0000
Manifest next update: Wed 11 Nov 2026 17:39:37 +0000
Files and hashes: 1: 3130332e3139312e3135342e302f32342d3234203d3e20313439393236.roa (hash: B9vjSD4xlqQG0P6W1yM2st0HnliY/J6hgpX93qj/1sg=)
2: E2C4DFA7C9ACCF0D5E3550846B4FD7648AF59829.crl (hash: fNl8/XBnqFNBgMxbd6gDJ6FtJgOV48mPwBiuuEBVM3k=)
3: 3130332e3139312e3135352e302f32342d3234203d3e20313439393236.roa (hash: cYom1MPHQVGdhZnlRacbk/Al2JcVJhr0BqbkjsZoDkI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b5eabacd-28eb-4b96-8610-dbb4b06fc8bd/0/E2C4DFA7C9ACCF0D5E3550846B4FD7648AF59829.crl
rsync://rpki-rsync.idnic.net/repo/b5eabacd-28eb-4b96-8610-dbb4b06fc8bd/0/E2C4DFA7C9ACCF0D5E3550846B4FD7648AF59829.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E2C4DFA7C9ACCF0D5E3550846B4FD7648AF59829.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 11 Nov 2026 08:21:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:4a:94:15:45:82:23:92:a3:1f:1e:19:a0:7f:d2:34:23:75:5f:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E2C4DFA7C9ACCF0D5E3550846B4FD7648AF59829
Validity
Not Before: Nov 10 14:39:37 2026 GMT
Not After : Nov 11 17:39:37 2026 GMT
Subject: CN=F6A8738DE55505B919E661F609EBB63D2C735FE3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:60:5c:37:2b:39:30:65:0a:f8:95:d7:b0:0a:
7f:60:f4:bd:42:2d:22:9e:3b:f8:5e:4f:33:5e:00:
a3:0d:ba:2c:c0:6e:ee:18:36:96:f1:d7:77:7e:25:
99:73:f5:bf:d7:1f:46:5f:cd:d0:3d:54:65:b6:89:
c6:ee:7d:84:59:f8:11:a4:b8:5e:3f:3e:75:87:45:
49:90:f9:12:f2:d2:64:7e:c0:ad:0a:cb:c5:23:33:
a4:f1:85:e2:02:61:50:1f:6d:66:7a:79:3b:a1:38:
9e:9c:ec:31:14:78:d3:be:8e:7a:f5:35:fb:2a:bf:
a8:cd:77:60:ea:23:0a:ee:23:ef:d1:65:24:6f:74:
d3:f8:5d:a1:ba:d5:08:d3:6d:58:9f:b3:cd:10:67:
66:7d:5f:0b:89:cc:7a:42:77:74:1b:71:3a:d8:de:
07:74:9e:51:52:52:aa:7c:70:c2:a3:3a:b7:3a:67:
38:e7:20:e4:28:d7:b4:e7:b7:69:ca:c0:64:6d:1e:
b7:55:c2:26:4f:c5:d0:67:c8:3b:2a:0d:f7:ae:b3:
c4:1c:0d:af:12:df:86:ce:5f:0a:cb:34:61:37:f1:
76:64:ae:79:69:16:8b:cd:10:7e:df:dd:3d:c8:12:
c7:0d:6f:4f:98:50:3b:b9:6c:16:ad:e9:2a:1c:bf:
0d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:A8:73:8D:E5:55:05:B9:19:E6:61:F6:09:EB:B6:3D:2C:73:5F:E3
X509v3 Authority Key Identifier:
keyid:E2:C4:DF:A7:C9:AC:CF:0D:5E:35:50:84:6B:4F:D7:64:8A:F5:98:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b5eabacd-28eb-4b96-8610-dbb4b06fc8bd/0/E2C4DFA7C9ACCF0D5E3550846B4FD7648AF59829.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E2C4DFA7C9ACCF0D5E3550846B4FD7648AF59829.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b5eabacd-28eb-4b96-8610-dbb4b06fc8bd/0/E2C4DFA7C9ACCF0D5E3550846B4FD7648AF59829.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:24:1e:23:14:63:b4:41:d5:29:a4:1e:b8:60:19:45:4e:cc:
6d:c6:a6:39:fe:48:28:6f:80:f5:b3:87:3e:91:15:5f:88:ad:
1a:02:6f:5d:45:4e:09:54:10:86:11:bf:02:d2:14:1d:a3:ff:
dd:d7:8c:20:ec:02:0c:87:3f:d8:30:a9:fb:9e:4b:ba:bf:1d:
be:df:04:ae:15:f1:54:2a:1b:7c:44:db:81:d3:cc:0d:b3:13:
5b:67:ed:78:55:73:6d:70:4c:23:e2:df:88:7d:57:ac:df:5f:
14:49:a7:6b:3e:5c:fb:9f:0b:9a:97:da:f0:af:55:0e:a7:41:
6d:19:e0:06:e7:98:b4:6b:e6:78:41:25:f0:23:e2:96:44:94:
2a:01:5c:a9:7d:10:d0:4e:c3:f3:58:88:80:b5:68:25:f5:17:
17:10:7a:40:31:ba:e5:fe:ab:9c:ac:90:e4:9e:66:2c:5f:9a:
b6:03:aa:21:94:18:d5:49:e8:6e:b5:7a:87:13:a0:bf:45:46:
f3:7d:c7:70:2f:7a:43:35:39:00:b7:5e:59:f8:51:d2:dd:31:
2c:9a:69:15:3c:6e:48:cd:1b:5f:50:4a:74:55:24:b7:36:b6:
e9:83:8e:57:b3:42:77:5e:8e:85:03:e1:9b:61:ca:8e:ef:50:
e8:3d:e9:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 18:01:40 2026 by rpki-client