
$ rpki-client -vvf rpki-rsync.idnic.net/repo/b5eabacd-28eb-4b96-8610-dbb4b06fc8bd/0/E2C4DFA7C9ACCF0D5E3550846B4FD7648AF59829.mft
File: E2C4DFA7C9ACCF0D5E3550846B4FD7648AF59829.mft (raw, json)
Hash identifier: YS7pKIUsQi/85ZP7eZeY21OWZ0e/g1AvDGx5uyavwNE=
Subject key identifier: 81:04:6A:37:02:9B:34:6C:15:02:6E:B7:CD:81:4C:93:E0:4C:22:F4
Authority key identifier: E2:C4:DF:A7:C9:AC:CF:0D:5E:35:50:84:6B:4F:D7:64:8A:F5:98:29
Certificate issuer: /CN=E2C4DFA7C9ACCF0D5E3550846B4FD7648AF59829
Certificate serial: 3B5624A4FB36924A2868E1EB1FE6D7EC5BAEBFA1
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E2C4DFA7C9ACCF0D5E3550846B4FD7648AF59829.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b5eabacd-28eb-4b96-8610-dbb4b06fc8bd/0/E2C4DFA7C9ACCF0D5E3550846B4FD7648AF59829.mft
Manifest number: 3E
Signing time: Wed 17 Jun 2026 02:00:09 +0000
Manifest this update: Wed 17 Jun 2026 01:55:09 +0000
Manifest next update: Thu 18 Jun 2026 02:00:09 +0000
Files and hashes: 1: 3130332e3139312e3135352e302f32342d3234203d3e20313439393236.roa (hash: cYom1MPHQVGdhZnlRacbk/Al2JcVJhr0BqbkjsZoDkI=)
2: 3130332e3139312e3135342e302f32342d3234203d3e20313439393236.roa (hash: B9vjSD4xlqQG0P6W1yM2st0HnliY/J6hgpX93qj/1sg=)
3: E2C4DFA7C9ACCF0D5E3550846B4FD7648AF59829.crl (hash: 7xM96zLG93Xn6eQFB3hvqfqjIM2xUY8sKTG5huSpBrA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b5eabacd-28eb-4b96-8610-dbb4b06fc8bd/0/E2C4DFA7C9ACCF0D5E3550846B4FD7648AF59829.crl
rsync://rpki-rsync.idnic.net/repo/b5eabacd-28eb-4b96-8610-dbb4b06fc8bd/0/E2C4DFA7C9ACCF0D5E3550846B4FD7648AF59829.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E2C4DFA7C9ACCF0D5E3550846B4FD7648AF59829.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 02:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:56:24:a4:fb:36:92:4a:28:68:e1:eb:1f:e6:d7:ec:5b:ae:bf:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E2C4DFA7C9ACCF0D5E3550846B4FD7648AF59829
Validity
Not Before: Jun 17 01:55:09 2026 GMT
Not After : Jun 18 02:00:09 2026 GMT
Subject: CN=81046A37029B346C15026EB7CD814C93E04C22F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ef:63:ae:c7:6c:0a:ee:80:25:77:8f:9d:55:
f9:49:07:02:2a:28:3d:7e:29:ca:4b:76:a3:23:ba:
76:cb:ab:5c:e5:d2:14:57:9e:0f:ee:ed:c4:9d:41:
88:01:65:6f:88:64:b6:6e:d6:6e:8c:5d:56:e3:3d:
ff:f8:78:cc:01:f1:d4:fd:85:1b:86:76:71:9a:a2:
dd:f6:2f:41:e8:e1:c4:23:9a:5a:06:5d:93:35:76:
70:b2:59:26:46:78:24:4d:48:e2:8a:c5:5c:0b:ca:
8c:69:3a:b3:aa:dd:80:2d:8b:57:0c:69:f8:69:e4:
61:a8:74:af:f3:21:6f:7a:c4:46:90:d7:92:19:68:
d5:4e:1b:74:f8:aa:b7:2c:fd:a3:6f:b4:5f:3c:f3:
8e:92:73:ad:70:fc:b0:f7:ba:36:68:8b:95:f5:dd:
ed:34:3e:37:43:65:7f:5e:94:7a:74:41:77:74:79:
58:cd:a1:54:3f:dc:b4:9f:c5:8c:94:6c:75:78:cf:
9d:72:db:4f:87:7f:de:43:3a:bc:ab:ea:67:bd:45:
d2:0d:e1:cb:5e:b5:56:68:54:94:0e:78:50:30:f0:
d4:11:7a:a6:71:20:bb:85:28:ce:de:96:b9:65:18:
51:43:99:21:fc:a4:15:c0:ba:52:aa:a3:98:94:52:
be:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:04:6A:37:02:9B:34:6C:15:02:6E:B7:CD:81:4C:93:E0:4C:22:F4
X509v3 Authority Key Identifier:
keyid:E2:C4:DF:A7:C9:AC:CF:0D:5E:35:50:84:6B:4F:D7:64:8A:F5:98:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b5eabacd-28eb-4b96-8610-dbb4b06fc8bd/0/E2C4DFA7C9ACCF0D5E3550846B4FD7648AF59829.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E2C4DFA7C9ACCF0D5E3550846B4FD7648AF59829.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b5eabacd-28eb-4b96-8610-dbb4b06fc8bd/0/E2C4DFA7C9ACCF0D5E3550846B4FD7648AF59829.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:c7:d6:bf:02:05:94:71:09:14:c3:d1:99:af:a4:4f:39:e6:
ab:bc:9a:30:0f:74:e3:43:17:8f:3d:41:89:d6:5f:db:bc:63:
50:eb:8a:1e:a3:e3:68:e9:3f:c5:ca:18:69:95:5e:91:33:7c:
0b:ce:76:db:2a:d0:fc:68:78:ac:61:fc:32:8c:09:ea:3f:15:
8b:80:ee:58:8b:77:4f:ce:0e:23:89:18:6b:50:6d:92:de:a5:
d2:0a:2e:a3:d0:0f:e1:92:36:1e:93:8c:fe:b9:25:cc:a8:64:
b4:3b:d8:11:74:7b:92:9b:6d:a8:de:7c:05:54:77:42:a0:72:
f6:f3:76:f5:5d:95:bc:78:5f:e2:8f:fe:67:b5:8d:09:7d:88:
a6:46:05:7c:9b:2c:2a:0c:cb:2b:f6:3a:2f:1c:90:7c:4a:5f:
da:d9:83:01:05:2c:4d:5d:12:2b:f1:2d:51:a4:ca:c1:a5:f7:
66:00:32:67:38:ec:bc:52:5b:7e:c8:cf:68:6b:54:51:18:60:
a0:81:32:a5:52:cc:75:44:5c:4f:60:b1:c4:e4:10:66:66:df:
8b:dc:37:5e:fc:ad:d0:8c:79:de:b3:01:15:57:60:2b:11:5c:
a2:20:2e:f6:9e:10:f5:a5:28:a7:59:01:f8:8a:45:58:2d:24:
a5:40:a6:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:42:59 2026 by rpki-client