
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/E9F2A418990B480D204FA0D037A5ABB3AEC360E9.mft
File: E9F2A418990B480D204FA0D037A5ABB3AEC360E9.mft (raw, json)
Hash identifier: 5tJ6zCxwaZ/ao1YtzE+GD/gkHGcGceJdzFroVJdpnas=
Subject key identifier: 4A:B9:E0:DB:08:87:C4:E9:59:47:2F:A8:9A:D9:9B:34:05:FE:08:3B
Authority key identifier: E9:F2:A4:18:99:0B:48:0D:20:4F:A0:D0:37:A5:AB:B3:AE:C3:60:E9
Certificate issuer: /CN=E9F2A418990B480D204FA0D037A5ABB3AEC360E9
Certificate serial: 2AC8C77144DD3C5BAE4676A73FE2C035EE0343FE
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9F2A418990B480D204FA0D037A5ABB3AEC360E9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/E9F2A418990B480D204FA0D037A5ABB3AEC360E9.mft
Manifest number: 3F
Signing time: Wed 17 Jun 2026 02:00:09 +0000
Manifest this update: Wed 17 Jun 2026 01:55:09 +0000
Manifest next update: Thu 18 Jun 2026 05:06:09 +0000
Files and hashes: 1: 3130332e3139312e3131362e302f32342d3234203d3e20313439393137.roa (hash: 27oObCgWzykb6CFKZyK6/jDYuaqop/FIGkUT/qI+p/Q=)
2: E9F2A418990B480D204FA0D037A5ABB3AEC360E9.crl (hash: nwmNQ5Bu2eXzRJpwKOiDfAUwrg+IfZhrEInmBphArWg=)
3: 3130332e3139312e3131362e302f32332d3233203d3e20313439393137.roa (hash: bL7nWexv3dr33uLwywkImAJrJWec+y7OgTN8pZ5ywaw=)
4: 3130332e3139312e3131372e302f32342d3234203d3e20313439393137.roa (hash: lAAUV9z8f3t9czOX/VqnympJr8MrNtNyhxmHLT5vnzY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/E9F2A418990B480D204FA0D037A5ABB3AEC360E9.crl
rsync://rpki-rsync.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/E9F2A418990B480D204FA0D037A5ABB3AEC360E9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9F2A418990B480D204FA0D037A5ABB3AEC360E9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:c8:c7:71:44:dd:3c:5b:ae:46:76:a7:3f:e2:c0:35:ee:03:43:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E9F2A418990B480D204FA0D037A5ABB3AEC360E9
Validity
Not Before: Jun 17 01:55:09 2026 GMT
Not After : Jun 18 05:06:09 2026 GMT
Subject: CN=4AB9E0DB0887C4E959472FA89AD99B3405FE083B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a8:7a:e4:92:87:dc:31:29:8e:26:0a:52:94:
ec:c0:25:4d:06:cc:30:76:f7:28:81:90:20:10:e8:
aa:9f:f0:5b:05:07:90:ea:21:08:6b:04:ef:a9:6e:
08:f6:a4:52:8f:74:a3:91:55:5e:5d:cc:46:e6:2a:
30:10:68:f2:94:fa:cb:5a:89:e7:94:0b:22:65:09:
00:11:6a:47:06:61:49:91:65:d5:53:b7:c2:5d:fb:
89:9b:f2:0d:d9:3d:4f:2c:f9:d9:cf:87:76:90:c4:
57:7a:67:fc:f2:fd:f9:1d:e8:5d:33:8c:0c:b2:25:
3b:f8:75:9a:a8:40:71:ea:38:d9:b0:35:03:e9:2d:
53:57:8d:d8:21:18:3e:7d:9f:79:1f:a7:ef:4d:f6:
11:da:56:1a:c7:e7:5b:82:e4:30:1c:88:41:db:d2:
c7:b1:89:dd:49:4f:1a:0f:7d:79:29:bb:87:79:c5:
a9:de:42:4f:cf:2f:dd:1d:27:50:cb:55:00:62:e1:
97:81:9f:60:e0:7f:f5:65:85:55:fe:0b:d0:af:31:
de:ac:a6:01:e1:75:ba:e8:0b:47:10:20:5e:b2:f6:
18:ee:88:c5:e2:6d:a7:60:6e:4c:51:07:b8:1f:0e:
a0:a7:67:57:9f:8c:94:e5:88:8f:ea:84:e5:c0:64:
43:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B9:E0:DB:08:87:C4:E9:59:47:2F:A8:9A:D9:9B:34:05:FE:08:3B
X509v3 Authority Key Identifier:
keyid:E9:F2:A4:18:99:0B:48:0D:20:4F:A0:D0:37:A5:AB:B3:AE:C3:60:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/E9F2A418990B480D204FA0D037A5ABB3AEC360E9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9F2A418990B480D204FA0D037A5ABB3AEC360E9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/E9F2A418990B480D204FA0D037A5ABB3AEC360E9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:76:7a:3b:cd:2d:f0:3a:da:e3:04:2c:4a:b7:6f:3d:33:a4:
1b:36:d4:aa:8f:9f:49:bb:b9:36:a3:98:3b:51:87:d8:73:5f:
46:4d:77:b4:6d:2f:a4:71:ab:a0:2f:b6:1f:81:49:9b:d6:0b:
51:90:a6:ed:48:05:1c:79:2d:46:0a:c7:98:71:1e:d8:2e:ef:
be:37:42:cf:86:5d:64:91:37:c8:f5:c9:74:b4:11:2f:49:41:
9b:3f:88:78:b0:eb:a8:92:63:c1:87:99:80:2d:3c:b3:e4:17:
0e:4b:6d:08:d8:cf:95:44:30:5d:1d:b8:d1:b9:7d:ee:3f:7d:
0c:43:1e:00:04:38:23:93:2f:8a:01:3a:20:4b:9f:8e:1e:4f:
44:2b:41:8a:05:f3:02:4c:b3:4f:cf:76:ea:cf:ef:63:75:b9:
38:db:83:e3:0c:45:c7:bb:6b:fd:06:60:06:84:74:9c:4f:d2:
ca:6c:ff:16:b4:65:1d:97:cd:17:37:3d:f5:c5:9b:cb:ad:05:
4c:7a:3d:45:94:58:83:da:4f:eb:b7:6e:d1:2d:90:a1:31:d1:
b5:0a:7b:5b:e5:f5:49:5c:53:58:69:f8:5b:83:cf:ca:31:cc:
53:9e:37:cf:3c:81:9f:cf:7f:95:16:b7:34:53:b7:95:f8:04:
f8:f5:10:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:31:38 2026 by rpki-client