
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/E41C49050CBD3032F041D83A7A089A3E23CBE621.mft
File: E41C49050CBD3032F041D83A7A089A3E23CBE621.mft (raw, json)
Hash identifier: IpCuJx++OAbZw+DePa0gt/LDyHBUZGt1hHaDxtWWlvU=
Subject key identifier: E1:C2:F2:49:3F:15:77:2B:D1:76:2B:64:F0:38:AB:55:B4:4D:A6:56
Authority key identifier: E4:1C:49:05:0C:BD:30:32:F0:41:D8:3A:7A:08:9A:3E:23:CB:E6:21
Certificate issuer: /CN=E41C49050CBD3032F041D83A7A089A3E23CBE621
Certificate serial: 11C232DEF55A27478B589634EE2E3C251E93D639
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E41C49050CBD3032F041D83A7A089A3E23CBE621.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/E41C49050CBD3032F041D83A7A089A3E23CBE621.mft
Manifest number: BE
Signing time: Mon 21 Sep 2026 22:55:02 +0000
Manifest this update: Mon 21 Sep 2026 22:50:02 +0000
Manifest next update: Tue 22 Sep 2026 23:43:02 +0000
Files and hashes: 1: E41C49050CBD3032F041D83A7A089A3E23CBE621.crl (hash: 62LOwymt+icJ2q7k2hDeuY4dLYxns2ZWBsE/cJQWX9Y=)
2: 3130332e32362e3137362e302f32332d3234203d3e203538383231.roa (hash: Pn35/z/Opy4+bi+hOwdyJNg9JFN1Pwq8xx84oYEuYAc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/E41C49050CBD3032F041D83A7A089A3E23CBE621.crl
rsync://rpki-rsync.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/E41C49050CBD3032F041D83A7A089A3E23CBE621.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E41C49050CBD3032F041D83A7A089A3E23CBE621.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 23:43:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:c2:32:de:f5:5a:27:47:8b:58:96:34:ee:2e:3c:25:1e:93:d6:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E41C49050CBD3032F041D83A7A089A3E23CBE621
Validity
Not Before: Sep 21 22:50:02 2026 GMT
Not After : Sep 22 23:43:02 2026 GMT
Subject: CN=E1C2F2493F15772BD1762B64F038AB55B44DA656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:04:d3:f0:c8:05:bd:6f:3b:b9:c8:9b:dd:62:
5e:74:72:f7:60:c7:ee:a7:80:2e:61:13:48:42:fd:
11:95:6a:aa:53:04:b0:55:bf:bc:52:e3:e7:12:6e:
c1:ff:a2:43:0c:6a:7d:95:b2:17:23:90:78:e3:23:
ce:3f:db:fb:b3:45:55:13:93:f5:da:6b:70:bf:bc:
9c:50:50:1c:a5:8b:3e:a7:5b:76:96:76:11:48:db:
29:8e:b1:96:bf:1b:0d:70:f7:5c:8f:cf:4d:55:98:
ea:81:34:74:fb:39:9e:e2:23:8a:07:e6:d2:7c:86:
eb:c8:7c:a6:f0:26:0b:55:f3:31:35:c5:92:b9:a2:
5c:85:c0:c4:ee:1d:2b:0f:27:07:a6:87:6f:b4:3a:
25:bc:1f:59:95:99:ef:da:dd:ce:31:7a:b4:52:20:
38:d3:79:0d:25:d0:90:28:cc:61:ef:4f:94:56:7a:
4c:b5:8a:10:ab:26:04:86:d9:88:26:35:24:a0:18:
a8:e4:53:0e:c8:76:2f:17:19:ed:6c:2e:55:b4:f4:
6b:db:3e:43:fa:f6:7c:81:f4:5e:40:cd:6d:93:ea:
0a:a1:0d:cf:93:8f:37:69:e7:61:f9:94:fc:c2:7b:
2d:4a:2b:4c:79:16:85:b2:1d:01:14:f9:0f:02:b3:
b7:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:C2:F2:49:3F:15:77:2B:D1:76:2B:64:F0:38:AB:55:B4:4D:A6:56
X509v3 Authority Key Identifier:
keyid:E4:1C:49:05:0C:BD:30:32:F0:41:D8:3A:7A:08:9A:3E:23:CB:E6:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/E41C49050CBD3032F041D83A7A089A3E23CBE621.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E41C49050CBD3032F041D83A7A089A3E23CBE621.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/E41C49050CBD3032F041D83A7A089A3E23CBE621.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:5a:a0:cd:72:fb:0e:05:e9:cd:d4:86:f0:cc:fa:d0:b9:33:
86:2f:cd:b6:92:20:af:40:55:58:b2:ff:b3:90:70:cc:d8:e7:
87:cc:cc:2c:d6:39:82:4c:60:ff:6f:8f:06:cf:a1:55:1e:b0:
e7:24:53:8e:39:fd:a8:a2:1b:7b:7f:73:eb:c3:b4:d3:df:59:
5a:0a:02:a4:28:2e:26:c2:c2:c5:40:09:c8:ef:cb:04:28:54:
c3:f0:17:09:b0:14:3e:8e:14:32:68:d3:de:17:5d:ec:24:f8:
34:94:e8:b6:ad:1b:40:9e:00:e2:2a:e3:81:86:07:59:a7:51:
61:58:ba:a2:72:2e:b0:77:e7:1d:2b:4a:9a:a1:7f:03:48:c5:
49:40:a3:8b:92:2f:1f:aa:bb:dd:0e:39:63:81:e2:15:13:4e:
01:80:1a:54:c8:72:e4:a2:3b:2e:64:4c:f0:e7:1d:7d:94:e1:
8a:67:9f:02:88:46:3f:09:f7:04:df:15:55:1a:e7:ee:48:d6:
13:05:2b:9a:a4:b9:27:4a:84:58:26:1d:19:6f:64:8e:21:86:
0d:5d:e8:ab:43:c8:97:f9:6d:95:77:f7:25:8e:ea:43:53:c5:
e4:23:fe:7e:4c:fb:19:6e:38:cf:c0:dd:a9:a2:48:b5:49:05:
d3:5b:1d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:51:12 2026 by rpki-client