
$ rpki-client -vvf rpki-rsync.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/E3D6C125B35E67510271310D928E4578404A3A46.mft
File: E3D6C125B35E67510271310D928E4578404A3A46.mft (raw, json)
Hash identifier: UE1VoI9kYgi9A1Q0qjCYmugJHkyMGBVVhsEx8r6XZ90=
Subject key identifier: 7E:6E:39:29:F9:FA:A8:FE:67:92:1C:88:E8:49:16:42:FD:FA:30:37
Authority key identifier: E3:D6:C1:25:B3:5E:67:51:02:71:31:0D:92:8E:45:78:40:4A:3A:46
Certificate issuer: /CN=E3D6C125B35E67510271310D928E4578404A3A46
Certificate serial: 1742FB25999CF2291A511B6C53E66C1D092D1438
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E3D6C125B35E67510271310D928E4578404A3A46.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/E3D6C125B35E67510271310D928E4578404A3A46.mft
Manifest number: 6C
Signing time: Mon 20 Jul 2026 23:09:40 +0000
Manifest this update: Mon 20 Jul 2026 23:04:40 +0000
Manifest next update: Wed 22 Jul 2026 00:48:40 +0000
Files and hashes: 1: 3130332e3137362e3139382e302f32342d3234203d3e20313437313334.roa (hash: 8qQMC3EFOK3yCgkVj+C7FEr6qF+CfYoBtbfTyKhcjE4=)
2: 3130332e3137362e3139392e302f32342d3234203d3e20313437313334.roa (hash: T5uRj9PC/T10VKks3wi10c2uBNec4FkHRnP0vvfYiOk=)
3: E3D6C125B35E67510271310D928E4578404A3A46.crl (hash: VEXBZvSrVKCjkkU30BurRCzuczdFINLMZtz2ipNdYgg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/E3D6C125B35E67510271310D928E4578404A3A46.crl
rsync://rpki-rsync.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/E3D6C125B35E67510271310D928E4578404A3A46.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E3D6C125B35E67510271310D928E4578404A3A46.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Jul 2026 00:48:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:42:fb:25:99:9c:f2:29:1a:51:1b:6c:53:e6:6c:1d:09:2d:14:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E3D6C125B35E67510271310D928E4578404A3A46
Validity
Not Before: Jul 20 23:04:40 2026 GMT
Not After : Jul 22 00:48:40 2026 GMT
Subject: CN=7E6E3929F9FAA8FE67921C88E8491642FDFA3037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:74:5b:06:dd:01:8f:b7:a8:50:2e:0d:8a:22:
4a:37:33:9a:cc:d8:51:45:2b:24:1b:5e:ed:4a:ec:
83:a5:35:b3:cf:7e:1e:ee:80:09:c3:f1:04:c7:05:
4f:15:38:21:b2:01:a1:cf:4c:f9:5a:96:55:1f:68:
0f:d4:b9:6b:e0:0e:fb:9d:7d:4b:f0:97:fa:eb:30:
df:30:9b:0d:ac:98:d5:98:e5:e1:60:ae:e3:04:03:
e2:85:b8:e2:8d:42:93:ec:fd:1e:77:b5:0a:f7:4a:
8f:44:32:d6:c5:cc:fd:22:88:86:8b:bc:2f:3d:eb:
62:bb:26:78:eb:de:a5:d4:76:e9:6d:71:19:7d:85:
d8:f5:cf:5f:90:86:d0:85:ff:28:3a:45:6e:d0:4a:
0e:5b:5b:c1:42:de:fc:09:4d:6d:ac:5b:15:28:5e:
ec:1c:26:f8:f1:0a:3b:34:3a:7b:c0:c1:7c:ff:c6:
47:54:1d:de:39:17:77:f7:93:18:9e:8c:36:ba:a1:
ce:ba:a9:83:ac:36:7a:df:d7:a8:dd:32:65:16:54:
df:35:bd:5d:f9:a4:50:4c:ad:b7:88:04:bb:93:65:
c8:b6:7e:b6:5f:ef:e6:d5:ad:13:2c:87:fe:ce:45:
c8:3c:84:53:7a:18:35:29:d6:8f:2f:cf:a1:49:27:
ea:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:6E:39:29:F9:FA:A8:FE:67:92:1C:88:E8:49:16:42:FD:FA:30:37
X509v3 Authority Key Identifier:
keyid:E3:D6:C1:25:B3:5E:67:51:02:71:31:0D:92:8E:45:78:40:4A:3A:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/E3D6C125B35E67510271310D928E4578404A3A46.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E3D6C125B35E67510271310D928E4578404A3A46.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/E3D6C125B35E67510271310D928E4578404A3A46.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:ef:58:ff:26:87:e6:ad:3e:fa:a2:74:8f:d0:7a:55:49:65:
f7:f7:4c:ad:e0:41:86:a3:8c:6c:90:3c:01:13:08:27:21:d8:
f3:87:cf:76:bb:57:85:c1:0c:90:5b:2f:9e:cd:85:9c:06:5e:
9c:ba:8b:db:70:d8:4a:a0:7f:89:34:23:9b:99:c6:be:c5:98:
4a:27:96:44:69:78:f9:ae:55:78:ca:20:07:50:90:f8:5d:db:
c7:a3:ff:6c:47:83:31:02:c8:d8:3f:ce:78:9f:c3:da:27:53:
2a:c5:74:14:90:31:23:99:fe:4b:ff:a9:6d:25:04:4c:d4:07:
b2:eb:18:cc:e8:ae:8e:95:cf:97:2a:21:77:55:c9:05:3d:30:
f6:7a:7b:89:b4:69:2e:2f:52:69:73:fd:61:ed:84:a4:63:7a:
19:bc:b1:e4:5b:1d:dd:d1:f9:b8:6f:6b:7f:e5:2e:be:fb:a1:
20:5b:84:01:0e:d3:a2:6e:22:97:a7:7c:64:8e:09:f2:cf:b2:
57:a3:8a:7d:f7:ee:2f:19:93:11:2f:a5:f5:0c:50:90:7e:6c:
25:c6:eb:c2:ba:08:08:24:d0:cb:78:1d:3d:08:31:96:7c:19:
dd:94:f1:22:20:11:3c:6e:1d:47:ed:6e:c0:b9:a1:1a:bb:2e:
ad:06:61:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 07:00:15 2026 by rpki-client