
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/E5E46B40DA4B39812590F66F8D9A48EB7BF80663.mft
File: E5E46B40DA4B39812590F66F8D9A48EB7BF80663.mft (raw, json)
Hash identifier: GX2YUIWmdTftzb8DepWp22NzJQpmgRB9f9T9AzFt7A4=
Subject key identifier: FD:DD:F4:A8:83:C0:2D:4C:C9:FF:27:E7:6D:75:5A:8B:63:60:86:BD
Authority key identifier: E5:E4:6B:40:DA:4B:39:81:25:90:F6:6F:8D:9A:48:EB:7B:F8:06:63
Certificate issuer: /CN=E5E46B40DA4B39812590F66F8D9A48EB7BF80663
Certificate serial: 4CF48AA290A2DFA941B33F268CE7EA0FF23E5C53
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E5E46B40DA4B39812590F66F8D9A48EB7BF80663.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/E5E46B40DA4B39812590F66F8D9A48EB7BF80663.mft
Manifest number: A6
Signing time: Thu 03 Sep 2026 19:31:40 +0000
Manifest this update: Thu 03 Sep 2026 19:26:40 +0000
Manifest next update: Fri 04 Sep 2026 21:40:40 +0000
Files and hashes: 1: 3131302e39332e31322e302f32322d3234203d3e203435373037.roa (hash: qWYNgEcwRG0KPNqrROH2O3FctIU4/zQ2NKHO3/uikuo=)
2: 3230322e34332e3131362e302f32332d3234203d3e203435373037.roa (hash: x/aLbzvpFAKtjeU3rH0ALM/iYwbJRGNDYx6P3rrU1Q8=)
3: E5E46B40DA4B39812590F66F8D9A48EB7BF80663.crl (hash: qpePNc8zaH6sstpsYcPsPzRF2cGi6AksygvO4ZHIGLI=)
4: 3130332e382e35362e302f32322d3234203d3e203435373037.roa (hash: 7VYgmOP0YO7cH1VxALvRRKcOoHBx5YAjdZr3/vH5WcY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/E5E46B40DA4B39812590F66F8D9A48EB7BF80663.crl
rsync://rpki-rsync.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/E5E46B40DA4B39812590F66F8D9A48EB7BF80663.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E5E46B40DA4B39812590F66F8D9A48EB7BF80663.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 04 Sep 2026 21:40:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:f4:8a:a2:90:a2:df:a9:41:b3:3f:26:8c:e7:ea:0f:f2:3e:5c:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E5E46B40DA4B39812590F66F8D9A48EB7BF80663
Validity
Not Before: Sep 3 19:26:40 2026 GMT
Not After : Sep 4 21:40:40 2026 GMT
Subject: CN=FDDDF4A883C02D4CC9FF27E76D755A8B636086BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c6:db:57:68:d8:f9:6d:74:c4:9f:fd:fa:9e:
4b:6e:66:e7:33:10:9f:d7:52:1b:be:9d:de:31:c5:
51:f9:16:d2:50:33:bb:44:ae:79:99:f0:1c:5b:01:
ec:e1:55:77:d8:63:74:67:48:fb:cf:59:2f:30:ae:
32:51:e5:bc:ca:32:6f:c6:55:74:e4:ca:4d:c6:45:
44:20:63:a0:39:1f:ce:1f:63:8e:cc:ea:1a:b2:4f:
3c:22:95:e0:4b:5a:7b:7b:15:51:c3:20:d0:f7:83:
38:53:ab:3e:cb:de:32:48:d6:b8:4b:62:b7:a5:09:
19:19:79:47:c9:11:7e:9b:ab:06:c3:7e:ff:ce:af:
7a:5c:29:e9:e4:13:4e:15:2d:aa:17:08:90:0a:66:
70:e9:80:7a:70:29:48:b3:22:4a:35:34:c5:aa:09:
3e:52:2d:64:34:6f:90:b8:2d:ff:53:55:2e:86:ca:
7e:d0:69:7b:a4:c2:49:de:d4:d9:0f:27:cd:c1:9b:
34:66:1d:2d:2d:62:00:a6:e3:86:57:ec:5f:b0:f3:
d2:6f:40:a7:95:c9:cc:5d:d3:8f:12:eb:07:34:a5:
97:76:14:6b:c1:ee:bd:1b:72:55:60:e5:e4:d7:1f:
ca:da:07:1c:16:3e:b1:e5:4a:a7:dc:1f:cf:7d:99:
da:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:DD:F4:A8:83:C0:2D:4C:C9:FF:27:E7:6D:75:5A:8B:63:60:86:BD
X509v3 Authority Key Identifier:
keyid:E5:E4:6B:40:DA:4B:39:81:25:90:F6:6F:8D:9A:48:EB:7B:F8:06:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/E5E46B40DA4B39812590F66F8D9A48EB7BF80663.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E5E46B40DA4B39812590F66F8D9A48EB7BF80663.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/E5E46B40DA4B39812590F66F8D9A48EB7BF80663.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:4a:62:96:33:1f:bc:5a:40:f7:4b:86:b3:8a:d3:46:1a:85:
c7:1b:d8:54:7b:7a:0c:1a:e0:e4:c4:cd:dc:15:2c:2b:4d:48:
d0:83:40:9d:01:2b:f8:48:2c:3f:29:4b:d3:14:46:f6:4c:bd:
a9:04:03:ab:b8:94:e7:0a:87:05:7d:e9:f9:fc:76:5e:1e:1a:
57:0d:3b:07:b6:68:7a:b2:49:81:bb:2e:53:16:a0:a0:34:b2:
18:e4:02:d3:ad:a1:9e:46:1f:a6:b7:5e:4d:62:be:57:2c:6c:
31:60:e3:8a:5b:93:4d:58:02:ae:49:e2:a8:fa:59:cb:43:d2:
5e:f4:e0:c0:53:fb:09:ba:f0:de:1f:83:b1:01:b5:00:cc:1a:
be:e8:31:b0:9c:a1:68:7a:ab:5d:95:61:c2:fa:dc:9c:51:0f:
0f:5e:0b:bf:2a:89:88:b8:81:9b:98:30:96:a8:f9:eb:43:8f:
22:63:8e:0c:41:39:b2:2a:48:82:54:bd:2e:1f:f5:4f:a5:6c:
40:ee:b4:dc:41:a9:4d:33:1a:a0:46:d4:ae:94:de:d6:99:63:
bc:27:4c:6f:63:61:e3:6e:11:ea:75:d0:3d:1a:18:8a:cd:24:
c0:24:64:36:b4:fc:6c:9b:93:f0:9e:9d:7f:cd:ad:80:13:e6:
a7:87:74:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 10:40:26 2026 by rpki-client