
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.mft
File: E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.mft (raw, json)
Hash identifier: u68yAJEnVDmxaCgFCSym0BkUJVGq6J0A1uNfHFaTLuY=
Subject key identifier: A4:1E:EC:0C:1C:8C:B0:8C:60:CF:C2:39:3E:E8:BD:A7:89:BC:B2:5A
Authority key identifier: E5:F6:F9:E5:DD:9D:34:BD:A0:8C:45:31:BA:70:87:61:A3:5A:DE:60
Certificate issuer: /CN=E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60
Certificate serial: 798947143696CFB52E545CBA67A9742AA3DFDDC9
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.mft
Manifest number: F6
Signing time: Mon 02 Nov 2026 00:07:53 +0000
Manifest this update: Mon 02 Nov 2026 00:02:53 +0000
Manifest next update: Tue 03 Nov 2026 03:23:53 +0000
Files and hashes: 1: 3130332e3137382e3137312e302f32342d3234203d3e20313339393532.roa (hash: aDinqjPhgNq50kNy+lg2Iba0bDegBSFkr3DIakb0nTU=)
2: 3130332e3137382e3137302e302f32342d3234203d3e20313339393532.roa (hash: Q+Zpu9s7FFAblJfI/9bq1CU9BNldDzB+MO83xGJv/O8=)
3: E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.crl (hash: RMtIZbg9e9cXX8cdtuxVKKoPE3ftwdr0gCcq3cwGscQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.crl
rsync://rpki-rsync.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 03:23:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:89:47:14:36:96:cf:b5:2e:54:5c:ba:67:a9:74:2a:a3:df:dd:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60
Validity
Not Before: Nov 2 00:02:53 2026 GMT
Not After : Nov 3 03:23:53 2026 GMT
Subject: CN=A41EEC0C1C8CB08C60CFC2393EE8BDA789BCB25A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4c:80:0f:97:3f:ce:60:0b:5a:75:ff:4e:96:
64:ac:05:7c:78:6a:da:27:8b:41:ca:0c:68:e4:fd:
20:ab:e8:ab:16:b6:43:19:0f:70:9b:94:9d:50:08:
70:f1:91:43:09:f9:bb:76:2e:22:9a:17:a3:28:eb:
e7:40:7b:41:40:c9:8b:5c:8d:ac:ae:58:ba:01:10:
c9:45:ae:29:37:a5:46:f6:69:a8:29:ad:44:11:22:
db:78:ca:78:5d:ab:b2:c4:b5:b1:bc:37:f3:d5:77:
63:6f:30:50:c1:51:08:ec:83:7f:fb:45:05:1a:9b:
34:7f:e8:1f:ec:94:9c:c6:b1:0d:e7:ea:17:b0:c8:
75:66:47:d7:28:1a:76:d8:f8:98:55:e2:3e:b2:29:
03:ec:de:d3:9f:86:56:6e:5a:86:87:63:9b:28:e5:
9a:42:19:90:62:de:1d:e3:e9:49:e0:d6:9b:86:b8:
90:60:00:ac:51:24:4e:63:9f:29:dc:68:8d:c5:ee:
c2:9c:ae:34:35:8a:39:80:df:aa:a2:c7:5d:bf:f4:
72:0a:ff:0a:d9:f5:c3:e7:9b:d9:ea:48:d3:a2:e1:
0f:88:4a:a9:9e:06:33:60:09:f5:4c:b4:b5:7e:d5:
cf:5b:f1:84:e1:e4:4a:cd:2c:8e:99:ee:55:8e:79:
d4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:1E:EC:0C:1C:8C:B0:8C:60:CF:C2:39:3E:E8:BD:A7:89:BC:B2:5A
X509v3 Authority Key Identifier:
keyid:E5:F6:F9:E5:DD:9D:34:BD:A0:8C:45:31:BA:70:87:61:A3:5A:DE:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:d1:59:73:fb:c0:4b:53:6e:7e:ec:57:9a:15:28:87:04:c4:
20:13:ab:9c:4d:9d:8a:f2:c9:84:fb:e1:f4:73:a1:2b:28:3f:
0d:12:d0:f8:f1:1c:0c:c4:7f:7b:4b:4d:34:38:2a:71:2f:b7:
55:79:18:35:e9:6b:07:58:7b:94:1f:a1:f8:d0:c4:3d:47:c5:
05:e1:6c:2d:e3:3c:be:5d:6e:95:5c:3d:87:e4:b7:d7:71:7b:
cd:c7:bd:33:fd:73:08:ac:90:b1:d5:46:a9:d1:37:ed:84:1e:
a1:1b:19:cc:8d:e7:1a:2d:5e:18:75:f2:01:c7:7b:3b:b6:f1:
af:d9:40:55:71:01:04:01:5d:03:09:90:5c:78:20:26:9a:eb:
48:ab:ff:19:87:f5:59:d3:8a:cb:4c:aa:4c:ef:73:62:f6:58:
40:fa:e8:6d:fa:38:53:0e:d5:ec:bf:52:d3:12:39:cf:6a:8b:
e7:a1:a4:56:5d:d5:b5:ad:e5:e6:67:a1:dd:23:ea:b7:c0:61:
fd:bc:a4:15:e9:2d:f4:b2:8f:b7:2f:55:c4:64:9b:f9:68:09:
1d:61:d8:73:83:c2:7a:bb:c9:94:10:97:5d:c6:92:ec:ee:72:
44:9b:10:43:6f:f2:df:ba:ec:f2:62:db:37:15:73:a6:87:32:
71:51:eb:fa
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUeYlHFDaWz7UuVFy6Z6l0KqPf3ckwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTVGNkY5RTVERDlEMzRCREEwOEM0NTMxQkE3MDg3NjFB
MzVBREU2MDAeFw0yNjExMDIwMDAyNTNaFw0yNjExMDMwMzIzNTNaMDMxMTAvBgNV
BAMTKEE0MUVFQzBDMUM4Q0IwOEM2MENGQzIzOTNFRThCREE3ODlCQ0IyNUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4TIAPlz/OYAtadf9OlmSsBXx4
atoni0HKDGjk/SCr6KsWtkMZD3CblJ1QCHDxkUMJ+bt2LiKaF6Mo6+dAe0FAyYtc
jayuWLoBEMlFrik3pUb2aagprUQRItt4ynhdq7LEtbG8N/PVd2NvMFDBUQjsg3/7
RQUamzR/6B/slJzGsQ3n6hewyHVmR9coGnbY+JhV4j6yKQPs3tOfhlZuWoaHY5so
5ZpCGZBi3h3j6Ung1puGuJBgAKxRJE5jnyncaI3F7sKcrjQ1ijmA36qix12/9HIK
/wrZ9cPnm9nqSNOi4Q+ISqmeBjNgCfVMtLV+1c9b8YTh5ErNLI6Z7lWOedQNAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUpB7sDByMsIxgz8I5Pui9p4m8slowHwYDVR0j
BBgwFoAU5fb55d2dNL2gjEUxunCHYaNa3mAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MmMwMWZkNDQtOGNkNi00ZDlmLTliZDEtODM2N2FkOWNkOWVhLzAvRTVGNkY5RTVE
RDlEMzRCREEwOEM0NTMxQkE3MDg3NjFBMzVBREU2MC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FNUY2RjlFNUREOUQzNEJEQTA4QzQ1MzFCQTcwODc2MUEzNUFE
RTYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmMwMWZkNDQtOGNkNi00ZDlmLTli
ZDEtODM2N2FkOWNkOWVhLzAvRTVGNkY5RTVERDlEMzRCREEwOEM0NTMxQkE3MDg3
NjFBMzVBREU2MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJjRWXP7wEtTbn7sV5oVKIcExCATq5xNnYry
yYT74fRzoSsoPw0S0PjxHAzEf3tLTTQ4KnEvt1V5GDXpawdYe5QfofjQxD1HxQXh
bC3jPL5dbpVcPYfkt9dxe83HvTP9cwiskLHVRqnRN+2EHqEbGcyN5xotXhh18gHH
ezu28a/ZQFVxAQQBXQMJkFx4ICaa60ir/xmH9VnTistMqkzvc2L2WED66G36OFMO
1ey/UtMSOc9qi+ehpFZd1bWt5eZnod0j6rfAYf28pBXpLfSyj7cvVcRkm/loCR1h
2HODwnq7yZQQl13GkuzuckSbEENv8t+67PJi2zcVc6aHMnFR6/o=
-----END CERTIFICATE-----
Generated at Mon Nov 2 15:27:00 2026 by rpki-client