
$ rpki-client -vvf rpki-rsync.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/E6254E6F8E3EF1F3E283D322FC37D80FE06CFCCF.mft
File: E6254E6F8E3EF1F3E283D322FC37D80FE06CFCCF.mft (raw, json)
Hash identifier: ktvUd9SVWd4lSEGRcIdynbNdXeWQyM6LCYT1XReNXq0=
Subject key identifier: 92:39:35:22:A7:EB:28:38:ED:40:02:D8:EF:FB:51:FB:F7:83:0A:92
Authority key identifier: E6:25:4E:6F:8E:3E:F1:F3:E2:83:D3:22:FC:37:D8:0F:E0:6C:FC:CF
Certificate issuer: /CN=E6254E6F8E3EF1F3E283D322FC37D80FE06CFCCF
Certificate serial: 327DF800AA52139E6D4DF77F4E77C30813AFE941
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6254E6F8E3EF1F3E283D322FC37D80FE06CFCCF.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/E6254E6F8E3EF1F3E283D322FC37D80FE06CFCCF.mft
Manifest number: 2B
Signing time: Tue 02 Jun 2026 17:20:50 +0000
Manifest this update: Tue 02 Jun 2026 17:15:50 +0000
Manifest next update: Wed 03 Jun 2026 17:25:50 +0000
Files and hashes: 1: 3130332e3130312e39362e302f32332d3233203d3e20313530393430.roa (hash: oKwdl6Jbw0xgOvJgUIdnZaW+/Jj7haWqiuhnRZR2agc=)
2: 3130332e3130312e39362e302f32342d3234203d3e20313530393430.roa (hash: yJtiSShonhAnbGvzDWyHd3hC3zai87d1b+TqGDBagOs=)
3: E6254E6F8E3EF1F3E283D322FC37D80FE06CFCCF.crl (hash: io9FEa7FmyWATkcWRmUbXZ47JBjw+hxUzv9sH43Q3z8=)
4: 3130332e3130312e39372e302f32342d3234203d3e20313530393430.roa (hash: PujUY2/VrkQ5U7C51TkJPpWDbUx9tvrvxL32zD/gtc0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/E6254E6F8E3EF1F3E283D322FC37D80FE06CFCCF.crl
rsync://rpki-rsync.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/E6254E6F8E3EF1F3E283D322FC37D80FE06CFCCF.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6254E6F8E3EF1F3E283D322FC37D80FE06CFCCF.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 10:27:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:7d:f8:00:aa:52:13:9e:6d:4d:f7:7f:4e:77:c3:08:13:af:e9:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E6254E6F8E3EF1F3E283D322FC37D80FE06CFCCF
Validity
Not Before: Jun 2 17:15:50 2026 GMT
Not After : Jun 3 17:25:50 2026 GMT
Subject: CN=92393522A7EB2838ED4002D8EFFB51FBF7830A92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:bd:10:7d:b7:a9:a7:68:cc:eb:8c:c3:27:00:
09:38:d2:0a:b2:e8:4b:64:d5:83:39:8c:3a:21:4a:
9c:6f:90:b3:d2:ed:d9:69:9d:33:56:55:27:08:06:
ed:ac:fa:26:5b:86:df:b8:d7:c6:45:37:27:fe:b7:
41:f0:18:ec:f9:e1:dd:b5:7c:7f:43:fe:0a:ba:6f:
33:82:b3:4d:9b:69:1f:48:6b:e7:67:77:6f:cf:60:
e1:53:34:60:62:50:ac:2a:9b:09:da:a0:c7:71:a9:
15:71:3b:6f:9f:bc:4f:c7:e8:16:e7:cb:09:d3:df:
b0:74:e2:a6:60:1a:bf:4d:e0:88:45:a9:a6:94:f4:
09:8e:be:85:06:c4:83:5a:8c:2e:32:e8:87:b8:2b:
d5:1e:46:aa:76:b4:ec:65:af:46:5a:ba:12:9f:13:
5e:59:b8:cc:12:23:7c:7a:e3:7f:bf:2e:aa:31:f7:
b0:f2:3d:42:0b:45:52:2f:25:e2:98:4e:bd:7b:5a:
3b:c1:d6:d5:92:29:e9:1f:9d:67:33:6e:bd:fc:44:
bf:0d:21:c1:2d:36:44:c9:f0:75:07:13:7f:a1:30:
cc:9e:3e:70:8f:28:ce:e7:17:fd:86:47:ce:0a:1d:
79:72:3f:b7:b9:a3:a5:76:59:6d:ac:78:ab:87:7d:
af:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:39:35:22:A7:EB:28:38:ED:40:02:D8:EF:FB:51:FB:F7:83:0A:92
X509v3 Authority Key Identifier:
keyid:E6:25:4E:6F:8E:3E:F1:F3:E2:83:D3:22:FC:37:D8:0F:E0:6C:FC:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/E6254E6F8E3EF1F3E283D322FC37D80FE06CFCCF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6254E6F8E3EF1F3E283D322FC37D80FE06CFCCF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/E6254E6F8E3EF1F3E283D322FC37D80FE06CFCCF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:54:aa:44:c1:93:21:04:79:32:4a:2a:70:56:51:79:48:64:
3b:12:80:d9:fb:29:25:97:c4:87:94:d9:34:4e:b0:be:c6:b6:
28:f6:1c:8b:7f:7c:d3:08:2a:bb:0b:3d:15:79:34:cc:e2:8a:
c0:ee:61:c5:06:e5:16:7d:2c:0a:3b:d5:9c:58:1b:80:65:3c:
04:d0:14:30:07:29:2a:e3:a3:8f:d8:8b:67:b8:0e:20:64:f0:
8b:2b:06:cb:6e:8e:35:0f:61:9f:06:d2:cb:3d:e2:92:9b:d3:
85:16:a4:e1:cc:bf:7f:b3:36:3a:58:34:01:89:37:e9:d4:16:
b3:3a:8c:9f:dd:99:09:80:65:43:38:0d:31:1c:50:3e:29:76:
3c:38:39:e1:69:6a:0c:56:6a:89:6a:59:a9:88:72:54:13:4c:
56:73:7d:88:b0:3f:0e:ce:c0:90:b0:e6:3c:1b:26:ad:56:db:
13:e7:79:5c:29:62:fa:9c:a7:7f:ea:4f:ce:21:dc:d9:d8:32:
e6:e3:a1:1e:ff:90:1a:90:1b:56:a4:9e:57:e5:32:0c:22:d9:
a8:47:99:d1:70:3c:85:7a:e5:49:01:6d:d2:aa:f4:8e:74:f7:
70:18:4a:17:0d:36:8d:0b:5d:3a:b9:18:c6:be:3e:ed:40:91:
96:51:43:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:08:19 2026 by rpki-client