
$ rpki-client -vvf rpki-rsync.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/E09CA942BC63A46AC14108FB56751F1D3DB2B40D.mft
File: E09CA942BC63A46AC14108FB56751F1D3DB2B40D.mft (raw, json)
Hash identifier: E+0wsy7Zc/47OhtrVTLfhsRTUHihOQQpKMC2v8F5feI=
Subject key identifier: 8E:37:B8:48:93:CE:14:F9:62:54:2A:03:D1:E3:A8:78:BD:48:48:44
Authority key identifier: E0:9C:A9:42:BC:63:A4:6A:C1:41:08:FB:56:75:1F:1D:3D:B2:B4:0D
Certificate issuer: /CN=E09CA942BC63A46AC14108FB56751F1D3DB2B40D
Certificate serial: 03B2B7C23EC27BA0F66737868DA58A23BE969B99
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E09CA942BC63A46AC14108FB56751F1D3DB2B40D.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/E09CA942BC63A46AC14108FB56751F1D3DB2B40D.mft
Manifest number: 6B
Signing time: Mon 20 Jul 2026 17:17:51 +0000
Manifest this update: Mon 20 Jul 2026 17:12:51 +0000
Manifest next update: Tue 21 Jul 2026 17:35:51 +0000
Files and hashes: 1: 3130332e31302e3235332e302f32342d3234203d3e203536323539.roa (hash: RVVP//q3vuwKuV+Q10lzaWaVgGwp0nEvsOc4ZWyOH5o=)
2: E09CA942BC63A46AC14108FB56751F1D3DB2B40D.crl (hash: vofTiq49m/hBb8XqiGXP+aIZcNB5lDrVkcNqyQka//A=)
3: 3130332e32382e3136332e302f32342d3234203d3e203536323539.roa (hash: f3/5ZWIk2JVAliu7yKS60dOELpXPYdbw36ijNFDWyYM=)
4: 3130332e36352e39362e302f32332d3234203d3e203536323539.roa (hash: AhptuUeczIXxYrYpEUFqYLa6JweMv5oyItdy1/amU/c=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/E09CA942BC63A46AC14108FB56751F1D3DB2B40D.crl
rsync://rpki-rsync.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/E09CA942BC63A46AC14108FB56751F1D3DB2B40D.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E09CA942BC63A46AC14108FB56751F1D3DB2B40D.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Jul 2026 17:35:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:b2:b7:c2:3e:c2:7b:a0:f6:67:37:86:8d:a5:8a:23:be:96:9b:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E09CA942BC63A46AC14108FB56751F1D3DB2B40D
Validity
Not Before: Jul 20 17:12:51 2026 GMT
Not After : Jul 21 17:35:51 2026 GMT
Subject: CN=8E37B84893CE14F962542A03D1E3A878BD484844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:06:1b:05:63:68:8e:37:62:95:f9:fc:36:ef:
36:91:77:96:b9:d7:a2:65:6d:ba:b0:4f:5b:c9:9e:
ac:2f:87:b0:79:60:b0:fb:d3:cf:79:92:cb:e7:f9:
fd:99:9b:3d:f3:f1:f1:85:ff:51:61:08:1d:b5:c1:
a3:e8:23:37:85:78:03:29:26:2a:73:dc:30:07:ec:
22:fb:c4:94:6e:67:96:30:34:57:c4:ca:cb:66:99:
66:1b:5d:8d:12:bb:d7:44:0a:0b:9d:9e:aa:06:da:
2d:b2:cd:e8:80:23:f8:6e:26:34:33:03:43:1b:f9:
21:b0:02:a5:06:3e:49:87:8a:d8:da:3e:72:01:91:
e7:b9:70:5a:a5:6f:50:0f:1b:11:82:79:e0:63:cf:
38:d2:6d:58:a9:7a:5d:ab:d4:70:69:cd:12:f0:50:
14:21:1d:e8:6d:ad:37:56:f0:7c:98:6f:76:ef:84:
fc:85:05:ac:38:24:0b:91:d9:76:fe:22:a6:09:cf:
00:de:ec:4c:47:ad:4e:32:59:6f:e1:f1:66:5f:8a:
42:fd:c9:8f:59:ea:c9:f7:4f:e9:56:d6:f8:a5:c6:
dd:e4:e5:ef:f8:a1:ca:e5:5b:01:2f:1e:75:7e:e3:
ed:4d:74:66:69:00:26:c0:e0:3a:a1:62:c3:3d:7d:
ed:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:37:B8:48:93:CE:14:F9:62:54:2A:03:D1:E3:A8:78:BD:48:48:44
X509v3 Authority Key Identifier:
keyid:E0:9C:A9:42:BC:63:A4:6A:C1:41:08:FB:56:75:1F:1D:3D:B2:B4:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/E09CA942BC63A46AC14108FB56751F1D3DB2B40D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E09CA942BC63A46AC14108FB56751F1D3DB2B40D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/E09CA942BC63A46AC14108FB56751F1D3DB2B40D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:23:0a:29:7f:2b:d5:11:f0:06:0f:0c:8a:e2:7a:f5:73:f8:
c1:27:4b:8d:4e:4f:e0:3c:f5:15:24:c4:6b:b7:cb:d8:c7:74:
02:b6:0f:c5:b6:19:fb:40:c6:14:85:54:cd:41:fd:56:df:77:
fd:87:c3:41:a8:11:ab:fe:71:5c:30:50:a8:8d:e6:bc:9b:8d:
ca:6a:77:f9:88:b7:3f:de:c1:6d:c8:43:cf:7e:c7:b0:c8:50:
b0:d6:11:c5:e7:f7:8e:d4:9f:f6:b4:6e:b4:c3:c5:aa:e3:d3:
a0:53:1d:f2:7a:5a:ae:5a:be:59:0d:d5:98:a5:2c:1b:bc:10:
1f:ad:13:b2:07:64:ca:d7:31:7f:80:d3:db:3c:69:34:21:6c:
26:04:7b:6f:e7:49:2c:e4:8a:cc:02:8b:b0:8c:25:92:fa:94:
44:5a:db:34:e8:ed:03:9c:ea:9c:07:e9:1c:4e:4c:45:f7:06:
f5:4a:02:ed:27:b4:cf:59:e5:01:29:23:ae:58:03:95:ed:e2:
7b:20:0f:b6:54:99:47:20:21:17:94:c8:77:a5:8b:83:a1:22:
4a:cc:36:e1:a5:87:0c:bc:a9:70:52:5f:06:3c:e3:ee:62:37:
01:45:a5:01:72:f7:0e:69:43:71:e5:be:21:2f:4d:8e:aa:7f:
a1:27:41:b6
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUA7K3wj7Ce6D2ZzeGjaWKI76Wm5kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTA5Q0E5NDJCQzYzQTQ2QUMxNDEwOEZCNTY3NTFGMUQz
REIyQjQwRDAeFw0yNjA3MjAxNzEyNTFaFw0yNjA3MjExNzM1NTFaMDMxMTAvBgNV
BAMTKDhFMzdCODQ4OTNDRTE0Rjk2MjU0MkEwM0QxRTNBODc4QkQ0ODQ4NDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDBhsFY2iON2KV+fw27zaRd5a5
16JlbbqwT1vJnqwvh7B5YLD70895ksvn+f2Zmz3z8fGF/1FhCB21waPoIzeFeAMp
Jipz3DAH7CL7xJRuZ5YwNFfEystmmWYbXY0Su9dECgudnqoG2i2yzeiAI/huJjQz
A0Mb+SGwAqUGPkmHitjaPnIBkee5cFqlb1APGxGCeeBjzzjSbVipel2r1HBpzRLw
UBQhHehtrTdW8HyYb3bvhPyFBaw4JAuR2Xb+IqYJzwDe7ExHrU4yWW/h8WZfikL9
yY9Z6sn3T+lW1vilxt3k5e/4ocrlWwEvHnV+4+1NdGZpACbA4DqhYsM9fe3NAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUjje4SJPOFPliVCoD0eOoeL1ISEQwHwYDVR0j
BBgwFoAU4JypQrxjpGrBQQj7VnUfHT2ytA0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NGQ5NzAwMzItMDhlYS00ODkwLWJkYmEtNjMwOWE0OTc5MTdkLzAvRTA5Q0E5NDJC
QzYzQTQ2QUMxNDEwOEZCNTY3NTFGMUQzREIyQjQwRC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FMDlDQTk0MkJDNjNBNDZBQzE0MTA4RkI1Njc1MUYxRDNEQjJC
NDBELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGQ5NzAwMzItMDhlYS00ODkwLWJk
YmEtNjMwOWE0OTc5MTdkLzAvRTA5Q0E5NDJCQzYzQTQ2QUMxNDEwOEZCNTY3NTFG
MUQzREIyQjQwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHsjCil/K9UR8AYPDIrievVz+MEnS41OT+A8
9RUkxGu3y9jHdAK2D8W2GftAxhSFVM1B/Vbfd/2Hw0GoEav+cVwwUKiN5rybjcpq
d/mItz/ewW3IQ89+x7DIULDWEcXn947Un/a0brTDxarj06BTHfJ6Wq5avlkN1Zil
LBu8EB+tE7IHZMrXMX+A09s8aTQhbCYEe2/nSSzkiswCi7CMJZL6lERa2zTo7QOc
6pwH6RxOTEX3BvVKAu0ntM9Z5QEpI65YA5Xt4nsgD7ZUmUcgIReUyHeli4OhIkrM
NuGlhwy8qXBSXwY84+5iNwFFpQFy9w5pQ3HlviEvTY6qf6EnQbY=
-----END CERTIFICATE-----
Generated at Tue Jul 21 06:29:51 2026 by rpki-client