
$ rpki-client -vvf rpki-rsync.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/E09CA942BC63A46AC14108FB56751F1D3DB2B40D.mft
File: E09CA942BC63A46AC14108FB56751F1D3DB2B40D.mft (raw, json)
Hash identifier: qmxrNTsfoRK6dX5ALmPRcQO3/3dg5er1tQfoqQ59W1s=
Subject key identifier: 96:E2:51:58:63:22:55:5F:4D:FD:9B:40:E1:E8:60:B0:F9:DB:C1:F1
Authority key identifier: E0:9C:A9:42:BC:63:A4:6A:C1:41:08:FB:56:75:1F:1D:3D:B2:B4:0D
Certificate issuer: /CN=E09CA942BC63A46AC14108FB56751F1D3DB2B40D
Certificate serial: 5BA8DB88BEF6CCAD533ABE88FB451BFF7F8069DA
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E09CA942BC63A46AC14108FB56751F1D3DB2B40D.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/E09CA942BC63A46AC14108FB56751F1D3DB2B40D.mft
Manifest number: 2B
Signing time: Tue 02 Jun 2026 17:05:37 +0000
Manifest this update: Tue 02 Jun 2026 17:00:37 +0000
Manifest next update: Wed 03 Jun 2026 20:56:37 +0000
Files and hashes: 1: E09CA942BC63A46AC14108FB56751F1D3DB2B40D.crl (hash: 1NL5V5CaFEBKEkXHM75Ap9f0+qDpGeNVXaZQ/oesu6E=)
2: 3130332e31302e3235332e302f32342d3234203d3e203536323539.roa (hash: RVVP//q3vuwKuV+Q10lzaWaVgGwp0nEvsOc4ZWyOH5o=)
3: 3130332e32382e3136332e302f32342d3234203d3e203536323539.roa (hash: f3/5ZWIk2JVAliu7yKS60dOELpXPYdbw36ijNFDWyYM=)
4: 3130332e36352e39362e302f32332d3234203d3e203536323539.roa (hash: AhptuUeczIXxYrYpEUFqYLa6JweMv5oyItdy1/amU/c=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/E09CA942BC63A46AC14108FB56751F1D3DB2B40D.crl
rsync://rpki-rsync.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/E09CA942BC63A46AC14108FB56751F1D3DB2B40D.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E09CA942BC63A46AC14108FB56751F1D3DB2B40D.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 10:27:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:a8:db:88:be:f6:cc:ad:53:3a:be:88:fb:45:1b:ff:7f:80:69:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E09CA942BC63A46AC14108FB56751F1D3DB2B40D
Validity
Not Before: Jun 2 17:00:37 2026 GMT
Not After : Jun 3 20:56:37 2026 GMT
Subject: CN=96E251586322555F4DFD9B40E1E860B0F9DBC1F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f2:d1:f8:35:2e:00:33:8f:d0:82:47:54:5a:
92:65:30:e9:50:3d:8e:5a:30:1b:b6:cb:27:f2:1c:
78:c2:33:fe:c4:57:ac:e3:05:13:58:f9:02:ce:ed:
ef:c7:76:9d:53:a2:ef:53:99:64:6f:f6:b7:4c:fa:
d6:d7:2b:3f:34:af:7e:a1:eb:be:14:a7:74:9f:47:
ef:13:31:fe:12:96:79:45:9d:8c:94:23:3b:0e:a2:
05:3b:35:a4:19:df:e6:46:e7:11:eb:11:cb:6f:82:
62:60:09:7d:c1:03:f7:9b:02:4c:70:2b:01:93:66:
02:93:c0:a9:eb:93:2c:d9:fb:b4:48:6b:3f:ba:a1:
67:b1:a2:50:9c:53:a6:a2:94:71:b1:3a:c4:29:2f:
e5:20:74:f8:3e:95:b0:3b:86:2e:82:cd:f4:0c:ce:
82:43:3a:5c:d3:86:81:be:cb:92:a1:fd:10:0f:df:
92:7c:3b:54:25:5b:e5:5d:95:3c:fe:80:86:40:27:
be:bd:8c:db:08:b1:cf:59:f1:3a:b0:33:7c:c5:f6:
fb:18:a9:b2:c8:25:f1:b3:dc:0f:f0:27:c4:c3:a2:
e5:aa:e7:00:51:6e:da:5e:2b:93:9e:3b:18:00:fb:
85:ca:de:6c:f8:83:2c:77:ca:aa:5e:34:f7:c2:94:
09:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:E2:51:58:63:22:55:5F:4D:FD:9B:40:E1:E8:60:B0:F9:DB:C1:F1
X509v3 Authority Key Identifier:
keyid:E0:9C:A9:42:BC:63:A4:6A:C1:41:08:FB:56:75:1F:1D:3D:B2:B4:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/E09CA942BC63A46AC14108FB56751F1D3DB2B40D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E09CA942BC63A46AC14108FB56751F1D3DB2B40D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/E09CA942BC63A46AC14108FB56751F1D3DB2B40D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:47:f6:23:5e:eb:37:06:66:fe:7d:a4:c2:af:42:6b:33:5c:
0a:ed:27:35:2a:5e:b1:b0:a3:e0:31:1e:1c:09:72:f4:42:87:
21:66:5e:a2:1a:d0:dd:0d:ea:af:1e:0f:4b:fe:7d:87:6d:77:
9d:a0:3e:5d:81:26:be:0f:0b:e2:5f:f9:4e:97:1b:0a:97:1e:
3f:59:10:29:b0:24:af:f0:05:df:33:71:b6:01:0b:a1:85:42:
a9:5b:30:b6:da:e5:47:4d:0e:39:d1:fb:02:54:77:2c:75:2b:
bf:96:df:ec:60:42:50:f3:0c:a1:79:e3:83:ae:d1:5f:c3:bc:
2d:5e:7f:0e:fd:a8:e3:07:89:65:09:94:2d:7f:fa:07:3c:83:
a0:8b:86:c4:7b:1d:ef:77:34:b8:e5:f2:47:c3:65:f5:22:b9:
69:49:84:25:de:04:28:5f:a4:a9:3a:55:76:02:ab:47:28:6a:
fd:5e:aa:7f:3b:58:50:11:6a:64:23:5c:94:64:92:36:78:ad:
93:bc:77:48:cf:69:94:e4:05:9f:87:80:6f:ac:21:14:06:1a:
26:b1:01:eb:72:f6:70:15:27:26:b4:c7:d9:7d:06:e4:f7:e6:
8c:e9:ae:ee:20:bb:a0:85:0f:18:46:29:bd:3e:61:9a:46:43:
83:52:07:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:46:51 2026 by rpki-client