
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/E09CA942BC63A46AC14108FB56751F1D3DB2B40D.mft
File: E09CA942BC63A46AC14108FB56751F1D3DB2B40D.mft (raw, json)
Hash identifier: QxXXTDmD6odlpdOCjMU6mbC3yoOqHiPq0md6Kcd+A/E=
Subject key identifier: 01:18:2F:78:97:3F:17:08:A1:77:6B:80:58:48:49:31:49:4F:CF:78
Authority key identifier: E0:9C:A9:42:BC:63:A4:6A:C1:41:08:FB:56:75:1F:1D:3D:B2:B4:0D
Certificate issuer: /CN=E09CA942BC63A46AC14108FB56751F1D3DB2B40D
Certificate serial: 6E6EDB0178950E9B8C824C44901D9140E2FDEF40
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E09CA942BC63A46AC14108FB56751F1D3DB2B40D.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/E09CA942BC63A46AC14108FB56751F1D3DB2B40D.mft
Manifest number: FA
Signing time: Wed 04 Nov 2026 14:56:55 +0000
Manifest this update: Wed 04 Nov 2026 14:51:55 +0000
Manifest next update: Thu 05 Nov 2026 16:54:55 +0000
Files and hashes: 1: 3130332e31302e3235332e302f32342d3234203d3e203536323539.roa (hash: RVVP//q3vuwKuV+Q10lzaWaVgGwp0nEvsOc4ZWyOH5o=)
2: 3130332e36352e39362e302f32332d3234203d3e203536323539.roa (hash: AhptuUeczIXxYrYpEUFqYLa6JweMv5oyItdy1/amU/c=)
3: 3130332e32382e3136332e302f32342d3234203d3e203536323539.roa (hash: f3/5ZWIk2JVAliu7yKS60dOELpXPYdbw36ijNFDWyYM=)
4: E09CA942BC63A46AC14108FB56751F1D3DB2B40D.crl (hash: fdiw/VdypqjnPWyAAAkePqXw2+0XaZ6iozR8MkQ3npU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/E09CA942BC63A46AC14108FB56751F1D3DB2B40D.crl
rsync://rpki-rsync.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/E09CA942BC63A46AC14108FB56751F1D3DB2B40D.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E09CA942BC63A46AC14108FB56751F1D3DB2B40D.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Nov 2026 11:48:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:6e:db:01:78:95:0e:9b:8c:82:4c:44:90:1d:91:40:e2:fd:ef:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E09CA942BC63A46AC14108FB56751F1D3DB2B40D
Validity
Not Before: Nov 4 14:51:55 2026 GMT
Not After : Nov 5 16:54:55 2026 GMT
Subject: CN=01182F78973F1708A1776B8058484931494FCF78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c2:bd:e0:ff:bf:35:e8:0f:ee:40:04:4b:18:
59:df:96:15:3d:46:f0:a8:e8:6e:8d:77:c1:8f:8b:
3c:2d:41:ce:6b:c0:85:be:9c:7f:33:07:e5:d6:0c:
16:eb:52:bc:d4:54:3f:fd:b7:41:1d:07:64:71:6b:
91:c5:62:58:98:8c:ee:2c:84:61:f1:c7:02:f4:91:
62:97:2d:96:47:de:b2:0d:37:a5:47:bb:81:de:fc:
14:e3:3b:37:0d:df:91:b6:fa:86:1e:19:f2:c8:2b:
5f:7b:e0:47:73:77:87:48:06:1c:e0:d3:6d:0c:9d:
61:c2:e4:d7:81:77:86:9a:a6:13:2d:41:d8:08:64:
91:fe:ad:a7:6d:1a:df:14:21:cf:a2:a7:49:be:67:
29:64:4b:32:5c:54:d5:86:15:e9:fa:b2:68:7f:02:
b5:9b:37:e1:00:f7:ff:ef:83:3d:7b:74:32:64:d3:
74:81:ca:ce:0f:17:05:39:64:08:e9:37:10:5b:f5:
90:d3:04:81:ad:de:12:9d:9b:35:ca:1f:5a:6d:3f:
a1:f4:42:0a:b9:5d:d4:8b:2c:cf:19:e1:b2:91:0b:
f9:8a:32:59:9f:f6:1e:2f:3d:54:fb:5b:5c:c3:97:
40:64:d8:e3:d6:2e:a3:a5:de:ff:9f:c9:e1:14:48:
91:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:18:2F:78:97:3F:17:08:A1:77:6B:80:58:48:49:31:49:4F:CF:78
X509v3 Authority Key Identifier:
keyid:E0:9C:A9:42:BC:63:A4:6A:C1:41:08:FB:56:75:1F:1D:3D:B2:B4:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/E09CA942BC63A46AC14108FB56751F1D3DB2B40D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E09CA942BC63A46AC14108FB56751F1D3DB2B40D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/E09CA942BC63A46AC14108FB56751F1D3DB2B40D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:77:ea:e6:e7:d1:3f:1c:6e:73:c8:d7:ed:db:05:16:83:ac:
4c:f9:96:8e:c7:64:29:01:f3:20:48:16:57:ba:0c:48:56:c2:
17:28:41:4a:29:b1:72:e5:32:65:7c:c2:2d:f8:d2:41:25:ea:
41:2b:27:db:84:e3:eb:38:3e:6c:e7:df:b6:a7:26:e8:45:bc:
fc:73:a3:1a:04:bc:db:62:fa:9e:12:57:f9:55:df:ed:f6:23:
ec:4a:8d:6e:c2:69:89:52:4b:5b:78:83:58:06:77:6d:d0:62:
76:86:4e:7f:d5:9f:6a:96:3f:c9:0d:7b:0d:14:2f:85:ef:60:
a4:15:4b:2d:a3:17:f1:7e:d8:15:94:aa:2e:d7:9c:f9:cf:b8:
7b:b5:01:14:4a:dd:01:0d:8b:a3:6b:94:37:23:25:48:c3:9b:
b3:03:ff:20:02:1e:d2:44:05:3d:81:00:02:de:55:37:db:44:
8a:98:48:aa:d3:1b:5a:16:b2:0e:8f:f2:7e:40:b8:66:7c:8f:
2d:b6:7d:c3:2f:5c:5e:43:68:f8:9d:6d:5b:2b:a5:dc:69:93:
8c:3c:2d:ad:25:46:34:bc:fd:15:4c:b7:77:71:ce:73:75:29:
7c:4b:8f:ca:cf:44:01:ed:68:ef:26:86:7b:0b:1f:d6:a7:30:
b8:a1:b0:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 20:17:26 2026 by rpki-client