
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/E98D6B641E943F7E38310634C5FEE8AE7C8AA6EE.mft
File: E98D6B641E943F7E38310634C5FEE8AE7C8AA6EE.mft (raw, json)
Hash identifier: awy2Qy2eVAWg+r3I4BctG9/Iern0FypuHSfJ/VdiD9o=
Subject key identifier: 61:8F:FA:E1:70:23:B9:A8:3A:1B:B5:73:2C:34:3A:A1:D9:5D:B4:2D
Authority key identifier: E9:8D:6B:64:1E:94:3F:7E:38:31:06:34:C5:FE:E8:AE:7C:8A:A6:EE
Certificate issuer: /CN=E98D6B641E943F7E38310634C5FEE8AE7C8AA6EE
Certificate serial: 767CDEC14DB74BA77B5258B64C5429B129E6ABA9
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E98D6B641E943F7E38310634C5FEE8AE7C8AA6EE.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/E98D6B641E943F7E38310634C5FEE8AE7C8AA6EE.mft
Manifest number: A6
Signing time: Thu 03 Sep 2026 21:59:35 +0000
Manifest this update: Thu 03 Sep 2026 21:54:35 +0000
Manifest next update: Sat 05 Sep 2026 01:23:35 +0000
Files and hashes: 1: 3130332e35352e3231362e302f32342d3234203d3e20313333383234.roa (hash: SdJfcBicTcG5/kcedYnrcuYyXbwXNypphwy52Yrbsfs=)
2: E98D6B641E943F7E38310634C5FEE8AE7C8AA6EE.crl (hash: xlifwo0uR7jqeFO356hvODH4JYmhGtz5KhTZY1JyG9s=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/E98D6B641E943F7E38310634C5FEE8AE7C8AA6EE.crl
rsync://rpki-rsync.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/E98D6B641E943F7E38310634C5FEE8AE7C8AA6EE.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E98D6B641E943F7E38310634C5FEE8AE7C8AA6EE.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Sep 2026 01:23:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:7c:de:c1:4d:b7:4b:a7:7b:52:58:b6:4c:54:29:b1:29:e6:ab:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E98D6B641E943F7E38310634C5FEE8AE7C8AA6EE
Validity
Not Before: Sep 3 21:54:35 2026 GMT
Not After : Sep 5 01:23:35 2026 GMT
Subject: CN=618FFAE17023B9A83A1BB5732C343AA1D95DB42D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:af:03:43:4b:7a:84:60:4a:31:df:b1:ed:fd:
6c:c8:7e:0a:d6:db:51:31:43:e8:e0:e1:db:da:3b:
26:f9:e9:a8:86:e1:f0:9e:3b:fd:2d:d6:24:38:34:
cb:2b:af:13:4f:f7:32:a6:76:3c:4a:2b:9b:2b:1c:
b4:40:d4:d6:d9:7c:ee:0b:20:69:18:3d:50:99:51:
3d:f9:6b:6b:e4:db:d0:85:d0:73:fe:28:d0:50:84:
d3:a6:95:1f:6e:e1:f9:03:10:f9:79:82:0a:30:91:
d9:a8:4f:a3:1a:98:3c:d3:d3:8b:f2:87:3c:ea:75:
f0:c9:b9:61:8d:58:f4:bf:e9:e2:06:b4:6b:47:41:
0b:de:ce:ac:5a:06:76:77:90:32:52:9c:c7:29:65:
ca:d7:d4:11:09:fb:4e:73:7f:b7:1a:dc:25:a9:a5:
5b:74:89:9c:14:f4:81:95:89:49:7e:0a:51:40:c4:
2c:a6:d3:8d:c2:5f:60:d8:88:15:29:8a:f1:c2:dd:
0e:9a:a2:55:d2:fd:a0:d4:8c:7f:b3:5c:9a:66:ad:
67:e4:4a:7c:25:43:67:d2:a7:58:62:e3:5e:08:b1:
15:4e:b4:84:4a:db:4c:2d:2d:2c:5a:30:a0:65:9a:
c7:ad:fe:cb:b7:f6:a8:85:ed:f1:95:a5:97:2e:df:
f2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:8F:FA:E1:70:23:B9:A8:3A:1B:B5:73:2C:34:3A:A1:D9:5D:B4:2D
X509v3 Authority Key Identifier:
keyid:E9:8D:6B:64:1E:94:3F:7E:38:31:06:34:C5:FE:E8:AE:7C:8A:A6:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/E98D6B641E943F7E38310634C5FEE8AE7C8AA6EE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E98D6B641E943F7E38310634C5FEE8AE7C8AA6EE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/E98D6B641E943F7E38310634C5FEE8AE7C8AA6EE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:1e:c7:61:83:a0:27:99:e3:fc:09:ca:26:30:ae:5a:72:3b:
93:38:f0:0a:4b:53:1a:03:32:e4:0d:eb:9a:99:4b:81:8b:64:
c4:0c:d2:d8:bc:19:53:aa:d2:b6:25:65:74:b8:f0:77:f4:4b:
c7:3e:d5:eb:d1:f6:93:26:82:95:b8:61:8c:fa:ca:5c:a6:6f:
1f:aa:32:0a:59:31:2a:65:7b:35:c8:d8:27:56:f6:df:a0:ae:
0f:54:be:f5:1c:bc:1e:17:68:34:36:c4:c8:9d:7c:c7:50:65:
3a:1d:11:d2:dd:57:0c:38:ab:b1:7e:d0:dc:5a:4f:69:0a:77:
11:7a:6f:09:0c:53:4a:41:15:d5:a1:ed:41:bd:66:b6:13:cd:
19:20:1f:89:ef:d2:18:5f:9b:66:84:5b:e7:80:8c:d5:a2:ac:
54:99:d7:aa:98:ef:00:20:bd:84:fa:17:6d:56:03:49:76:f2:
61:28:7a:69:19:f9:85:bb:de:9a:84:42:2a:a5:d5:c7:9c:0d:
f4:96:4f:e1:d3:3f:a4:00:80:b4:42:97:e7:f0:79:fc:17:03:
42:e4:dd:7c:61:d4:1e:47:8a:45:a5:9f:e0:28:12:7a:b2:a7:
2e:83:6b:eb:2d:cd:55:d5:f7:81:14:d0:ee:3d:6a:76:eb:2f:
67:24:2b:7a
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUdnzewU23S6d7Uli2TFQpsSnmq6kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTk4RDZCNjQxRTk0M0Y3RTM4MzEwNjM0QzVGRUU4QUU3
QzhBQTZFRTAeFw0yNjA5MDMyMTU0MzVaFw0yNjA5MDUwMTIzMzVaMDMxMTAvBgNV
BAMTKDYxOEZGQUUxNzAyM0I5QTgzQTFCQjU3MzJDMzQzQUExRDk1REI0MkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCCrwNDS3qEYEox37Ht/WzIfgrW
21ExQ+jg4dvaOyb56aiG4fCeO/0t1iQ4NMsrrxNP9zKmdjxKK5srHLRA1NbZfO4L
IGkYPVCZUT35a2vk29CF0HP+KNBQhNOmlR9u4fkDEPl5ggowkdmoT6MamDzT04vy
hzzqdfDJuWGNWPS/6eIGtGtHQQvezqxaBnZ3kDJSnMcpZcrX1BEJ+05zf7ca3CWp
pVt0iZwU9IGViUl+ClFAxCym043CX2DYiBUpivHC3Q6aolXS/aDUjH+zXJpmrWfk
SnwlQ2fSp1hi414IsRVOtIRK20wtLSxaMKBlmset/su39qiF7fGVpZcu3/INAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUYY/64XAjuag6G7VzLDQ6odldtC0wHwYDVR0j
BBgwFoAU6Y1rZB6UP344MQY0xf7ornyKpu4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NWU2MWY4NmUtMDdmMC00YzYwLWFkYzAtZmM2ODgxNmFjODY2LzAvRTk4RDZCNjQx
RTk0M0Y3RTM4MzEwNjM0QzVGRUU4QUU3QzhBQTZFRS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FOThENkI2NDFFOTQzRjdFMzgzMTA2MzRDNUZFRThBRTdDOEFB
NkVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWU2MWY4NmUtMDdmMC00YzYwLWFk
YzAtZmM2ODgxNmFjODY2LzAvRTk4RDZCNjQxRTk0M0Y3RTM4MzEwNjM0QzVGRUU4
QUU3QzhBQTZFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBACAex2GDoCeZ4/wJyiYwrlpyO5M48ApLUxoD
MuQN65qZS4GLZMQM0ti8GVOq0rYlZXS48Hf0S8c+1evR9pMmgpW4YYz6ylymbx+q
MgpZMSplezXI2CdW9t+grg9UvvUcvB4XaDQ2xMidfMdQZTodEdLdVww4q7F+0Nxa
T2kKdxF6bwkMU0pBFdWh7UG9ZrYTzRkgH4nv0hhfm2aEW+eAjNWirFSZ16qY7wAg
vYT6F21WA0l28mEoemkZ+YW73pqEQiql1cecDfSWT+HTP6QAgLRCl+fwefwXA0Lk
3Xxh1B5HikWln+AoEnqypy6Da+stzVXV94EU0O49anbrL2ckK3o=
-----END CERTIFICATE-----
Generated at Fri Sep 4 15:26:04 2026 by rpki-client