
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/E16393AC88E5DBEEB9429903B2E0EB729C677B05.mft
File: E16393AC88E5DBEEB9429903B2E0EB729C677B05.mft (raw, json)
Hash identifier: potw9bkI9HHA6fi3CSGFiQxQ65IPNNXTiiQR+qGgzb4=
Subject key identifier: 37:F0:49:B6:61:78:2B:18:AE:98:70:4A:CC:37:BF:0D:C6:17:D8:4F
Authority key identifier: E1:63:93:AC:88:E5:DB:EE:B9:42:99:03:B2:E0:EB:72:9C:67:7B:05
Certificate issuer: /CN=E16393AC88E5DBEEB9429903B2E0EB729C677B05
Certificate serial: 3582C59C1BC9D58C6EC448D0CE5DEFD2D2D833CA
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E16393AC88E5DBEEB9429903B2E0EB729C677B05.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/E16393AC88E5DBEEB9429903B2E0EB729C677B05.mft
Manifest number: A5
Signing time: Wed 02 Sep 2026 12:49:09 +0000
Manifest this update: Wed 02 Sep 2026 12:44:09 +0000
Manifest next update: Thu 03 Sep 2026 14:04:09 +0000
Files and hashes: 1: 3130332e3136302e3231332e302f32342d3234203d3e20313430333839.roa (hash: YUN+BY5pcnBVMiCm7rVh9YVL1oMMPlCxBU9cg/9p1D0=)
2: E16393AC88E5DBEEB9429903B2E0EB729C677B05.crl (hash: qkodTTt8AwJrF3ljpXJCs9li9XDKTAIdGPwDM/awWN8=)
3: 3130332e3136302e3231322e302f32342d3234203d3e20313430333839.roa (hash: EhNVRNwBN9rmTh1XBPBt7PuHkNC/TzJTTCRJrkNcKrw=)
4: 3130332e3136302e3231322e302f32332d3233203d3e20313430333839.roa (hash: LOf1A+/Ws/h9DMvY/QrE3vs2jRFuJ1lQwAwdpdoNvRc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/E16393AC88E5DBEEB9429903B2E0EB729C677B05.crl
rsync://rpki-rsync.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/E16393AC88E5DBEEB9429903B2E0EB729C677B05.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E16393AC88E5DBEEB9429903B2E0EB729C677B05.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 03 Sep 2026 14:04:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:82:c5:9c:1b:c9:d5:8c:6e:c4:48:d0:ce:5d:ef:d2:d2:d8:33:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E16393AC88E5DBEEB9429903B2E0EB729C677B05
Validity
Not Before: Sep 2 12:44:09 2026 GMT
Not After : Sep 3 14:04:09 2026 GMT
Subject: CN=37F049B661782B18AE98704ACC37BF0DC617D84F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c6:21:54:d1:a8:8e:60:af:09:b5:8b:09:e3:
8d:f7:2d:7c:b0:e3:58:0e:9a:d6:9b:02:b8:bb:cd:
bf:d9:9c:d0:b3:35:84:86:1d:4c:00:76:28:0b:51:
20:86:a7:67:ae:89:ac:aa:69:22:9f:9b:31:e6:da:
a5:de:05:82:da:f5:26:1b:78:92:05:0b:48:1b:f0:
9e:fd:15:10:03:5e:74:06:3e:7f:78:fb:3b:90:b8:
68:f5:d6:21:13:d8:60:db:2b:c5:1f:66:ca:d2:f6:
2a:06:4d:dd:61:de:42:55:93:64:66:81:ff:07:ac:
83:22:37:fe:13:2c:6e:8c:2b:da:62:5d:af:53:b1:
b1:79:31:3b:b9:8b:fd:37:58:66:04:71:1b:14:6d:
26:93:0a:9c:6b:88:d1:35:99:39:7c:b5:dd:23:42:
99:5b:87:c2:52:ac:e9:46:80:5d:a4:d3:09:73:c5:
6b:7a:96:c2:89:16:ad:75:90:62:25:48:a3:20:40:
bb:6c:0c:72:57:17:37:33:a7:8c:00:f2:0a:56:a0:
cf:0b:65:9f:9c:e1:43:ee:15:2e:18:38:63:85:65:
13:93:de:c0:52:51:77:0c:33:76:61:6e:7d:73:21:
0f:3a:27:94:47:4d:73:54:8e:35:c8:bc:20:d9:0f:
88:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:F0:49:B6:61:78:2B:18:AE:98:70:4A:CC:37:BF:0D:C6:17:D8:4F
X509v3 Authority Key Identifier:
keyid:E1:63:93:AC:88:E5:DB:EE:B9:42:99:03:B2:E0:EB:72:9C:67:7B:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/E16393AC88E5DBEEB9429903B2E0EB729C677B05.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E16393AC88E5DBEEB9429903B2E0EB729C677B05.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/E16393AC88E5DBEEB9429903B2E0EB729C677B05.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:6e:65:b0:8f:53:f9:58:d5:17:93:70:18:52:1a:99:55:b3:
fa:42:12:50:a0:cf:c4:c0:3f:3f:8e:56:82:09:77:46:4e:a1:
81:01:a6:ea:2c:ce:c9:cc:68:f5:ba:7c:59:81:fc:87:5f:f4:
02:a3:1a:bc:d7:86:e2:ab:9a:9c:5f:49:4a:0d:8c:e2:7e:47:
45:14:71:d6:b2:4d:e3:4d:35:96:a0:6c:4c:1d:99:2d:b2:ae:
2a:d3:73:be:1e:2f:99:12:27:17:7c:a8:07:39:9b:a4:e4:4a:
af:04:ab:81:26:5d:6f:7d:ee:7b:2b:95:bb:9b:0e:ac:3e:22:
7f:69:b8:06:15:6d:49:4a:ce:91:da:83:5c:b5:95:4f:e2:91:
db:f4:83:4f:4c:eb:76:a8:2d:07:32:10:9e:a2:69:92:c6:e4:
65:11:c7:ac:15:07:c1:f1:ce:48:ce:d8:3c:b2:a1:93:5e:d8:
e6:4f:c1:e5:56:e6:21:ab:ba:49:c1:d4:ed:22:98:8e:77:32:
91:57:4c:dc:06:34:f6:fb:17:ec:ff:82:15:2a:be:f1:38:e5:
ab:b5:73:7d:63:30:af:9d:cb:43:c9:d8:d2:d1:17:7f:8a:dc:
c0:55:1f:e3:30:89:10:99:2f:c3:88:61:7d:6c:8f:d0:69:93:
1c:b5:91:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 05:57:01 2026 by rpki-client