
$ rpki-client -vvf rpki-rsync.idnic.net/repo/85f9002d-9267-4f8b-859a-dfa7d89143b4/0/E13177CE4E5C1407466936B4193E0B11E39AA6F8.mft
File: E13177CE4E5C1407466936B4193E0B11E39AA6F8.mft (raw, json)
Hash identifier: nPsMPm3wx4U1fe2jC6g+2qmwJghIrtCYUej9UTz+QPA=
Subject key identifier: 18:39:53:F4:5D:AD:46:C3:9E:DB:1A:1C:A8:15:43:B2:D6:04:A0:E3
Authority key identifier: E1:31:77:CE:4E:5C:14:07:46:69:36:B4:19:3E:0B:11:E3:9A:A6:F8
Certificate issuer: /CN=E13177CE4E5C1407466936B4193E0B11E39AA6F8
Certificate serial: 475E1BF487158A3AC7847EEFCD445ACDFEA66703
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E13177CE4E5C1407466936B4193E0B11E39AA6F8.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/85f9002d-9267-4f8b-859a-dfa7d89143b4/0/E13177CE4E5C1407466936B4193E0B11E39AA6F8.mft
Manifest number: 2B
Signing time: Tue 02 Jun 2026 16:14:41 +0000
Manifest this update: Tue 02 Jun 2026 16:09:41 +0000
Manifest next update: Wed 03 Jun 2026 17:05:41 +0000
Files and hashes: 1: 3130332e3136362e3234312e302f32342d3234203d3e20313431393639.roa (hash: HkWboPR/l28Qd/gjZFN0EmMYcGZiEVTHPsAa19NTjWI=)
2: E13177CE4E5C1407466936B4193E0B11E39AA6F8.crl (hash: GYFivnGMl+i7qaEMT8jzhFZ/e8b5hHNthdRAEzRzYPc=)
3: 3130332e3136362e3234302e302f32342d3234203d3e20313431393639.roa (hash: zZxXDi8iy3KS/uupWW0nVAXq3kN53K+3nF+iOYvJuas=)
4: 3130332e3136362e3234302e302f32332d3233203d3e20313431393639.roa (hash: gGUcfX35JR6LWByHoWtXoWvCull7LxM91Z3jg16aSlo=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/85f9002d-9267-4f8b-859a-dfa7d89143b4/0/E13177CE4E5C1407466936B4193E0B11E39AA6F8.crl
rsync://rpki-rsync.idnic.net/repo/85f9002d-9267-4f8b-859a-dfa7d89143b4/0/E13177CE4E5C1407466936B4193E0B11E39AA6F8.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E13177CE4E5C1407466936B4193E0B11E39AA6F8.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 10:27:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:5e:1b:f4:87:15:8a:3a:c7:84:7e:ef:cd:44:5a:cd:fe:a6:67:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E13177CE4E5C1407466936B4193E0B11E39AA6F8
Validity
Not Before: Jun 2 16:09:41 2026 GMT
Not After : Jun 3 17:05:41 2026 GMT
Subject: CN=183953F45DAD46C39EDB1A1CA81543B2D604A0E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2e:90:6a:ab:a2:7d:2f:63:37:5b:dd:84:a9:
7e:f1:ab:21:f7:2a:7c:2a:9e:3d:5f:62:8e:e4:75:
31:68:bc:5e:d9:c0:1e:2f:2e:17:00:7c:fc:b9:ff:
53:a8:09:8a:49:35:44:2f:77:cf:71:a5:cd:a0:60:
d0:60:8f:5d:90:db:2a:46:7e:d0:d0:be:e1:5c:10:
f2:1f:77:8b:d9:09:01:c6:ba:4c:be:a8:9c:43:f7:
56:fd:62:46:7a:48:75:a7:81:d9:76:9f:2c:e6:2b:
67:7c:4a:87:df:c3:7a:5e:11:94:12:cd:26:76:b6:
4d:02:a5:23:13:a7:4e:6f:74:a5:7d:b3:23:c1:42:
a6:25:14:a3:8b:9e:94:28:e8:d0:a8:e0:be:99:d3:
46:4e:a5:c0:b5:93:47:d0:e3:ab:12:26:52:ff:79:
3d:81:a0:23:0d:ae:a3:09:6a:d8:57:45:e3:4a:b1:
d9:7f:24:49:a5:73:5e:16:c1:6b:ec:b5:90:67:eb:
ea:6e:4c:b7:a9:32:5e:cd:62:41:85:b8:ec:ad:3f:
28:ab:db:ac:8e:3c:52:61:1b:c4:7c:54:d4:ce:3d:
7c:3d:bc:78:21:ec:ae:04:85:53:5e:b2:63:70:ed:
39:ab:7e:85:8a:71:38:57:cb:61:fd:ea:dd:95:78:
98:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:39:53:F4:5D:AD:46:C3:9E:DB:1A:1C:A8:15:43:B2:D6:04:A0:E3
X509v3 Authority Key Identifier:
keyid:E1:31:77:CE:4E:5C:14:07:46:69:36:B4:19:3E:0B:11:E3:9A:A6:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/85f9002d-9267-4f8b-859a-dfa7d89143b4/0/E13177CE4E5C1407466936B4193E0B11E39AA6F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E13177CE4E5C1407466936B4193E0B11E39AA6F8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/85f9002d-9267-4f8b-859a-dfa7d89143b4/0/E13177CE4E5C1407466936B4193E0B11E39AA6F8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:9d:36:7e:a1:43:dd:ac:23:21:b7:35:a1:f4:96:01:b5:32:
f4:c4:54:90:4f:68:23:71:c2:ec:59:22:04:cc:4c:b5:5b:f8:
9a:a1:63:0e:fe:88:c5:98:2b:f1:6c:0f:8d:71:f5:1f:dd:3c:
27:1f:83:03:f6:8e:88:25:40:a1:a4:87:47:30:99:07:05:76:
4b:b2:b5:0d:3d:3e:c8:4e:d7:62:50:a5:42:12:4f:de:74:55:
bd:8a:62:19:89:20:24:b9:6f:2a:7c:14:61:61:73:f7:be:e0:
fd:38:4c:89:26:51:d9:16:31:88:42:5d:b3:54:75:36:5a:f9:
96:88:b4:a9:37:ac:db:43:38:fa:d9:7c:b9:4f:3c:f8:f1:3a:
ac:b7:b5:8e:45:0b:89:7f:0a:2e:eb:f5:de:09:40:df:10:fb:
56:4a:ea:67:dc:89:bd:15:dc:2d:45:6b:1b:14:27:3f:f9:bd:
e4:af:05:85:21:b5:b2:2e:6e:bf:c9:b1:18:77:3f:8e:2c:b0:
f6:b8:90:66:85:cd:e8:9c:f3:22:c4:9d:58:01:e3:4a:ae:62:
34:e4:7e:05:08:50:7b:ab:bd:90:58:3e:b5:79:91:c7:64:85:
20:4b:4e:0d:bd:0f:14:89:42:11:b6:67:d8:af:2e:9a:8b:82:
e0:51:9d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:15:35 2026 by rpki-client