
$ rpki-client -vvf rpki-rsync.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/E9EEF08AA8356D769BA16B981FE69DB5DE203409.mft
File: E9EEF08AA8356D769BA16B981FE69DB5DE203409.mft (raw, json)
Hash identifier: w3wLNDaIgLh7/GpngxHvL3xY7irpyvk0C79lAIcQbUQ=
Subject key identifier: 3D:6F:B4:8F:66:A0:A9:6F:1F:78:A2:E8:AA:9D:95:9B:69:FE:8C:8B
Authority key identifier: E9:EE:F0:8A:A8:35:6D:76:9B:A1:6B:98:1F:E6:9D:B5:DE:20:34:09
Certificate issuer: /CN=E9EEF08AA8356D769BA16B981FE69DB5DE203409
Certificate serial: 2D71EA367C3BD2F7F158C93CCF7A62810700F63D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9EEF08AA8356D769BA16B981FE69DB5DE203409.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/E9EEF08AA8356D769BA16B981FE69DB5DE203409.mft
Manifest number: 6A
Signing time: Tue 21 Jul 2026 01:53:05 +0000
Manifest this update: Tue 21 Jul 2026 01:48:05 +0000
Manifest next update: Wed 22 Jul 2026 03:09:05 +0000
Files and hashes: 1: E9EEF08AA8356D769BA16B981FE69DB5DE203409.crl (hash: CAeczmHTkGj+tiZqE20wwBcV9PwRNsFbfic+yCmniXA=)
2: 3130332e3137342e31332e302f32342d3234203d3e20313437313730.roa (hash: xCU5A2qMTm4OgALTP8opeqK/3efnC4H4bV18tfZlMHk=)
3: 3130332e3137382e38332e302f32342d3234203d3e20313437313730.roa (hash: UaaNiDpFBSvOxzLMpx1eGc8touUo5VTmZX/HVEAL/G4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/E9EEF08AA8356D769BA16B981FE69DB5DE203409.crl
rsync://rpki-rsync.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/E9EEF08AA8356D769BA16B981FE69DB5DE203409.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9EEF08AA8356D769BA16B981FE69DB5DE203409.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Jul 2026 02:08:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:71:ea:36:7c:3b:d2:f7:f1:58:c9:3c:cf:7a:62:81:07:00:f6:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E9EEF08AA8356D769BA16B981FE69DB5DE203409
Validity
Not Before: Jul 21 01:48:05 2026 GMT
Not After : Jul 22 03:09:05 2026 GMT
Subject: CN=3D6FB48F66A0A96F1F78A2E8AA9D959B69FE8C8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:fd:8c:a6:dc:da:a4:42:25:21:43:38:01:a6:
42:4b:32:b8:8d:0d:51:8d:3b:d5:3f:51:18:87:02:
9c:c1:bb:12:4d:c0:cb:c3:c8:2e:80:a6:cd:19:00:
0f:5f:d8:3c:b2:03:6c:d8:9b:cb:83:36:8e:ff:26:
e8:75:b4:07:4a:79:da:73:42:16:0e:40:d4:dc:33:
b9:60:15:e2:36:7a:e5:e7:c0:c4:f2:4c:3d:74:f8:
aa:9b:71:a0:f5:2f:cc:39:79:5e:24:32:1e:ec:79:
12:a0:65:94:45:38:9e:94:b2:07:53:08:7c:80:0a:
ac:56:5c:b9:1c:73:b2:43:17:4d:82:93:47:d6:6a:
75:a6:13:42:bb:c4:63:1d:95:69:ca:f4:dc:ce:6d:
a5:51:7a:a8:a2:fb:37:04:f7:b4:35:71:41:ee:92:
03:e1:4f:e7:07:eb:a7:98:f7:a8:18:c0:e0:ba:2c:
50:d0:4d:2f:17:79:79:4a:67:33:9a:4d:ce:b2:2a:
fb:3d:62:e6:59:5f:6c:27:6c:0f:75:d2:47:5e:20:
e1:cc:56:7d:b4:d3:6c:dd:e9:4f:e6:45:05:db:a3:
f6:e6:4f:db:7c:1c:01:db:30:97:6a:51:42:8c:4d:
2c:ea:6c:ca:fd:4a:91:5e:b9:b9:ee:10:75:59:b5:
27:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:6F:B4:8F:66:A0:A9:6F:1F:78:A2:E8:AA:9D:95:9B:69:FE:8C:8B
X509v3 Authority Key Identifier:
keyid:E9:EE:F0:8A:A8:35:6D:76:9B:A1:6B:98:1F:E6:9D:B5:DE:20:34:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/E9EEF08AA8356D769BA16B981FE69DB5DE203409.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9EEF08AA8356D769BA16B981FE69DB5DE203409.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/E9EEF08AA8356D769BA16B981FE69DB5DE203409.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:07:04:36:30:f8:3f:f3:1d:0c:9b:ad:63:ac:3b:4b:87:bd:
87:76:7e:75:ff:09:c3:a4:f2:41:76:9a:32:c7:b9:fc:76:88:
dd:18:b6:ec:06:68:8e:b0:15:77:47:a3:9a:db:65:f1:74:fb:
15:82:3f:0a:37:a1:4e:f7:29:98:85:21:55:6a:96:41:d9:29:
b5:29:bb:45:78:29:d9:19:f8:28:27:d2:9a:cd:a6:8c:a3:3f:
2b:92:31:2d:28:de:f0:29:46:f7:60:df:2d:ee:24:22:76:63:
a5:40:d6:07:ed:6d:2d:72:4b:5f:07:e6:79:28:94:c7:1d:cf:
d9:a9:48:8f:0a:f9:40:d8:be:3a:40:45:d0:c6:93:00:0f:9a:
52:c7:bb:a2:cc:dd:58:c9:54:f8:c7:ab:0e:2b:f1:4f:a4:da:
b5:6f:66:60:35:2d:a6:6a:01:41:f4:76:9c:48:4a:e5:41:18:
70:49:e1:e3:06:88:55:6c:3c:bd:b5:3f:65:31:ff:38:4c:61:
ca:b1:79:ab:d7:c2:c7:28:59:2e:3b:e2:9d:4e:94:02:ef:4b:
32:4a:f7:e2:bd:7f:f5:9b:21:f9:37:7d:79:54:41:d7:95:7c:
c1:cf:10:c6:21:9d:17:f6:a2:63:0e:1a:f7:9f:6e:58:7e:de:
68:2e:51:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:58:01 2026 by rpki-client