
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/E9EEF08AA8356D769BA16B981FE69DB5DE203409.mft
File: E9EEF08AA8356D769BA16B981FE69DB5DE203409.mft (raw, json)
Hash identifier: 89HRVnp6vCM2R/gRi4dRSvgeViWlqq/uX6bwkRisdr8=
Subject key identifier: B1:06:DE:E8:AC:D4:CA:77:B1:F2:B5:5C:56:9C:9C:74:22:AE:DA:3F
Authority key identifier: E9:EE:F0:8A:A8:35:6D:76:9B:A1:6B:98:1F:E6:9D:B5:DE:20:34:09
Certificate issuer: /CN=E9EEF08AA8356D769BA16B981FE69DB5DE203409
Certificate serial: 119B8A67C81295445A274D3E192BEFC7851DE8C4
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9EEF08AA8356D769BA16B981FE69DB5DE203409.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/E9EEF08AA8356D769BA16B981FE69DB5DE203409.mft
Manifest number: F8
Signing time: Tue 03 Nov 2026 23:01:37 +0000
Manifest this update: Tue 03 Nov 2026 22:56:37 +0000
Manifest next update: Thu 05 Nov 2026 02:04:37 +0000
Files and hashes: 1: 3130332e3137342e31332e302f32342d3234203d3e20313437313730.roa (hash: xCU5A2qMTm4OgALTP8opeqK/3efnC4H4bV18tfZlMHk=)
2: E9EEF08AA8356D769BA16B981FE69DB5DE203409.crl (hash: I1yxnJkAHEQ4JBA6wjLnY7gyhHxSExIfAkOV5dnegxs=)
3: 3130332e3137382e38332e302f32342d3234203d3e20313437313730.roa (hash: UaaNiDpFBSvOxzLMpx1eGc8touUo5VTmZX/HVEAL/G4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/E9EEF08AA8356D769BA16B981FE69DB5DE203409.crl
rsync://rpki-rsync.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/E9EEF08AA8356D769BA16B981FE69DB5DE203409.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9EEF08AA8356D769BA16B981FE69DB5DE203409.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Nov 2026 02:04:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:9b:8a:67:c8:12:95:44:5a:27:4d:3e:19:2b:ef:c7:85:1d:e8:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E9EEF08AA8356D769BA16B981FE69DB5DE203409
Validity
Not Before: Nov 3 22:56:37 2026 GMT
Not After : Nov 5 02:04:37 2026 GMT
Subject: CN=B106DEE8ACD4CA77B1F2B55C569C9C7422AEDA3F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cb:ce:46:59:fe:e0:02:bd:24:de:6c:ff:32:
7c:66:05:da:6c:73:0c:7d:e7:d0:c4:06:06:80:26:
41:ec:ed:eb:b4:0b:6e:68:0b:71:4c:da:87:2a:c2:
14:8a:49:18:2b:eb:dd:ff:da:c5:4c:41:a4:8c:82:
a7:c9:e1:54:0e:70:f1:02:75:58:27:d6:62:c6:d8:
fa:f5:41:80:ea:0f:ff:62:a1:ea:0d:5f:84:6f:50:
31:33:d2:ea:b4:ea:b7:00:17:f5:21:4d:84:24:9d:
33:5d:d2:1e:85:6e:0f:ae:de:51:d3:e1:b8:79:19:
6c:58:23:44:50:08:a8:7b:d4:f6:be:5d:f5:7f:b7:
96:19:77:a0:17:54:91:fb:d6:2e:e8:e6:04:a5:b9:
31:90:97:4e:3b:2b:7c:50:50:84:f5:b2:a6:b4:08:
c7:59:8b:f2:cf:6a:9b:34:12:ab:a6:4e:75:a6:3f:
e7:de:f6:c7:a7:7c:3f:a3:53:10:9b:a0:ff:36:66:
fe:9e:1f:2e:c4:9f:95:bd:8a:70:c9:b5:8a:b1:6f:
3d:fe:5a:f9:1a:94:cd:6b:15:8d:58:20:3c:fb:da:
f8:c5:96:eb:60:92:8c:7c:0c:0d:58:0a:ee:20:83:
75:76:e4:5f:2e:ed:69:66:1e:97:e8:74:78:58:62:
f3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:06:DE:E8:AC:D4:CA:77:B1:F2:B5:5C:56:9C:9C:74:22:AE:DA:3F
X509v3 Authority Key Identifier:
keyid:E9:EE:F0:8A:A8:35:6D:76:9B:A1:6B:98:1F:E6:9D:B5:DE:20:34:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/E9EEF08AA8356D769BA16B981FE69DB5DE203409.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9EEF08AA8356D769BA16B981FE69DB5DE203409.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/E9EEF08AA8356D769BA16B981FE69DB5DE203409.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:15:49:3f:65:a2:5f:e0:01:5a:2a:70:16:2d:d1:89:8f:91:
01:6b:91:fb:43:da:08:bd:05:fc:58:1b:eb:c7:67:7e:b6:65:
44:55:7b:71:49:d2:57:03:47:82:2f:81:8a:8f:8b:0b:c6:b7:
94:2e:10:c8:54:01:29:c7:67:17:c9:42:13:66:d8:ff:04:eb:
52:69:a4:a2:5f:08:26:52:10:fd:06:5c:4e:96:cb:66:d2:03:
db:c7:aa:8d:1f:9f:03:d9:c5:b8:91:69:bd:0e:59:2f:b9:41:
8b:26:ee:b7:e8:28:ec:df:c5:40:da:ac:7c:e9:7a:3f:c0:c4:
c6:19:23:8f:6d:44:34:a8:4e:92:5e:2c:b6:c1:db:e2:e6:09:
26:e8:f2:32:55:71:af:15:5d:09:8a:26:56:74:62:80:25:af:
94:f7:58:fe:04:98:d6:34:8c:f7:ed:b1:eb:2c:65:f1:f4:33:
0b:5a:ca:78:37:4f:a4:20:07:5a:c5:17:ff:57:a2:e0:ac:bb:
45:bf:54:77:90:a1:d7:73:50:30:39:0b:96:4e:9f:95:80:ab:
b4:d1:a3:bb:b7:86:7c:ae:3a:4c:f5:1d:f5:a4:63:6d:75:37:
3e:37:bc:b3:9c:3c:67:7f:e5:92:28:bd:09:c5:f5:74:b5:42:
ed:b3:5a:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 17:05:39 2026 by rpki-client