
$ rpki-client -vvf rpki-rsync.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/E0AE9FAD9E259082B06CCBB94AF478F6B86125F9.mft
File: E0AE9FAD9E259082B06CCBB94AF478F6B86125F9.mft (raw, json)
Hash identifier: y/ixalD45i8XrfgKPB2kuLVxTYAxNg63CznD66/RCrI=
Subject key identifier: CA:C2:77:7A:45:9A:2B:12:75:71:6F:00:FB:82:D3:EA:B5:13:20:31
Authority key identifier: E0:AE:9F:AD:9E:25:90:82:B0:6C:CB:B9:4A:F4:78:F6:B8:61:25:F9
Certificate issuer: /CN=E0AE9FAD9E259082B06CCBB94AF478F6B86125F9
Certificate serial: 0F6737D4C17F80DF711D3CEE1EB33606425AD028
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E0AE9FAD9E259082B06CCBB94AF478F6B86125F9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/E0AE9FAD9E259082B06CCBB94AF478F6B86125F9.mft
Manifest number: 6B
Signing time: Tue 21 Jul 2026 04:46:37 +0000
Manifest this update: Tue 21 Jul 2026 04:41:37 +0000
Manifest next update: Wed 22 Jul 2026 05:00:37 +0000
Files and hashes: 1: E0AE9FAD9E259082B06CCBB94AF478F6B86125F9.crl (hash: wD3LPH+b+i7JUvGhUvn1gJTP0oU0LAFYDd39QPjUN6s=)
2: 3130332e3133392e3230372e302f32342d3234203d3e20313530353133.roa (hash: PrnOvop5MQlI3Bsjow/Ci5R1laOpI/zKBTh7ZhHcVKA=)
3: 3130332e3139352e32382e302f32342d3234203d3e20313530353133.roa (hash: q+RRwqPLMgbRcU4CF8v6ceD8xY9lz0UrAi1vn0vplwA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/E0AE9FAD9E259082B06CCBB94AF478F6B86125F9.crl
rsync://rpki-rsync.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/E0AE9FAD9E259082B06CCBB94AF478F6B86125F9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E0AE9FAD9E259082B06CCBB94AF478F6B86125F9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Jul 2026 02:08:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:67:37:d4:c1:7f:80:df:71:1d:3c:ee:1e:b3:36:06:42:5a:d0:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E0AE9FAD9E259082B06CCBB94AF478F6B86125F9
Validity
Not Before: Jul 21 04:41:37 2026 GMT
Not After : Jul 22 05:00:37 2026 GMT
Subject: CN=CAC2777A459A2B1275716F00FB82D3EAB5132031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d0:ea:9c:0a:6a:8c:8d:f3:41:d4:7c:84:3e:
dd:81:12:67:4c:78:05:39:02:b0:66:d3:74:55:ed:
5b:bc:07:a8:09:16:71:b0:87:f9:5b:f0:35:c2:6b:
55:52:87:c6:54:8f:d8:6d:bc:e3:ec:f8:99:3b:e2:
cd:b5:4a:f7:84:f0:ca:9c:20:2e:80:44:76:f4:0d:
ea:1e:a8:8b:ae:85:b9:e7:13:e7:26:dd:c9:d2:2e:
49:15:2e:8e:b0:a9:f2:dc:b2:03:9f:4a:d5:c3:31:
52:df:48:31:1a:50:89:05:6f:60:1a:17:f3:bc:89:
a6:31:1c:fc:65:93:49:96:f6:c9:5a:e4:93:ee:f3:
14:bb:38:55:08:c9:f3:ab:d7:71:73:e8:cb:4f:2f:
ec:65:12:be:ac:bb:1a:58:bf:05:ca:c3:d1:4b:66:
1e:28:95:92:56:5d:86:8a:88:c2:a2:92:d6:7c:06:
df:48:f1:c9:c7:b8:2c:ea:9a:fa:60:22:b4:60:77:
09:79:34:0a:de:37:a3:79:2d:40:68:3b:de:99:88:
ca:9d:29:72:e6:58:c5:87:15:7e:82:13:61:01:04:
d3:41:fc:3a:4d:16:49:48:a5:9f:4a:6d:16:38:62:
07:1c:16:42:05:ac:36:6d:82:34:18:57:99:c1:d5:
a6:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:C2:77:7A:45:9A:2B:12:75:71:6F:00:FB:82:D3:EA:B5:13:20:31
X509v3 Authority Key Identifier:
keyid:E0:AE:9F:AD:9E:25:90:82:B0:6C:CB:B9:4A:F4:78:F6:B8:61:25:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/E0AE9FAD9E259082B06CCBB94AF478F6B86125F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E0AE9FAD9E259082B06CCBB94AF478F6B86125F9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/E0AE9FAD9E259082B06CCBB94AF478F6B86125F9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:44:91:32:f8:4d:dc:4d:d4:77:17:10:a2:c6:4d:14:c5:cd:
6a:3f:9f:06:ca:e1:d3:d1:19:d3:b6:cc:71:5f:02:b8:0b:7a:
e7:c3:c6:68:7c:52:61:66:0c:0f:ea:54:ad:a6:90:4d:6b:ec:
9c:c7:72:48:cd:82:84:5e:bb:ff:dd:e3:98:40:a7:2d:a1:ab:
0e:53:04:19:ba:a9:83:da:95:3f:7a:ac:d1:7c:94:1a:83:e5:
d6:3b:f2:79:56:0e:5f:9f:80:ac:46:7a:a9:49:8c:36:2f:6e:
84:8f:f4:bf:83:17:95:b1:f8:e2:f8:56:f0:2c:ae:d0:17:49:
27:45:71:9a:41:ed:46:e1:41:59:76:33:fa:16:2f:50:e8:e2:
51:01:ca:59:c2:4e:b5:a7:2f:cc:14:c5:9f:34:4f:e1:fe:4e:
bf:15:f7:03:6c:2b:3c:67:b0:4d:04:e3:c8:07:e3:bb:33:10:
fb:1a:22:32:77:99:34:69:86:ea:de:e1:c4:9a:ca:64:69:5d:
26:d1:fb:b3:7e:f5:4e:d5:f0:f2:10:6c:19:70:d1:7f:d2:66:
9f:34:50:e5:04:4b:0f:01:5b:87:dc:3d:d6:60:a8:d8:05:17:
02:98:91:8d:45:9c:09:d8:45:a5:d9:87:b2:20:35:5e:2e:f6:
4d:49:1e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:39:52 2026 by rpki-client