
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/E9F2A418990B480D204FA0D037A5ABB3AEC360E9.mft
File: E9F2A418990B480D204FA0D037A5ABB3AEC360E9.mft (raw, json)
Hash identifier: 4py5EX7vYBgq2StDlnAOsjwpDDSrMP6t8YmGMHIs+Rw=
Subject key identifier: 0C:F4:8A:CB:F6:52:3E:90:8B:CE:9A:D5:1F:3D:03:28:D2:F1:A1:34
Authority key identifier: E9:F2:A4:18:99:0B:48:0D:20:4F:A0:D0:37:A5:AB:B3:AE:C3:60:E9
Certificate issuer: /CN=E9F2A418990B480D204FA0D037A5ABB3AEC360E9
Certificate serial: 7E159C30EB9D1C78CDAE87AD0CA43145EEED75DF
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9F2A418990B480D204FA0D037A5ABB3AEC360E9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/E9F2A418990B480D204FA0D037A5ABB3AEC360E9.mft
Manifest number: 2B
Signing time: Tue 02 Jun 2026 11:44:33 +0000
Manifest this update: Tue 02 Jun 2026 11:39:33 +0000
Manifest next update: Wed 03 Jun 2026 12:07:33 +0000
Files and hashes: 1: 3130332e3139312e3131372e302f32342d3234203d3e20313439393137.roa (hash: lAAUV9z8f3t9czOX/VqnympJr8MrNtNyhxmHLT5vnzY=)
2: 3130332e3139312e3131362e302f32342d3234203d3e20313439393137.roa (hash: 27oObCgWzykb6CFKZyK6/jDYuaqop/FIGkUT/qI+p/Q=)
3: 3130332e3139312e3131362e302f32332d3233203d3e20313439393137.roa (hash: bL7nWexv3dr33uLwywkImAJrJWec+y7OgTN8pZ5ywaw=)
4: E9F2A418990B480D204FA0D037A5ABB3AEC360E9.crl (hash: q70R3GubWppqLz9B3Zxrsn6uFYT6xW9GgsZ/LBShWhU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/E9F2A418990B480D204FA0D037A5ABB3AEC360E9.crl
rsync://rpki-rsync.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/E9F2A418990B480D204FA0D037A5ABB3AEC360E9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9F2A418990B480D204FA0D037A5ABB3AEC360E9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 10:27:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:15:9c:30:eb:9d:1c:78:cd:ae:87:ad:0c:a4:31:45:ee:ed:75:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E9F2A418990B480D204FA0D037A5ABB3AEC360E9
Validity
Not Before: Jun 2 11:39:33 2026 GMT
Not After : Jun 3 12:07:33 2026 GMT
Subject: CN=0CF48ACBF6523E908BCE9AD51F3D0328D2F1A134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:53:d0:73:dc:84:9b:5a:49:32:a4:7f:0a:7f:
25:67:92:df:88:14:e1:f6:71:16:f5:e7:b5:71:8e:
67:a6:01:55:4d:e7:6c:cd:df:3c:eb:bc:5c:d6:90:
af:3e:99:fd:d4:13:3b:b4:fd:e1:85:dc:c1:40:7d:
8c:df:00:46:c5:51:a1:eb:51:9c:aa:40:b7:42:75:
48:3f:88:de:24:aa:03:9e:f1:58:42:b3:a6:8e:71:
06:89:28:59:98:02:31:55:61:7f:9c:9c:8a:b3:9d:
7a:ff:b5:0f:45:84:72:46:6b:bf:ed:f6:b4:9d:4d:
4b:39:d3:9b:b0:58:71:98:db:b1:41:62:6a:ed:db:
f1:8f:18:bd:0d:a8:84:9e:10:fa:8d:81:d3:34:07:
a9:cf:55:38:68:53:88:2d:05:4a:5a:a2:e5:48:33:
37:99:1d:75:19:9d:fb:f0:50:c1:03:84:a6:d4:96:
a1:ef:ab:d8:54:6e:84:f3:57:63:e8:d4:ba:2c:82:
89:dc:79:59:eb:b2:65:52:c3:9c:71:73:38:33:52:
e4:fd:fa:a4:31:81:6c:a2:20:68:d9:ec:57:80:72:
2f:c0:58:da:e2:ee:60:70:56:7b:06:71:97:c2:8f:
98:37:1d:24:dd:3f:77:f0:c1:b7:39:e5:b0:68:a1:
cb:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:F4:8A:CB:F6:52:3E:90:8B:CE:9A:D5:1F:3D:03:28:D2:F1:A1:34
X509v3 Authority Key Identifier:
keyid:E9:F2:A4:18:99:0B:48:0D:20:4F:A0:D0:37:A5:AB:B3:AE:C3:60:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/E9F2A418990B480D204FA0D037A5ABB3AEC360E9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9F2A418990B480D204FA0D037A5ABB3AEC360E9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/E9F2A418990B480D204FA0D037A5ABB3AEC360E9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:98:7c:54:1f:a5:3d:1e:38:46:ec:d3:30:0d:99:2d:26:f2:
18:74:0d:98:2c:10:74:79:aa:63:ba:f3:9e:d4:53:3d:a9:7a:
65:e0:b6:4b:60:95:c9:28:4e:7f:70:ba:ba:dd:6b:59:5a:6b:
c4:c4:7e:61:a5:71:4c:ef:f8:08:39:7c:76:6b:3e:ad:1a:b5:
59:c7:98:95:07:d7:1d:42:95:bd:7c:0e:6b:d9:bb:f8:ac:39:
ac:1d:e6:32:74:0c:79:f3:57:1d:93:2c:bd:96:fd:02:4c:f5:
29:fb:16:7b:5e:4c:25:34:67:d9:0b:e2:cb:bb:f3:95:22:0c:
0a:a4:8b:f8:e6:46:56:6d:11:bc:7a:b7:a7:0c:fb:1c:4a:fd:
7e:bd:df:1b:4a:87:b2:84:90:09:06:3c:d3:fa:d0:b4:ac:f1:
25:86:ff:b9:91:92:57:de:ed:ac:6e:b6:73:e6:86:90:95:d1:
08:54:05:9b:82:1c:3e:1a:d3:b1:e6:dd:ee:12:d0:78:3c:3d:
ff:7d:ee:c7:2a:f9:79:a2:44:32:a2:bf:19:15:ec:4d:cf:a4:
c7:28:9e:f5:3b:b0:fd:7a:38:da:35:31:f4:d2:bf:22:35:09:
3c:4c:e1:f8:47:2f:3e:35:7b:97:e1:70:a5:43:d2:84:7f:73:
f9:0e:07:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:42:39 2026 by rpki-client