
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/E9F2A418990B480D204FA0D037A5ABB3AEC360E9.mft
File: E9F2A418990B480D204FA0D037A5ABB3AEC360E9.mft (raw, json)
Hash identifier: 3IPmZL5mGX4ZRVIfVTfU/gZyT99+mhfMswUchJTUOmQ=
Subject key identifier: 2E:BA:76:CC:27:6A:96:CA:3B:2C:41:4B:21:37:2C:81:14:BA:C8:0B
Authority key identifier: E9:F2:A4:18:99:0B:48:0D:20:4F:A0:D0:37:A5:AB:B3:AE:C3:60:E9
Certificate issuer: /CN=E9F2A418990B480D204FA0D037A5ABB3AEC360E9
Certificate serial: 4019DA08557F628A20C01D48D41131BA09870C3D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9F2A418990B480D204FA0D037A5ABB3AEC360E9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/E9F2A418990B480D204FA0D037A5ABB3AEC360E9.mft
Manifest number: 6C
Signing time: Mon 20 Jul 2026 17:33:09 +0000
Manifest this update: Mon 20 Jul 2026 17:28:09 +0000
Manifest next update: Tue 21 Jul 2026 20:11:09 +0000
Files and hashes: 1: 3130332e3139312e3131362e302f32342d3234203d3e20313439393137.roa (hash: 27oObCgWzykb6CFKZyK6/jDYuaqop/FIGkUT/qI+p/Q=)
2: 3130332e3139312e3131372e302f32342d3234203d3e20313439393137.roa (hash: lAAUV9z8f3t9czOX/VqnympJr8MrNtNyhxmHLT5vnzY=)
3: E9F2A418990B480D204FA0D037A5ABB3AEC360E9.crl (hash: i6sR1IoSKtevMYNwW8OENZBOkej0Dz7saJwUUs6a8vE=)
4: 3130332e3139312e3131362e302f32332d3233203d3e20313439393137.roa (hash: bL7nWexv3dr33uLwywkImAJrJWec+y7OgTN8pZ5ywaw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/E9F2A418990B480D204FA0D037A5ABB3AEC360E9.crl
rsync://rpki-rsync.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/E9F2A418990B480D204FA0D037A5ABB3AEC360E9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9F2A418990B480D204FA0D037A5ABB3AEC360E9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Jul 2026 20:11:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:19:da:08:55:7f:62:8a:20:c0:1d:48:d4:11:31:ba:09:87:0c:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E9F2A418990B480D204FA0D037A5ABB3AEC360E9
Validity
Not Before: Jul 20 17:28:09 2026 GMT
Not After : Jul 21 20:11:09 2026 GMT
Subject: CN=2EBA76CC276A96CA3B2C414B21372C8114BAC80B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:2b:10:fe:a3:47:bc:f1:49:0d:8c:13:0f:48:
da:45:cd:39:96:4b:f6:b4:1b:78:7c:96:6d:02:4f:
c6:09:e3:40:77:fb:ca:1c:fc:c4:da:6a:fa:0c:68:
6a:2e:c9:d3:34:f2:41:a7:2d:fc:67:4d:64:f8:8e:
bd:0a:75:0a:d1:fa:1f:b0:97:73:eb:f2:77:e0:d6:
c2:37:12:4a:fe:67:03:21:4c:c8:05:1e:53:c6:58:
bd:14:cb:4c:c2:fa:c3:29:8c:37:4b:54:ea:b4:63:
fe:96:0d:54:9e:4e:1e:c8:0f:3d:a2:15:df:e9:5f:
fa:cc:b6:96:3e:5c:39:4d:93:07:83:9c:c7:b7:8c:
d3:67:61:83:18:86:63:17:49:31:4b:33:f1:03:35:
2d:a9:72:35:ca:9c:be:c3:85:a7:bf:e5:96:a8:bc:
a1:8b:88:d5:b0:69:6f:c6:bd:dd:76:d3:fe:93:6f:
a4:2f:d6:d6:a1:2f:93:28:26:2a:70:57:cd:64:1d:
6f:97:56:80:72:e6:45:45:67:de:2b:d9:ad:5a:59:
2a:b5:0a:80:71:ca:7d:a0:ea:ce:39:fa:13:50:a2:
a7:f6:05:aa:f3:3b:8e:2c:ad:3f:f2:18:03:e7:be:
9d:88:51:aa:db:2e:8e:aa:1d:ca:38:e2:2a:37:7d:
8e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:BA:76:CC:27:6A:96:CA:3B:2C:41:4B:21:37:2C:81:14:BA:C8:0B
X509v3 Authority Key Identifier:
keyid:E9:F2:A4:18:99:0B:48:0D:20:4F:A0:D0:37:A5:AB:B3:AE:C3:60:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/E9F2A418990B480D204FA0D037A5ABB3AEC360E9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9F2A418990B480D204FA0D037A5ABB3AEC360E9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/E9F2A418990B480D204FA0D037A5ABB3AEC360E9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:c1:b0:9b:1c:0b:fd:aa:97:1c:b5:0d:5b:c5:94:23:a9:55:
6c:3e:75:4f:8c:aa:00:f5:c8:d3:90:30:ae:35:40:73:35:9d:
a8:b4:0c:8e:ce:dd:03:2e:ef:bd:61:5b:5f:10:bd:ac:06:c1:
b6:fd:7f:56:03:a0:b0:83:59:29:fb:b8:9e:50:da:24:4d:43:
7d:e5:97:8b:e6:64:29:30:94:4c:c4:48:b9:88:2e:e6:e1:5d:
e7:b8:16:44:48:1f:18:66:ac:7b:08:b4:40:71:c5:45:00:ba:
78:fb:b0:21:60:e0:3b:15:42:d7:3b:65:7b:e1:1d:f8:8f:6f:
12:34:35:88:9e:aa:f0:a9:57:14:fa:8b:42:c0:48:0c:fa:76:
c5:5c:29:66:8a:b7:89:80:09:b4:4b:1e:df:ff:ae:6b:7c:99:
0f:12:e7:e8:af:91:ed:e1:35:44:12:7b:f1:7f:cb:99:70:3d:
0c:fc:05:7a:c7:2a:6b:f8:39:1a:81:a8:8a:1c:f2:39:76:f2:
ad:80:54:d4:f3:2f:f5:de:0f:c4:1e:63:3d:f1:a5:41:19:5f:
07:72:c5:4a:5a:6e:81:e9:90:88:91:b7:47:79:43:75:4b:47:
53:00:b9:c3:83:68:27:56:3c:be:f6:c6:f3:20:0e:2f:37:82:
55:1a:78:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:23:03 2026 by rpki-client