
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/E9E6271C170F0B74B97B8446B07AA5AB428648F1.mft
File: E9E6271C170F0B74B97B8446B07AA5AB428648F1.mft (raw, json)
Hash identifier: 6XxmqkKe4l7swVBniE6dJDtLpy/kgQOECxL2Aa3E26g=
Subject key identifier: 7C:A8:BD:9E:E2:62:7C:DC:D4:39:13:7F:E0:11:80:B8:6E:AE:18:70
Authority key identifier: E9:E6:27:1C:17:0F:0B:74:B9:7B:84:46:B0:7A:A5:AB:42:86:48:F1
Certificate issuer: /CN=E9E6271C170F0B74B97B8446B07AA5AB428648F1
Certificate serial: 2377BB0CB2D4324C0E23E4C32DB51BF3E05015B7
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9E6271C170F0B74B97B8446B07AA5AB428648F1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/E9E6271C170F0B74B97B8446B07AA5AB428648F1.mft
Manifest number: EA
Signing time: Mon 26 Oct 2026 03:26:13 +0000
Manifest this update: Mon 26 Oct 2026 03:21:13 +0000
Manifest next update: Tue 27 Oct 2026 06:05:13 +0000
Files and hashes: 1: 3130332e33392e37332e302f32342d3234203d3e20313530343838.roa (hash: oUTlPe6tGlob4PSOrDICpszf8EfDI+Vj0wKtKJkAXJw=)
2: 3130332e33392e37322e302f32342d3234203d3e20313530343838.roa (hash: wpAJDLUihNgZdkXIKLfMYOAsPAxxh17Ib2DtgmuX8UA=)
3: E9E6271C170F0B74B97B8446B07AA5AB428648F1.crl (hash: u3Ed7CvsMAmGWA9J1sEA5vdIi4sEnSg2xgG1MgWp3l0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/E9E6271C170F0B74B97B8446B07AA5AB428648F1.crl
rsync://rpki-rsync.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/E9E6271C170F0B74B97B8446B07AA5AB428648F1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9E6271C170F0B74B97B8446B07AA5AB428648F1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Oct 2026 05:22:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:77:bb:0c:b2:d4:32:4c:0e:23:e4:c3:2d:b5:1b:f3:e0:50:15:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E9E6271C170F0B74B97B8446B07AA5AB428648F1
Validity
Not Before: Oct 26 03:21:13 2026 GMT
Not After : Oct 27 06:05:13 2026 GMT
Subject: CN=7CA8BD9EE2627CDCD439137FE01180B86EAE1870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:c1:82:cb:e1:99:90:bc:2d:79:7b:33:36:d7:
40:51:11:c1:bf:24:de:30:36:e4:66:00:f2:51:ea:
e6:08:fe:4c:fd:07:af:2b:8f:9f:6b:82:b1:8f:b1:
12:24:82:94:69:55:77:97:5b:9d:66:18:69:c8:34:
f4:5f:cf:3c:14:b0:2e:39:74:b4:4d:e6:fa:e4:27:
49:2e:99:d2:a7:70:17:a8:95:d7:69:f0:e4:09:02:
23:6f:6b:2a:b1:31:9a:84:67:94:b5:13:b4:4e:51:
81:7a:fb:76:c9:4f:6b:88:4f:84:2d:30:1c:ce:f2:
6f:25:5a:d6:c6:40:07:97:0d:82:0f:7c:8c:58:2e:
93:99:79:5c:de:3d:c8:b0:bd:28:3f:94:64:39:ab:
40:bb:76:32:49:42:8b:ba:02:55:9d:1d:0d:6d:f0:
af:b0:ed:65:79:ff:09:f8:87:35:d5:39:c7:00:44:
29:0b:d2:e0:48:da:ab:8c:57:b2:cb:df:c1:63:8e:
b1:8e:b4:7c:ff:0e:39:30:88:2e:2e:5c:32:f2:52:
f8:ae:b8:05:2b:b7:35:81:40:8c:96:9b:4c:e5:e2:
96:ff:0e:7e:2c:82:67:47:b3:56:fd:0a:04:a0:2d:
09:43:87:b0:e5:c0:ab:d7:17:0e:f5:e2:0d:2e:9d:
c0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:A8:BD:9E:E2:62:7C:DC:D4:39:13:7F:E0:11:80:B8:6E:AE:18:70
X509v3 Authority Key Identifier:
keyid:E9:E6:27:1C:17:0F:0B:74:B9:7B:84:46:B0:7A:A5:AB:42:86:48:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/E9E6271C170F0B74B97B8446B07AA5AB428648F1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9E6271C170F0B74B97B8446B07AA5AB428648F1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/E9E6271C170F0B74B97B8446B07AA5AB428648F1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:34:68:42:03:31:21:62:89:b6:26:7b:78:4b:d5:e9:2a:7b:
25:fe:71:fc:68:1c:e5:ae:37:07:62:1c:10:e3:be:81:23:4f:
cd:2e:b1:f5:73:d9:27:51:12:98:3b:5b:7a:08:2d:de:dd:d7:
93:cd:02:22:84:9e:f7:bd:30:e1:39:d2:ef:2e:c9:e4:4f:79:
b9:b3:c1:3c:28:43:8c:16:f9:77:fc:21:eb:5f:0b:a2:d0:03:
8d:4d:5c:fe:e4:cd:f7:63:11:29:60:df:f9:0a:1b:16:e0:8d:
2b:8b:53:6a:c9:1f:c0:ef:ed:5b:33:67:16:4d:c6:32:bd:22:
cf:d1:68:26:a4:b4:93:7d:31:d7:69:13:b7:7d:f8:64:de:38:
65:15:77:ea:cb:63:e9:89:26:18:e2:4d:0f:33:4c:74:9c:6c:
86:d1:7c:4b:f4:6a:df:73:72:45:00:da:81:e6:9a:5f:f7:79:
c4:c7:22:3b:9b:f1:4d:eb:d7:04:ca:91:07:89:45:a2:83:66:
fe:27:eb:91:f1:fe:7b:82:9c:95:55:cc:d6:6c:fb:88:01:af:
30:98:9d:df:f2:e3:0f:e2:e2:e0:0f:a1:fe:1d:a1:34:d5:b9:
e8:f1:f4:cc:99:ec:64:9f:a0:23:c3:26:10:03:f9:08:26:c1:
56:28:85:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 13:54:15 2026 by rpki-client