
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.mft
File: E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.mft (raw, json)
Hash identifier: h89cn1xG7PW2N0CStvpKtQDrg8o2J0KbCXRkVaJtQBg=
Subject key identifier: A9:B0:01:98:E2:22:04:B1:66:20:69:2F:8F:7D:14:3E:30:B1:1F:07
Authority key identifier: E5:F6:F9:E5:DD:9D:34:BD:A0:8C:45:31:BA:70:87:61:A3:5A:DE:60
Certificate issuer: /CN=E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60
Certificate serial: 5CDBB6FB92B792D68517962B2F72FA49DF78E1F5
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.mft
Manifest number: B9
Signing time: Wed 16 Sep 2026 18:11:39 +0000
Manifest this update: Wed 16 Sep 2026 18:06:39 +0000
Manifest next update: Thu 17 Sep 2026 18:15:39 +0000
Files and hashes: 1: 3130332e3137382e3137302e302f32342d3234203d3e20313339393532.roa (hash: Q+Zpu9s7FFAblJfI/9bq1CU9BNldDzB+MO83xGJv/O8=)
2: E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.crl (hash: cc4Q3nvjLt9SoJ1yvOROfItQn6n8q9mN8PyzxaiPQ2k=)
3: 3130332e3137382e3137312e302f32342d3234203d3e20313339393532.roa (hash: aDinqjPhgNq50kNy+lg2Iba0bDegBSFkr3DIakb0nTU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.crl
rsync://rpki-rsync.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 18:15:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:db:b6:fb:92:b7:92:d6:85:17:96:2b:2f:72:fa:49:df:78:e1:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60
Validity
Not Before: Sep 16 18:06:39 2026 GMT
Not After : Sep 17 18:15:39 2026 GMT
Subject: CN=A9B00198E22204B16620692F8F7D143E30B11F07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:aa:df:16:d8:e1:a7:00:95:7e:ea:b6:74:75:
bc:c0:df:ae:cf:2d:12:25:a1:ba:af:fb:f7:c6:3b:
bb:5c:f9:1a:4f:51:fa:0f:ed:80:36:1d:4d:e7:01:
6b:98:6a:d3:08:9c:26:1f:5a:56:c7:77:56:73:73:
fb:75:97:e8:dd:80:5a:4a:db:4c:8d:44:18:3f:ca:
8f:88:55:0f:ac:fd:b5:3a:b2:83:50:8b:ab:f5:e4:
f9:ad:41:bb:26:2c:b3:fb:a4:a6:06:cf:e7:9c:33:
d5:79:99:93:13:02:01:a2:dc:d4:a9:bd:a6:97:9c:
0c:16:2b:35:cb:98:ea:62:01:c5:61:ec:a5:1e:a7:
8d:02:31:76:3d:bd:bc:07:5b:b2:38:3a:09:4a:d9:
fb:d1:5e:39:52:43:7e:f9:53:91:8c:4d:40:9e:b4:
89:a8:9f:58:42:88:81:e0:a6:59:1a:46:e8:ba:2f:
48:f3:f4:2e:cc:c7:51:36:81:8a:3a:f4:1a:54:06:
5b:f1:2c:5d:44:66:9f:b2:f4:f6:da:c2:6b:de:d7:
d8:b6:05:56:47:e7:ef:ed:4e:e3:9d:c3:90:92:2f:
73:cc:72:d4:ec:e3:c9:d8:9c:f4:03:c5:a7:5f:12:
47:43:97:d1:fd:a1:62:e9:b0:15:56:7e:22:86:27:
ee:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:B0:01:98:E2:22:04:B1:66:20:69:2F:8F:7D:14:3E:30:B1:1F:07
X509v3 Authority Key Identifier:
keyid:E5:F6:F9:E5:DD:9D:34:BD:A0:8C:45:31:BA:70:87:61:A3:5A:DE:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:99:ef:af:ed:73:33:d8:a8:68:fe:97:68:33:7a:81:81:e7:
ed:aa:ef:49:f9:66:5e:bd:d8:c5:bc:19:f2:a0:3d:ce:6e:18:
68:a2:38:34:21:ec:33:3c:0f:f2:48:3b:b2:da:5c:36:ba:99:
77:37:93:a5:ab:80:02:63:0a:2e:8b:5d:8c:da:61:b6:48:5b:
d0:a5:bb:62:01:c6:e9:23:4d:7b:20:ea:58:22:82:ab:28:7d:
06:e5:94:3e:2f:ff:3e:24:54:06:1e:d8:1c:2d:74:85:9e:55:
94:17:a0:a9:b5:95:d5:4b:02:63:27:dd:ae:67:57:e6:10:eb:
ca:0e:db:af:3c:60:6a:d8:19:2c:27:c8:0b:db:35:b8:3c:0f:
81:c9:ac:c1:3c:bb:56:d9:c7:39:4b:99:72:8f:62:85:61:c7:
59:31:6f:f9:4f:7d:6c:31:d8:fe:b5:b7:2d:8c:3e:8d:3a:ac:
2b:a4:d1:2e:76:cb:ae:9d:dc:29:07:c0:d1:74:9b:40:d3:bd:
10:be:d8:13:f3:d6:be:57:9f:ac:a1:4d:bf:a9:bd:77:77:89:
9d:e7:19:d4:f3:bf:a5:00:a0:af:5d:b5:3f:02:88:18:cd:ee:
81:e4:b7:7a:7e:42:ea:e0:5e:e4:86:42:34:ed:29:82:e4:a7:
86:48:4e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 08:25:23 2026 by rpki-client