
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/E4916A38F928B049A7533CB4FE25B8FA9D96DF74.mft
File: E4916A38F928B049A7533CB4FE25B8FA9D96DF74.mft (raw, json)
Hash identifier: +648Kax+jPFfCIUyL3EJpwZcFzOKIlidxyxjLvku34U=
Subject key identifier: AA:10:9C:92:3E:21:1C:D2:92:32:95:7A:91:80:1E:43:1F:1E:5D:97
Authority key identifier: E4:91:6A:38:F9:28:B0:49:A7:53:3C:B4:FE:25:B8:FA:9D:96:DF:74
Certificate issuer: /CN=E4916A38F928B049A7533CB4FE25B8FA9D96DF74
Certificate serial: 6219C223CEDE913B76ADDA7B64070DE369AE2473
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4916A38F928B049A7533CB4FE25B8FA9D96DF74.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/E4916A38F928B049A7533CB4FE25B8FA9D96DF74.mft
Manifest number: EA
Signing time: Sun 25 Oct 2026 10:24:34 +0000
Manifest this update: Sun 25 Oct 2026 10:19:34 +0000
Manifest next update: Mon 26 Oct 2026 13:48:34 +0000
Files and hashes: 1: E4916A38F928B049A7533CB4FE25B8FA9D96DF74.crl (hash: YD+XIUQsNZBzkc2R5p84qewddVRCbU7aZqHCHeSgWrQ=)
2: 3130332e31332e3136342e302f32332d3234203d3e2034383030.roa (hash: LV3eS8DWx/O74oQ0CzVazcwm3a7uu6GLraOIjVHVQ5o=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/E4916A38F928B049A7533CB4FE25B8FA9D96DF74.crl
rsync://rpki-rsync.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/E4916A38F928B049A7533CB4FE25B8FA9D96DF74.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4916A38F928B049A7533CB4FE25B8FA9D96DF74.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 12:34:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:19:c2:23:ce:de:91:3b:76:ad:da:7b:64:07:0d:e3:69:ae:24:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4916A38F928B049A7533CB4FE25B8FA9D96DF74
Validity
Not Before: Oct 25 10:19:34 2026 GMT
Not After : Oct 26 13:48:34 2026 GMT
Subject: CN=AA109C923E211CD29232957A91801E431F1E5D97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:79:18:62:0e:22:7f:27:87:0f:36:6d:2d:7d:
c5:f7:85:68:36:56:41:dc:83:58:76:96:37:3c:5f:
6a:c5:67:67:33:44:03:c8:88:78:47:47:85:e8:0e:
e9:26:2c:02:25:74:ea:b9:da:2d:1e:78:44:00:f1:
54:3f:e9:bf:cb:5f:2c:ad:54:02:3b:19:b8:c6:9f:
de:26:af:46:5a:94:92:f8:33:97:db:58:31:ee:de:
72:e1:49:d7:1c:1e:60:44:66:6e:84:0e:21:c9:17:
a6:f7:58:71:79:f8:e7:df:68:89:dd:40:3e:5b:07:
50:9f:03:23:4d:94:84:8f:d0:e8:26:23:29:24:65:
3a:27:5d:09:89:47:6d:18:ae:07:4e:48:64:34:23:
a1:66:54:5f:4e:48:5e:db:e4:e5:5e:a3:bd:ac:31:
5f:7b:7b:07:66:f5:db:bb:18:04:5e:ba:31:4a:a4:
0d:5c:4d:e5:7e:6a:60:bf:ec:96:eb:5e:1d:4c:5b:
6c:65:de:0e:e2:4d:64:6b:71:b8:3d:0f:5d:92:12:
d2:9b:42:d0:55:e7:fa:8d:b2:75:8a:72:52:37:61:
cd:1b:e6:40:50:4f:da:d8:94:9d:d0:5a:c5:f2:38:
4f:85:c0:71:67:ee:e6:0b:b5:e1:4f:85:43:15:7e:
62:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:10:9C:92:3E:21:1C:D2:92:32:95:7A:91:80:1E:43:1F:1E:5D:97
X509v3 Authority Key Identifier:
keyid:E4:91:6A:38:F9:28:B0:49:A7:53:3C:B4:FE:25:B8:FA:9D:96:DF:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/E4916A38F928B049A7533CB4FE25B8FA9D96DF74.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4916A38F928B049A7533CB4FE25B8FA9D96DF74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/E4916A38F928B049A7533CB4FE25B8FA9D96DF74.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:05:7d:03:87:72:b7:64:2e:e4:5c:7f:b2:d4:39:5a:86:fb:
cd:24:c7:4c:d5:ff:71:b0:48:fc:d5:64:dd:b4:d4:0c:4a:36:
f0:20:54:3d:c1:cd:8e:5f:c5:42:73:93:3c:f3:bc:4c:66:3b:
75:13:57:5e:d5:5b:9f:37:53:8f:34:52:6b:78:00:f5:6d:75:
9a:ce:5a:78:16:6b:19:f0:66:98:6a:c5:7e:c9:71:cb:93:8e:
02:e1:3f:ed:95:85:af:ac:0a:27:30:f7:87:64:02:b3:f3:eb:
e6:4a:69:af:9e:a1:3a:b9:ac:16:5f:eb:87:de:bf:9e:cb:a2:
1e:10:de:17:cb:63:72:72:c3:cd:c1:e3:0a:26:71:69:ed:42:
e0:7b:a0:ab:69:34:59:82:b0:7a:a3:3b:97:57:86:6c:02:73:
bb:e4:c5:b6:76:1f:c5:4f:92:1f:4e:db:0c:7d:fe:43:8e:88:
3f:d3:ab:55:f3:bf:44:4f:2a:4e:8e:18:32:ef:f2:11:4c:d2:
43:8c:9f:58:55:6b:de:9f:e8:2c:53:68:ef:20:7f:1f:67:15:
da:e0:69:12:18:01:99:31:40:63:8e:63:3a:09:fe:84:85:f0:
e0:d3:40:fe:9f:e0:e3:67:77:b0:64:e6:4f:8c:86:2b:43:8b:
5b:8a:5f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:29:36 2026 by rpki-client