
$ rpki-client -vvf rpki-rsync.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/E4916A38F928B049A7533CB4FE25B8FA9D96DF74.mft
File: E4916A38F928B049A7533CB4FE25B8FA9D96DF74.mft (raw, json)
Hash identifier: /bWHMFI8lPOjxuRTi6pb/a5py0qIu3sNvqy4PeUlHdg=
Subject key identifier: FF:7B:08:8E:65:8D:1C:B0:31:0E:15:69:AD:40:83:B4:51:5B:88:6D
Authority key identifier: E4:91:6A:38:F9:28:B0:49:A7:53:3C:B4:FE:25:B8:FA:9D:96:DF:74
Certificate issuer: /CN=E4916A38F928B049A7533CB4FE25B8FA9D96DF74
Certificate serial: 1D3DC830B877B305C8C6F286921EE589A37ECB32
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4916A38F928B049A7533CB4FE25B8FA9D96DF74.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/E4916A38F928B049A7533CB4FE25B8FA9D96DF74.mft
Manifest number: 60
Signing time: Mon 13 Jul 2026 07:17:45 +0000
Manifest this update: Mon 13 Jul 2026 07:12:45 +0000
Manifest next update: Tue 14 Jul 2026 07:43:45 +0000
Files and hashes: 1: 3130332e31332e3136342e302f32332d3234203d3e2034383030.roa (hash: LV3eS8DWx/O74oQ0CzVazcwm3a7uu6GLraOIjVHVQ5o=)
2: E4916A38F928B049A7533CB4FE25B8FA9D96DF74.crl (hash: cOLSwSh7If/Pknn3CW+2mWvQEYhZRlnsE3f4ZZeZgRM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/E4916A38F928B049A7533CB4FE25B8FA9D96DF74.crl
rsync://rpki-rsync.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/E4916A38F928B049A7533CB4FE25B8FA9D96DF74.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4916A38F928B049A7533CB4FE25B8FA9D96DF74.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Jul 2026 05:49:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:3d:c8:30:b8:77:b3:05:c8:c6:f2:86:92:1e:e5:89:a3:7e:cb:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4916A38F928B049A7533CB4FE25B8FA9D96DF74
Validity
Not Before: Jul 13 07:12:45 2026 GMT
Not After : Jul 14 07:43:45 2026 GMT
Subject: CN=FF7B088E658D1CB0310E1569AD4083B4515B886D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e5:48:62:e2:d4:e4:96:59:5e:31:58:06:90:
3d:31:bb:8d:b6:65:58:7a:e5:ed:52:c0:64:fe:29:
01:68:ec:7e:df:ba:64:e6:48:e0:17:8e:8f:ce:08:
33:f8:47:8e:f8:3c:a7:70:d1:01:8f:7e:f5:f6:2d:
e9:7a:04:93:c6:fc:f3:33:4e:bb:97:19:27:1d:90:
36:eb:81:eb:8a:00:e6:c9:06:02:7c:a3:16:52:f2:
4f:ef:b5:27:8b:4d:26:fa:af:f2:8a:3d:87:19:e7:
01:8f:6c:9c:c5:f0:80:b5:1c:b1:d9:23:bd:f8:52:
7a:35:69:ca:81:39:1d:3d:4a:88:fe:44:42:e0:a3:
83:96:ea:05:1c:11:27:f2:82:7b:be:e3:c3:e8:3d:
78:36:98:a3:d2:60:10:7d:33:3a:69:44:a8:ca:ea:
b7:78:36:47:96:36:d1:33:37:c1:92:91:0b:c3:62:
4d:9f:54:8b:41:03:06:0f:f7:a6:b6:8e:6a:e5:b9:
9d:d3:6b:a7:4b:34:f2:11:60:ad:f0:06:e6:c2:fe:
ce:66:6d:0e:6b:3b:cc:67:25:44:10:05:ab:55:7c:
3a:06:a4:bb:34:0c:9a:c3:d5:8b:51:c6:9a:e3:0a:
47:3d:c1:a3:ca:3d:c9:3e:31:99:3c:41:f4:fd:60:
b3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:7B:08:8E:65:8D:1C:B0:31:0E:15:69:AD:40:83:B4:51:5B:88:6D
X509v3 Authority Key Identifier:
keyid:E4:91:6A:38:F9:28:B0:49:A7:53:3C:B4:FE:25:B8:FA:9D:96:DF:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/E4916A38F928B049A7533CB4FE25B8FA9D96DF74.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4916A38F928B049A7533CB4FE25B8FA9D96DF74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/E4916A38F928B049A7533CB4FE25B8FA9D96DF74.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:4e:93:68:2d:d7:f6:50:3f:1f:5f:bb:d0:db:a4:92:07:1e:
9e:69:0e:53:21:a0:b1:04:41:f8:cf:ae:1e:39:f6:57:c3:c0:
a2:4c:d2:70:a0:12:1e:4c:b0:aa:05:96:a5:a1:c2:f5:d9:e1:
f2:ae:09:a4:39:9b:5d:e1:ce:5e:31:69:dc:d7:1a:9c:13:ef:
30:f7:0f:af:43:0a:a5:12:b2:2c:10:91:9d:2b:4c:35:d9:98:
6b:92:32:15:62:dd:aa:4c:6a:f3:e2:f8:da:49:ba:f9:c6:a1:
11:bf:39:4c:21:8d:58:ad:0a:37:10:fa:e7:9c:8d:6f:12:8d:
b9:59:fe:ca:1f:a7:c0:67:32:38:42:1f:f0:72:dd:03:dc:bf:
be:8e:26:4b:2a:13:0e:18:8d:5d:77:b6:6f:bc:b0:f2:95:92:
c3:dc:b5:c7:15:a4:7b:da:ec:02:f8:0a:72:bd:80:d0:b0:39:
a5:87:cf:21:5f:92:07:2d:ca:6d:94:fd:b7:f9:d3:0c:ab:9c:
29:21:6d:20:ad:1f:df:da:24:9b:22:e8:14:35:ce:27:d8:80:
53:b7:1b:4a:3a:33:13:58:33:7e:77:13:c6:9d:72:c5:72:03:
ae:5b:71:39:11:b2:a1:7a:df:70:08:e8:d4:04:b2:34:89:4a:
75:7a:ad:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 11:35:03 2026 by rpki-client