
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/2E069E30CF7B24CDD77C206550B0BDBDB01683AF.mft
File: 2E069E30CF7B24CDD77C206550B0BDBDB01683AF.mft (raw, json)
Hash identifier: lqi3M6zuiRatO9L7SmDIHIjl6cxg7rdDBDZ+gjbGkaA=
Subject key identifier: EE:E8:A3:4F:DA:FA:63:E1:7C:DD:76:D1:23:42:5E:89:6A:20:C1:B8
Authority key identifier: 2E:06:9E:30:CF:7B:24:CD:D7:7C:20:65:50:B0:BD:BD:B0:16:83:AF
Certificate issuer: /CN=2E069E30CF7B24CDD77C206550B0BDBDB01683AF
Certificate serial: 2635CB6FA04AE922D95A131B8F45D45D32EC75EB
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E069E30CF7B24CDD77C206550B0BDBDB01683AF.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/2E069E30CF7B24CDD77C206550B0BDBDB01683AF.mft
Manifest number: B9
Signing time: Thu 17 Sep 2026 01:45:41 +0000
Manifest this update: Thu 17 Sep 2026 01:40:41 +0000
Manifest next update: Fri 18 Sep 2026 05:02:41 +0000
Files and hashes: 1: 323030313a6466323a376663303a3a2f34382d3438203d3e20313530323432.roa (hash: R//K7f8SQ84W/WhpHi/GP3kDl7olX9IsyMdmQ8qFKuk=)
2: 2E069E30CF7B24CDD77C206550B0BDBDB01683AF.crl (hash: ImP1b6TpkpwlTxg1Q9piLGG+fAW6tvXpzHuVrm6Ri94=)
3: 3130332e37362e39312e302f32342d3234203d3e20313530323432.roa (hash: njSBQKxaBf8FgxYd9UzVWcsd+7NkvHs45etGgjIxXxw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/2E069E30CF7B24CDD77C206550B0BDBDB01683AF.crl
rsync://rpki-rsync.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/2E069E30CF7B24CDD77C206550B0BDBDB01683AF.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E069E30CF7B24CDD77C206550B0BDBDB01683AF.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 04:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:35:cb:6f:a0:4a:e9:22:d9:5a:13:1b:8f:45:d4:5d:32:ec:75:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E069E30CF7B24CDD77C206550B0BDBDB01683AF
Validity
Not Before: Sep 17 01:40:41 2026 GMT
Not After : Sep 18 05:02:41 2026 GMT
Subject: CN=EEE8A34FDAFA63E17CDD76D123425E896A20C1B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:db:f6:95:4c:60:fa:27:b1:8f:34:15:63:b4:
90:f0:20:39:85:0e:d5:1d:10:31:5c:3c:d2:93:7c:
a6:8f:42:54:ce:12:31:c1:f9:bc:1b:c4:98:62:b8:
dd:26:a4:9e:e4:96:1c:1b:2e:08:02:93:e2:b2:f6:
39:e7:ea:03:2d:ce:42:4d:ef:d5:d0:fb:22:7e:a2:
01:7a:1a:25:0e:31:cf:96:f2:00:9e:01:f9:9f:40:
ea:82:0b:6e:8a:79:65:6b:79:39:56:91:dc:d5:5f:
c5:13:08:9a:db:8c:5c:80:04:0b:4a:c3:64:0f:4a:
86:12:7f:60:31:bd:d1:09:c6:79:37:f9:15:30:55:
b4:ec:1f:fb:ab:e7:48:f0:02:cd:ef:b5:27:4e:6f:
23:fe:b4:a1:4a:10:a6:ab:8b:a0:03:ad:68:62:73:
c8:2c:4b:6b:38:b0:da:81:cb:21:06:2b:7b:2e:e3:
4f:c9:55:81:78:25:c2:f8:28:63:7e:b2:57:bc:5a:
37:7f:7f:25:fa:d3:0d:ae:5d:6c:fd:46:3b:76:ec:
c2:86:03:28:2c:b5:d4:4b:e1:19:aa:51:0e:b9:f7:
a1:32:85:af:d3:bf:02:08:4f:1c:54:f2:ec:e0:40:
69:e5:14:11:4d:1e:47:7e:3b:0e:02:63:76:91:1c:
84:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:E8:A3:4F:DA:FA:63:E1:7C:DD:76:D1:23:42:5E:89:6A:20:C1:B8
X509v3 Authority Key Identifier:
keyid:2E:06:9E:30:CF:7B:24:CD:D7:7C:20:65:50:B0:BD:BD:B0:16:83:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/2E069E30CF7B24CDD77C206550B0BDBDB01683AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E069E30CF7B24CDD77C206550B0BDBDB01683AF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/2E069E30CF7B24CDD77C206550B0BDBDB01683AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:82:1c:69:87:73:51:eb:8b:e4:34:b4:c3:97:73:17:89:db:
9b:9a:58:56:3a:6e:ae:ae:29:57:85:cc:b5:ea:cc:c4:b6:21:
45:78:86:94:4f:3c:5a:2d:32:29:4b:10:3c:4b:6d:95:8a:a0:
2c:b9:21:91:6e:9f:76:f9:7f:5a:2f:86:48:f1:90:ab:93:ce:
fe:0a:9e:77:68:ea:45:73:cb:64:79:d1:f2:2c:b3:02:25:4c:
33:82:d3:0b:54:13:df:a5:a9:54:91:28:9e:78:1e:2f:bb:bc:
6c:2a:de:fb:ab:2b:03:49:c0:2a:aa:8e:e6:43:a8:1d:88:bf:
94:eb:03:46:8d:4e:e2:dd:28:d5:a2:33:61:c7:65:d6:30:31:
0e:87:e7:88:28:6d:73:1d:a4:4a:b9:f8:4e:1e:be:3a:d2:5d:
ac:18:b8:29:1a:9a:82:2b:20:62:2d:65:6c:98:82:7c:0f:74:
fa:87:1c:5b:f2:54:52:e6:72:83:f3:21:79:6f:73:38:09:3b:
cd:32:e9:d7:d1:bf:61:dd:62:20:89:68:1a:32:cd:f0:24:ff:
3a:a7:a0:43:a3:bc:8d:6b:b8:1e:41:58:a0:8b:95:35:be:a6:
b6:95:f2:06:02:df:7f:22:6e:dd:83:90:35:25:96:73:f6:54:
64:88:a3:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 08:33:57 2026 by rpki-client