
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/E09CA942BC63A46AC14108FB56751F1D3DB2B40D.mft
File: E09CA942BC63A46AC14108FB56751F1D3DB2B40D.mft (raw, json)
Hash identifier: GDnOQ4MglsW7zT5hkUF5aOcOr6zOga38+6lmSFE4c2M=
Subject key identifier: 81:1E:16:C6:27:E6:B9:0D:2C:E3:57:6E:F1:48:5D:8D:82:02:B4:F0
Authority key identifier: E0:9C:A9:42:BC:63:A4:6A:C1:41:08:FB:56:75:1F:1D:3D:B2:B4:0D
Certificate issuer: /CN=E09CA942BC63A46AC14108FB56751F1D3DB2B40D
Certificate serial: 3555508FD222F6B7C0EA8B9C23EF5418AB60B50A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E09CA942BC63A46AC14108FB56751F1D3DB2B40D.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/E09CA942BC63A46AC14108FB56751F1D3DB2B40D.mft
Manifest number: B9
Signing time: Wed 16 Sep 2026 19:33:20 +0000
Manifest this update: Wed 16 Sep 2026 19:28:20 +0000
Manifest next update: Thu 17 Sep 2026 19:41:20 +0000
Files and hashes: 1: 3130332e31302e3235332e302f32342d3234203d3e203536323539.roa (hash: RVVP//q3vuwKuV+Q10lzaWaVgGwp0nEvsOc4ZWyOH5o=)
2: 3130332e36352e39362e302f32332d3234203d3e203536323539.roa (hash: AhptuUeczIXxYrYpEUFqYLa6JweMv5oyItdy1/amU/c=)
3: 3130332e32382e3136332e302f32342d3234203d3e203536323539.roa (hash: f3/5ZWIk2JVAliu7yKS60dOELpXPYdbw36ijNFDWyYM=)
4: E09CA942BC63A46AC14108FB56751F1D3DB2B40D.crl (hash: Gr/aV3Nt1BT4KNoMowISDQBdhynatstz839PikDzRS8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/E09CA942BC63A46AC14108FB56751F1D3DB2B40D.crl
rsync://rpki-rsync.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/E09CA942BC63A46AC14108FB56751F1D3DB2B40D.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E09CA942BC63A46AC14108FB56751F1D3DB2B40D.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 19:41:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:55:50:8f:d2:22:f6:b7:c0:ea:8b:9c:23:ef:54:18:ab:60:b5:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E09CA942BC63A46AC14108FB56751F1D3DB2B40D
Validity
Not Before: Sep 16 19:28:20 2026 GMT
Not After : Sep 17 19:41:20 2026 GMT
Subject: CN=811E16C627E6B90D2CE3576EF1485D8D8202B4F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:3c:59:4a:8e:f3:3f:ce:11:2a:44:ae:71:11:
eb:12:32:a1:f2:1c:8e:99:dc:1a:0a:2f:b6:8c:c7:
cc:a7:3e:ec:03:78:19:ed:15:bf:fc:37:fb:ae:61:
9f:f4:52:08:9f:2b:6e:9f:fc:e2:8f:f5:ce:a0:7a:
a0:4f:25:0d:2d:9b:24:f8:19:61:58:66:6e:d2:bd:
8e:7a:6e:a0:97:ad:e8:15:fd:e0:70:9b:28:f5:8c:
f5:fc:ae:1d:db:68:48:02:7c:28:c5:f8:bb:85:f4:
1a:ca:3f:c3:4f:f0:1f:e5:71:bf:4c:88:6f:f7:14:
49:22:ee:86:df:26:f6:43:2c:b1:a0:33:a5:26:49:
05:a7:a0:6c:e4:7a:37:16:80:3a:88:9f:f7:4f:97:
ab:6a:0d:30:9c:20:75:9e:8c:bd:d2:a0:96:c8:be:
3b:0f:0d:e2:a1:86:84:3c:a5:cf:74:e7:ac:19:74:
a1:9b:9f:cb:07:6f:3f:79:ea:40:34:4e:22:8c:7e:
03:8b:27:18:c3:fe:15:30:15:2b:a9:5a:9d:66:0d:
59:d1:7d:f7:8c:0d:4c:44:29:7d:08:c4:29:ed:b9:
b3:ea:c4:1a:de:70:8c:29:1e:41:3d:f9:d4:81:74:
e8:14:c6:ee:1b:ba:9a:58:70:48:58:68:3a:bc:89:
ef:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:1E:16:C6:27:E6:B9:0D:2C:E3:57:6E:F1:48:5D:8D:82:02:B4:F0
X509v3 Authority Key Identifier:
keyid:E0:9C:A9:42:BC:63:A4:6A:C1:41:08:FB:56:75:1F:1D:3D:B2:B4:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/E09CA942BC63A46AC14108FB56751F1D3DB2B40D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E09CA942BC63A46AC14108FB56751F1D3DB2B40D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/E09CA942BC63A46AC14108FB56751F1D3DB2B40D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:5c:6e:f2:5a:15:42:70:c2:9a:e7:4d:40:45:8d:0e:84:95:
bc:7d:3a:1d:17:a1:b4:40:08:11:8a:d0:0c:47:3e:b7:b3:16:
a0:84:70:6a:93:98:d8:e7:80:2c:54:27:27:8a:d4:87:f0:9c:
ca:e0:45:b9:b0:f6:78:7a:d4:f9:f8:1c:f7:dc:4b:04:0c:85:
ba:58:09:2c:2e:45:07:46:77:70:bd:20:6b:f0:3c:1d:9c:38:
d3:98:93:fa:ef:da:01:50:06:20:75:77:27:7d:38:69:cf:f6:
ad:59:e7:2d:ec:6a:03:cf:38:05:8e:0d:a8:16:26:38:e4:60:
84:fb:26:54:7f:8d:1e:c2:a1:3d:ca:4f:17:d1:3f:d0:fc:15:
e5:ff:93:ff:5c:f9:11:4b:6a:e0:70:8b:0c:1f:c1:16:8d:5f:
ed:6b:2b:fa:4f:02:08:e9:36:52:7f:e3:b6:b2:2f:74:4c:7f:
44:df:c9:94:f8:a3:bf:37:1d:1a:36:2c:5e:38:18:0e:6c:64:
e0:5a:d0:47:53:ea:6c:39:7e:9f:03:1b:e2:66:88:4e:93:d4:
17:4e:bd:a5:73:d4:69:c4:c1:bd:2b:c5:0a:62:48:57:ab:ce:
78:a2:91:3a:d6:47:47:5b:0e:e2:ca:e1:66:01:4c:6d:5e:6e:
1e:20:0d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 10:50:39 2026 by rpki-client