
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/0E0EBBBA7E22C85B3473A013CFDD321254D568AC.mft
File: 0E0EBBBA7E22C85B3473A013CFDD321254D568AC.mft (raw, json)
Hash identifier: 6qW/NiCGfpmxCvmqCM09znKVDW/vq+somyiObDFsuT0=
Subject key identifier: CC:91:CC:24:81:76:3B:80:19:3B:99:00:0C:00:AB:42:67:02:49:7C
Authority key identifier: 0E:0E:BB:BA:7E:22:C8:5B:34:73:A0:13:CF:DD:32:12:54:D5:68:AC
Certificate issuer: /CN=0E0EBBBA7E22C85B3473A013CFDD321254D568AC
Certificate serial: 4E8574FE157227D7CF0CC34AF0A7E6FF9F00522F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0E0EBBBA7E22C85B3473A013CFDD321254D568AC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/0E0EBBBA7E22C85B3473A013CFDD321254D568AC.mft
Manifest number: B8
Signing time: Wed 16 Sep 2026 19:07:54 +0000
Manifest this update: Wed 16 Sep 2026 19:02:54 +0000
Manifest next update: Thu 17 Sep 2026 21:22:54 +0000
Files and hashes: 1: 3136302e31392e3131302e302f32332d3234203d3e20313532373733.roa (hash: GvfJPx0m84FZdwqXoN6lWJ86xXd2jONGdjvxcJWy97o=)
2: 0E0EBBBA7E22C85B3473A013CFDD321254D568AC.crl (hash: HcOyq+TGKq3uSc7RJyyfKCUYcqhwUfC7T7Cm6mLdc7c=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/0E0EBBBA7E22C85B3473A013CFDD321254D568AC.crl
rsync://rpki-rsync.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/0E0EBBBA7E22C85B3473A013CFDD321254D568AC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0E0EBBBA7E22C85B3473A013CFDD321254D568AC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 21:22:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:85:74:fe:15:72:27:d7:cf:0c:c3:4a:f0:a7:e6:ff:9f:00:52:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0E0EBBBA7E22C85B3473A013CFDD321254D568AC
Validity
Not Before: Sep 16 19:02:54 2026 GMT
Not After : Sep 17 21:22:54 2026 GMT
Subject: CN=CC91CC2481763B80193B99000C00AB426702497C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:97:34:42:32:62:21:63:50:30:41:8c:b9:aa:
43:3c:da:ca:37:94:4b:55:c8:c4:8f:79:f6:69:97:
47:c9:e9:21:af:ba:58:15:74:ef:c8:b6:b3:7e:3b:
98:4b:fd:ed:fa:c0:de:6d:d8:7d:63:9a:44:42:c0:
06:3b:7b:a8:00:65:5e:2b:ed:17:46:1a:c7:43:3d:
08:ae:13:99:da:37:bc:0c:56:f8:1a:d5:01:81:4f:
b1:fa:ad:bb:89:fd:22:a7:c0:67:83:f5:b5:75:b3:
7d:cc:60:b4:73:d7:70:e6:a5:22:84:c4:6a:5b:c7:
66:1d:2e:e7:db:30:f7:f8:72:6e:a1:dd:45:2f:75:
e6:7d:27:fc:17:f9:b8:03:d0:3a:fd:fc:65:b2:73:
03:c1:63:0b:70:47:de:89:58:c8:0b:4c:bb:71:61:
61:f5:64:3b:79:57:b7:98:cc:8d:2c:8e:9c:bd:24:
3c:92:c5:f2:52:dc:13:a8:5e:4d:4c:55:fc:66:e5:
c4:cd:4e:c6:d9:7b:0a:d5:6b:58:cd:99:14:d3:07:
1d:45:c8:e2:26:63:27:73:8f:d9:8b:df:d4:11:15:
d4:c1:c6:f1:ff:5e:71:51:15:c1:bc:2f:4f:4d:45:
4e:0b:65:7c:19:0f:33:7a:57:42:f8:f3:de:95:d8:
11:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:91:CC:24:81:76:3B:80:19:3B:99:00:0C:00:AB:42:67:02:49:7C
X509v3 Authority Key Identifier:
keyid:0E:0E:BB:BA:7E:22:C8:5B:34:73:A0:13:CF:DD:32:12:54:D5:68:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/0E0EBBBA7E22C85B3473A013CFDD321254D568AC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0E0EBBBA7E22C85B3473A013CFDD321254D568AC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/0E0EBBBA7E22C85B3473A013CFDD321254D568AC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:56:a7:c4:0e:c8:b4:d4:c8:24:d1:a3:7e:d4:ca:43:02:9c:
5a:53:a5:b5:19:5d:07:40:39:b1:11:89:1d:92:e8:f8:6f:45:
64:9b:59:ac:0d:9b:9b:02:4b:34:0d:bb:d1:ac:9c:74:f6:a9:
f0:7a:af:05:a3:a1:83:2c:5b:3e:db:b9:de:97:a2:5c:b9:63:
e7:97:21:b0:00:86:db:c4:8c:7d:2a:34:70:2d:cd:26:6c:18:
40:7b:9a:ec:fd:fd:e5:61:fa:90:4d:29:14:df:c9:f0:b0:c6:
26:18:2c:a2:ae:f3:76:ae:61:4f:79:cc:b7:75:4b:98:79:25:
e5:62:a3:cf:d4:3e:20:14:97:e7:9f:d6:55:15:5d:72:4c:d9:
e6:e4:35:3d:87:39:79:26:0e:30:4f:84:f4:37:e4:1b:37:d4:
fe:4c:05:2b:26:12:79:a6:bc:ad:a9:88:d3:78:a1:bb:63:e0:
45:2c:27:8e:ac:79:de:14:89:37:0d:1e:13:bd:8f:5d:75:3f:
cc:5b:40:73:f0:92:42:c0:1b:e4:e2:c1:e2:fd:a8:ef:2b:77:
5e:ec:9c:ae:78:92:24:e0:a4:11:c8:d1:62:5e:47:dd:e3:e8:
6a:56:a1:ad:09:12:10:d6:6b:a3:6d:c4:9d:5c:f2:1d:ed:e5:
98:e2:05:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 14:30:11 2026 by rpki-client