
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/E98D6B641E943F7E38310634C5FEE8AE7C8AA6EE.mft
File: E98D6B641E943F7E38310634C5FEE8AE7C8AA6EE.mft (raw, json)
Hash identifier: ypoVJb3/BUBPDS4cdMxQFQdt930TkUJNu6rXyhqa2/0=
Subject key identifier: 47:26:99:4F:06:C0:1F:96:92:0A:EC:6F:AF:A6:7D:AD:29:F2:AF:4E
Authority key identifier: E9:8D:6B:64:1E:94:3F:7E:38:31:06:34:C5:FE:E8:AE:7C:8A:A6:EE
Certificate issuer: /CN=E98D6B641E943F7E38310634C5FEE8AE7C8AA6EE
Certificate serial: 4F7E7F1AB5689C065FA8811E546F557AC26A63A7
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E98D6B641E943F7E38310634C5FEE8AE7C8AA6EE.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/E98D6B641E943F7E38310634C5FEE8AE7C8AA6EE.mft
Manifest number: ED
Signing time: Tue 27 Oct 2026 07:24:31 +0000
Manifest this update: Tue 27 Oct 2026 07:19:31 +0000
Manifest next update: Wed 28 Oct 2026 08:06:31 +0000
Files and hashes: 1: 3130332e35352e3231362e302f32342d3234203d3e20313333383234.roa (hash: SdJfcBicTcG5/kcedYnrcuYyXbwXNypphwy52Yrbsfs=)
2: E98D6B641E943F7E38310634C5FEE8AE7C8AA6EE.crl (hash: RLQS/aeteeyW1GwYta0fn4W0L7DxJjaEIO5WQjeqNk8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/E98D6B641E943F7E38310634C5FEE8AE7C8AA6EE.crl
rsync://rpki-rsync.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/E98D6B641E943F7E38310634C5FEE8AE7C8AA6EE.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E98D6B641E943F7E38310634C5FEE8AE7C8AA6EE.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Oct 2026 08:06:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:7e:7f:1a:b5:68:9c:06:5f:a8:81:1e:54:6f:55:7a:c2:6a:63:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E98D6B641E943F7E38310634C5FEE8AE7C8AA6EE
Validity
Not Before: Oct 27 07:19:31 2026 GMT
Not After : Oct 28 08:06:31 2026 GMT
Subject: CN=4726994F06C01F96920AEC6FAFA67DAD29F2AF4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:84:a7:15:c4:a3:3b:72:72:4d:43:18:a8:42:
c4:52:3e:e1:b7:a7:bc:6d:ce:ff:7a:94:63:11:12:
90:6b:55:e5:e0:51:e9:53:79:9f:f9:79:45:89:cd:
4b:a1:3f:67:63:97:90:eb:62:13:22:d0:3f:9a:dc:
f1:08:6f:93:89:31:82:19:a4:ac:8c:9a:61:a7:62:
c3:0a:bf:ae:a7:33:4c:b0:94:15:ad:a4:81:52:64:
82:24:4f:7f:e1:63:1a:f4:f4:d2:36:ec:5c:cd:e0:
70:2b:6e:f0:3f:71:47:0e:54:95:96:4a:3e:52:41:
e8:f6:c5:9c:88:c2:d2:28:88:f0:22:9b:22:17:89:
a6:30:f3:0f:79:40:ad:cd:a5:5e:79:09:a7:74:d0:
7e:aa:e4:ce:39:3e:df:17:5e:0d:de:06:5c:36:2e:
95:95:53:29:53:a8:a6:c4:6a:69:d6:92:78:a4:a9:
66:ab:25:13:ac:1c:fe:51:dd:7e:d1:fd:16:d7:45:
b9:62:54:2b:c2:83:17:b6:43:f0:e5:b1:df:12:93:
cc:f1:9e:71:e5:74:61:6e:1e:b0:7b:1d:1b:1c:47:
af:a2:74:73:66:1b:ed:29:f0:83:7a:26:8c:2f:65:
56:fb:f2:1e:b8:1c:3d:c7:9a:56:b9:b5:bd:ec:04:
00:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:26:99:4F:06:C0:1F:96:92:0A:EC:6F:AF:A6:7D:AD:29:F2:AF:4E
X509v3 Authority Key Identifier:
keyid:E9:8D:6B:64:1E:94:3F:7E:38:31:06:34:C5:FE:E8:AE:7C:8A:A6:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/E98D6B641E943F7E38310634C5FEE8AE7C8AA6EE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E98D6B641E943F7E38310634C5FEE8AE7C8AA6EE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/E98D6B641E943F7E38310634C5FEE8AE7C8AA6EE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:ff:00:f0:01:91:c0:83:f1:94:70:9b:ef:35:06:7c:15:e2:
7f:4f:5b:5c:7d:59:08:51:93:16:fe:34:a6:0b:2b:b6:a1:3b:
35:4e:13:45:61:05:81:44:67:28:8c:59:3e:fe:66:47:9e:fa:
d6:5b:4f:3f:94:a9:10:76:d2:4e:f2:04:8c:10:6d:a6:0d:0d:
22:b9:aa:bc:12:49:47:ed:a8:4f:19:2d:02:93:17:1f:da:b0:
87:92:11:b6:9d:d9:9e:27:fd:ed:d0:a8:46:42:16:ad:68:12:
4b:b8:68:81:f1:25:86:32:af:0c:6e:3b:db:a7:75:d4:fa:33:
30:fa:49:dd:77:ff:14:a9:8b:b6:e7:cb:0f:08:9d:a0:c4:14:
da:0e:78:4f:27:b6:b9:c7:0f:d1:58:f9:2b:39:07:d1:56:59:
ad:d6:7b:8b:c8:75:fc:48:ab:be:f5:7b:fc:83:bd:12:58:08:
02:f6:99:c6:b7:77:42:6c:e3:67:31:ad:5b:ba:95:6b:a5:cb:
3e:7a:55:f2:8e:2b:37:b4:71:1b:cd:87:fc:0f:7a:43:c1:08:
fd:24:4a:ea:94:fd:43:76:22:f4:a1:6c:52:b5:b2:a6:6a:5e:
f9:56:b0:50:7d:8a:1b:7c:54:7f:5d:46:a7:a8:48:a2:97:12:
8a:47:e0:1f
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUT35/GrVonAZfqIEeVG9VesJqY6cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTk4RDZCNjQxRTk0M0Y3RTM4MzEwNjM0QzVGRUU4QUU3
QzhBQTZFRTAeFw0yNjEwMjcwNzE5MzFaFw0yNjEwMjgwODA2MzFaMDMxMTAvBgNV
BAMTKDQ3MjY5OTRGMDZDMDFGOTY5MjBBRUM2RkFGQTY3REFEMjlGMkFGNEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkhKcVxKM7cnJNQxioQsRSPuG3
p7xtzv96lGMREpBrVeXgUelTeZ/5eUWJzUuhP2djl5DrYhMi0D+a3PEIb5OJMYIZ
pKyMmmGnYsMKv66nM0ywlBWtpIFSZIIkT3/hYxr09NI27FzN4HArbvA/cUcOVJWW
Sj5SQej2xZyIwtIoiPAimyIXiaYw8w95QK3NpV55Cad00H6q5M45Pt8XXg3eBlw2
LpWVUylTqKbEamnWknikqWarJROsHP5R3X7R/RbXRbliVCvCgxe2Q/Dlsd8Sk8zx
nnHldGFuHrB7HRscR6+idHNmG+0p8IN6JowvZVb78h64HD3Hmla5tb3sBADnAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQURyaZTwbAH5aSCuxvr6Z9rSnyr04wHwYDVR0j
BBgwFoAU6Y1rZB6UP344MQY0xf7ornyKpu4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NWU2MWY4NmUtMDdmMC00YzYwLWFkYzAtZmM2ODgxNmFjODY2LzAvRTk4RDZCNjQx
RTk0M0Y3RTM4MzEwNjM0QzVGRUU4QUU3QzhBQTZFRS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FOThENkI2NDFFOTQzRjdFMzgzMTA2MzRDNUZFRThBRTdDOEFB
NkVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWU2MWY4NmUtMDdmMC00YzYwLWFk
YzAtZmM2ODgxNmFjODY2LzAvRTk4RDZCNjQxRTk0M0Y3RTM4MzEwNjM0QzVGRUU4
QUU3QzhBQTZFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABr/APABkcCD8ZRwm+81BnwV4n9PW1x9WQhR
kxb+NKYLK7ahOzVOE0VhBYFEZyiMWT7+Zkee+tZbTz+UqRB20k7yBIwQbaYNDSK5
qrwSSUftqE8ZLQKTFx/asIeSEbad2Z4n/e3QqEZCFq1oEku4aIHxJYYyrwxuO9un
ddT6MzD6Sd13/xSpi7bnyw8InaDEFNoOeE8ntrnHD9FY+Ss5B9FWWa3We4vIdfxI
q771e/yDvRJYCAL2mca3d0Js42cxrVu6lWulyz56VfKOKze0cRvNh/wPekPBCP0k
SuqU/UN2IvShbFK1sqZqXvlWsFB9iht8VH9dRqeoSKKXEopH4B8=
-----END CERTIFICATE-----
Generated at Tue Oct 27 11:14:28 2026 by rpki-client