
$ rpki-client -vvf rpki-rsync.idnic.net/repo/99104c50-40ff-4aaf-a209-be31ceda679b/0/E87EEEAA35D76955AEB555F946ED794035B56B72.mft
File: E87EEEAA35D76955AEB555F946ED794035B56B72.mft (raw, json)
Hash identifier: ZjdxpMbRpNQals5fKT0DR1AUI8QMBPiaf+DXKOpPS60=
Subject key identifier: 60:7F:F1:02:18:4E:FF:E9:67:BB:D5:66:50:87:C5:D9:00:20:F1:E6
Authority key identifier: E8:7E:EE:AA:35:D7:69:55:AE:B5:55:F9:46:ED:79:40:35:B5:6B:72
Certificate issuer: /CN=E87EEEAA35D76955AEB555F946ED794035B56B72
Certificate serial: 4ED3AFECF5A9A92BF23BC9983436301C514BD7DA
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E87EEEAA35D76955AEB555F946ED794035B56B72.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/99104c50-40ff-4aaf-a209-be31ceda679b/0/E87EEEAA35D76955AEB555F946ED794035B56B72.mft
Manifest number: 42
Signing time: Sat 20 Jun 2026 04:19:57 +0000
Manifest this update: Sat 20 Jun 2026 04:14:57 +0000
Manifest next update: Sun 21 Jun 2026 05:34:57 +0000
Files and hashes: 1: E87EEEAA35D76955AEB555F946ED794035B56B72.crl (hash: wuput/s+em/M5wrMd029eV0fOEqYfniaxbG64sUXXm0=)
2: 3130332e3234392e31382e302f32332d3234203d3e20313530323036.roa (hash: 23cNk898TX6KCtmP7qTej4qkKvszzgnklZmFVcKo/dk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/99104c50-40ff-4aaf-a209-be31ceda679b/0/E87EEEAA35D76955AEB555F946ED794035B56B72.crl
rsync://rpki-rsync.idnic.net/repo/99104c50-40ff-4aaf-a209-be31ceda679b/0/E87EEEAA35D76955AEB555F946ED794035B56B72.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E87EEEAA35D76955AEB555F946ED794035B56B72.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 21 Jun 2026 05:34:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:d3:af:ec:f5:a9:a9:2b:f2:3b:c9:98:34:36:30:1c:51:4b:d7:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E87EEEAA35D76955AEB555F946ED794035B56B72
Validity
Not Before: Jun 20 04:14:57 2026 GMT
Not After : Jun 21 05:34:57 2026 GMT
Subject: CN=607FF102184EFFE967BBD5665087C5D90020F1E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ee:6f:4c:39:24:13:61:95:28:e5:96:60:38:
c3:b3:02:30:0f:13:41:91:c3:90:2a:d9:07:53:73:
77:f2:a0:25:e0:b9:43:6f:ae:52:49:5e:7a:4a:72:
e0:9d:09:2b:6e:64:e5:84:94:97:9e:de:66:68:1a:
ac:dc:ea:4b:6b:cf:02:55:2c:da:72:35:53:1e:de:
ad:7a:bd:4d:a5:d4:51:70:e7:eb:31:06:b4:05:09:
02:1f:c4:ba:25:e3:54:e2:fc:df:48:33:4a:02:d8:
79:d3:ec:2f:83:5b:df:4d:a1:52:19:e6:ab:df:03:
27:d7:6c:6e:32:ab:f4:6c:6d:41:fc:42:bd:94:ac:
87:1a:6c:e7:a9:8e:1e:6f:d2:0d:7f:2e:b8:5c:68:
71:b9:75:7e:53:72:ad:94:83:45:0c:5b:55:3a:2d:
b6:bc:b9:01:44:b6:60:62:f7:e3:e4:bb:71:6f:c3:
eb:a3:01:7b:a7:3d:04:f0:c8:c8:f1:46:55:16:79:
61:6f:66:93:04:1e:bb:c5:16:d9:66:fa:65:91:cf:
91:51:1c:7b:57:07:d9:05:8e:03:20:04:d4:97:16:
1e:4b:63:eb:64:72:6a:04:3d:7d:45:26:ab:7c:5f:
a1:ad:2f:1e:bb:17:10:57:82:e9:56:7f:af:c0:92:
fd:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:7F:F1:02:18:4E:FF:E9:67:BB:D5:66:50:87:C5:D9:00:20:F1:E6
X509v3 Authority Key Identifier:
keyid:E8:7E:EE:AA:35:D7:69:55:AE:B5:55:F9:46:ED:79:40:35:B5:6B:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/99104c50-40ff-4aaf-a209-be31ceda679b/0/E87EEEAA35D76955AEB555F946ED794035B56B72.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E87EEEAA35D76955AEB555F946ED794035B56B72.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/99104c50-40ff-4aaf-a209-be31ceda679b/0/E87EEEAA35D76955AEB555F946ED794035B56B72.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:98:2d:05:77:a6:0f:7c:a8:27:36:4f:5a:38:e1:3d:0b:8e:
0f:3d:ee:a5:48:94:d3:7d:e0:b4:16:86:4f:26:60:7d:1a:e0:
e2:45:2c:50:7a:e2:f2:c1:0e:22:32:86:b2:c4:37:92:79:65:
a6:e2:7d:4c:ef:2b:67:ec:39:0b:1e:91:7c:18:24:b1:3f:f2:
d4:19:d4:95:c2:0d:b0:9f:04:e6:a6:dc:54:76:5d:89:56:67:
03:a5:29:d4:62:6f:a3:79:8b:4f:bd:a7:16:a9:e5:da:0f:6d:
41:c2:6d:d1:58:21:ca:03:b2:a4:c5:ec:52:9d:06:4b:00:c5:
31:e7:30:fb:e6:ba:3a:19:02:eb:08:d4:67:d9:83:46:7f:44:
67:8e:7a:e1:8c:86:c4:30:42:5d:89:dd:14:54:bf:3e:1e:c3:
a4:f0:89:98:09:f9:3c:f4:92:24:e9:8d:59:a5:88:b7:e6:fa:
cc:7b:0a:e7:5c:18:fb:fa:fc:52:a9:b3:a8:b2:f3:18:07:fc:
10:9a:34:d6:ee:6b:82:c1:97:69:4e:5b:da:c4:79:0f:78:50:
67:7e:1c:51:5b:d3:16:4c:f3:b0:ab:0b:0f:98:7e:0f:af:eb:
24:25:3c:9f:37:35:f9:28:e0:e5:a8:a3:db:84:a5:e3:0d:09:
75:c8:4d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 09:00:56 2026 by rpki-client