
$ rpki-client -vvf rpki-rsync.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/E37B9DE76B8369C86CBDD85F17B4B08DA3903912.mft
File: E37B9DE76B8369C86CBDD85F17B4B08DA3903912.mft (raw, json)
Hash identifier: 6fZK90GhOUKvZ6Y5e4zUiH8VIZfhczHs3lLegcwsWzA=
Subject key identifier: 40:3E:EC:3E:E0:4E:10:35:32:D9:47:EF:D5:76:6C:67:3E:D2:65:D6
Authority key identifier: E3:7B:9D:E7:6B:83:69:C8:6C:BD:D8:5F:17:B4:B0:8D:A3:90:39:12
Certificate issuer: /CN=E37B9DE76B8369C86CBDD85F17B4B08DA3903912
Certificate serial: 220BAC7589E25277E73EB1E77888271E4A5F173B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E37B9DE76B8369C86CBDD85F17B4B08DA3903912.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/E37B9DE76B8369C86CBDD85F17B4B08DA3903912.mft
Manifest number: 12
Signing time: Fri 15 May 2026 17:46:42 +0000
Manifest this update: Fri 15 May 2026 17:41:42 +0000
Manifest next update: Sat 16 May 2026 21:04:42 +0000
Files and hashes: 1: E37B9DE76B8369C86CBDD85F17B4B08DA3903912.crl (hash: 5SImd9cVxt8WKZLFfIiqI/Sp7rOHvs64gXKg8/CPD9w=)
2: 3230332e3132332e36332e302f32342d3234203d3e203338373535.roa (hash: 8H0ycrYvaT3pEUwMuUYMPkeb6+nIJfK2o58CvS7laFE=)
3: 3230332e3132332e36302e302f32342d3234203d3e203338373535.roa (hash: oSx0cFa1nsipfiH0pkhplDWMeAxUpXV7UZUBLF8bNIo=)
4: 3230332e3132332e36302e302f32322d3232203d3e203338373535.roa (hash: gmD9ajpsyadNWLNIYrlzTIV+UYw18CE56nZqbLaELis=)
5: 3230332e3132332e36312e302f32342d3234203d3e203338373535.roa (hash: WdpYi9xOJp2Ik1RGOa6PotA1dBwWjL6rALxGb9WjneQ=)
6: 3230332e3132332e36302e302f32332d3233203d3e203338373535.roa (hash: PQRif44rE/vHl6KI352lV/5EM+qmOZyEEJRR83eHyBI=)
7: 3230332e3132332e36322e302f32342d3234203d3e203338373535.roa (hash: rS0I7oveJtn+l4aAAzlWodrD1fslAxWP3f3cXLvaPIY=)
8: 323030313a6466353a336530303a3a2f34382d3438203d3e203338373535.roa (hash: n2lJ9bzcnUw6O+w0adArBpP91Kujz+/33ven90vG4LQ=)
9: 3230332e3132332e36322e302f32332d3234203d3e203338373535.roa (hash: D9MoAcvsSp+WiO9dOaWrzis15LUcy+CINQir9MZwMpg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/E37B9DE76B8369C86CBDD85F17B4B08DA3903912.crl
rsync://rpki-rsync.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/E37B9DE76B8369C86CBDD85F17B4B08DA3903912.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E37B9DE76B8369C86CBDD85F17B4B08DA3903912.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 16 May 2026 21:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:0b:ac:75:89:e2:52:77:e7:3e:b1:e7:78:88:27:1e:4a:5f:17:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E37B9DE76B8369C86CBDD85F17B4B08DA3903912
Validity
Not Before: May 15 17:41:42 2026 GMT
Not After : May 16 21:04:42 2026 GMT
Subject: CN=403EEC3EE04E103532D947EFD5766C673ED265D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f3:27:49:0d:fa:6f:b3:33:07:c2:98:51:e2:
bd:37:1f:b9:67:4d:d5:f6:18:44:69:3d:30:1a:76:
ae:1d:42:d5:64:d4:7d:0a:80:90:26:e6:10:0c:84:
d6:58:81:56:3e:b9:a8:b8:b0:4f:69:67:ad:54:7c:
fc:20:4a:2b:16:e9:74:dd:05:27:71:dd:ae:8f:1b:
23:86:17:9c:ac:27:e4:ed:51:8f:9c:11:32:0a:c5:
3e:50:65:46:09:53:d1:78:7d:17:f1:2b:12:7c:5f:
28:14:2c:9f:ba:43:f8:12:35:50:e8:c9:8d:5d:03:
50:59:8d:ba:30:c3:ad:aa:ff:c8:2a:f1:23:80:52:
34:22:5f:0a:fe:40:be:f0:3a:45:da:61:a7:21:3c:
a4:5e:9c:e1:c3:da:70:52:8d:27:c2:59:92:11:78:
44:d8:17:fc:5c:e0:44:cb:e5:c1:a8:9b:94:91:17:
ba:7d:f3:15:1e:56:af:3d:0e:3e:8b:2b:b0:4f:68:
fa:0a:64:92:56:c1:c1:8f:a1:61:b5:4e:38:2b:44:
c6:43:b7:95:cf:22:68:73:8b:ec:76:80:dd:c9:c7:
ab:9a:47:c5:28:32:b9:35:b2:c3:61:16:df:86:64:
ee:75:96:25:ab:d4:7b:dc:9c:fb:76:65:d7:18:9e:
98:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:3E:EC:3E:E0:4E:10:35:32:D9:47:EF:D5:76:6C:67:3E:D2:65:D6
X509v3 Authority Key Identifier:
keyid:E3:7B:9D:E7:6B:83:69:C8:6C:BD:D8:5F:17:B4:B0:8D:A3:90:39:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/E37B9DE76B8369C86CBDD85F17B4B08DA3903912.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E37B9DE76B8369C86CBDD85F17B4B08DA3903912.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/E37B9DE76B8369C86CBDD85F17B4B08DA3903912.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:fc:da:21:01:ba:80:a8:0d:c8:2d:80:1e:ed:cd:21:09:a6:
72:31:55:dd:96:b0:fb:ea:35:1e:8b:89:05:11:01:2d:53:87:
ad:2f:5e:d1:8f:0a:1a:7a:42:8a:70:26:5e:11:87:41:5d:ad:
55:31:a6:dd:7a:5a:41:64:b2:ff:25:59:f8:f2:c9:79:bd:5c:
e4:7d:f6:a9:c9:37:2a:a7:67:1e:ed:b5:2a:5a:72:fc:73:37:
6f:7c:28:73:91:ae:04:ba:8f:92:14:69:b8:1a:26:8a:7d:b6:
b0:59:de:88:d8:51:98:6d:46:23:01:7e:65:12:ec:10:fb:74:
b2:ec:b9:98:b0:31:ce:20:66:72:41:6b:2e:3d:ec:9f:6e:e4:
a8:5a:ec:f7:5d:eb:7d:4c:cb:55:4c:6d:52:07:04:2b:0d:09:
2d:03:64:71:3e:c3:86:f1:67:88:88:50:72:7d:c3:0e:76:fe:
19:f0:1a:ef:f1:d5:31:74:a7:65:f4:03:54:3f:4b:5c:d2:f7:
39:5e:a6:49:5a:a7:be:28:a1:70:7d:82:3d:f2:9e:6f:13:7d:
b0:9b:4b:bc:37:4e:5e:d3:25:b5:a3:f5:bb:30:b4:65:f1:32:
68:92:ce:7b:78:d7:3d:38:01:8a:c1:85:f4:08:e1:25:cd:cc:
09:c9:d7:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 14:28:13 2026 by rpki-client