
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/E03B468CD361142C585663CF9ECF8523C31B59E9.mft
File: E03B468CD361142C585663CF9ECF8523C31B59E9.mft (raw, json)
Hash identifier: +5KzTk1evET7MU+9WiEoQPAUrlIh5WHwZCfhZrT33gs=
Subject key identifier: 44:D7:D5:91:07:92:88:B0:54:37:58:C8:C5:05:B0:6C:D1:FD:55:93
Authority key identifier: E0:3B:46:8C:D3:61:14:2C:58:56:63:CF:9E:CF:85:23:C3:1B:59:E9
Certificate issuer: /CN=E03B468CD361142C585663CF9ECF8523C31B59E9
Certificate serial: 4EFADC3AA907471FE0AC7F6716A9D1463CE55DD9
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E03B468CD361142C585663CF9ECF8523C31B59E9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/E03B468CD361142C585663CF9ECF8523C31B59E9.mft
Manifest number: BA
Signing time: Thu 17 Sep 2026 09:55:53 +0000
Manifest this update: Thu 17 Sep 2026 09:50:53 +0000
Manifest next update: Fri 18 Sep 2026 12:12:53 +0000
Files and hashes: 1: 3135372e31352e34342e302f32332d3233203d3e20313532333931.roa (hash: n4xjy2upk2LunwKR2BfVR8985IfNh54QVcVNRfdNf2s=)
2: E03B468CD361142C585663CF9ECF8523C31B59E9.crl (hash: Th1uBMz7Bj3bymnHRXa8C8f72RHkHfqYL19Ih4W1GHs=)
3: 3135372e31352e34352e302f32342d3234203d3e20313532333931.roa (hash: NQj0jBui5SdBCaBtC25o6ECq/13rF1K5IZvhOhcCy5E=)
4: 3135372e31352e34342e302f32342d3234203d3e20313532333931.roa (hash: YVVFf3w1oI5cN9GhWV4EQ/srdvKn64MAVk6XgK0Qog8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/E03B468CD361142C585663CF9ECF8523C31B59E9.crl
rsync://rpki-rsync.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/E03B468CD361142C585663CF9ECF8523C31B59E9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E03B468CD361142C585663CF9ECF8523C31B59E9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 07:46:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:fa:dc:3a:a9:07:47:1f:e0:ac:7f:67:16:a9:d1:46:3c:e5:5d:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E03B468CD361142C585663CF9ECF8523C31B59E9
Validity
Not Before: Sep 17 09:50:53 2026 GMT
Not After : Sep 18 12:12:53 2026 GMT
Subject: CN=44D7D591079288B0543758C8C505B06CD1FD5593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a4:b7:10:67:e7:48:88:c2:62:6d:37:c9:94:
b0:85:34:75:34:d0:06:51:46:cc:6d:ee:67:24:1b:
fd:f7:b5:9b:1b:35:05:cd:3e:dc:18:3e:0a:84:4b:
ae:34:37:d2:6c:56:3f:c8:a5:c9:14:54:47:e3:a1:
96:d3:6f:4f:25:d1:28:21:1e:7b:0f:11:4f:31:09:
7b:dc:c4:da:cd:5d:07:6b:6b:d2:6f:ff:3d:ab:c5:
21:72:fa:cf:6d:a2:5b:e4:dc:5e:8c:71:fb:22:2a:
32:01:40:cf:d4:c5:bf:d6:6d:31:22:77:5f:d4:13:
b3:26:53:35:5f:7c:41:a3:f4:ae:2d:f7:ee:ed:e7:
a2:9b:29:5a:db:3f:75:f0:1c:e8:c2:2d:1d:ae:c1:
44:9a:ff:df:6c:1b:7e:73:27:fe:fd:4c:9f:1d:7d:
fe:af:88:2c:fd:bd:4c:5f:fa:1b:f9:53:f4:48:1c:
de:81:a6:64:26:f5:01:f3:ac:d0:ec:2e:d2:87:1e:
e6:f8:a2:79:b3:83:ef:70:a5:09:50:2a:69:6a:7f:
72:d8:03:21:23:86:e8:35:58:0c:08:ae:e1:c0:a7:
2c:c1:1e:60:8c:c0:7b:8c:09:11:b0:2e:a8:b1:43:
3b:ca:ce:d6:ba:cd:07:1e:f2:ec:46:28:aa:f3:b3:
10:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:D7:D5:91:07:92:88:B0:54:37:58:C8:C5:05:B0:6C:D1:FD:55:93
X509v3 Authority Key Identifier:
keyid:E0:3B:46:8C:D3:61:14:2C:58:56:63:CF:9E:CF:85:23:C3:1B:59:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/E03B468CD361142C585663CF9ECF8523C31B59E9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E03B468CD361142C585663CF9ECF8523C31B59E9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/E03B468CD361142C585663CF9ECF8523C31B59E9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:e1:50:40:3e:6f:61:eb:59:38:9c:3b:91:9d:3a:ae:b4:07:
d2:4a:6a:93:ba:50:bb:9d:9d:db:cb:fc:b7:90:57:20:ab:70:
e2:87:cb:56:a6:64:4d:4e:52:66:e6:38:f7:81:76:7a:3c:39:
42:61:54:0a:2b:ee:da:58:11:62:8c:5f:18:68:b1:b3:14:12:
c0:fe:8b:bc:ad:13:d0:1e:e6:62:50:ed:f7:c6:46:20:05:43:
c0:7b:b2:c4:a2:89:ac:09:44:7f:9d:9b:64:e1:8f:72:8c:53:
53:3e:72:f9:cd:30:4f:cc:0f:5b:88:23:74:e4:d2:4c:ef:eb:
3b:3f:2e:f2:09:6f:53:8e:f1:ed:87:bc:77:3b:92:e4:21:11:
d8:a8:d6:94:43:ff:8d:ce:94:35:b4:7c:de:78:d0:41:83:8f:
04:c6:a1:2f:13:09:38:fb:2f:96:9b:c3:b8:1d:f3:d3:78:71:
34:61:16:a0:e3:a7:3c:23:52:0f:2c:f5:ce:a0:75:b1:97:60:
c9:4b:2f:f5:3b:db:9a:77:87:f0:c7:d6:cb:66:ab:a1:56:fc:
10:f8:45:1c:e2:e9:f9:f7:e5:2b:31:54:85:33:37:ce:9f:b0:
fc:12:61:13:29:7a:34:d2:bb:27:3c:0c:dd:2b:e4:10:cb:08:
41:64:7e:c7
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUTvrcOqkHRx/grH9nFqnRRjzlXdkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTAzQjQ2OENEMzYxMTQyQzU4NTY2M0NGOUVDRjg1MjND
MzFCNTlFOTAeFw0yNjA5MTcwOTUwNTNaFw0yNjA5MTgxMjEyNTNaMDMxMTAvBgNV
BAMTKDQ0RDdENTkxMDc5Mjg4QjA1NDM3NThDOEM1MDVCMDZDRDFGRDU1OTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFpLcQZ+dIiMJibTfJlLCFNHU0
0AZRRsxt7mckG/33tZsbNQXNPtwYPgqES640N9JsVj/IpckUVEfjoZbTb08l0Sgh
HnsPEU8xCXvcxNrNXQdra9Jv/z2rxSFy+s9tolvk3F6McfsiKjIBQM/Uxb/WbTEi
d1/UE7MmUzVffEGj9K4t9+7t56KbKVrbP3XwHOjCLR2uwUSa/99sG35zJ/79TJ8d
ff6viCz9vUxf+hv5U/RIHN6BpmQm9QHzrNDsLtKHHub4onmzg+9wpQlQKmlqf3LY
AyEjhug1WAwIruHApyzBHmCMwHuMCRGwLqixQzvKzta6zQce8uxGKKrzsxB1AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQURNfVkQeSiLBUN1jIxQWwbNH9VZMwHwYDVR0j
BBgwFoAU4DtGjNNhFCxYVmPPns+FI8MbWekwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OWZkYWYwNmEtZjYyNC00MmNmLWJiMTktYjZiYmY5MzFhYWM4LzAvRTAzQjQ2OENE
MzYxMTQyQzU4NTY2M0NGOUVDRjg1MjNDMzFCNTlFOS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC9FMDNCNDY4Q0QzNjExNDJDNTg1NjYzQ0Y5RUNGODUyM0MzMUI1
OUU5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWZkYWYwNmEtZjYyNC00MmNmLWJi
MTktYjZiYmY5MzFhYWM4LzAvRTAzQjQ2OENEMzYxMTQyQzU4NTY2M0NGOUVDRjg1
MjNDMzFCNTlFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABvhUEA+b2HrWTicO5GdOq60B9JKapO6ULud
ndvL/LeQVyCrcOKHy1amZE1OUmbmOPeBdno8OUJhVAor7tpYEWKMXxhosbMUEsD+
i7ytE9Ae5mJQ7ffGRiAFQ8B7ssSiiawJRH+dm2Thj3KMU1M+cvnNME/MD1uII3Tk
0kzv6zs/LvIJb1OO8e2HvHc7kuQhEdio1pRD/43OlDW0fN540EGDjwTGoS8TCTj7
L5abw7gd89N4cTRhFqDjpzwjUg8s9c6gdbGXYMlLL/U725p3h/DH1stmq6FW/BD4
RRzi6fn35SsxVIUzN86fsPwSYRMpejTSuyc8DN0r5BDLCEFkfsc=
-----END CERTIFICATE-----
Generated at Thu Sep 17 13:55:25 2026 by rpki-client