
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/E9EEF08AA8356D769BA16B981FE69DB5DE203409.mft
File: E9EEF08AA8356D769BA16B981FE69DB5DE203409.mft (raw, json)
Hash identifier: o51679UjmdRG5PhRAn8o4Y8Xz9B9yMXpWHbz5fIvyd8=
Subject key identifier: 08:A8:55:89:90:D8:3A:30:BD:5F:85:9D:AB:42:2B:28:AD:63:AC:04
Authority key identifier: E9:EE:F0:8A:A8:35:6D:76:9B:A1:6B:98:1F:E6:9D:B5:DE:20:34:09
Certificate issuer: /CN=E9EEF08AA8356D769BA16B981FE69DB5DE203409
Certificate serial: 4684095D4AA799F69AE49CB8E293D05F3A71B804
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9EEF08AA8356D769BA16B981FE69DB5DE203409.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/E9EEF08AA8356D769BA16B981FE69DB5DE203409.mft
Manifest number: B7
Signing time: Wed 16 Sep 2026 17:35:55 +0000
Manifest this update: Wed 16 Sep 2026 17:30:55 +0000
Manifest next update: Thu 17 Sep 2026 21:18:55 +0000
Files and hashes: 1: 3130332e3137382e38332e302f32342d3234203d3e20313437313730.roa (hash: UaaNiDpFBSvOxzLMpx1eGc8touUo5VTmZX/HVEAL/G4=)
2: 3130332e3137342e31332e302f32342d3234203d3e20313437313730.roa (hash: xCU5A2qMTm4OgALTP8opeqK/3efnC4H4bV18tfZlMHk=)
3: E9EEF08AA8356D769BA16B981FE69DB5DE203409.crl (hash: uZt4Yw7QwSifgbUOAIo5S6pzbS/21/f4kFKYuLGRZd4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/E9EEF08AA8356D769BA16B981FE69DB5DE203409.crl
rsync://rpki-rsync.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/E9EEF08AA8356D769BA16B981FE69DB5DE203409.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9EEF08AA8356D769BA16B981FE69DB5DE203409.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 21:18:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:84:09:5d:4a:a7:99:f6:9a:e4:9c:b8:e2:93:d0:5f:3a:71:b8:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E9EEF08AA8356D769BA16B981FE69DB5DE203409
Validity
Not Before: Sep 16 17:30:55 2026 GMT
Not After : Sep 17 21:18:55 2026 GMT
Subject: CN=08A8558990D83A30BD5F859DAB422B28AD63AC04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:77:e2:02:93:15:30:f5:95:ba:5a:a0:0e:08:
87:4a:c3:49:1c:2a:65:a9:35:b8:b1:ed:0e:cc:fe:
b8:a3:85:54:dc:22:68:85:9c:63:dd:3e:de:0d:21:
0f:34:06:7c:80:1b:d5:77:0f:0b:dc:44:15:92:27:
db:43:bd:11:85:5d:4a:30:69:8e:49:fa:13:51:ce:
5d:89:e0:6d:b9:d6:45:ee:e2:d6:48:11:31:5b:6e:
f8:35:55:7a:0a:34:4f:85:94:24:52:ec:8f:20:f4:
de:3f:6d:ec:fd:cc:89:82:73:19:b2:bf:15:45:57:
c9:76:62:a0:2b:de:6a:a6:52:4c:89:c2:c7:93:ab:
80:1e:96:4a:8a:1c:fb:fc:5e:92:96:d8:f9:26:3f:
99:39:f5:b1:62:0f:fd:d7:5f:68:97:58:36:88:2f:
58:82:39:f5:a0:12:03:df:25:5c:bd:91:40:d8:c0:
35:05:d9:82:39:23:28:a2:cd:bd:dd:ce:b4:d0:c2:
5d:bd:80:b8:11:c8:2c:78:71:ee:cd:39:8d:23:37:
7b:9b:35:97:f7:5b:4c:61:d5:4f:71:90:fa:8d:35:
b4:56:12:58:09:b0:69:bb:0e:aa:fa:d7:8e:3d:5f:
6e:92:66:97:5f:42:58:15:33:47:23:26:ff:ad:d1:
16:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:A8:55:89:90:D8:3A:30:BD:5F:85:9D:AB:42:2B:28:AD:63:AC:04
X509v3 Authority Key Identifier:
keyid:E9:EE:F0:8A:A8:35:6D:76:9B:A1:6B:98:1F:E6:9D:B5:DE:20:34:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/E9EEF08AA8356D769BA16B981FE69DB5DE203409.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9EEF08AA8356D769BA16B981FE69DB5DE203409.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/E9EEF08AA8356D769BA16B981FE69DB5DE203409.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:f1:fa:68:27:e5:88:14:31:6d:92:e2:1b:11:a6:c4:b5:2c:
a6:67:43:71:da:6e:37:d6:35:86:e8:ff:86:f1:46:9c:41:4d:
08:1f:20:b8:1c:6c:11:24:f4:15:d3:ff:57:0e:52:6c:06:4b:
35:89:5b:a1:7c:52:30:c4:f0:5c:e3:cf:84:07:5d:1b:e2:d1:
28:90:31:65:0e:58:ec:65:99:d7:3c:48:10:35:5e:3f:9b:0f:
2e:75:2b:25:71:20:12:a9:71:83:68:4e:5d:8c:bb:aa:33:bc:
b7:78:70:ad:18:72:8b:2c:af:a2:c7:6e:bc:f4:d2:06:9d:f3:
8a:cc:87:b8:9e:2b:3f:8c:94:10:87:de:fc:1c:72:4e:63:b7:
1c:cc:3b:80:a0:cc:af:d2:20:06:84:47:1a:07:63:6d:45:85:
6b:ef:9d:63:c1:18:42:cd:16:5f:3a:4e:33:d5:23:26:ca:8c:
22:89:32:01:07:4b:1b:6f:2c:3b:60:23:57:c4:94:8a:c7:0c:
2e:4f:0c:47:cd:69:52:4c:ed:22:93:21:94:0a:00:97:4c:52:
cf:37:c2:5c:4c:01:2b:73:da:ec:cc:d8:f8:64:ec:fc:af:1c:
52:7a:26:c3:12:af:24:89:00:7d:8f:66:dd:e5:8d:be:76:5b:
f6:83:43:97
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIURoQJXUqnmfaa5Jy44pPQXzpxuAQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTlFRUYwOEFBODM1NkQ3NjlCQTE2Qjk4MUZFNjlEQjVE
RTIwMzQwOTAeFw0yNjA5MTYxNzMwNTVaFw0yNjA5MTcyMTE4NTVaMDMxMTAvBgNV
BAMTKDA4QTg1NTg5OTBEODNBMzBCRDVGODU5REFCNDIyQjI4QUQ2M0FDMDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzd+ICkxUw9ZW6WqAOCIdKw0kc
KmWpNbix7Q7M/rijhVTcImiFnGPdPt4NIQ80BnyAG9V3DwvcRBWSJ9tDvRGFXUow
aY5J+hNRzl2J4G251kXu4tZIETFbbvg1VXoKNE+FlCRS7I8g9N4/bez9zImCcxmy
vxVFV8l2YqAr3mqmUkyJwseTq4AelkqKHPv8XpKW2PkmP5k59bFiD/3XX2iXWDaI
L1iCOfWgEgPfJVy9kUDYwDUF2YI5Iyiizb3dzrTQwl29gLgRyCx4ce7NOY0jN3ub
NZf3W0xh1U9xkPqNNbRWElgJsGm7Dqr61449X26SZpdfQlgVM0cjJv+t0RYhAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUCKhViZDYOjC9X4Wdq0IrKK1jrAQwHwYDVR0j
BBgwFoAU6e7wiqg1bXaboWuYH+adtd4gNAkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OWZkZTFmMGUtMjMxZi00NGNlLTkwYzMtMzJhY2RmOWQyNmMwLzAvRTlFRUYwOEFB
ODM1NkQ3NjlCQTE2Qjk4MUZFNjlEQjVERTIwMzQwOS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FOUVFRjA4QUE4MzU2RDc2OUJBMTZCOTgxRkU2OURCNURFMjAz
NDA5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWZkZTFmMGUtMjMxZi00NGNlLTkw
YzMtMzJhY2RmOWQyNmMwLzAvRTlFRUYwOEFBODM1NkQ3NjlCQTE2Qjk4MUZFNjlE
QjVERTIwMzQwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADTx+mgn5YgUMW2S4hsRpsS1LKZnQ3HabjfW
NYbo/4bxRpxBTQgfILgcbBEk9BXT/1cOUmwGSzWJW6F8UjDE8Fzjz4QHXRvi0SiQ
MWUOWOxlmdc8SBA1Xj+bDy51KyVxIBKpcYNoTl2Mu6ozvLd4cK0Ycossr6LHbrz0
0gad84rMh7ieKz+MlBCH3vwcck5jtxzMO4CgzK/SIAaERxoHY21FhWvvnWPBGELN
Fl86TjPVIybKjCKJMgEHSxtvLDtgI1fElIrHDC5PDEfNaVJM7SKTIZQKAJdMUs83
wlxMAStz2uzM2Phk7PyvHFJ6JsMSrySJAH2PZt3ljb52W/aDQ5c=
-----END CERTIFICATE-----
Generated at Thu Sep 17 14:23:14 2026 by rpki-client