
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/E4FD11A334BDCA34C2EAB964DCA226B6942B929D.mft
File: E4FD11A334BDCA34C2EAB964DCA226B6942B929D.mft (raw, json)
Hash identifier: gm5qyNxMz/UA6KT4unycGQljAr3XatzVwnjawrY9lFg=
Subject key identifier: A7:BD:DE:AD:5F:2C:E5:09:C6:DE:47:44:82:73:70:3F:FC:09:0F:DF
Authority key identifier: E4:FD:11:A3:34:BD:CA:34:C2:EA:B9:64:DC:A2:26:B6:94:2B:92:9D
Certificate issuer: /CN=E4FD11A334BDCA34C2EAB964DCA226B6942B929D
Certificate serial: 1889E977C4E4BC1D1F55A5129E31AADA6A27D565
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4FD11A334BDCA34C2EAB964DCA226B6942B929D.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/E4FD11A334BDCA34C2EAB964DCA226B6942B929D.mft
Manifest number: 61
Signing time: Mon 13 Jul 2026 22:12:22 +0000
Manifest this update: Mon 13 Jul 2026 22:07:22 +0000
Manifest next update: Tue 14 Jul 2026 22:34:22 +0000
Files and hashes: 1: 3130332e32392e3137302e302f32342d3234203d3e203536323631.roa (hash: O1jacwkaM82L67sDrz7lXelPyRl9Rz1j5J3jiVwgpPw=)
2: E4FD11A334BDCA34C2EAB964DCA226B6942B929D.crl (hash: HmuPzjQikzbUSH2BX+1QqNK/2Jjuz04bsuobJmRZLSE=)
3: 3130332e32392e3137312e302f32342d3234203d3e203538333738.roa (hash: Bo3J9bvJrG5KvK6zISNrunddpueB7wbNcCGt/02SR80=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/E4FD11A334BDCA34C2EAB964DCA226B6942B929D.crl
rsync://rpki-rsync.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/E4FD11A334BDCA34C2EAB964DCA226B6942B929D.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4FD11A334BDCA34C2EAB964DCA226B6942B929D.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Jul 2026 22:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:89:e9:77:c4:e4:bc:1d:1f:55:a5:12:9e:31:aa:da:6a:27:d5:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4FD11A334BDCA34C2EAB964DCA226B6942B929D
Validity
Not Before: Jul 13 22:07:22 2026 GMT
Not After : Jul 14 22:34:22 2026 GMT
Subject: CN=A7BDDEAD5F2CE509C6DE47448273703FFC090FDF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d2:37:2b:d0:f4:75:b9:41:72:75:fb:07:eb:
37:10:5b:c4:95:4f:3d:de:96:6d:6c:a5:a2:95:ad:
24:cb:fd:f8:43:cb:7c:7a:42:83:7d:b1:97:db:6f:
54:a8:40:be:ff:ef:68:cb:ff:b8:c2:96:c4:60:05:
43:bb:5b:e5:e9:bd:0d:22:bf:53:2e:19:3a:3d:bf:
80:51:1d:4e:e2:e8:d6:62:a1:af:94:fa:37:a2:dd:
41:7b:ba:dc:b2:ae:1d:5c:c1:49:c5:0f:eb:3a:68:
18:1f:d7:61:59:0f:48:b8:33:8d:c7:95:4e:7b:fb:
24:d5:54:c4:c9:6f:b6:fc:ef:cb:6d:e9:89:2a:5e:
ba:d2:dc:86:06:13:23:0d:35:38:07:d0:49:c2:8d:
27:84:4f:e2:ae:e7:90:d4:45:ac:96:ec:17:19:95:
87:64:47:9b:17:1e:a9:80:b1:c5:74:59:73:11:4e:
81:43:08:97:20:11:ef:8a:5a:d1:ad:9b:c9:ab:62:
79:dd:bf:14:db:94:b8:59:d8:8c:f2:22:af:de:88:
42:58:ca:27:6d:5a:6d:93:00:cc:c7:99:b5:be:08:
5f:f5:c1:47:1c:ad:c8:38:cc:77:79:a6:5b:d9:0b:
35:eb:66:06:f5:53:31:13:58:ed:56:49:b7:ff:9f:
48:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:BD:DE:AD:5F:2C:E5:09:C6:DE:47:44:82:73:70:3F:FC:09:0F:DF
X509v3 Authority Key Identifier:
keyid:E4:FD:11:A3:34:BD:CA:34:C2:EA:B9:64:DC:A2:26:B6:94:2B:92:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/E4FD11A334BDCA34C2EAB964DCA226B6942B929D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4FD11A334BDCA34C2EAB964DCA226B6942B929D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/E4FD11A334BDCA34C2EAB964DCA226B6942B929D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:52:b1:1b:dd:76:f1:aa:02:97:2a:80:a3:dd:4b:35:c1:0e:
0b:e0:ee:c2:18:60:d0:67:f9:dd:b3:57:51:4e:0b:55:f0:e2:
47:55:ef:b2:23:ff:cd:ba:f0:8c:e1:96:46:74:70:3c:ba:29:
c7:aa:ec:dc:6a:39:b7:40:c7:5d:00:a3:04:27:e7:32:d4:68:
c8:65:d3:ab:be:11:8e:de:0d:a2:42:2b:10:15:bb:43:9a:52:
f6:89:48:f8:33:0f:3a:19:ed:a9:68:4b:c4:4a:ab:fa:d8:37:
8a:19:23:6c:e1:53:17:7d:bd:52:99:3b:6c:7c:d7:c5:3a:68:
1b:e7:13:29:a7:36:a2:8c:9f:ab:67:5c:da:94:57:ea:fe:01:
2d:a6:9e:c3:ff:18:82:29:46:91:7a:af:aa:e6:63:97:a6:0a:
60:69:89:35:5c:d1:0a:1f:4c:3d:a9:7f:be:44:ce:dd:72:4a:
d7:f0:fc:71:12:4a:d4:bf:3d:b9:11:a4:ad:cb:04:8c:89:5f:
8c:2f:4f:e9:72:8d:4c:fa:aa:d1:b8:02:8d:e5:c6:ce:3c:e9:
35:3b:fc:a5:7e:a5:5e:d3:f6:18:df:aa:da:a8:53:9f:3e:de:
23:7b:bc:0a:d4:80:b4:01:a5:02:1a:b3:f7:97:5c:19:2a:46:
ae:7f:e4:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 03:44:43 2026 by rpki-client