
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/E41C49050CBD3032F041D83A7A089A3E23CBE621.mft
File: E41C49050CBD3032F041D83A7A089A3E23CBE621.mft (raw, json)
Hash identifier: 6t0yBPOXQbhZelVTqmeNQHPztcUUgQ2u9SNybkxDfM4=
Subject key identifier: 38:92:5A:87:54:F0:A6:06:5D:BD:D9:E3:F2:E8:FF:E1:01:02:D1:23
Authority key identifier: E4:1C:49:05:0C:BD:30:32:F0:41:D8:3A:7A:08:9A:3E:23:CB:E6:21
Certificate issuer: /CN=E41C49050CBD3032F041D83A7A089A3E23CBE621
Certificate serial: 15F08529375A69F12CACD52CE5422D8C1CA11F92
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E41C49050CBD3032F041D83A7A089A3E23CBE621.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/E41C49050CBD3032F041D83A7A089A3E23CBE621.mft
Manifest number: 37
Signing time: Thu 11 Jun 2026 19:14:39 +0000
Manifest this update: Thu 11 Jun 2026 19:09:39 +0000
Manifest next update: Fri 12 Jun 2026 21:33:39 +0000
Files and hashes: 1: E41C49050CBD3032F041D83A7A089A3E23CBE621.crl (hash: 7oxOSo9Munb5M8jx/q83D4SVio5CgCWqYoIbyeaQsYg=)
2: 3130332e32362e3137362e302f32332d3234203d3e203538383231.roa (hash: Pn35/z/Opy4+bi+hOwdyJNg9JFN1Pwq8xx84oYEuYAc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/E41C49050CBD3032F041D83A7A089A3E23CBE621.crl
rsync://rpki-rsync.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/E41C49050CBD3032F041D83A7A089A3E23CBE621.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E41C49050CBD3032F041D83A7A089A3E23CBE621.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 21:33:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:f0:85:29:37:5a:69:f1:2c:ac:d5:2c:e5:42:2d:8c:1c:a1:1f:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E41C49050CBD3032F041D83A7A089A3E23CBE621
Validity
Not Before: Jun 11 19:09:39 2026 GMT
Not After : Jun 12 21:33:39 2026 GMT
Subject: CN=38925A8754F0A6065DBDD9E3F2E8FFE10102D123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2d:bb:46:b5:fc:22:3c:f7:02:26:cf:73:02:
62:4a:3c:8c:69:6f:21:b0:25:dd:6d:c5:03:9b:78:
d7:ba:0c:46:86:9b:08:94:ba:b2:84:62:fd:57:da:
ca:7a:cc:f8:7b:89:35:f0:cd:e8:76:27:d4:08:94:
48:cb:10:8c:8b:fc:d8:fb:a9:92:7a:e7:85:da:f2:
e8:a3:f2:dd:e8:1d:0a:cb:b2:81:a6:85:22:84:55:
6b:98:39:d8:28:f9:34:37:c4:6e:93:b6:1e:0c:52:
83:c9:e5:fa:5a:94:83:81:70:55:05:ac:8a:17:80:
47:5b:68:e1:db:28:d9:65:80:9f:2a:81:c7:98:65:
d5:33:be:91:ee:58:c0:44:45:02:29:ea:35:86:c5:
ed:9d:fc:c4:e0:1a:64:5e:60:f7:2a:63:41:d9:44:
81:fd:e0:81:5d:5d:be:82:41:22:31:d9:c8:f3:40:
16:18:73:af:e0:69:b4:1e:cb:bb:99:f0:6c:56:f0:
39:ac:6d:c8:bf:8e:bd:ba:49:78:96:16:4e:41:53:
e6:5a:22:bc:b6:80:72:e8:9b:d6:8c:4d:13:1b:fa:
f4:6d:08:b5:81:1b:34:1c:fc:35:a1:55:50:7a:a5:
62:79:ac:4d:4c:33:a1:cd:be:e9:08:f5:50:ef:1b:
9f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:92:5A:87:54:F0:A6:06:5D:BD:D9:E3:F2:E8:FF:E1:01:02:D1:23
X509v3 Authority Key Identifier:
keyid:E4:1C:49:05:0C:BD:30:32:F0:41:D8:3A:7A:08:9A:3E:23:CB:E6:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/E41C49050CBD3032F041D83A7A089A3E23CBE621.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E41C49050CBD3032F041D83A7A089A3E23CBE621.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/E41C49050CBD3032F041D83A7A089A3E23CBE621.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:b7:fa:3a:f6:db:97:7d:62:ac:0f:b3:22:3b:63:92:b0:88:
42:3f:cf:36:00:62:45:fd:30:f7:84:2a:9b:b6:fe:d0:2b:f4:
99:67:fc:65:90:14:0b:ab:f2:df:31:2f:05:bd:5b:2d:41:e9:
87:b7:bc:80:10:0d:9b:9a:5c:64:b0:27:9b:67:72:15:d1:64:
27:43:42:d4:d2:d0:42:f2:83:30:a4:65:37:d4:9b:cb:7a:46:
4e:b9:7e:cf:4f:f9:c5:21:79:1f:a1:4c:b9:3c:b2:db:2a:ca:
a5:47:77:2a:c0:68:41:e1:5f:3a:e9:15:d7:c1:44:5e:37:1b:
28:02:d5:2b:d4:41:a8:80:5c:14:48:57:c9:a0:ec:0a:3a:d9:
ea:db:86:b2:12:a8:d9:6c:e7:27:fd:8c:93:08:30:95:b4:50:
3d:53:2b:cb:b5:21:cf:e0:10:79:5c:51:f1:ee:00:40:a9:13:
1a:b2:65:d9:2d:a4:8c:26:8d:85:e5:02:25:02:78:60:36:ee:
c7:60:13:2f:f1:b2:06:e7:1f:9b:10:81:28:40:f4:61:ac:0f:
d2:7e:44:4a:6f:d4:76:bf:5c:89:e7:71:eb:04:00:40:d4:df:
72:c1:75:1f:bf:fe:7f:3b:e6:d0:1d:31:a5:cb:78:7a:82:98:
58:03:18:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:04:17 2026 by rpki-client