
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/E4AC5A0B7B031CC8F4387521F896C49FC8165D46.mft
File: E4AC5A0B7B031CC8F4387521F896C49FC8165D46.mft (raw, json)
Hash identifier: i3mUyb6BmJM6EC1QU3mkGUd/kqlYfSi2p77ZvT7uIjY=
Subject key identifier: 47:B2:97:B1:AD:FB:17:B5:32:8C:F9:41:2C:D1:5C:46:CC:47:A2:A1
Authority key identifier: E4:AC:5A:0B:7B:03:1C:C8:F4:38:75:21:F8:96:C4:9F:C8:16:5D:46
Certificate issuer: /CN=E4AC5A0B7B031CC8F4387521F896C49FC8165D46
Certificate serial: 46EE425566827C8020BDA0364CAE23844E8A31C7
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4AC5A0B7B031CC8F4387521F896C49FC8165D46.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/E4AC5A0B7B031CC8F4387521F896C49FC8165D46.mft
Manifest number: B8
Signing time: Thu 17 Sep 2026 04:49:26 +0000
Manifest this update: Thu 17 Sep 2026 04:44:26 +0000
Manifest next update: Fri 18 Sep 2026 06:19:26 +0000
Files and hashes: 1: 3130332e3133392e3138382e302f32332d3233203d3e20313338393031.roa (hash: l0X0+poFCOAwI1du4qGF+veeFoCLhTMTvuXxlX7wlYc=)
2: E4AC5A0B7B031CC8F4387521F896C49FC8165D46.crl (hash: Uax2pweEN+2JFzdNPjjD9O54OpQmtfo9YX9QrnFPOiI=)
3: 323030313a6466303a386438303a3a2f34382d3438203d3e20313338393031.roa (hash: Fw4ZShoY1ipa+BexcpJaYw89aApjuOYJwqsXze7oiwI=)
4: 3130332e3133392e3138382e302f32332d3234203d3e20313338393031.roa (hash: nmYerSBoYz5ABQ7ABcFXpaJW56oTyB9j1y+H2x6EP3A=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/E4AC5A0B7B031CC8F4387521F896C49FC8165D46.crl
rsync://rpki-rsync.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/E4AC5A0B7B031CC8F4387521F896C49FC8165D46.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4AC5A0B7B031CC8F4387521F896C49FC8165D46.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 06:19:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:ee:42:55:66:82:7c:80:20:bd:a0:36:4c:ae:23:84:4e:8a:31:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4AC5A0B7B031CC8F4387521F896C49FC8165D46
Validity
Not Before: Sep 17 04:44:26 2026 GMT
Not After : Sep 18 06:19:26 2026 GMT
Subject: CN=47B297B1ADFB17B5328CF9412CD15C46CC47A2A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:4c:51:6f:91:5a:60:bf:b9:7c:14:c6:a4:50:
8f:b0:73:a8:24:00:c8:29:3b:1b:04:54:7a:ed:f4:
77:35:78:ef:ea:33:3f:4d:9d:00:b9:6a:bc:b0:7d:
15:ac:24:0d:da:26:09:b1:5e:2c:08:d9:37:f4:56:
f5:72:1a:aa:7c:be:48:7d:3a:0a:b6:e2:9f:d6:bd:
b5:dd:8c:d5:84:7e:ad:f2:95:80:83:fa:fb:ca:89:
b7:e2:86:d5:60:4e:4f:d7:e5:fe:8e:b4:b8:53:ec:
a6:74:d3:9c:c6:43:8a:02:32:a5:1e:df:cc:a0:71:
53:4e:d3:b3:33:ea:05:07:18:03:ec:9f:e4:ca:97:
38:3b:67:f9:fe:62:e3:f8:7e:89:e9:7d:dd:f4:03:
6b:75:5e:ac:b0:0e:4f:00:f9:d6:9d:dd:c6:23:04:
99:8b:7b:a4:27:45:03:6a:a7:d7:0b:8a:cf:40:94:
0c:38:2a:5d:f0:89:1f:a1:a4:8e:2f:24:cf:dd:44:
82:77:cc:03:83:66:43:17:c8:2e:d2:2a:03:68:db:
5f:34:55:a8:8c:75:2c:a5:f0:35:1d:b7:ea:e4:d3:
b0:b1:ff:19:47:63:0f:76:d8:33:af:7f:39:02:25:
b3:67:3a:6f:9f:ac:29:d2:12:33:b5:cd:d3:28:a9:
f5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B2:97:B1:AD:FB:17:B5:32:8C:F9:41:2C:D1:5C:46:CC:47:A2:A1
X509v3 Authority Key Identifier:
keyid:E4:AC:5A:0B:7B:03:1C:C8:F4:38:75:21:F8:96:C4:9F:C8:16:5D:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/E4AC5A0B7B031CC8F4387521F896C49FC8165D46.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4AC5A0B7B031CC8F4387521F896C49FC8165D46.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/E4AC5A0B7B031CC8F4387521F896C49FC8165D46.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:43:a6:f3:d8:73:2a:0f:3c:c6:89:9d:dc:ad:03:38:ba:a8:
bc:0a:d9:1d:8b:e6:bf:5d:8e:c4:f9:22:49:98:29:bb:18:fa:
12:fc:43:f2:f7:47:ab:37:ab:d2:a3:be:95:3a:6d:e4:a0:40:
c2:f5:26:de:97:8e:21:77:be:7c:b5:4a:94:40:4b:f2:df:f3:
9e:a0:34:5e:21:46:55:bb:47:a9:5b:0c:2b:d7:43:2a:a4:89:
76:80:85:0b:82:4c:11:53:bf:08:5c:04:7e:7a:4c:1a:16:b5:
54:b2:12:f4:75:5b:b1:b0:05:1d:92:dd:42:c9:7d:e8:36:68:
cd:5f:6b:c9:c8:df:5b:38:6b:3b:f8:c5:70:20:fd:93:6b:61:
e8:ba:f3:c4:34:c6:e1:f2:ec:ee:f2:a1:49:75:81:de:76:2c:
34:c9:86:c1:2b:1a:87:45:89:4e:d1:62:ef:f2:1c:41:10:fd:
6b:65:fe:f8:5b:79:76:cb:91:ef:54:d1:d0:a5:b5:f2:64:65:
10:26:31:19:89:43:de:de:ea:53:8f:b4:d0:e3:30:6c:be:3a:
b5:ad:46:7b:c8:47:8f:10:40:c3:e3:0e:41:90:35:08:40:f3:
0e:b8:09:22:d8:6e:cd:fe:ab:0e:7f:f4:75:8a:67:a8:d8:54:
61:a2:a1:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 15:06:07 2026 by rpki-client