
$ rpki-client -vvf rpki-rsync.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/E5AD37F58FE5B7B2D6C878CC6572DCD97F3260ED.mft
File: E5AD37F58FE5B7B2D6C878CC6572DCD97F3260ED.mft (raw, json)
Hash identifier: QcDtA+3uQhVC2jhkSwyECljJjUWWiZLJ+Q1968PSzcc=
Subject key identifier: 33:32:03:F6:06:1B:40:F6:E0:B8:82:8D:53:79:59:7C:BE:BD:ED:57
Authority key identifier: E5:AD:37:F5:8F:E5:B7:B2:D6:C8:78:CC:65:72:DC:D9:7F:32:60:ED
Certificate issuer: /CN=E5AD37F58FE5B7B2D6C878CC6572DCD97F3260ED
Certificate serial: 7709B89C17583AD3C84A97649693F33DA22E1EE9
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E5AD37F58FE5B7B2D6C878CC6572DCD97F3260ED.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/E5AD37F58FE5B7B2D6C878CC6572DCD97F3260ED.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 18:44:20 +0000
Manifest this update: Tue 12 May 2026 18:39:20 +0000
Manifest next update: Wed 13 May 2026 20:53:20 +0000
Files and hashes: 1: 34332e3235322e3134342e302f32332d3234203d3e203536323333.roa (hash: +7LdedJhuPY+xo3rq8YD2pVQmA3XwTXZAE9pIrm2QyM=)
2: 3139322e3134302e3232342e302f32332d3234203d3e203536323333.roa (hash: Q4P3JJdyz+sguA+ShSmoSl4Uj2/ltj/HEOGjPDV46Ws=)
3: 3130332e31342e3131302e302f32332d3234203d3e203536323333.roa (hash: qjYTuEDU2WsEHRQKFziNHqHoI5n5tkB89sliYPfe+2U=)
4: E5AD37F58FE5B7B2D6C878CC6572DCD97F3260ED.crl (hash: mNkYNhjVY6up/FkSKg0brFvO5JBrg5BAt7/h/otPAzE=)
5: 3130332e3233332e38382e302f32332d3234203d3e203536323333.roa (hash: Gu7VKEObYusttjKWf2p2TmQYuB7pNrv24WI6rKxgrY0=)
6: 3132302e38392e39342e302f32332d3234203d3e203536323333.roa (hash: Ywxuhkdga9hO4itaG+v5I5zsagA1Lbo8qR7ItHh5q8A=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/E5AD37F58FE5B7B2D6C878CC6572DCD97F3260ED.crl
rsync://rpki-rsync.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/E5AD37F58FE5B7B2D6C878CC6572DCD97F3260ED.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E5AD37F58FE5B7B2D6C878CC6572DCD97F3260ED.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:09:b8:9c:17:58:3a:d3:c8:4a:97:64:96:93:f3:3d:a2:2e:1e:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E5AD37F58FE5B7B2D6C878CC6572DCD97F3260ED
Validity
Not Before: May 12 18:39:20 2026 GMT
Not After : May 13 20:53:20 2026 GMT
Subject: CN=333203F6061B40F6E0B8828D5379597CBEBDED57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:31:d7:d8:9d:35:17:a4:95:d4:b0:e3:9d:0b:
dd:8a:43:e5:35:ea:8e:b4:6c:61:d1:46:59:24:7e:
17:17:c9:c1:7e:e2:9f:b5:06:94:68:9c:96:37:cd:
d3:04:cd:c0:69:a7:19:e3:28:88:3c:76:a3:71:bb:
eb:5f:1c:a4:05:55:bd:09:b3:78:d6:33:85:ad:ca:
2c:42:b5:82:e5:46:13:e6:68:75:3e:c2:16:b9:cb:
fe:b7:b3:be:4d:49:54:cf:1b:8a:79:01:7e:83:94:
a2:b1:09:e0:21:1d:1b:7d:2e:b8:62:76:e6:56:20:
d4:33:1e:1a:d8:ed:94:3b:c3:1d:8b:84:33:36:7f:
a3:22:89:72:3b:af:64:f2:70:c0:57:91:9a:bf:97:
d8:4f:94:23:b6:11:1c:d4:a2:ba:1e:62:03:80:b4:
b7:f8:d5:73:3c:a6:06:2e:26:a4:15:3d:9c:83:1c:
a6:64:f5:34:8f:e7:8c:34:53:f4:d2:11:7c:56:c9:
a7:c0:53:4f:63:c0:f2:5b:df:08:cd:47:fe:94:81:
07:be:fb:a9:97:a1:21:8e:16:48:4a:77:e0:7a:e0:
ac:2d:ec:22:5c:fc:1c:40:06:0d:84:5c:79:1b:b9:
6b:84:d5:05:ca:a6:1c:f7:be:aa:44:0a:96:1c:e1:
a2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:32:03:F6:06:1B:40:F6:E0:B8:82:8D:53:79:59:7C:BE:BD:ED:57
X509v3 Authority Key Identifier:
keyid:E5:AD:37:F5:8F:E5:B7:B2:D6:C8:78:CC:65:72:DC:D9:7F:32:60:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/E5AD37F58FE5B7B2D6C878CC6572DCD97F3260ED.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E5AD37F58FE5B7B2D6C878CC6572DCD97F3260ED.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/E5AD37F58FE5B7B2D6C878CC6572DCD97F3260ED.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:7f:4d:07:41:b3:66:ba:5a:ad:03:c7:06:f0:0d:d1:db:f7:
69:35:ec:c8:cf:19:17:3c:41:0d:79:33:ba:e3:bb:03:4c:9c:
a0:df:97:4d:ed:44:3f:e7:85:88:e5:af:3a:94:42:8e:76:d6:
2b:e7:53:09:23:cd:d5:eb:fc:03:2c:75:02:65:92:81:95:4f:
17:9a:28:80:a5:63:65:e9:cc:64:e2:03:3e:a8:93:4d:82:09:
4f:55:4f:d5:99:8d:c8:99:09:f9:ea:6d:b5:b6:c7:87:a4:1b:
77:e7:21:13:f9:a3:fe:47:c8:d3:e9:88:a7:ea:68:a6:b4:06:
f5:d6:48:e5:a4:ef:28:e7:fa:1f:e8:86:20:48:ad:4c:a5:a5:
71:19:69:c0:11:63:60:02:5d:cc:d9:03:33:7a:1c:ce:80:78:
90:f0:ad:47:e8:34:2d:5c:a5:37:48:63:34:ff:44:13:69:8b:
09:e0:7a:66:1a:98:ff:6b:1a:42:c7:20:93:a8:85:0a:3d:52:
11:71:57:b3:e9:74:b6:71:63:73:c2:d5:e5:10:da:75:f6:d2:
e4:42:ba:37:37:bc:1e:a8:78:f3:e8:01:47:0b:02:ae:4d:14:
75:a2:56:fd:81:0c:2c:28:34:3b:85:2d:77:a4:d9:89:ae:7b:
43:b7:c3:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:52:52 2026 by rpki-client