
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/E096FEDBAFF2ADB73C73E7E098CE494B9C336817.mft
File: E096FEDBAFF2ADB73C73E7E098CE494B9C336817.mft (raw, json)
Hash identifier: /PT+gPecyTF9bzso2+p76FUmq5dliXlJoN/0rewakI8=
Subject key identifier: 8C:B1:90:40:0E:06:94:4C:E1:63:27:57:0C:7B:E3:D5:24:2A:79:18
Authority key identifier: E0:96:FE:DB:AF:F2:AD:B7:3C:73:E7:E0:98:CE:49:4B:9C:33:68:17
Certificate issuer: /CN=E096FEDBAFF2ADB73C73E7E098CE494B9C336817
Certificate serial: 1E565A6522B6E66DED2018CAC86E57E5AB6BD5EC
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E096FEDBAFF2ADB73C73E7E098CE494B9C336817.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/E096FEDBAFF2ADB73C73E7E098CE494B9C336817.mft
Manifest number: C1
Signing time: Wed 23 Sep 2026 17:47:59 +0000
Manifest this update: Wed 23 Sep 2026 17:42:59 +0000
Manifest next update: Thu 24 Sep 2026 20:13:59 +0000
Files and hashes: 1: 3130332e38302e3234302e302f32322d3234203d3e20313336303534.roa (hash: rkWYYYj/vAK/TOK+jQF6QsvjFqSfb6NPiKItrVefpzo=)
2: E096FEDBAFF2ADB73C73E7E098CE494B9C336817.crl (hash: lpd02PufOpYV1suvgR3l3pugADh1mnYEa1owbhpveCs=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/E096FEDBAFF2ADB73C73E7E098CE494B9C336817.crl
rsync://rpki-rsync.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/E096FEDBAFF2ADB73C73E7E098CE494B9C336817.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E096FEDBAFF2ADB73C73E7E098CE494B9C336817.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 20:13:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:56:5a:65:22:b6:e6:6d:ed:20:18:ca:c8:6e:57:e5:ab:6b:d5:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E096FEDBAFF2ADB73C73E7E098CE494B9C336817
Validity
Not Before: Sep 23 17:42:59 2026 GMT
Not After : Sep 24 20:13:59 2026 GMT
Subject: CN=8CB190400E06944CE16327570C7BE3D5242A7918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3e:8d:b7:f0:18:b4:b3:bd:86:d4:82:3b:5a:
dd:16:af:82:07:a2:c5:0a:d1:dc:fa:4b:4b:29:40:
9e:02:0a:7b:7c:3e:4d:9a:49:94:93:ce:56:d6:ce:
06:ef:d8:52:3e:74:79:7b:df:39:18:64:94:01:b4:
4d:dc:da:83:c5:0c:97:f5:04:04:29:9a:16:3a:83:
8e:1e:cd:86:80:33:57:c0:2c:ef:ee:1e:43:9a:14:
4b:64:20:47:9e:4b:8b:53:13:22:bc:50:2c:7e:cf:
a0:f4:d2:2a:56:b8:3a:62:40:2c:0d:30:c9:75:85:
3b:a4:30:30:4d:59:49:fd:87:69:c5:ff:3b:73:bc:
6a:7e:ec:c9:c2:25:18:5c:75:2a:00:53:af:7e:28:
3d:34:34:25:4f:9e:b0:3d:16:a2:0b:74:b9:dc:fc:
d4:f4:96:f8:13:06:27:55:07:f7:6d:69:83:a0:1d:
9f:13:89:d5:2a:03:43:6b:7f:c7:f0:a1:2b:b4:43:
7f:5c:d7:cb:04:43:25:e3:cf:2d:06:4e:c0:41:fe:
97:0c:9b:8c:e7:fc:42:ed:f7:ab:1b:c6:84:fb:41:
83:67:9a:ba:db:b9:f1:4c:f1:f2:0f:02:f3:57:35:
1c:83:75:a5:16:54:26:73:af:69:84:a2:6e:22:7a:
eb:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B1:90:40:0E:06:94:4C:E1:63:27:57:0C:7B:E3:D5:24:2A:79:18
X509v3 Authority Key Identifier:
keyid:E0:96:FE:DB:AF:F2:AD:B7:3C:73:E7:E0:98:CE:49:4B:9C:33:68:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/E096FEDBAFF2ADB73C73E7E098CE494B9C336817.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E096FEDBAFF2ADB73C73E7E098CE494B9C336817.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/E096FEDBAFF2ADB73C73E7E098CE494B9C336817.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:09:97:50:46:d4:11:d7:d8:42:08:de:9e:c5:b7:37:e1:30:
c6:a8:e8:26:99:40:2d:5f:01:83:14:4c:3a:6f:0d:c5:79:56:
ed:f9:b7:6e:00:14:4e:c9:f1:d8:ad:39:33:27:2d:95:59:9d:
ed:71:86:7a:e3:4a:d6:93:62:8d:72:87:3c:42:93:91:b8:eb:
6c:d0:d3:1c:4f:67:50:df:27:fb:c3:0f:26:2e:63:d7:43:5c:
09:cf:d7:9e:3a:47:19:cd:2d:50:02:ee:8a:60:c5:c0:93:95:
8d:eb:c0:80:a4:ab:a1:ec:2f:fd:8e:93:de:85:06:f7:58:53:
31:7c:de:66:35:78:bf:26:b5:8d:8f:3d:15:78:a6:17:fc:04:
38:ed:4a:83:76:23:88:8a:46:f9:00:26:99:24:08:0e:f5:d1:
5e:e9:80:9d:54:e5:ab:eb:62:81:35:cd:34:fe:0a:71:50:6d:
31:79:0b:19:eb:30:41:94:24:7b:d6:76:a8:83:27:66:44:b3:
ae:a3:c2:f3:5a:9b:68:06:d3:fa:fa:b9:dc:09:1c:bb:d7:2f:
dd:9d:bc:54:c4:95:f5:d8:de:38:9b:31:9b:23:f7:0d:37:65:
ad:68:fb:17:15:0d:37:0f:bd:b0:07:b2:49:25:95:a8:76:ca:
4f:54:f4:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:07:09 2026 by rpki-client