
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/E98212FB2801E9D8F979B478187B22C73E005B8C.mft
File: E98212FB2801E9D8F979B478187B22C73E005B8C.mft (raw, json)
Hash identifier: Zn4QQ4p+4h45VjdDbC702dMsLoppgoGUhqBRPsuOzPs=
Subject key identifier: 40:E8:86:4F:40:A6:3B:FB:CA:9C:53:75:21:A3:F3:4A:3E:67:6A:F7
Authority key identifier: E9:82:12:FB:28:01:E9:D8:F9:79:B4:78:18:7B:22:C7:3E:00:5B:8C
Certificate issuer: /CN=E98212FB2801E9D8F979B478187B22C73E005B8C
Certificate serial: 42AE5AA88791469664408222560DE358A5A6C956
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E98212FB2801E9D8F979B478187B22C73E005B8C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/E98212FB2801E9D8F979B478187B22C73E005B8C.mft
Manifest number: C5
Signing time: Fri 25 Sep 2026 19:50:02 +0000
Manifest this update: Fri 25 Sep 2026 19:45:02 +0000
Manifest next update: Sat 26 Sep 2026 23:45:02 +0000
Files and hashes: 1: E98212FB2801E9D8F979B478187B22C73E005B8C.crl (hash: jOciRSJCfzxQhBofPZJxWMVissN50GoKGj3dnpcVo1s=)
2: 323030313a6466323a653330303a3a2f34382d3438203d3e203538343034.roa (hash: U8zXjkR0YFC0f3k9g/lm57CdDdRff8CebwGPVl34Erk=)
3: 3130332e3130322e3135322e302f32322d3234203d3e203538343034.roa (hash: ZcQGtptLynLQhbsDejD5BqWtMIiUWg5vn//LHtPV2PU=)
4: 3130332e3130322e3135322e302f32322d3233203d3e203538343034.roa (hash: ZO0PNzhZkxG8w8Ary1RN+d3Qu4+XF4Tx6+LlxY2bCbs=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/E98212FB2801E9D8F979B478187B22C73E005B8C.crl
rsync://rpki-rsync.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/E98212FB2801E9D8F979B478187B22C73E005B8C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E98212FB2801E9D8F979B478187B22C73E005B8C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 26 Sep 2026 17:58:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:ae:5a:a8:87:91:46:96:64:40:82:22:56:0d:e3:58:a5:a6:c9:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E98212FB2801E9D8F979B478187B22C73E005B8C
Validity
Not Before: Sep 25 19:45:02 2026 GMT
Not After : Sep 26 23:45:02 2026 GMT
Subject: CN=40E8864F40A63BFBCA9C537521A3F34A3E676AF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:28:99:6b:76:c0:1c:4e:68:43:7f:c9:32:12:
2a:0c:6f:32:04:02:dc:5f:42:7b:00:29:03:7a:8a:
b8:a5:a3:e1:f4:3a:51:d1:94:f6:f9:58:64:3f:c1:
60:60:5a:70:8b:e8:34:cc:52:ae:d3:17:f9:f2:0d:
7f:cf:b0:87:6c:18:66:fb:1e:bb:3b:06:67:f4:21:
20:bf:d8:0b:e7:85:a4:59:ef:58:a3:8a:5e:65:ab:
fc:d1:65:95:84:e4:c5:20:d5:86:a5:aa:ce:f0:85:
8a:fa:cb:23:97:90:e5:da:55:56:14:89:0f:a3:45:
d7:5d:66:98:80:bf:5d:d7:50:b5:9e:d0:6b:40:54:
81:6d:80:18:3e:7f:04:88:97:f8:39:e9:41:65:3f:
a0:4a:64:a5:34:65:a1:20:7d:3b:f3:b1:4d:b8:ce:
fb:3a:13:42:e6:56:f3:7b:3c:88:7c:b8:39:75:2b:
99:8d:94:6d:f9:47:c4:07:70:50:ab:16:ab:88:5e:
6b:30:92:15:cf:12:2f:78:de:e9:ac:ac:66:b9:c9:
6d:3f:aa:e3:c2:cf:5d:dc:c4:32:df:af:da:e1:e5:
2d:27:75:e1:fb:a1:e5:b9:69:cb:7b:87:b7:8a:7b:
df:79:72:1d:b2:26:b9:cc:6a:3b:ed:7e:27:b8:cf:
21:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:E8:86:4F:40:A6:3B:FB:CA:9C:53:75:21:A3:F3:4A:3E:67:6A:F7
X509v3 Authority Key Identifier:
keyid:E9:82:12:FB:28:01:E9:D8:F9:79:B4:78:18:7B:22:C7:3E:00:5B:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/E98212FB2801E9D8F979B478187B22C73E005B8C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E98212FB2801E9D8F979B478187B22C73E005B8C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/E98212FB2801E9D8F979B478187B22C73E005B8C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:62:df:cd:96:c5:a0:33:38:c6:d0:5c:3e:4c:86:67:c5:f5:
8b:93:a0:7f:ba:3b:e1:10:2d:06:7f:80:cc:4e:b7:dc:04:0e:
cd:1b:c5:d3:b1:35:e0:36:6b:ef:7c:ad:53:7a:c4:44:11:1c:
0c:14:68:26:26:34:c1:d6:78:6b:49:a6:02:30:b6:3f:67:fe:
da:d2:de:ef:e3:e4:a8:4e:62:ad:88:b5:cc:9d:ac:a0:96:92:
b8:d8:98:c7:42:c5:db:eb:31:8e:71:5a:0c:d8:18:d6:e0:70:
2f:1c:0e:14:22:44:31:32:5b:8a:d8:18:59:72:89:c3:db:54:
44:07:20:54:d3:5b:9f:c4:bf:99:62:49:89:19:ef:90:02:b8:
6d:ef:97:04:a0:18:5e:1e:8a:6f:f2:fd:e7:16:0d:b2:50:f7:
95:b8:32:96:07:49:a5:c7:f8:50:87:1d:40:12:8d:89:47:7b:
37:d3:0c:4a:2f:ba:7b:e4:3a:3a:33:4f:bb:62:ad:32:30:91:
45:81:ed:8e:02:bb:82:91:9d:35:75:fc:03:7c:83:ff:4f:6e:
02:61:1e:ee:c9:e7:50:8c:6b:ca:55:09:d4:33:37:c9:73:85:
cd:89:6a:2f:8c:ca:5d:10:21:ab:5d:f1:8f:b7:3a:3b:f5:bb:
5b:e2:73:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 01:35:01 2026 by rpki-client