
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/E9E6271C170F0B74B97B8446B07AA5AB428648F1.mft
File: E9E6271C170F0B74B97B8446B07AA5AB428648F1.mft (raw, json)
Hash identifier: XnZ2qVTyTaUBXrShCazGDbjuP5xv+yBfcH/p8UWPJB8=
Subject key identifier: EB:C3:8B:7A:D5:41:5D:F8:FE:5E:7D:A0:26:B2:1B:76:B1:0C:0A:17
Authority key identifier: E9:E6:27:1C:17:0F:0B:74:B9:7B:84:46:B0:7A:A5:AB:42:86:48:F1
Certificate issuer: /CN=E9E6271C170F0B74B97B8446B07AA5AB428648F1
Certificate serial: 1A4D7CC85499F29F29252156439902C53609BBF6
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9E6271C170F0B74B97B8446B07AA5AB428648F1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/E9E6271C170F0B74B97B8446B07AA5AB428648F1.mft
Manifest number: C1
Signing time: Thu 24 Sep 2026 15:50:21 +0000
Manifest this update: Thu 24 Sep 2026 15:45:21 +0000
Manifest next update: Fri 25 Sep 2026 17:37:21 +0000
Files and hashes: 1: 3130332e33392e37322e302f32342d3234203d3e20313530343838.roa (hash: wpAJDLUihNgZdkXIKLfMYOAsPAxxh17Ib2DtgmuX8UA=)
2: E9E6271C170F0B74B97B8446B07AA5AB428648F1.crl (hash: d1py8J6sw1hdDwu8QxJbvV7nKeNim+zYPszo5ojcuJA=)
3: 3130332e33392e37332e302f32342d3234203d3e20313530343838.roa (hash: oUTlPe6tGlob4PSOrDICpszf8EfDI+Vj0wKtKJkAXJw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/E9E6271C170F0B74B97B8446B07AA5AB428648F1.crl
rsync://rpki-rsync.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/E9E6271C170F0B74B97B8446B07AA5AB428648F1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9E6271C170F0B74B97B8446B07AA5AB428648F1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 10:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:4d:7c:c8:54:99:f2:9f:29:25:21:56:43:99:02:c5:36:09:bb:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E9E6271C170F0B74B97B8446B07AA5AB428648F1
Validity
Not Before: Sep 24 15:45:21 2026 GMT
Not After : Sep 25 17:37:21 2026 GMT
Subject: CN=EBC38B7AD5415DF8FE5E7DA026B21B76B10C0A17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:cd:90:a1:9d:f6:75:2f:f0:1b:9b:0f:aa:14:
78:14:cc:82:ca:8e:d9:90:ba:e7:6d:dc:2c:51:4e:
7b:56:f5:79:64:e9:2d:17:a9:7c:62:f4:89:3a:fe:
20:f0:bd:7d:1c:a0:f8:0a:97:93:27:24:6e:96:8e:
f1:6b:6a:55:f8:6a:08:9d:5e:bb:f0:2c:be:22:d8:
e0:d2:d8:8b:ee:99:5a:e1:ea:d4:3d:68:6b:b4:18:
77:ad:6e:0a:b9:e7:82:f9:01:ca:23:57:28:55:ef:
1b:8c:22:f6:e4:6a:13:11:b6:d1:e1:9d:7c:a5:65:
bb:0b:13:f9:55:0b:eb:28:81:ac:42:8c:c0:12:c9:
ba:c5:0f:7f:ee:59:d0:5b:58:09:bc:6c:b9:51:a9:
dc:3c:16:11:5a:50:40:99:73:93:84:e6:7b:9f:48:
ea:d9:5f:e0:cb:49:d1:96:d1:a4:37:ce:c1:6b:0b:
a1:28:32:b9:4f:29:ec:dd:7e:a7:43:b6:fa:ae:34:
6e:f8:c2:af:24:e3:b3:16:7a:a2:43:1f:30:1f:3f:
f4:4b:b7:d4:1f:4b:c5:7e:8d:c3:c1:73:25:73:1c:
68:5c:83:8a:7f:7d:9a:68:30:a0:31:bf:84:e3:c5:
63:da:01:ec:75:fa:45:7b:58:7d:36:4f:2a:da:86:
ef:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:C3:8B:7A:D5:41:5D:F8:FE:5E:7D:A0:26:B2:1B:76:B1:0C:0A:17
X509v3 Authority Key Identifier:
keyid:E9:E6:27:1C:17:0F:0B:74:B9:7B:84:46:B0:7A:A5:AB:42:86:48:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/E9E6271C170F0B74B97B8446B07AA5AB428648F1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9E6271C170F0B74B97B8446B07AA5AB428648F1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/E9E6271C170F0B74B97B8446B07AA5AB428648F1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:d1:a7:ed:77:49:95:46:53:dc:7e:64:3e:81:a9:9c:54:ee:
8c:5a:1d:79:7a:0f:75:25:73:4b:28:ff:bf:49:79:72:94:4c:
73:cb:51:18:89:e1:e3:2b:01:db:21:e3:ea:94:f2:dd:60:91:
32:03:78:c2:40:77:43:f1:5b:bf:1a:d5:5f:6b:95:67:66:d2:
52:b9:ca:fb:a3:ae:07:52:2e:7e:9f:e9:f8:7e:ce:c3:d6:e4:
f0:5f:fa:90:db:63:d6:29:fd:f0:7d:16:92:3d:32:ff:1f:b8:
0d:0c:c3:de:38:46:68:a7:13:32:6a:b1:75:95:d1:ea:e5:de:
9b:d2:23:ef:bb:6d:be:8a:55:60:d5:da:0d:13:53:42:4b:75:
32:ef:b3:30:ff:f4:c5:e6:7e:50:4c:91:bf:92:4f:66:36:4e:
57:61:6c:a5:ce:d9:ac:00:e4:51:99:d6:c2:3c:12:5d:b7:86:
45:c4:45:16:48:7d:11:a8:79:2f:d9:d4:f6:ac:3a:6e:4e:2c:
c2:0d:39:ac:91:0d:8f:8f:9c:c2:05:cb:da:4a:8c:44:ae:f4:
33:fa:b3:14:75:80:17:4e:58:77:3d:af:d1:fe:b8:e1:e7:f2:
2e:e0:3e:b5:ef:cf:02:7d:f4:2a:eb:f3:6d:fb:7d:c3:54:cc:
2e:73:88:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:32:36 2026 by rpki-client