
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/167375f9-e8b5-4d94-80a8-35e02dd0f6f2/0/E61B2C660E2F40C280D14E44F6309F6890476682.mft
File: E61B2C660E2F40C280D14E44F6309F6890476682.mft (raw, json)
Hash identifier: BbQ08XrKL6mW3KgU8+dgd4M7As5Xze8xUCJDPNY9hFE=
Subject key identifier: 8C:E1:FD:7F:6D:97:88:8E:2D:46:33:4D:EA:F1:63:8A:08:01:53:61
Authority key identifier: E6:1B:2C:66:0E:2F:40:C2:80:D1:4E:44:F6:30:9F:68:90:47:66:82
Certificate issuer: /CN=E61B2C660E2F40C280D14E44F6309F6890476682
Certificate serial: 10FEEA7D0BBD1B84880D7A963183011F73F83B5D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E61B2C660E2F40C280D14E44F6309F6890476682.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/167375f9-e8b5-4d94-80a8-35e02dd0f6f2/0/E61B2C660E2F40C280D14E44F6309F6890476682.mft
Manifest number: C1
Signing time: Wed 23 Sep 2026 09:58:33 +0000
Manifest this update: Wed 23 Sep 2026 09:53:33 +0000
Manifest next update: Thu 24 Sep 2026 12:39:33 +0000
Files and hashes: 1: 3130332e3138322e37322e302f32342d3234203d3e20313439343038.roa (hash: s8sSHcsNN0kxBivAZmbkAGceUR/4dbttEyt7Ds31ne0=)
2: E61B2C660E2F40C280D14E44F6309F6890476682.crl (hash: 4hGFMgr0Dnx1553QvcwQqa8B8hfIHeOeEVy1jHhp0MU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/167375f9-e8b5-4d94-80a8-35e02dd0f6f2/0/E61B2C660E2F40C280D14E44F6309F6890476682.crl
rsync://rpki-rsync.idnic.net/repo/167375f9-e8b5-4d94-80a8-35e02dd0f6f2/0/E61B2C660E2F40C280D14E44F6309F6890476682.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E61B2C660E2F40C280D14E44F6309F6890476682.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 12:39:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:fe:ea:7d:0b:bd:1b:84:88:0d:7a:96:31:83:01:1f:73:f8:3b:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E61B2C660E2F40C280D14E44F6309F6890476682
Validity
Not Before: Sep 23 09:53:33 2026 GMT
Not After : Sep 24 12:39:33 2026 GMT
Subject: CN=8CE1FD7F6D97888E2D46334DEAF1638A08015361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c5:54:18:24:ca:ff:75:ab:88:53:69:c0:15:
a1:1c:c5:5a:e4:55:5e:09:0d:69:3b:4a:c5:20:9c:
26:b5:66:e1:2b:e7:1d:50:d2:b7:1f:3c:be:82:10:
4b:e5:e9:51:c1:6a:e8:f4:f8:1f:4e:63:6b:e3:87:
85:39:6f:ef:28:55:3e:d6:fe:33:68:63:57:60:0e:
dd:77:a9:0f:36:0f:2f:07:fc:f2:8e:4b:5e:a6:79:
be:b4:7a:07:48:47:7e:c6:db:01:2e:04:5f:c5:83:
ed:9d:fe:a4:40:7c:b6:78:b7:d8:81:b0:44:a5:af:
2f:95:8f:72:29:30:63:11:07:2e:f9:27:81:bd:7f:
5f:54:ef:eb:50:97:d3:d3:7c:26:20:b4:a7:c9:7d:
7c:4d:85:3e:1a:14:93:50:08:6d:72:d3:8f:bb:91:
87:f1:36:5b:87:fc:1e:d2:7c:89:1c:79:bc:f3:9a:
17:87:40:3f:3e:6d:fd:49:89:e6:e3:7e:ed:2d:1d:
bf:d1:da:19:e8:8e:85:da:85:c5:c7:6c:f6:16:00:
37:5f:4d:b8:9a:72:c6:65:b7:33:ff:e8:cb:af:b9:
30:a8:c8:1a:1c:f1:68:17:d3:82:65:7a:9e:15:b7:
66:93:2c:12:fc:68:09:94:2c:48:6c:d1:4d:47:cb:
c9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:E1:FD:7F:6D:97:88:8E:2D:46:33:4D:EA:F1:63:8A:08:01:53:61
X509v3 Authority Key Identifier:
keyid:E6:1B:2C:66:0E:2F:40:C2:80:D1:4E:44:F6:30:9F:68:90:47:66:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/167375f9-e8b5-4d94-80a8-35e02dd0f6f2/0/E61B2C660E2F40C280D14E44F6309F6890476682.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E61B2C660E2F40C280D14E44F6309F6890476682.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/167375f9-e8b5-4d94-80a8-35e02dd0f6f2/0/E61B2C660E2F40C280D14E44F6309F6890476682.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:ac:7c:31:bc:3b:50:90:08:a6:20:d5:d8:8b:54:01:61:78:
1a:79:3e:1a:0c:b3:3f:4c:c6:c9:39:c2:c1:b2:f3:1e:79:50:
48:87:a1:ae:62:96:ac:7b:b2:c7:43:04:e1:75:6a:35:fd:b0:
66:a8:00:1b:40:61:2b:5d:24:35:f6:5e:b2:c8:5b:53:4d:a8:
67:fc:25:bf:98:b0:36:f1:be:3f:64:1c:98:1a:0c:ee:d3:8c:
81:c0:84:97:bf:67:d9:f1:56:5c:fa:79:4c:30:ef:d6:8b:28:
11:21:4b:6a:2e:50:8b:84:b9:f0:b9:9f:25:75:13:99:68:cb:
be:21:75:05:74:06:9d:c9:7f:33:d7:7a:94:0b:bc:fd:5f:e4:
49:ad:1a:54:f6:f8:78:54:10:c9:9a:df:a8:17:d2:ef:e0:44:
ae:13:84:4e:0f:c9:f1:29:b0:98:f3:17:79:e4:e2:d0:0f:aa:
27:bf:61:50:57:f6:82:ce:a8:a9:2d:9e:70:24:b3:a6:3f:e9:
be:50:56:00:a5:76:05:c2:b8:89:81:c9:dc:48:45:19:1f:28:
07:f3:a5:4a:c4:81:ec:98:3c:4d:f7:59:6e:fd:26:c8:77:20:
6e:85:63:44:12:f5:4b:ce:04:5c:eb:33:fe:58:ea:3a:32:3a:
66:64:4e:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:13:11 2026 by rpki-client