
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/E4E77812E2CFA75939A641BB7F633F97582E6792.mft
File: E4E77812E2CFA75939A641BB7F633F97582E6792.mft (raw, json)
Hash identifier: caaQLxZqy9pfNKZ71RlIFwzhmqTceo7Kfmr9TyMAHvk=
Subject key identifier: 1D:C4:39:11:CC:AA:77:4F:A0:CC:AC:5D:57:B6:32:89:5B:CB:B3:B8
Authority key identifier: E4:E7:78:12:E2:CF:A7:59:39:A6:41:BB:7F:63:3F:97:58:2E:67:92
Certificate issuer: /CN=E4E77812E2CFA75939A641BB7F633F97582E6792
Certificate serial: 05BD9C80E8D9F88083FD434415608AE8D0443A83
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4E77812E2CFA75939A641BB7F633F97582E6792.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/E4E77812E2CFA75939A641BB7F633F97582E6792.mft
Manifest number: C3
Signing time: Fri 25 Sep 2026 12:20:47 +0000
Manifest this update: Fri 25 Sep 2026 12:15:47 +0000
Manifest next update: Sat 26 Sep 2026 13:11:47 +0000
Files and hashes: 1: 3130332e3133342e3234362e302f32342d3234203d3e20313331373733.roa (hash: u9JlmtwFnIY99dq5rQ8a+yuZuvWYaV5aieCQMyyf0yI=)
2: 3130332e3133342e3234342e302f32322d3232203d3e20313331373733.roa (hash: f8JrpNxiYhxoygVD3PVaDm7C9vGL2+TBxJgVjDXpyoQ=)
3: 3130332e3133342e3234372e302f32342d3234203d3e20313331373733.roa (hash: RMWvBSrs1/gqkTI+LRT35D4lLhWEW+vN5lI9hn43Pek=)
4: 3130332e3133342e3234352e302f32342d3234203d3e20313331373733.roa (hash: 6/36/UcdQ2V1pYXsPSMgRUu2w8k+qUDvro5dHxk58tQ=)
5: E4E77812E2CFA75939A641BB7F633F97582E6792.crl (hash: vASKwTiiG4aYl9kph2CywbzDz6hvC9UrOTMc90Kc+Ck=)
6: 3130332e3133342e3234342e302f32342d3234203d3e20313331373733.roa (hash: FfhEpyiIA9Zvturja6+USFcLN/+BV2bB6cgYWMdWgys=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/E4E77812E2CFA75939A641BB7F633F97582E6792.crl
rsync://rpki-rsync.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/E4E77812E2CFA75939A641BB7F633F97582E6792.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4E77812E2CFA75939A641BB7F633F97582E6792.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 26 Sep 2026 13:11:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:bd:9c:80:e8:d9:f8:80:83:fd:43:44:15:60:8a:e8:d0:44:3a:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4E77812E2CFA75939A641BB7F633F97582E6792
Validity
Not Before: Sep 25 12:15:47 2026 GMT
Not After : Sep 26 13:11:47 2026 GMT
Subject: CN=1DC43911CCAA774FA0CCAC5D57B632895BCBB3B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d8:b1:3c:06:2a:8e:b4:8d:14:5c:f2:c9:60:
1c:5b:d7:e7:b0:9a:5c:d2:f4:91:df:91:bb:a7:f7:
59:b7:fc:d5:f1:ac:9e:fc:7c:10:60:20:78:26:46:
9b:36:fd:6a:bd:40:7e:bd:d9:30:a9:8e:f2:3a:61:
76:c9:c6:57:17:a4:74:a3:b3:d3:84:9e:e2:2e:d8:
5c:7a:59:a0:9b:bf:1f:22:85:de:16:7f:d6:10:b3:
e5:e3:62:67:4b:d0:b4:ff:60:de:f4:54:c6:02:a5:
d4:3d:ef:14:ff:60:0d:e0:2d:54:86:97:92:36:98:
dc:6d:06:5b:60:94:a8:78:4a:25:45:08:ca:d2:68:
7d:8b:c7:8f:12:d4:e5:2d:aa:62:d2:2a:7d:d8:51:
23:9a:a7:f7:da:18:77:8c:06:cd:df:82:74:18:dd:
fb:6e:8c:72:82:c7:20:f5:02:96:d9:e4:0a:f6:fd:
02:28:62:a0:b2:87:65:40:0d:27:79:d3:c0:e7:c9:
1e:f5:0c:6f:fd:1b:57:a0:e6:2c:39:62:0f:18:92:
cc:dc:56:31:9a:ee:60:45:12:4a:d9:02:6b:2b:4f:
43:98:67:26:f5:b0:74:82:27:ba:ed:95:25:0f:58:
1f:c2:62:ed:d5:7f:e9:4b:66:f5:57:e3:a6:fc:23:
7a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:C4:39:11:CC:AA:77:4F:A0:CC:AC:5D:57:B6:32:89:5B:CB:B3:B8
X509v3 Authority Key Identifier:
keyid:E4:E7:78:12:E2:CF:A7:59:39:A6:41:BB:7F:63:3F:97:58:2E:67:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/E4E77812E2CFA75939A641BB7F633F97582E6792.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4E77812E2CFA75939A641BB7F633F97582E6792.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/E4E77812E2CFA75939A641BB7F633F97582E6792.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:4b:d2:ba:a2:47:13:f9:5d:0e:49:35:fd:23:4d:18:c6:d3:
2b:b6:48:80:f3:d6:d6:84:5b:76:27:0d:da:67:be:7d:50:5c:
69:aa:46:70:1d:1c:6e:01:97:2b:69:8a:12:a0:ff:4c:eb:65:
a9:2a:a9:c3:5d:c6:3b:5e:1d:45:51:1b:78:c0:fc:9f:5b:8f:
ac:f6:6d:60:28:32:33:45:25:a1:2c:d2:1e:b4:d6:fb:48:c0:
f9:b5:b4:fc:48:30:29:c4:61:e8:a9:62:7d:98:b1:21:8a:bd:
fb:7f:f4:0d:e9:ad:ce:38:18:f5:fc:ce:f2:f3:7d:9e:0c:0d:
8d:e8:2d:96:a3:a7:65:0c:2c:6e:66:7a:7a:90:6d:d0:bb:7d:
3b:b7:7b:44:bb:26:92:b6:ee:5b:6d:78:91:e4:68:0a:12:21:
e2:33:bd:66:3f:24:26:97:bb:34:cb:77:e3:50:b2:f1:c3:d9:
a3:66:02:19:0e:48:46:51:1f:0f:eb:bd:08:1c:a6:14:2a:bb:
be:5e:0a:2d:78:dc:d6:3f:47:d1:c8:95:44:15:fc:bd:d5:27:
c5:bf:83:8e:cb:87:72:bd:d8:77:5e:6b:76:e9:b0:51:1f:00:
4a:cb:ef:f1:4c:15:2a:83:3c:d9:1d:e3:d9:fd:b7:32:01:d4:
29:38:31:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 15:33:31 2026 by rpki-client