
$ rpki-client -vvf rpki-rsync.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/E6254E6F8E3EF1F3E283D322FC37D80FE06CFCCF.mft
File: E6254E6F8E3EF1F3E283D322FC37D80FE06CFCCF.mft (raw, json)
Hash identifier: kU2LlLhyW3/0EpZF+kHMJB43HXSfbZ6FibPHWrFC4C8=
Subject key identifier: 2A:78:25:59:11:07:51:1A:C2:DA:A4:B6:3D:1E:52:51:D4:91:56:48
Authority key identifier: E6:25:4E:6F:8E:3E:F1:F3:E2:83:D3:22:FC:37:D8:0F:E0:6C:FC:CF
Certificate issuer: /CN=E6254E6F8E3EF1F3E283D322FC37D80FE06CFCCF
Certificate serial: 7A4235C56A7793F5ADFCCA3FFCB2771BEB8AE35F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6254E6F8E3EF1F3E283D322FC37D80FE06CFCCF.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/E6254E6F8E3EF1F3E283D322FC37D80FE06CFCCF.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 18:59:39 +0000
Manifest this update: Tue 12 May 2026 18:54:39 +0000
Manifest next update: Wed 13 May 2026 19:36:39 +0000
Files and hashes: 1: 3130332e3130312e39362e302f32332d3233203d3e20313530393430.roa (hash: oKwdl6Jbw0xgOvJgUIdnZaW+/Jj7haWqiuhnRZR2agc=)
2: 3130332e3130312e39372e302f32342d3234203d3e20313530393430.roa (hash: PujUY2/VrkQ5U7C51TkJPpWDbUx9tvrvxL32zD/gtc0=)
3: E6254E6F8E3EF1F3E283D322FC37D80FE06CFCCF.crl (hash: NxgcumfWSx5h6Uc4uSinEbjJPfnEeWvxdauc6GREG8I=)
4: 3130332e3130312e39362e302f32342d3234203d3e20313530393430.roa (hash: yJtiSShonhAnbGvzDWyHd3hC3zai87d1b+TqGDBagOs=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/E6254E6F8E3EF1F3E283D322FC37D80FE06CFCCF.crl
rsync://rpki-rsync.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/E6254E6F8E3EF1F3E283D322FC37D80FE06CFCCF.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6254E6F8E3EF1F3E283D322FC37D80FE06CFCCF.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:42:35:c5:6a:77:93:f5:ad:fc:ca:3f:fc:b2:77:1b:eb:8a:e3:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E6254E6F8E3EF1F3E283D322FC37D80FE06CFCCF
Validity
Not Before: May 12 18:54:39 2026 GMT
Not After : May 13 19:36:39 2026 GMT
Subject: CN=2A7825591107511AC2DAA4B63D1E5251D4915648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:71:30:d6:c5:81:22:9a:4c:fa:99:23:3f:36:
22:03:b1:20:d7:cf:01:b1:b7:f4:ed:48:92:40:cc:
4d:90:fc:99:7a:62:be:9d:e5:f9:cc:c1:7f:cb:89:
9f:31:6d:5d:e0:7b:de:4d:2d:4d:05:98:b0:81:e5:
be:d1:b9:16:3e:5b:e7:16:f2:f8:93:3e:dc:cb:7b:
b7:27:0d:ef:4a:37:20:fd:c5:c0:02:a6:6c:af:6f:
9b:ea:ce:b1:da:79:b6:48:92:75:3c:33:0b:3c:81:
01:69:2b:c6:4d:2e:1e:df:13:86:46:2e:7c:86:ce:
04:da:c4:be:c6:c0:39:b6:cf:2c:95:7e:03:a4:58:
dc:e8:6a:6c:40:b0:b0:4c:20:76:f0:f2:d9:ac:47:
80:f9:e8:a9:ee:f4:58:0e:e8:d5:a8:6b:eb:64:a2:
09:08:45:3f:d4:55:fc:32:c8:30:8a:fa:ab:2c:4c:
16:22:1e:e3:ba:1d:ad:77:da:a7:65:7d:aa:e1:dd:
2c:be:46:b8:37:f9:5e:7b:14:04:76:6f:a3:b7:1d:
f5:3d:b5:95:55:e7:b8:16:21:b5:2e:e3:2d:0d:bb:
8e:01:b2:8b:e1:70:66:17:62:06:98:84:81:9c:d6:
7f:70:b5:fd:e4:62:87:86:1e:1f:ee:48:32:39:50:
7d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:78:25:59:11:07:51:1A:C2:DA:A4:B6:3D:1E:52:51:D4:91:56:48
X509v3 Authority Key Identifier:
keyid:E6:25:4E:6F:8E:3E:F1:F3:E2:83:D3:22:FC:37:D8:0F:E0:6C:FC:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/E6254E6F8E3EF1F3E283D322FC37D80FE06CFCCF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6254E6F8E3EF1F3E283D322FC37D80FE06CFCCF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/E6254E6F8E3EF1F3E283D322FC37D80FE06CFCCF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:66:b1:73:a0:8b:7d:c9:76:0f:ae:ad:86:68:76:85:65:0f:
91:f0:7a:b6:03:3d:54:da:4f:a5:c3:c4:ca:3a:f9:a4:51:ba:
35:e9:ed:18:bd:b7:80:fc:5c:8d:84:ae:2b:75:17:00:a9:8f:
08:df:dc:44:c5:3a:b0:e3:99:3d:be:b9:98:4d:24:b1:32:85:
46:c2:4d:cc:a6:cf:aa:12:9c:b9:82:9a:4b:fe:c4:dd:c1:4e:
bc:e8:b6:43:db:82:7f:d6:97:3a:8e:5b:66:ae:fb:4f:e0:be:
de:c6:2c:78:e2:1f:a4:a0:20:ff:12:d9:4e:e4:d8:a9:10:47:
59:d5:f3:f1:ea:b9:f0:cf:51:0d:94:b4:39:cc:4e:ce:b5:72:
59:1d:cb:a9:c9:03:58:75:d9:32:ce:93:5b:56:4e:64:49:19:
80:06:93:ba:d3:9f:2e:90:4b:30:0b:50:ff:5f:60:81:d1:c6:
43:2b:d3:aa:d7:a2:76:e8:35:4e:de:67:a4:db:3f:0c:cf:cc:
61:4d:29:ce:b2:34:7b:f7:57:c6:a9:e8:a5:d3:1a:86:81:be:
87:b4:df:08:ef:72:d5:50:a6:90:86:72:c1:05:ad:47:cb:07:
e9:8a:f2:f4:1d:b5:e0:d5:06:9d:59:60:93:99:b4:22:1c:b2:
01:a6:c7:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:31:33 2026 by rpki-client