
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/E09CA942BC63A46AC14108FB56751F1D3DB2B40D.mft
File: E09CA942BC63A46AC14108FB56751F1D3DB2B40D.mft (raw, json)
Hash identifier: JnjLGiV3/1JpCGuUKrApRfamv1klq+hLnsWAdOJA7ik=
Subject key identifier: BA:29:93:5C:04:54:05:9E:54:92:D3:C0:E0:19:24:37:68:92:B3:2A
Authority key identifier: E0:9C:A9:42:BC:63:A4:6A:C1:41:08:FB:56:75:1F:1D:3D:B2:B4:0D
Certificate issuer: /CN=E09CA942BC63A46AC14108FB56751F1D3DB2B40D
Certificate serial: 59121D7EE33B0E45F0170E2EA50A88119E1B3FEF
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E09CA942BC63A46AC14108FB56751F1D3DB2B40D.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/E09CA942BC63A46AC14108FB56751F1D3DB2B40D.mft
Manifest number: C4
Signing time: Thu 24 Sep 2026 23:09:17 +0000
Manifest this update: Thu 24 Sep 2026 23:04:17 +0000
Manifest next update: Sat 26 Sep 2026 02:38:17 +0000
Files and hashes: 1: 3130332e32382e3136332e302f32342d3234203d3e203536323539.roa (hash: f3/5ZWIk2JVAliu7yKS60dOELpXPYdbw36ijNFDWyYM=)
2: E09CA942BC63A46AC14108FB56751F1D3DB2B40D.crl (hash: 5q5VwnNgtQavvZ3arHdI7lOiMIZPKouGTsLPkRlRJeA=)
3: 3130332e36352e39362e302f32332d3234203d3e203536323539.roa (hash: AhptuUeczIXxYrYpEUFqYLa6JweMv5oyItdy1/amU/c=)
4: 3130332e31302e3235332e302f32342d3234203d3e203536323539.roa (hash: RVVP//q3vuwKuV+Q10lzaWaVgGwp0nEvsOc4ZWyOH5o=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/E09CA942BC63A46AC14108FB56751F1D3DB2B40D.crl
rsync://rpki-rsync.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/E09CA942BC63A46AC14108FB56751F1D3DB2B40D.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E09CA942BC63A46AC14108FB56751F1D3DB2B40D.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 26 Sep 2026 02:38:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:12:1d:7e:e3:3b:0e:45:f0:17:0e:2e:a5:0a:88:11:9e:1b:3f:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E09CA942BC63A46AC14108FB56751F1D3DB2B40D
Validity
Not Before: Sep 24 23:04:17 2026 GMT
Not After : Sep 26 02:38:17 2026 GMT
Subject: CN=BA29935C0454059E5492D3C0E01924376892B32A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:27:53:80:2b:3f:74:3e:bf:11:72:46:12:6a:
92:3f:bf:8f:33:45:8d:e3:81:be:9a:f8:aa:39:6d:
c3:ad:f6:fe:31:ea:0a:ff:23:67:f2:14:59:79:48:
bd:22:46:ae:9b:35:68:fd:d2:8f:40:bb:ba:cd:f4:
20:a7:9c:16:b8:23:33:25:c1:1c:33:69:47:40:7f:
95:c4:d1:9b:16:1d:a5:3c:bb:3a:02:ca:cf:7e:f1:
49:65:96:f3:83:69:6e:f3:fb:cb:e9:3a:48:4f:33:
04:32:03:43:4a:96:2d:74:f8:4c:59:2b:08:ca:30:
ad:f5:a6:60:86:a9:09:d2:1c:b3:ed:71:86:22:81:
f5:93:58:10:1f:f4:8c:f0:ac:19:56:d5:6f:08:0a:
89:a8:63:95:e5:bb:34:a2:f3:ff:7e:a5:90:54:b3:
7b:36:76:fb:42:56:fc:6e:78:d5:89:1c:16:d1:f1:
ad:04:64:4b:03:26:3b:f6:08:ae:91:2c:ec:a7:85:
23:b2:a6:ed:d4:17:5b:dc:a2:96:a5:44:d9:f8:a9:
1f:25:5a:15:a9:c6:9f:98:be:34:d5:59:b8:db:ed:
db:39:1f:b8:ad:92:1e:82:f3:6f:35:b5:01:e3:04:
db:8b:c6:fc:8d:0d:92:27:d5:c4:97:5d:10:9d:14:
28:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:29:93:5C:04:54:05:9E:54:92:D3:C0:E0:19:24:37:68:92:B3:2A
X509v3 Authority Key Identifier:
keyid:E0:9C:A9:42:BC:63:A4:6A:C1:41:08:FB:56:75:1F:1D:3D:B2:B4:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/E09CA942BC63A46AC14108FB56751F1D3DB2B40D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E09CA942BC63A46AC14108FB56751F1D3DB2B40D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/E09CA942BC63A46AC14108FB56751F1D3DB2B40D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:84:65:a1:0b:10:cf:d1:5c:f5:7f:a6:c6:71:a1:a6:50:2a:
15:d1:af:a1:15:f6:13:c9:3e:82:ae:f3:c4:93:58:6a:6c:e7:
0b:92:31:fe:50:0e:1e:4b:42:bc:ff:eb:22:92:6c:de:d8:b1:
82:81:d5:8b:8e:22:86:8b:7b:56:dd:0e:19:5c:f2:07:09:07:
fb:f1:cf:80:20:c1:a0:59:bc:14:9a:38:87:ec:99:23:0c:0e:
19:a7:7c:62:7c:37:04:b8:ce:9b:7d:12:48:7d:3d:ad:b7:60:
b5:ee:9f:60:7d:b2:ae:b5:13:a4:cd:03:52:cf:db:63:06:27:
b3:a3:82:cf:e1:d9:9b:f4:b0:19:c9:bb:36:29:95:d3:7b:f7:
ce:34:4a:26:b3:3f:7f:91:a0:f5:71:93:40:dd:8d:31:e2:4d:
fc:ad:41:6e:44:cc:78:85:cf:c4:eb:fb:73:54:6b:4a:4f:3b:
95:92:94:a0:c8:35:dd:04:72:8f:70:1b:39:99:51:2a:ec:33:
2b:17:99:45:25:06:ff:6f:e4:36:d0:3b:1c:ba:9d:37:70:f3:
4b:e8:aa:8a:0c:78:17:3d:38:59:1c:a1:6f:21:5e:34:a6:08:
c7:d3:84:74:3a:be:91:8a:af:fd:bd:7e:7e:93:8a:14:dc:7f:
b3:c8:37:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 12:44:00 2026 by rpki-client