
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.mft
File: E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.mft (raw, json)
Hash identifier: ld6khbzvVSt1mNyVL62iTWwuy80t16vwuev0IEP4Res=
Subject key identifier: 30:4B:9E:40:39:C5:E1:D9:B2:26:97:43:35:E1:01:F2:3B:9F:E1:95
Authority key identifier: E4:50:1E:7F:DB:C5:71:60:C6:DA:F0:D3:BE:92:FB:D3:B1:32:4A:B9
Certificate issuer: /CN=E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9
Certificate serial: 3CE366B567A6B153A21F178E7832C4867D610499
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.mft
Manifest number: C2
Signing time: Wed 23 Sep 2026 19:55:35 +0000
Manifest this update: Wed 23 Sep 2026 19:50:35 +0000
Manifest next update: Thu 24 Sep 2026 21:29:35 +0000
Files and hashes: 1: 3230332e38302e382e302f32342d3234203d3e203234323034.roa (hash: 0Yyl1JFAblaXf8Yb0JCPy2SmOr5D/U6YS39l5rE81q0=)
2: E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.crl (hash: 6XVOG9WgmouII374W+xzKOO9tpf6epqt29JHkyYLlT4=)
3: 3230332e38302e392e302f32342d3234203d3e203234323034.roa (hash: ctsdmpn5r5VUvDq4FMqshtD+HVeYmHxVfhu5eYtcuDY=)
4: 323430353a386530303a3a2f33322d3332203d3e203234323034.roa (hash: sqWc0G+az7rG1OKeMlrjkBetXfc6E3+lsrE6DeDNqXY=)
5: 3230332e38302e31342e302f32342d3234203d3e203234323034.roa (hash: 4fpWKKYBY0nnGQkJs0R+bmSKgdPRaMES9zE1728pF2E=)
6: 3230332e38302e31352e302f32342d3234203d3e203234323034.roa (hash: nN8alNrnuAC96uGmiPX7P2NYnsdlkO57xsP55iMfUwk=)
7: 3230332e38302e31322e302f32342d3234203d3e203234323034.roa (hash: h2tT8uN39aiQAWcw3BdGn9c/xBwZZb5nFDTta01r+Os=)
8: 3230332e38302e31312e302f32342d3234203d3e203234323034.roa (hash: Z8294bGV1BqnPHshmggOhT7N0D0yzpQrvHBjc8hglpQ=)
9: 3230332e38302e31332e302f32342d3234203d3e203234323034.roa (hash: v5fNxHZnP1wOLH3moKO1JSlLZXs/nZienvrRCarDRlk=)
10: 3230332e38302e31302e302f32342d3234203d3e203234323034.roa (hash: 1WqLfIO26zKRMIVkfVN7TnPFzjNdo3+29X6uUFeeV7A=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.crl
rsync://rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 21:29:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:e3:66:b5:67:a6:b1:53:a2:1f:17:8e:78:32:c4:86:7d:61:04:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9
Validity
Not Before: Sep 23 19:50:35 2026 GMT
Not After : Sep 24 21:29:35 2026 GMT
Subject: CN=304B9E4039C5E1D9B226974335E101F23B9FE195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:39:d8:8d:ad:1c:f7:d3:91:3a:7c:00:b4:5f:
64:4d:13:30:eb:28:15:98:22:89:20:c9:d3:9e:c5:
23:33:87:7e:69:f3:fd:db:ed:83:fb:a5:4a:0c:0d:
fc:22:00:f0:71:77:86:20:8d:64:05:1a:4c:53:a5:
cb:5c:21:1d:43:f8:91:58:af:b7:c2:f5:75:fc:05:
3a:5c:10:06:dd:43:9f:ee:86:57:48:c0:66:93:33:
fa:b4:27:0e:76:90:be:88:4c:fb:ab:83:70:fb:65:
45:bd:7a:3a:fd:7a:c8:6a:14:fe:4f:cd:4d:3f:7a:
18:35:20:d4:eb:95:8d:d5:46:8c:e1:b1:0e:81:98:
45:2f:3c:41:71:eb:01:32:75:8b:1e:64:ef:ea:5e:
fa:fd:de:7f:ee:11:f8:10:69:f5:7f:b2:e2:26:d6:
7a:e2:a5:07:a0:53:9f:e1:9f:63:39:a4:77:54:e6:
e9:58:6c:2d:0b:e6:db:b5:d7:0c:97:15:c5:e5:17:
e5:91:c5:f9:03:e6:4c:2a:4c:d0:73:c9:ae:ad:2f:
c1:86:63:b5:85:63:00:f1:7a:97:85:d4:dc:ad:9e:
24:41:ca:43:16:a1:c7:81:00:85:79:6e:07:f4:95:
af:10:f6:4c:ee:da:41:3c:6b:a6:86:37:bb:c5:32:
c9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:4B:9E:40:39:C5:E1:D9:B2:26:97:43:35:E1:01:F2:3B:9F:E1:95
X509v3 Authority Key Identifier:
keyid:E4:50:1E:7F:DB:C5:71:60:C6:DA:F0:D3:BE:92:FB:D3:B1:32:4A:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:96:ea:67:27:3d:ab:ff:98:42:d6:13:c6:d6:93:eb:32:29:
ae:d5:18:0a:50:14:75:b9:92:0a:d2:07:63:74:ba:19:57:e8:
77:55:41:4a:14:fb:b0:3f:55:22:c6:63:16:84:1f:98:8b:26:
da:59:0b:ed:a3:24:86:dc:da:12:12:02:51:80:5e:7b:db:2d:
b0:18:4a:6d:12:bf:fe:9c:f2:55:aa:6c:ce:b6:f5:f6:51:cd:
52:ab:31:c1:ed:ef:37:a7:9e:b1:9c:2b:60:dd:71:f6:37:56:
21:3b:25:1f:62:ea:f2:ab:7e:12:5f:40:bc:38:81:b5:da:db:
cb:f5:29:2d:97:eb:f6:e9:bc:bc:2a:0c:e2:b0:5a:a5:c1:ce:
24:79:8c:fd:a5:79:3f:db:a9:cc:b1:19:b4:92:64:82:6b:16:
06:d5:10:63:9b:93:82:5a:9f:1f:42:76:95:04:ec:bd:d0:53:
e6:93:2b:16:f6:ad:19:e7:92:d5:74:06:5f:e3:1a:6f:ad:6b:
f6:25:3f:7a:fa:dd:59:cb:a6:65:d0:17:d9:69:e6:20:04:3e:
1c:04:09:b5:72:32:5e:19:c0:b9:93:49:af:52:66:8f:60:d0:
4e:63:62:2e:ea:ba:36:43:9f:4a:c7:6f:af:8c:db:18:e0:e3:
02:91:5d:d6
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUPONmtWemsVOiHxeOeDLEhn1hBJkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTQ1MDFFN0ZEQkM1NzE2MEM2REFGMEQzQkU5MkZCRDNC
MTMyNEFCOTAeFw0yNjA5MjMxOTUwMzVaFw0yNjA5MjQyMTI5MzVaMDMxMTAvBgNV
BAMTKDMwNEI5RTQwMzlDNUUxRDlCMjI2OTc0MzM1RTEwMUYyM0I5RkUxOTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7OdiNrRz305E6fAC0X2RNEzDr
KBWYIokgydOexSMzh35p8/3b7YP7pUoMDfwiAPBxd4YgjWQFGkxTpctcIR1D+JFY
r7fC9XX8BTpcEAbdQ5/uhldIwGaTM/q0Jw52kL6ITPurg3D7ZUW9ejr9eshqFP5P
zU0/ehg1INTrlY3VRozhsQ6BmEUvPEFx6wEydYseZO/qXvr93n/uEfgQafV/suIm
1nripQegU5/hn2M5pHdU5ulYbC0L5tu11wyXFcXlF+WRxfkD5kwqTNBzya6tL8GG
Y7WFYwDxepeF1NytniRBykMWoceBAIV5bgf0la8Q9kzu2kE8a6aGN7vFMskxAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUMEueQDnF4dmyJpdDNeEB8juf4ZUwHwYDVR0j
BBgwFoAU5FAef9vFcWDG2vDTvpL707EySrkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NTI0YTkxMDUtOGQyYS00YjM4LWE2YWUtMDVlYWQ2OTcxOWEzLzAvRTQ1MDFFN0ZE
QkM1NzE2MEM2REFGMEQzQkU5MkZCRDNCMTMyNEFCOS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FNDUwMUU3RkRCQzU3MTYwQzZEQUYwRDNCRTkyRkJEM0IxMzI0
QUI5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTI0YTkxMDUtOGQyYS00YjM4LWE2
YWUtMDVlYWQ2OTcxOWEzLzAvRTQ1MDFFN0ZEQkM1NzE2MEM2REFGMEQzQkU5MkZC
RDNCMTMyNEFCOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFyW6mcnPav/mELWE8bWk+syKa7VGApQFHW5
kgrSB2N0uhlX6HdVQUoU+7A/VSLGYxaEH5iLJtpZC+2jJIbc2hISAlGAXnvbLbAY
Sm0Sv/6c8lWqbM629fZRzVKrMcHt7zennrGcK2DdcfY3ViE7JR9i6vKrfhJfQLw4
gbXa28v1KS2X6/bpvLwqDOKwWqXBziR5jP2leT/bqcyxGbSSZIJrFgbVEGObk4Ja
nx9CdpUE7L3QU+aTKxb2rRnnktV0Bl/jGm+ta/YlP3r63VnLpmXQF9lp5iAEPhwE
CbVyMl4ZwLmTSa9SZo9g0E5jYi7qujZDn0rHb6+M2xjg4wKRXdY=
-----END CERTIFICATE-----
Generated at Thu Sep 24 12:59:50 2026 by rpki-client