
$ rpki-client -vvf rpki-rsync.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/E6EFA0C987EB7BDEDCD6520FCFEAA6C6F7BFD47A.mft
File: E6EFA0C987EB7BDEDCD6520FCFEAA6C6F7BFD47A.mft (raw, json)
Hash identifier: gqQWEUE+E/JcNlTX3Cf8uTUh+/wZdvyur/75cLrN1/c=
Subject key identifier: 37:C3:11:FB:5C:1A:B7:F0:E2:B5:5E:01:D2:67:79:02:DF:5B:A4:8E
Authority key identifier: E6:EF:A0:C9:87:EB:7B:DE:DC:D6:52:0F:CF:EA:A6:C6:F7:BF:D4:7A
Certificate issuer: /CN=E6EFA0C987EB7BDEDCD6520FCFEAA6C6F7BFD47A
Certificate serial: 2E1F833F15D4BABF19DC4ECB42C1DBB70A4CCE62
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6EFA0C987EB7BDEDCD6520FCFEAA6C6F7BFD47A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/E6EFA0C987EB7BDEDCD6520FCFEAA6C6F7BFD47A.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 18:39:07 +0000
Manifest this update: Tue 12 May 2026 18:34:07 +0000
Manifest next update: Wed 13 May 2026 18:59:07 +0000
Files and hashes: 1: E6EFA0C987EB7BDEDCD6520FCFEAA6C6F7BFD47A.crl (hash: BM8IAKvighcTY8SM4b5PI6HZlYsANUCkqnsoYiALkeM=)
2: 323030313a6466323a376234303a3a2f34382d3438203d3e20313530323636.roa (hash: VDHJo/qx9d4J355p/1MBoyGSP1OFutt76fTDKsTeD4I=)
3: 3130332e3231382e3138332e302f32342d3234203d3e20313530323636.roa (hash: xBjUpSUSZ8eUWIhz+cYXnDPEanv04sn2bLKLMW/gQsg=)
4: 3130332e39312e3133372e302f32342d3234203d3e20313530323636.roa (hash: fEQ2RGA7SMjU1u5ivR067WU+IPRjxPNEFjBrW6SRr/A=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/E6EFA0C987EB7BDEDCD6520FCFEAA6C6F7BFD47A.crl
rsync://rpki-rsync.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/E6EFA0C987EB7BDEDCD6520FCFEAA6C6F7BFD47A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6EFA0C987EB7BDEDCD6520FCFEAA6C6F7BFD47A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:1f:83:3f:15:d4:ba:bf:19:dc:4e:cb:42:c1:db:b7:0a:4c:ce:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E6EFA0C987EB7BDEDCD6520FCFEAA6C6F7BFD47A
Validity
Not Before: May 12 18:34:07 2026 GMT
Not After : May 13 18:59:07 2026 GMT
Subject: CN=37C311FB5C1AB7F0E2B55E01D2677902DF5BA48E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:0a:64:66:42:8b:c5:b2:ae:e8:59:88:89:33:
d0:d3:9a:08:59:29:4d:81:be:82:62:37:50:37:31:
70:12:48:aa:d2:07:c9:ef:89:e2:4c:a9:aa:43:f9:
c4:c1:2b:6a:69:64:90:62:d8:55:2e:29:d8:75:c7:
30:65:60:76:a1:7f:93:35:d5:35:d9:69:88:07:cf:
38:71:27:b3:4a:af:d3:9c:c6:e8:a8:54:a1:b7:7a:
cc:a8:b0:92:da:6a:5c:de:47:c2:19:e2:f3:48:73:
fc:9b:ff:2b:0b:fb:b4:20:3a:42:5f:ad:b7:37:c5:
b2:36:8c:be:60:25:59:4f:71:1d:c2:3d:6b:da:8f:
8f:74:1c:ef:95:b1:a8:47:d0:1d:1e:d2:97:72:e4:
60:b8:cf:f5:1e:64:5a:fc:60:41:35:a8:77:5e:9f:
87:fd:e7:33:f7:07:c9:f1:eb:2f:51:c2:dc:12:4c:
09:e0:85:4d:01:d0:7c:1b:48:77:c6:b0:b3:ba:f3:
dc:0e:00:51:05:36:c2:26:81:d5:67:50:e4:6a:32:
05:3d:16:5a:b5:6e:1d:81:bc:47:67:56:fa:2b:b5:
0f:10:2f:ad:07:96:1e:61:23:b2:2e:74:52:0c:32:
c9:60:d4:05:c0:69:8c:2a:ca:c8:ce:21:6f:d0:7e:
26:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:C3:11:FB:5C:1A:B7:F0:E2:B5:5E:01:D2:67:79:02:DF:5B:A4:8E
X509v3 Authority Key Identifier:
keyid:E6:EF:A0:C9:87:EB:7B:DE:DC:D6:52:0F:CF:EA:A6:C6:F7:BF:D4:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/E6EFA0C987EB7BDEDCD6520FCFEAA6C6F7BFD47A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6EFA0C987EB7BDEDCD6520FCFEAA6C6F7BFD47A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/E6EFA0C987EB7BDEDCD6520FCFEAA6C6F7BFD47A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:71:6b:4c:c1:91:a9:39:b9:15:4d:9c:10:3a:07:d3:39:ec:
d8:a8:d6:1d:87:61:82:62:08:4d:07:f6:f3:69:81:08:e7:43:
72:3d:5d:56:ea:f5:a7:31:fd:a4:a5:11:6a:58:4d:75:b8:02:
95:95:19:d4:8c:32:71:b0:e8:c2:44:a5:63:18:7c:94:9f:6c:
3c:fb:b3:14:20:b8:de:9e:29:20:e1:70:0b:4f:f9:6a:b5:4b:
00:86:de:0c:a5:50:a4:4a:6a:27:fa:bf:f5:20:4c:62:2e:3c:
c8:31:ad:b1:6d:9c:24:44:6e:d4:70:45:87:a8:81:bc:ea:8c:
ed:4a:51:eb:90:ac:8c:7c:a4:a1:e3:22:67:55:4f:7c:4c:89:
6f:b0:30:4e:55:f6:a2:4f:a2:ba:6e:8a:78:2a:2d:6e:40:ae:
55:a9:dc:69:8a:39:ec:df:38:67:ff:bd:de:23:8d:72:ae:61:
fd:88:5c:69:a1:17:3a:e9:b6:c9:13:03:ca:c4:3f:7e:1b:e9:
c2:20:af:dc:11:f2:2c:a5:c6:70:e3:7d:82:21:5b:3e:e0:f3:
3d:27:e5:13:06:64:f3:b9:24:01:bc:1f:e5:60:f1:33:e4:7e:
81:df:b1:de:cd:6a:3d:3a:63:72:d5:8b:03:81:a5:92:60:36:
fa:ba:2c:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:39:13 2026 by rpki-client