
$ rpki-client -vvf rpki-rsync.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/E9A8A6B9E08D026673630DC1A26DBE73DFA16132.mft
File: E9A8A6B9E08D026673630DC1A26DBE73DFA16132.mft (raw, json)
Hash identifier: lGbFarl4aL6qRHJvfQIr3QqWCVgtC+iMBaX8g1R0nXw=
Subject key identifier: E6:6B:4A:E6:33:A1:B7:8A:C3:6E:C9:DB:98:EB:2D:D2:0E:93:EE:82
Authority key identifier: E9:A8:A6:B9:E0:8D:02:66:73:63:0D:C1:A2:6D:BE:73:DF:A1:61:32
Certificate issuer: /CN=E9A8A6B9E08D026673630DC1A26DBE73DFA16132
Certificate serial: 318B86773371495A008A7130E54C0DAFACF4C152
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9A8A6B9E08D026673630DC1A26DBE73DFA16132.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/E9A8A6B9E08D026673630DC1A26DBE73DFA16132.mft
Manifest number: 6F
Signing time: Thu 23 Jul 2026 20:09:41 +0000
Manifest this update: Thu 23 Jul 2026 20:04:41 +0000
Manifest next update: Fri 24 Jul 2026 21:12:41 +0000
Files and hashes: 1: 3130332e3136302e33372e302f32342d3234203d3e20313431353834.roa (hash: 5XEDOOrbyLaQ3rvBerNKeMoDupncLVY5Kqo+4A1sTYY=)
2: E9A8A6B9E08D026673630DC1A26DBE73DFA16132.crl (hash: f6nYsI7GR8ieeVKRPw7kWTZt0yF7CR9A0nlWGZhKjYE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/E9A8A6B9E08D026673630DC1A26DBE73DFA16132.crl
rsync://rpki-rsync.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/E9A8A6B9E08D026673630DC1A26DBE73DFA16132.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9A8A6B9E08D026673630DC1A26DBE73DFA16132.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 21:12:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:8b:86:77:33:71:49:5a:00:8a:71:30:e5:4c:0d:af:ac:f4:c1:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E9A8A6B9E08D026673630DC1A26DBE73DFA16132
Validity
Not Before: Jul 23 20:04:41 2026 GMT
Not After : Jul 24 21:12:41 2026 GMT
Subject: CN=E66B4AE633A1B78AC36EC9DB98EB2DD20E93EE82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e6:45:1d:a1:33:87:16:2c:dc:bb:b4:0d:ad:
8c:6c:22:14:af:71:e8:54:0a:d7:0a:a7:c3:f7:dc:
08:d4:ef:e8:44:3b:46:ce:31:a7:c0:30:c8:df:14:
fd:97:94:ac:31:ab:fc:fe:15:54:00:f7:05:fb:27:
31:24:c1:6a:84:d6:c2:8a:c4:8f:19:88:b1:cf:07:
73:00:01:7c:62:31:06:4d:cc:3e:33:eb:41:41:df:
ef:3b:cc:c1:a6:8c:5a:66:30:42:3f:bb:52:cb:ec:
2d:4c:4e:9d:fe:d3:8a:7f:91:ab:dc:fb:0c:00:74:
f2:9f:e4:99:7e:08:0a:10:89:13:18:f3:62:9e:ee:
70:09:99:a0:0c:61:2e:d3:75:4d:ea:c7:61:d2:73:
ca:fd:70:08:52:8d:e6:f9:0a:48:cd:9a:5e:ad:71:
90:a5:ac:29:43:39:08:f3:b9:1d:d1:98:de:60:9e:
16:75:df:75:ea:ab:95:47:3c:7c:f8:c0:f2:81:f8:
ec:f8:6f:4d:5f:9c:68:ea:df:ba:25:37:f8:ba:57:
0c:7e:7a:07:74:30:7c:e3:0f:27:5d:c4:60:99:e1:
29:0a:ea:87:e1:f0:d1:96:1a:7f:63:fa:6f:7d:a4:
1a:d1:92:10:44:ab:df:41:ba:fa:6a:5a:a2:60:bc:
22:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:6B:4A:E6:33:A1:B7:8A:C3:6E:C9:DB:98:EB:2D:D2:0E:93:EE:82
X509v3 Authority Key Identifier:
keyid:E9:A8:A6:B9:E0:8D:02:66:73:63:0D:C1:A2:6D:BE:73:DF:A1:61:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/E9A8A6B9E08D026673630DC1A26DBE73DFA16132.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9A8A6B9E08D026673630DC1A26DBE73DFA16132.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/E9A8A6B9E08D026673630DC1A26DBE73DFA16132.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:1b:d4:a5:70:09:01:69:f8:bb:9f:e5:51:3b:1b:43:e6:b0:
ab:cd:e2:ca:77:a3:22:fc:aa:29:14:20:05:2d:cc:5d:1a:74:
f9:f1:c6:dd:01:ef:bf:07:bb:23:b1:a4:24:43:9b:32:b4:60:
a8:65:b0:51:b9:d8:8c:ab:36:22:d0:bb:5a:4e:4c:06:56:90:
0d:9b:70:7e:c4:9b:72:3a:b5:66:ae:58:dc:74:bc:8c:30:56:
12:81:c0:b3:84:8b:47:a7:25:3f:a5:78:84:cc:79:fa:94:a7:
fc:00:a3:a5:38:94:cf:5f:fe:29:50:9c:30:2f:d8:04:23:38:
4a:a0:9a:32:63:0f:50:d3:55:0a:bc:0f:c0:91:9d:a1:42:1e:
b7:78:b9:fb:76:1b:9f:ae:08:59:5d:50:a7:70:04:bc:a9:a1:
57:26:aa:a2:57:2b:86:8f:0e:8f:da:01:73:73:e3:e1:a7:9c:
b0:da:ca:40:35:85:bb:0f:32:02:c9:15:9f:ff:10:94:b6:b3:
70:67:2a:0a:76:61:a5:53:9e:c4:79:ae:b1:60:3c:26:62:71:
3b:0f:9d:76:ef:38:50:13:a4:32:20:41:e5:f1:45:63:a2:41:
31:ce:b5:44:c9:51:54:bb:5e:73:f9:13:1a:cd:9f:25:5f:24:
4e:51:07:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:17:58 2026 by rpki-client