
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/E9A8A6B9E08D026673630DC1A26DBE73DFA16132.mft
File: E9A8A6B9E08D026673630DC1A26DBE73DFA16132.mft (raw, json)
Hash identifier: KuwPvmSBW1qPDyLpl3H0IoQn4pPPbl9B9Ai71U8KnQk=
Subject key identifier: 5B:41:C9:42:B7:A2:31:7A:C8:DF:8A:06:82:4A:90:45:4D:60:6E:DF
Authority key identifier: E9:A8:A6:B9:E0:8D:02:66:73:63:0D:C1:A2:6D:BE:73:DF:A1:61:32
Certificate issuer: /CN=E9A8A6B9E08D026673630DC1A26DBE73DFA16132
Certificate serial: 61D7B3F1D0ED08ED41D6397B236598D5BEB2B15F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9A8A6B9E08D026673630DC1A26DBE73DFA16132.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/E9A8A6B9E08D026673630DC1A26DBE73DFA16132.mft
Manifest number: C6
Signing time: Sun 27 Sep 2026 00:14:45 +0000
Manifest this update: Sun 27 Sep 2026 00:09:45 +0000
Manifest next update: Mon 28 Sep 2026 00:14:45 +0000
Files and hashes: 1: E9A8A6B9E08D026673630DC1A26DBE73DFA16132.crl (hash: Pzz4+8qNFdzGRWuxf4UuPpPTBeJ1p+Ys2UK4V4Iuc7I=)
2: 3130332e3136302e33372e302f32342d3234203d3e20313431353834.roa (hash: 5XEDOOrbyLaQ3rvBerNKeMoDupncLVY5Kqo+4A1sTYY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/E9A8A6B9E08D026673630DC1A26DBE73DFA16132.crl
rsync://rpki-rsync.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/E9A8A6B9E08D026673630DC1A26DBE73DFA16132.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9A8A6B9E08D026673630DC1A26DBE73DFA16132.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 12:52:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:d7:b3:f1:d0:ed:08:ed:41:d6:39:7b:23:65:98:d5:be:b2:b1:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E9A8A6B9E08D026673630DC1A26DBE73DFA16132
Validity
Not Before: Sep 27 00:09:45 2026 GMT
Not After : Sep 28 00:14:45 2026 GMT
Subject: CN=5B41C942B7A2317AC8DF8A06824A90454D606EDF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4d:04:71:c5:d7:07:c3:96:bd:b8:c9:60:4f:
c4:07:73:a9:65:45:45:a1:e8:78:3b:b3:40:24:81:
f7:ba:cd:37:30:6f:ce:40:06:8a:bb:e5:44:cd:d7:
87:1c:94:e1:a4:c4:04:a8:45:ae:76:da:96:20:6b:
2a:ba:32:16:b5:72:a4:62:f7:62:7f:58:bb:17:bd:
81:31:13:90:ac:c9:d0:cd:24:5a:2d:de:16:9c:38:
b0:d8:87:96:66:91:87:19:64:96:6c:09:d7:e2:26:
d5:0f:e2:d3:86:b6:9e:c1:ed:de:d7:8e:76:54:d1:
08:01:6c:7f:e0:ba:49:5d:47:ef:23:9a:53:77:4e:
f1:d8:2a:16:47:dc:4d:8e:9f:1a:b6:6f:1e:83:76:
b4:c4:e7:da:d7:92:7a:d9:08:b5:48:48:fe:2a:1b:
0a:9e:e4:34:cc:22:4c:6d:d1:99:d1:eb:9f:ad:31:
09:9d:6d:f1:7d:4e:7b:65:55:77:41:75:2c:fd:78:
d2:9c:a9:11:8d:d2:87:ff:ed:f9:56:9c:9a:d5:a3:
22:f4:07:d4:ad:02:d0:78:0e:87:44:55:9d:08:95:
b2:90:77:3c:cc:f3:d3:aa:8c:a5:b0:ab:cc:4c:ac:
9e:03:83:74:2b:ec:89:bb:38:a5:79:0d:77:3e:ec:
1b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:41:C9:42:B7:A2:31:7A:C8:DF:8A:06:82:4A:90:45:4D:60:6E:DF
X509v3 Authority Key Identifier:
keyid:E9:A8:A6:B9:E0:8D:02:66:73:63:0D:C1:A2:6D:BE:73:DF:A1:61:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/E9A8A6B9E08D026673630DC1A26DBE73DFA16132.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9A8A6B9E08D026673630DC1A26DBE73DFA16132.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/E9A8A6B9E08D026673630DC1A26DBE73DFA16132.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:bd:c0:45:db:78:a3:33:7d:e1:1f:04:7f:89:fd:b5:23:bf:
30:60:57:e6:be:8b:2b:c1:ae:27:99:80:e4:a0:5a:53:fa:2b:
b1:9e:5f:33:b6:94:de:e0:8b:38:0d:24:ec:66:90:b1:c0:08:
fe:36:8b:4f:ee:28:d5:28:44:58:24:99:4f:8c:8e:eb:cd:c7:
0e:73:e4:c6:17:1b:16:a2:49:72:c0:30:a9:df:e9:a3:ee:01:
31:c7:2e:22:40:b3:90:64:9c:d6:81:01:93:c8:0e:eb:6c:8c:
7e:da:03:e4:db:7b:1d:fe:ea:9a:36:99:ef:d1:a0:cf:f1:af:
67:08:8c:54:1e:e6:b4:0b:af:33:ca:57:7f:af:e1:3a:5d:23:
a0:d8:c7:41:4b:54:38:18:10:89:85:cb:57:de:3c:e5:0c:6b:
ee:9e:03:07:03:16:0b:ab:b3:cc:e4:e2:05:db:e9:f8:c8:fe:
99:64:03:dc:4d:3b:94:83:2b:60:fd:01:21:8d:26:a8:e0:10:
63:59:0d:d7:24:2b:c7:d6:ca:94:63:c8:a2:61:9e:d7:72:cf:
10:91:18:94:c8:2e:6c:67:a6:3f:49:94:5d:2a:87:f9:9c:87:
f3:f4:6e:da:1f:ad:99:30:fd:b0:3c:5e:41:28:f9:c3:f0:f5:
8e:ce:2b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:09:40 2026 by rpki-client