
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.mft
File: E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.mft (raw, json)
Hash identifier: I4uC16AuTCyW2vlDIgV4WblyLTIxmflItyonHMAnMQw=
Subject key identifier: BF:4D:A6:3A:4E:88:CC:FA:56:65:A1:10:DB:22:4E:BF:E4:1D:E4:42
Authority key identifier: E5:04:3A:05:3B:BA:5B:BD:65:F1:17:C3:80:A8:E5:ED:BB:FB:E9:6A
Certificate issuer: /CN=E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A
Certificate serial: 60E65094D5FE1323B430EC95298B9197BF037540
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.mft
Manifest number: 0106
Signing time: Sun 15 Nov 2026 13:41:10 +0000
Manifest this update: Sun 15 Nov 2026 13:36:10 +0000
Manifest next update: Mon 16 Nov 2026 14:16:10 +0000
Files and hashes: 1: E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.crl (hash: WOsqIWtYPWOrj9fD+nTbYH2Ocqe5luJv0cYOaK1gtf8=)
2: 3136302e3138372e3133382e302f32342d3234203d3e20313533313232.roa (hash: is5WdfvUY1KRmUVaEDtXvqlI2WCzItjy85jNK7qc29s=)
3: 3136302e3138372e3133392e302f32342d3234203d3e20313533313232.roa (hash: mmr69bHLezkQuiDZandeSB0qYXcAYeWx1GHP/ifPRTA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.crl
rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 16 Nov 2026 10:35:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:e6:50:94:d5:fe:13:23:b4:30:ec:95:29:8b:91:97:bf:03:75:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A
Validity
Not Before: Nov 15 13:36:10 2026 GMT
Not After : Nov 16 14:16:10 2026 GMT
Subject: CN=BF4DA63A4E88CCFA5665A110DB224EBFE41DE442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c9:38:a9:6d:12:06:00:9e:fa:9b:c1:db:55:
d1:64:da:7a:99:00:e3:5c:60:f7:ba:57:59:9c:78:
59:54:f4:fb:1a:09:92:2e:33:44:b8:08:a4:03:a7:
f4:d8:57:df:91:71:c7:06:46:cd:18:a1:b7:75:85:
48:47:d4:d0:63:c8:79:a9:f5:d4:34:93:87:ad:f1:
93:51:84:04:a1:08:34:7e:30:ae:a4:1a:f8:86:b8:
fd:58:93:40:96:3d:09:10:06:16:61:cb:e2:ff:cf:
ac:6b:c8:92:16:62:b2:35:8e:67:d8:dd:d9:90:cd:
a0:88:44:db:4c:55:a1:75:ed:3e:f3:df:f5:fd:57:
87:6d:23:b5:d7:1f:16:b0:c9:c6:13:9f:f0:27:ac:
41:56:99:c7:83:29:59:94:79:b6:c9:38:9b:0f:f6:
d7:43:6b:ef:1e:9f:5a:da:c1:57:4d:f5:5d:25:9b:
70:99:a8:91:f2:58:ff:a4:1f:70:ca:35:5f:3a:d6:
05:cb:14:61:86:b3:82:03:88:29:6b:cd:eb:ba:e7:
23:a1:e8:13:80:0d:c7:73:a2:83:05:c2:49:1a:ed:
d7:4a:62:e8:c8:7d:57:24:c4:89:67:cc:15:d4:d3:
c2:79:66:aa:ec:63:3c:92:fa:5f:82:c3:47:ce:f7:
3a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:4D:A6:3A:4E:88:CC:FA:56:65:A1:10:DB:22:4E:BF:E4:1D:E4:42
X509v3 Authority Key Identifier:
keyid:E5:04:3A:05:3B:BA:5B:BD:65:F1:17:C3:80:A8:E5:ED:BB:FB:E9:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:14:52:76:62:ca:5f:4d:b1:16:26:62:48:27:a0:cc:67:44:
6b:9a:3c:3b:a0:70:ef:67:41:78:9d:ad:2b:8c:d3:90:12:fd:
1a:d9:7e:9d:57:56:cd:68:7d:cf:54:db:40:ab:ec:37:f8:a1:
ae:21:69:bb:2a:30:61:65:59:e6:37:42:f7:88:ae:c4:ab:db:
41:a8:e2:0f:0d:c5:c0:b5:b4:c0:67:64:c7:bf:b6:27:54:43:
2c:73:0b:f2:21:d3:5c:e4:53:77:68:7b:46:88:e0:0d:af:69:
94:96:7b:40:e5:47:af:24:ef:17:ab:9e:d9:6c:f5:52:ce:11:
c8:58:b1:bd:f4:f3:23:b3:3b:f2:4e:75:9b:cf:cd:6f:0d:bf:
09:9f:70:bd:5b:78:0a:14:74:09:9a:a4:d5:7f:28:13:1c:1e:
c7:88:b3:76:41:a9:d3:b3:d5:f7:79:86:77:7b:4d:8c:16:7d:
6c:3a:58:47:0a:71:80:a3:1b:fb:f3:27:68:6b:bd:e4:b0:f3:
cc:90:8b:71:a0:5d:ff:cc:66:0a:db:b2:76:c1:df:00:5c:cd:
3e:df:91:42:71:1e:92:36:68:d3:e7:96:ab:b8:e9:54:91:dc:
2d:87:a4:c6:4d:d7:53:0e:ce:92:eb:6a:df:a5:9c:fc:3b:0f:
9c:14:8c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:41:31 2026 by rpki-client