
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/99905b8f-5c0a-4579-b4f7-09267b558968/0/E6A33016E53869343D9E092CAE6DFB2D91CCD27C.mft
File: E6A33016E53869343D9E092CAE6DFB2D91CCD27C.mft (raw, json)
Hash identifier: BGABhUm+F3ZsCndnwGtpYqq49IFokiUQ9ZKlmT1Cnpc=
Subject key identifier: F3:90:11:23:F4:97:22:52:43:D7:F2:53:2B:79:C5:0D:78:5C:7B:A5
Authority key identifier: E6:A3:30:16:E5:38:69:34:3D:9E:09:2C:AE:6D:FB:2D:91:CC:D2:7C
Certificate issuer: /CN=E6A33016E53869343D9E092CAE6DFB2D91CCD27C
Certificate serial: 10C7E2FFC0BF45B26D01D9FC0CC59A2E1087A769
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6A33016E53869343D9E092CAE6DFB2D91CCD27C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/99905b8f-5c0a-4579-b4f7-09267b558968/0/E6A33016E53869343D9E092CAE6DFB2D91CCD27C.mft
Manifest number: C5
Signing time: Fri 25 Sep 2026 16:15:20 +0000
Manifest this update: Fri 25 Sep 2026 16:10:20 +0000
Manifest next update: Sat 26 Sep 2026 17:30:20 +0000
Files and hashes: 1: E6A33016E53869343D9E092CAE6DFB2D91CCD27C.crl (hash: 5/gTbbuyBlEjPdUipt8szM6qCCMFg9CoVj0dAXzdFD8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/99905b8f-5c0a-4579-b4f7-09267b558968/0/E6A33016E53869343D9E092CAE6DFB2D91CCD27C.crl
rsync://rpki-rsync.idnic.net/repo/99905b8f-5c0a-4579-b4f7-09267b558968/0/E6A33016E53869343D9E092CAE6DFB2D91CCD27C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6A33016E53869343D9E092CAE6DFB2D91CCD27C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 26 Sep 2026 17:30:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:c7:e2:ff:c0:bf:45:b2:6d:01:d9:fc:0c:c5:9a:2e:10:87:a7:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E6A33016E53869343D9E092CAE6DFB2D91CCD27C
Validity
Not Before: Sep 25 16:10:20 2026 GMT
Not After : Sep 26 17:30:20 2026 GMT
Subject: CN=F3901123F497225243D7F2532B79C50D785C7BA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7b:2a:6d:0d:bf:80:6f:0f:96:df:ac:44:6c:
58:a1:12:69:c2:3b:25:b1:02:c8:cd:8a:ac:db:10:
fe:ec:9f:ff:47:83:57:60:f4:6e:e0:b7:09:19:c6:
6d:46:14:df:2c:bf:ce:1f:ff:39:f8:de:9c:80:01:
f7:a5:60:e8:58:8d:ef:62:ab:e5:c1:93:14:61:de:
87:91:48:12:41:0c:f4:e9:6d:6a:e4:b0:44:57:17:
60:c8:1e:ce:9d:8a:1d:a0:81:7c:22:5b:04:f5:70:
f5:7b:e1:ab:a7:47:e6:73:3d:df:65:3b:29:a3:71:
99:bc:9c:26:19:ff:c4:7e:63:6b:95:a1:db:83:4e:
91:64:6c:90:82:ad:92:c0:17:a3:79:98:52:38:9c:
eb:f3:e2:87:77:a7:b5:70:f4:a5:4b:92:97:d3:cf:
5c:3b:e4:f9:72:50:55:f7:f8:93:b8:0a:9b:98:f0:
e2:17:cb:1e:d0:cf:5a:b9:65:44:dc:4c:b6:b3:6c:
5d:aa:cd:bb:50:ef:cd:fb:87:3d:d8:09:a5:95:ff:
2c:21:47:48:74:a9:ec:1f:9a:6a:c8:4e:b9:ee:96:
e3:c0:90:2c:bf:eb:22:36:1a:dd:03:24:bd:6c:8f:
08:33:5f:70:31:0c:b3:b0:f0:1e:e4:9c:85:1d:8f:
16:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:90:11:23:F4:97:22:52:43:D7:F2:53:2B:79:C5:0D:78:5C:7B:A5
X509v3 Authority Key Identifier:
keyid:E6:A3:30:16:E5:38:69:34:3D:9E:09:2C:AE:6D:FB:2D:91:CC:D2:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/99905b8f-5c0a-4579-b4f7-09267b558968/0/E6A33016E53869343D9E092CAE6DFB2D91CCD27C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6A33016E53869343D9E092CAE6DFB2D91CCD27C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/99905b8f-5c0a-4579-b4f7-09267b558968/0/E6A33016E53869343D9E092CAE6DFB2D91CCD27C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:0e:6a:16:9c:90:8e:ee:5f:b6:71:14:00:d2:89:91:e5:77:
20:40:5d:95:17:b1:49:6c:f4:78:dc:af:4b:5a:18:06:e8:94:
73:e0:20:d5:0a:bd:2d:dc:9f:49:a0:f5:8d:e9:dd:0a:0f:22:
5a:38:b6:9c:df:f3:85:5f:ea:f9:c2:c7:82:30:59:bf:5d:35:
93:ab:71:36:4e:95:bc:b6:0d:21:ae:78:4b:44:25:c4:1d:8c:
d3:2c:29:2a:bb:f9:95:51:37:00:71:08:c2:e6:ca:d0:31:27:
64:ed:0e:ed:ee:71:92:a2:8b:e7:1e:65:a2:6d:89:34:bc:34:
35:8c:a7:2e:f8:2d:85:b8:7c:1c:10:7d:a6:be:b4:3a:9c:39:
d6:8f:9a:d7:e0:52:4a:a5:c2:1b:89:44:37:94:7c:11:fc:f2:
52:d4:3c:b9:d8:a6:bc:14:77:10:65:51:83:fe:2f:34:94:05:
f3:a6:69:87:24:36:e9:00:62:40:2e:72:88:a2:6c:58:5e:57:
b5:1f:ee:ca:47:54:f6:8a:ce:6e:e8:57:05:cc:3e:ff:34:c5:
ff:58:99:1b:11:28:ae:cb:cd:f2:b7:1d:9a:59:7e:c2:a8:a9:
c1:5a:b8:35:9f:b6:56:d1:69:c1:f2:00:19:0e:0d:57:42:b2:
8d:54:5d:02
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUEMfi/8C/RbJtAdn8DMWaLhCHp2kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTZBMzMwMTZFNTM4NjkzNDNEOUUwOTJDQUU2REZCMkQ5
MUNDRDI3QzAeFw0yNjA5MjUxNjEwMjBaFw0yNjA5MjYxNzMwMjBaMDMxMTAvBgNV
BAMTKEYzOTAxMTIzRjQ5NzIyNTI0M0Q3RjI1MzJCNzlDNTBENzg1QzdCQTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8eyptDb+Abw+W36xEbFihEmnC
OyWxAsjNiqzbEP7sn/9Hg1dg9G7gtwkZxm1GFN8sv84f/zn43pyAAfelYOhYje9i
q+XBkxRh3oeRSBJBDPTpbWrksERXF2DIHs6dih2ggXwiWwT1cPV74aunR+ZzPd9l
OymjcZm8nCYZ/8R+Y2uVoduDTpFkbJCCrZLAF6N5mFI4nOvz4od3p7Vw9KVLkpfT
z1w75PlyUFX3+JO4CpuY8OIXyx7Qz1q5ZUTcTLazbF2qzbtQ7837hz3YCaWV/ywh
R0h0qewfmmrITrnuluPAkCy/6yI2Gt0DJL1sjwgzX3AxDLOw8B7knIUdjxbJAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU85ARI/SXIlJD1/JTK3nFDXhce6UwHwYDVR0j
BBgwFoAU5qMwFuU4aTQ9ngksrm37LZHM0nwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OTk5MDViOGYtNWMwYS00NTc5LWI0ZjctMDkyNjdiNTU4OTY4LzAvRTZBMzMwMTZF
NTM4NjkzNDNEOUUwOTJDQUU2REZCMkQ5MUNDRDI3Qy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FNkEzMzAxNkU1Mzg2OTM0M0Q5RTA5MkNBRTZERkIyRDkxQ0NE
MjdDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTk5MDViOGYtNWMwYS00NTc5LWI0
ZjctMDkyNjdiNTU4OTY4LzAvRTZBMzMwMTZFNTM4NjkzNDNEOUUwOTJDQUU2REZC
MkQ5MUNDRDI3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAD8OahackI7uX7ZxFADSiZHldyBAXZUXsUls
9Hjcr0taGAbolHPgINUKvS3cn0mg9Y3p3QoPIlo4tpzf84Vf6vnCx4IwWb9dNZOr
cTZOlby2DSGueEtEJcQdjNMsKSq7+ZVRNwBxCMLmytAxJ2TtDu3ucZKii+ceZaJt
iTS8NDWMpy74LYW4fBwQfaa+tDqcOdaPmtfgUkqlwhuJRDeUfBH88lLUPLnYprwU
dxBlUYP+LzSUBfOmaYckNukAYkAucoiibFheV7Uf7spHVPaKzm7oVwXMPv80xf9Y
mRsRKK7LzfK3HZpZfsKoqcFauDWftlbRacHyABkODVdCso1UXQI=
-----END CERTIFICATE-----
Generated at Fri Sep 25 20:01:28 2026 by rpki-client