
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/E03B468CD361142C585663CF9ECF8523C31B59E9.mft
File: E03B468CD361142C585663CF9ECF8523C31B59E9.mft (raw, json)
Hash identifier: yEJccCqgRitYSCcopuNUWlFI2nDzv8U9fPkkgXVUNtE=
Subject key identifier: 11:5A:F4:AF:98:8C:72:80:8B:FC:D3:69:7B:FB:DA:6C:63:05:C6:1E
Authority key identifier: E0:3B:46:8C:D3:61:14:2C:58:56:63:CF:9E:CF:85:23:C3:1B:59:E9
Certificate issuer: /CN=E03B468CD361142C585663CF9ECF8523C31B59E9
Certificate serial: 5EF544CB447CA18342FD1DB0309432CB7F95DEAA
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E03B468CD361142C585663CF9ECF8523C31B59E9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/E03B468CD361142C585663CF9ECF8523C31B59E9.mft
Manifest number: C2
Signing time: Wed 23 Sep 2026 14:34:05 +0000
Manifest this update: Wed 23 Sep 2026 14:29:05 +0000
Manifest next update: Thu 24 Sep 2026 16:00:05 +0000
Files and hashes: 1: 3135372e31352e34342e302f32332d3233203d3e20313532333931.roa (hash: n4xjy2upk2LunwKR2BfVR8985IfNh54QVcVNRfdNf2s=)
2: E03B468CD361142C585663CF9ECF8523C31B59E9.crl (hash: scd5Pr5IJLNS/HHV9G4YSmCESoZalE5tkEY4aX4azeg=)
3: 3135372e31352e34352e302f32342d3234203d3e20313532333931.roa (hash: NQj0jBui5SdBCaBtC25o6ECq/13rF1K5IZvhOhcCy5E=)
4: 3135372e31352e34342e302f32342d3234203d3e20313532333931.roa (hash: YVVFf3w1oI5cN9GhWV4EQ/srdvKn64MAVk6XgK0Qog8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/E03B468CD361142C585663CF9ECF8523C31B59E9.crl
rsync://rpki-rsync.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/E03B468CD361142C585663CF9ECF8523C31B59E9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E03B468CD361142C585663CF9ECF8523C31B59E9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 16:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:f5:44:cb:44:7c:a1:83:42:fd:1d:b0:30:94:32:cb:7f:95:de:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E03B468CD361142C585663CF9ECF8523C31B59E9
Validity
Not Before: Sep 23 14:29:05 2026 GMT
Not After : Sep 24 16:00:05 2026 GMT
Subject: CN=115AF4AF988C72808BFCD3697BFBDA6C6305C61E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:20:b7:5e:7f:62:2d:f1:f1:4d:f6:a0:80:87:
0e:0b:91:15:ca:f9:a1:a3:b8:f5:bf:b2:58:cf:76:
40:ea:5d:e6:3d:23:94:b2:90:94:1c:ea:b0:2f:a3:
d3:2d:24:f9:aa:95:1c:a9:f9:34:a7:13:17:bb:2e:
6d:1f:17:ce:26:1f:59:4c:ef:8d:2c:ff:1c:ad:a5:
bc:8f:97:75:c0:86:ec:df:28:53:77:0c:45:54:33:
78:f4:ec:d2:f1:71:b9:a5:73:e6:b9:7c:d1:26:66:
b6:bf:84:ea:79:2b:cd:d0:98:96:7d:55:00:d7:11:
4d:d0:11:36:59:9c:66:fe:60:75:b3:0e:4c:67:13:
f5:81:32:13:74:97:f4:55:8c:73:90:1a:2c:1c:53:
b2:56:b1:79:51:2a:ed:44:1f:08:b9:e1:7f:83:b2:
88:45:35:16:76:6b:17:47:96:bc:8b:b4:b4:b4:68:
ca:eb:fd:3c:aa:b1:14:4b:39:1f:af:19:84:cb:1a:
47:da:e8:84:30:9d:14:7e:65:4d:8f:c9:a0:1a:9b:
05:f7:a4:3c:8b:c1:c5:6f:2d:5e:b0:e9:67:12:84:
69:3a:69:00:38:24:ab:69:e8:93:9d:a5:7b:da:95:
1d:e4:94:6c:9c:75:3c:09:99:be:56:d5:eb:ea:9d:
c6:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:5A:F4:AF:98:8C:72:80:8B:FC:D3:69:7B:FB:DA:6C:63:05:C6:1E
X509v3 Authority Key Identifier:
keyid:E0:3B:46:8C:D3:61:14:2C:58:56:63:CF:9E:CF:85:23:C3:1B:59:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/E03B468CD361142C585663CF9ECF8523C31B59E9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E03B468CD361142C585663CF9ECF8523C31B59E9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/E03B468CD361142C585663CF9ECF8523C31B59E9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:8d:b1:53:19:54:bc:bc:76:e3:77:0a:14:fd:f9:b5:40:81:
44:a3:70:fb:1d:81:ed:83:a9:a2:19:65:1a:5b:2c:d2:2e:80:
29:ad:23:5c:51:98:77:13:9f:39:cc:3e:e3:37:d3:ce:03:bc:
86:30:59:20:61:6c:6c:7f:d7:61:59:0d:14:29:4a:f5:38:0b:
6a:8a:40:10:a2:07:09:7e:cd:74:9a:7d:73:e5:0b:8a:46:42:
57:53:67:46:48:78:89:3e:8a:42:9c:01:e5:b2:26:3d:cf:e8:
1d:16:63:c3:59:27:c9:b5:10:7d:07:00:67:ea:cc:44:73:cb:
a5:b3:94:35:17:9c:e4:e1:02:36:32:6a:cb:79:d8:84:25:89:
45:5a:90:6d:86:64:7f:8f:63:91:42:27:73:7a:43:07:11:77:
24:e9:f4:1b:77:2a:23:33:57:e0:0b:fb:83:e0:3b:d5:d2:ec:
3c:47:b9:70:78:a2:18:39:5a:b6:2a:59:02:ca:cc:0e:3b:34:
27:b1:f9:8a:ec:df:f5:5f:e0:2f:0b:9e:a1:54:06:03:0c:ab:
ff:38:c4:f0:c7:26:ac:11:f2:41:0e:1b:79:23:69:f1:69:f1:
7a:4e:09:09:b3:ec:76:14:78:85:cc:a7:af:be:e0:45:2d:d5:
7f:12:63:64
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUXvVEy0R8oYNC/R2wMJQyy3+V3qowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTAzQjQ2OENEMzYxMTQyQzU4NTY2M0NGOUVDRjg1MjND
MzFCNTlFOTAeFw0yNjA5MjMxNDI5MDVaFw0yNjA5MjQxNjAwMDVaMDMxMTAvBgNV
BAMTKDExNUFGNEFGOTg4QzcyODA4QkZDRDM2OTdCRkJEQTZDNjMwNUM2MUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3ILdef2It8fFN9qCAhw4LkRXK
+aGjuPW/sljPdkDqXeY9I5SykJQc6rAvo9MtJPmqlRyp+TSnExe7Lm0fF84mH1lM
740s/xytpbyPl3XAhuzfKFN3DEVUM3j07NLxcbmlc+a5fNEmZra/hOp5K83QmJZ9
VQDXEU3QETZZnGb+YHWzDkxnE/WBMhN0l/RVjHOQGiwcU7JWsXlRKu1EHwi54X+D
sohFNRZ2axdHlryLtLS0aMrr/TyqsRRLOR+vGYTLGkfa6IQwnRR+ZU2PyaAamwX3
pDyLwcVvLV6w6WcShGk6aQA4JKtp6JOdpXvalR3klGycdTwJmb5W1evqncZ3AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUEVr0r5iMcoCL/NNpe/vabGMFxh4wHwYDVR0j
BBgwFoAU4DtGjNNhFCxYVmPPns+FI8MbWekwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OWZkYWYwNmEtZjYyNC00MmNmLWJiMTktYjZiYmY5MzFhYWM4LzAvRTAzQjQ2OENE
MzYxMTQyQzU4NTY2M0NGOUVDRjg1MjNDMzFCNTlFOS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC9FMDNCNDY4Q0QzNjExNDJDNTg1NjYzQ0Y5RUNGODUyM0MzMUI1
OUU5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWZkYWYwNmEtZjYyNC00MmNmLWJi
MTktYjZiYmY5MzFhYWM4LzAvRTAzQjQ2OENEMzYxMTQyQzU4NTY2M0NGOUVDRjg1
MjNDMzFCNTlFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAA2NsVMZVLy8duN3ChT9+bVAgUSjcPsdge2D
qaIZZRpbLNIugCmtI1xRmHcTnznMPuM3084DvIYwWSBhbGx/12FZDRQpSvU4C2qK
QBCiBwl+zXSafXPlC4pGQldTZ0ZIeIk+ikKcAeWyJj3P6B0WY8NZJ8m1EH0HAGfq
zERzy6WzlDUXnOThAjYyast52IQliUVakG2GZH+PY5FCJ3N6QwcRdyTp9Bt3KiMz
V+AL+4PgO9XS7DxHuXB4ohg5WrYqWQLKzA47NCex+Yrs3/Vf4C8LnqFUBgMMq/84
xPDHJqwR8kEOG3kjafFp8XpOCQmz7HYUeIXMp6++4EUt1X8SY2Q=
-----END CERTIFICATE-----
Generated at Thu Sep 24 02:46:13 2026 by rpki-client