
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/E9EEF08AA8356D769BA16B981FE69DB5DE203409.mft
File: E9EEF08AA8356D769BA16B981FE69DB5DE203409.mft (raw, json)
Hash identifier: 4pDPiMDfPRH4upmMSnxrIbeO/hf9Xqhky99wEtHYAV4=
Subject key identifier: 11:17:1D:A3:43:42:F5:31:F2:64:04:08:2A:F9:EC:E1:8A:1F:27:B3
Authority key identifier: E9:EE:F0:8A:A8:35:6D:76:9B:A1:6B:98:1F:E6:9D:B5:DE:20:34:09
Certificate issuer: /CN=E9EEF08AA8356D769BA16B981FE69DB5DE203409
Certificate serial: 4321036CF004E043F6CA0BA09AEB43BCBAC57357
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9EEF08AA8356D769BA16B981FE69DB5DE203409.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/E9EEF08AA8356D769BA16B981FE69DB5DE203409.mft
Manifest number: C0
Signing time: Wed 23 Sep 2026 09:02:17 +0000
Manifest this update: Wed 23 Sep 2026 08:57:17 +0000
Manifest next update: Thu 24 Sep 2026 12:44:17 +0000
Files and hashes: 1: 3130332e3137342e31332e302f32342d3234203d3e20313437313730.roa (hash: xCU5A2qMTm4OgALTP8opeqK/3efnC4H4bV18tfZlMHk=)
2: 3130332e3137382e38332e302f32342d3234203d3e20313437313730.roa (hash: UaaNiDpFBSvOxzLMpx1eGc8touUo5VTmZX/HVEAL/G4=)
3: E9EEF08AA8356D769BA16B981FE69DB5DE203409.crl (hash: JpytbvLBTQEuam2OOb+37YEcPIqMWWV+7nDVzeZ0AMI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/E9EEF08AA8356D769BA16B981FE69DB5DE203409.crl
rsync://rpki-rsync.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/E9EEF08AA8356D769BA16B981FE69DB5DE203409.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9EEF08AA8356D769BA16B981FE69DB5DE203409.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 12:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:21:03:6c:f0:04:e0:43:f6:ca:0b:a0:9a:eb:43:bc:ba:c5:73:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E9EEF08AA8356D769BA16B981FE69DB5DE203409
Validity
Not Before: Sep 23 08:57:17 2026 GMT
Not After : Sep 24 12:44:17 2026 GMT
Subject: CN=11171DA34342F531F26404082AF9ECE18A1F27B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:27:eb:e6:9d:27:cd:47:85:f5:cd:9d:b9:e0:
2b:28:d3:18:83:82:05:19:5b:e8:a9:2b:35:8b:3d:
2a:ec:2c:be:7a:b7:a0:9a:e2:73:50:8e:3a:c8:7a:
90:05:84:df:49:22:d5:92:76:f6:f9:6f:7a:c8:ff:
d8:0a:68:7a:28:80:50:ed:ff:b9:31:31:e0:7b:f4:
bb:a7:5f:00:e2:4e:a9:f3:11:5b:da:5c:42:26:64:
9d:e5:7c:73:4e:1e:52:3e:f6:36:3e:1b:8d:9e:74:
2a:67:90:6c:de:3f:7b:92:4d:dc:79:09:2e:92:27:
5e:ad:52:2e:b9:64:fc:e4:9c:b8:6f:04:8a:46:4e:
58:f6:12:6f:a2:cc:47:21:fd:0e:3a:fa:7b:e8:f6:
cd:a8:15:b2:f4:c0:6b:60:d2:59:68:65:16:7f:c8:
c7:8a:4a:3f:7c:25:d1:f2:f8:9b:19:e1:d2:a9:08:
fd:fc:22:e3:91:a7:9b:28:06:d2:64:cb:ec:bc:ee:
af:04:cd:18:15:c5:ef:a6:e3:e4:04:a8:1b:96:c9:
0b:37:c0:00:a9:dd:33:0d:33:c4:2a:f3:11:57:2d:
2a:ac:90:3e:30:84:a8:f2:4b:f5:2b:3b:1d:e2:b1:
89:88:8c:e7:e4:11:f5:e5:43:8b:d0:f7:89:1e:e2:
17:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:17:1D:A3:43:42:F5:31:F2:64:04:08:2A:F9:EC:E1:8A:1F:27:B3
X509v3 Authority Key Identifier:
keyid:E9:EE:F0:8A:A8:35:6D:76:9B:A1:6B:98:1F:E6:9D:B5:DE:20:34:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/E9EEF08AA8356D769BA16B981FE69DB5DE203409.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9EEF08AA8356D769BA16B981FE69DB5DE203409.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/E9EEF08AA8356D769BA16B981FE69DB5DE203409.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:b4:a2:40:e6:b7:2e:c4:d7:83:85:61:d3:11:59:f3:b6:6c:
70:30:40:61:c6:d9:6a:d6:81:a3:bd:34:83:e0:9d:df:30:44:
88:26:0c:7a:d0:31:0d:07:b8:4f:0d:46:64:f8:53:c8:7a:de:
e8:5b:9b:26:09:ed:70:ca:aa:3e:63:a6:b8:65:d9:4e:39:80:
2e:e1:8d:1c:a7:91:3c:a1:3b:f2:96:80:5c:8d:14:c4:4b:a9:
0d:07:96:39:2f:09:12:1e:61:e5:05:c2:ef:e6:51:4c:3c:6b:
c4:17:a0:2d:6f:79:91:fe:86:c7:a6:08:c4:65:ae:25:c8:55:
37:62:4e:69:56:82:13:03:0d:16:ca:a5:ab:b9:92:a7:13:a1:
1d:56:cb:12:ea:0a:69:7e:70:f5:78:53:11:53:d2:04:70:29:
b8:6f:4b:1e:be:23:63:7e:64:d7:be:48:9f:61:35:3b:24:c1:
22:f3:d8:9f:48:5f:d6:26:bd:4c:fe:c1:38:14:e8:68:55:d1:
29:01:ce:5c:6d:df:4e:3f:2f:bf:3a:82:4c:8c:3f:e9:1b:95:
5d:2a:fa:c3:be:7e:0e:d5:b4:2e:31:dd:20:c6:70:f0:e2:88:
79:c1:b7:63:03:26:03:35:41:bc:55:e4:78:e5:38:bc:9b:a8:
b2:1f:ca:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:46:29 2026 by rpki-client