
$ rpki-client -vvf rpki-rsync.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/E9EEF08AA8356D769BA16B981FE69DB5DE203409.mft
File: E9EEF08AA8356D769BA16B981FE69DB5DE203409.mft (raw, json)
Hash identifier: 8AinMjo+JAZAl3zB61ypEKRa+Brm0clKvOFHHXBIn3A=
Subject key identifier: 7D:EC:5D:C9:CD:C2:F0:DA:2D:4C:8A:68:54:CA:BA:A1:42:51:81:67
Authority key identifier: E9:EE:F0:8A:A8:35:6D:76:9B:A1:6B:98:1F:E6:9D:B5:DE:20:34:09
Certificate issuer: /CN=E9EEF08AA8356D769BA16B981FE69DB5DE203409
Certificate serial: 2CEE58E3C16BDD395D4C06D2050CC4EF93B85458
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9EEF08AA8356D769BA16B981FE69DB5DE203409.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/E9EEF08AA8356D769BA16B981FE69DB5DE203409.mft
Manifest number: 6E
Signing time: Thu 23 Jul 2026 22:17:04 +0000
Manifest this update: Thu 23 Jul 2026 22:12:04 +0000
Manifest next update: Sat 25 Jul 2026 00:34:04 +0000
Files and hashes: 1: 3130332e3137342e31332e302f32342d3234203d3e20313437313730.roa (hash: xCU5A2qMTm4OgALTP8opeqK/3efnC4H4bV18tfZlMHk=)
2: 3130332e3137382e38332e302f32342d3234203d3e20313437313730.roa (hash: UaaNiDpFBSvOxzLMpx1eGc8touUo5VTmZX/HVEAL/G4=)
3: E9EEF08AA8356D769BA16B981FE69DB5DE203409.crl (hash: tIVHysayNqPAXXKffXKxMYb5eO5LQRx9c/FE7BTZKQU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/E9EEF08AA8356D769BA16B981FE69DB5DE203409.crl
rsync://rpki-rsync.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/E9EEF08AA8356D769BA16B981FE69DB5DE203409.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9EEF08AA8356D769BA16B981FE69DB5DE203409.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 00:34:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:ee:58:e3:c1:6b:dd:39:5d:4c:06:d2:05:0c:c4:ef:93:b8:54:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E9EEF08AA8356D769BA16B981FE69DB5DE203409
Validity
Not Before: Jul 23 22:12:04 2026 GMT
Not After : Jul 25 00:34:04 2026 GMT
Subject: CN=7DEC5DC9CDC2F0DA2D4C8A6854CABAA142518167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e9:4e:03:e2:08:01:ec:a7:ab:6e:94:15:77:
ce:c2:76:4b:df:e4:8b:c0:66:ae:fa:a8:a9:81:f2:
e3:cb:5f:d3:36:61:fb:a3:10:09:48:5f:f3:96:08:
8f:47:ff:23:56:6b:e7:ac:14:d9:cb:d0:18:83:48:
20:a7:c4:66:57:9a:88:25:9c:46:80:3a:ee:d2:c8:
fb:b3:76:24:7c:29:d7:3b:1b:9a:08:ea:26:40:b0:
c0:19:54:73:ac:06:e6:73:1a:2f:46:0d:82:40:a9:
36:e0:24:a1:49:25:58:50:ef:39:57:22:03:dc:6f:
92:70:3e:09:67:19:8e:36:bf:a0:a0:0e:53:aa:84:
cc:4e:be:7f:cf:84:09:b2:73:58:86:be:6c:b3:56:
be:5f:cb:df:88:00:05:1b:fe:e5:b6:e3:fa:74:37:
60:11:25:5d:c5:22:a8:ef:88:34:f9:76:89:f1:7f:
97:46:a3:cb:d5:af:03:2f:38:f9:4e:78:44:ef:d7:
39:59:45:37:df:7d:54:1c:02:0a:d3:73:ba:b0:c2:
ef:dd:f2:fe:e1:5d:67:a7:57:93:d7:5f:b5:7d:dc:
35:2c:42:00:2b:f5:6a:08:c2:45:8d:b3:42:2e:80:
bc:50:b6:0d:0f:f8:27:ec:ef:8b:8a:61:cf:04:5e:
30:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:EC:5D:C9:CD:C2:F0:DA:2D:4C:8A:68:54:CA:BA:A1:42:51:81:67
X509v3 Authority Key Identifier:
keyid:E9:EE:F0:8A:A8:35:6D:76:9B:A1:6B:98:1F:E6:9D:B5:DE:20:34:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/E9EEF08AA8356D769BA16B981FE69DB5DE203409.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9EEF08AA8356D769BA16B981FE69DB5DE203409.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/E9EEF08AA8356D769BA16B981FE69DB5DE203409.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:2a:be:ad:ec:a2:75:dd:7b:97:d4:5e:e2:89:ea:45:eb:e9:
e9:fa:89:dd:4b:08:ef:38:0f:2f:fd:75:ce:67:fa:8c:94:bb:
4f:5b:d3:5c:67:b2:c0:5d:b6:fc:97:3c:49:a9:61:6f:8c:5b:
9a:54:4d:9c:b9:de:67:72:8f:65:db:27:74:13:76:75:69:c0:
8d:ce:23:f1:3c:61:ac:cf:2c:ae:60:66:8b:97:c5:36:af:f6:
24:77:99:65:f9:1c:42:09:93:01:81:b6:8d:4a:1c:56:96:77:
bd:92:d6:8a:c7:b3:9d:8f:ba:b5:f6:9e:62:5e:44:93:f0:f4:
d8:ea:60:1c:ce:0a:da:56:2a:af:c6:ad:69:84:09:75:64:2b:
39:76:4f:3c:5c:b6:70:63:d5:bb:0f:a3:e1:b7:71:0d:b7:44:
15:e0:2c:72:18:81:01:41:7a:99:9b:1b:60:9d:79:ba:5b:6b:
43:37:f5:6d:04:c3:ee:80:a5:f2:b6:ef:56:b8:b1:4d:eb:d4:
f6:cf:31:df:46:31:02:03:c3:57:79:dc:1a:d8:78:bb:ee:ce:
8b:e7:49:65:78:9b:52:c9:78:2e:0f:1f:eb:b1:8a:c0:ae:a6:
a9:81:f4:dd:21:67:8f:be:49:b6:4a:f6:c5:1c:de:64:67:3e:
8f:58:79:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:53:02 2026 by rpki-client