
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/E6782977133FCE90213CEBEC30761D98F47C2F41.mft
File: E6782977133FCE90213CEBEC30761D98F47C2F41.mft (raw, json)
Hash identifier: h4Tt8kvRY7qTYtW//nkMyL3qtOHObcB+yJWzb2496Fg=
Subject key identifier: AA:8C:04:0D:9A:1B:1E:AD:6C:43:C1:E1:CF:9F:8C:BA:33:03:2C:2F
Authority key identifier: E6:78:29:77:13:3F:CE:90:21:3C:EB:EC:30:76:1D:98:F4:7C:2F:41
Certificate issuer: /CN=E6782977133FCE90213CEBEC30761D98F47C2F41
Certificate serial: 582D395E47C17CFB6EB566C156D6F9E3E7FAC7EE
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6782977133FCE90213CEBEC30761D98F47C2F41.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/E6782977133FCE90213CEBEC30761D98F47C2F41.mft
Manifest number: C1
Signing time: Wed 23 Sep 2026 07:15:07 +0000
Manifest this update: Wed 23 Sep 2026 07:10:07 +0000
Manifest next update: Thu 24 Sep 2026 10:18:07 +0000
Files and hashes: 1: 3130332e372e3232362e302f32332d3233203d3e203539313335.roa (hash: AzwawxbCEg5H+zE23E5y6RqY3/0LQRvHyDvmDqo+Klw=)
2: 3130332e372e3232362e302f32342d3234203d3e203539313335.roa (hash: bESj5Nb0cN33a7g1XWz+UbX4GF5PV+yGORqTT/G1JCk=)
3: 3130332e372e3232372e302f32342d3234203d3e203539313335.roa (hash: usoIWcd8Xh8Y5o5mz4Th6snOG36cNVkHpCLTqZ4OQbk=)
4: E6782977133FCE90213CEBEC30761D98F47C2F41.crl (hash: Dye/RyqoiKfQIp45Zco5G6aTiapKtxssSsdF92+QQxE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/E6782977133FCE90213CEBEC30761D98F47C2F41.crl
rsync://rpki-rsync.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/E6782977133FCE90213CEBEC30761D98F47C2F41.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6782977133FCE90213CEBEC30761D98F47C2F41.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 10:18:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:2d:39:5e:47:c1:7c:fb:6e:b5:66:c1:56:d6:f9:e3:e7:fa:c7:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E6782977133FCE90213CEBEC30761D98F47C2F41
Validity
Not Before: Sep 23 07:10:07 2026 GMT
Not After : Sep 24 10:18:07 2026 GMT
Subject: CN=AA8C040D9A1B1EAD6C43C1E1CF9F8CBA33032C2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b6:d2:30:04:73:14:8e:ad:38:99:35:2c:8c:
42:2f:ae:c5:d7:96:b2:d8:c0:11:44:9a:1a:c5:3b:
a7:41:19:74:aa:65:7c:4e:a1:da:1a:6e:68:29:f6:
1d:8a:46:d7:96:af:ca:a9:19:07:a4:ae:63:9c:f3:
b3:0a:ba:31:d6:0b:32:7c:dc:aa:ea:1d:26:fc:44:
fe:f2:49:69:0a:8d:b4:20:0d:46:fa:82:9a:5a:bc:
0f:2d:34:1a:e0:da:10:28:eb:62:af:07:de:c0:12:
f0:d5:43:a1:ed:c3:da:f4:e7:67:7e:c8:fe:94:30:
bb:ed:46:f6:4d:13:d9:0f:4c:aa:28:65:e9:75:7a:
d0:e0:69:bb:ef:5a:39:6c:d2:cf:3d:22:d0:d3:96:
38:4d:a7:6c:36:4b:1a:40:3c:77:75:af:36:a7:78:
9a:ed:1e:36:f2:f9:e8:75:07:bc:ea:fa:1d:95:fc:
da:f1:61:2f:16:28:a5:d1:43:2f:31:61:f5:59:eb:
b1:97:4e:2b:70:0c:9a:c2:16:8e:fc:80:9a:3c:2b:
17:57:c7:d4:06:b8:ba:54:20:81:e4:c3:59:29:64:
8f:68:b8:2f:ef:c6:21:45:52:34:0a:67:d7:fb:ab:
f7:55:ee:88:86:ee:11:a6:b0:21:80:9e:64:65:87:
95:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:8C:04:0D:9A:1B:1E:AD:6C:43:C1:E1:CF:9F:8C:BA:33:03:2C:2F
X509v3 Authority Key Identifier:
keyid:E6:78:29:77:13:3F:CE:90:21:3C:EB:EC:30:76:1D:98:F4:7C:2F:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/E6782977133FCE90213CEBEC30761D98F47C2F41.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6782977133FCE90213CEBEC30761D98F47C2F41.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/E6782977133FCE90213CEBEC30761D98F47C2F41.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:7e:f6:30:29:74:f8:10:d4:e1:48:ff:9a:05:f2:7b:7c:00:
17:b1:7e:c4:2e:49:66:2b:8c:b4:7d:df:7b:b9:b4:c7:4f:ed:
aa:fb:a8:c1:45:35:ac:93:3f:8e:1d:4e:af:22:af:70:c6:b0:
cc:ad:15:be:44:51:b7:25:46:d5:af:91:bd:0f:f6:84:05:29:
78:58:e2:32:d6:7f:f9:01:e4:bb:d1:5d:f9:e4:ee:1a:6b:61:
a4:1d:c7:f3:f5:e7:53:6d:ef:e4:3a:6b:6f:61:60:11:6a:03:
de:3a:7a:ed:26:f7:2f:00:6f:87:f0:d3:2d:74:0a:85:c9:8b:
48:97:7c:53:9b:fb:a5:2f:47:80:fc:53:ac:72:89:25:41:5d:
19:18:e7:81:55:29:57:9b:46:e3:d4:27:e1:4c:fe:3f:1e:21:
76:9d:0b:aa:21:73:62:e7:57:4e:c6:13:e6:38:9e:4f:f4:ee:
40:8e:79:b4:8e:3b:bc:01:8d:fd:ba:5d:86:b4:32:7f:b7:e9:
d1:60:97:93:08:8b:56:8b:0d:2c:24:4a:16:04:98:59:90:86:
13:dc:65:86:ad:e9:26:c3:db:40:d7:b0:ad:1b:2e:97:25:bb:
ea:2a:00:36:88:e9:e8:9b:e6:99:7e:00:93:94:e2:6c:65:3b:
6b:59:6d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:16:21 2026 by rpki-client