
$ rpki-client -vvf rpki-rsync.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/E0AE9FAD9E259082B06CCBB94AF478F6B86125F9.mft
File: E0AE9FAD9E259082B06CCBB94AF478F6B86125F9.mft (raw, json)
Hash identifier: XmCtsj6yem4J7im6WqFLqHVRbpxos/ZPV2sbWQQ8s4Q=
Subject key identifier: 9C:C3:86:C2:CE:CF:40:DF:C8:61:2E:78:38:2A:93:3B:89:3D:52:B3
Authority key identifier: E0:AE:9F:AD:9E:25:90:82:B0:6C:CB:B9:4A:F4:78:F6:B8:61:25:F9
Certificate issuer: /CN=E0AE9FAD9E259082B06CCBB94AF478F6B86125F9
Certificate serial: 5421389128D444EBF5793FDD03E0A3EC1A6BBC8F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E0AE9FAD9E259082B06CCBB94AF478F6B86125F9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/E0AE9FAD9E259082B06CCBB94AF478F6B86125F9.mft
Manifest number: 6F
Signing time: Fri 24 Jul 2026 03:38:46 +0000
Manifest this update: Fri 24 Jul 2026 03:33:46 +0000
Manifest next update: Sat 25 Jul 2026 05:32:46 +0000
Files and hashes: 1: 3130332e3139352e32382e302f32342d3234203d3e20313530353133.roa (hash: q+RRwqPLMgbRcU4CF8v6ceD8xY9lz0UrAi1vn0vplwA=)
2: 3130332e3133392e3230372e302f32342d3234203d3e20313530353133.roa (hash: PrnOvop5MQlI3Bsjow/Ci5R1laOpI/zKBTh7ZhHcVKA=)
3: E0AE9FAD9E259082B06CCBB94AF478F6B86125F9.crl (hash: biZYPnm0Kn7ZMqtjmXiajYdk4SNjWSepulYBOYjRrIQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/E0AE9FAD9E259082B06CCBB94AF478F6B86125F9.crl
rsync://rpki-rsync.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/E0AE9FAD9E259082B06CCBB94AF478F6B86125F9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E0AE9FAD9E259082B06CCBB94AF478F6B86125F9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 05:32:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:21:38:91:28:d4:44:eb:f5:79:3f:dd:03:e0:a3:ec:1a:6b:bc:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E0AE9FAD9E259082B06CCBB94AF478F6B86125F9
Validity
Not Before: Jul 24 03:33:46 2026 GMT
Not After : Jul 25 05:32:46 2026 GMT
Subject: CN=9CC386C2CECF40DFC8612E78382A933B893D52B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d3:b0:e5:46:0f:bd:60:6a:64:c3:ef:e5:04:
b8:82:bb:14:49:3b:cb:2d:bf:03:60:7d:43:fd:1c:
10:05:03:f7:1e:1c:0b:9e:a9:b7:c3:52:e1:c3:bb:
20:8a:3d:cc:c3:8c:b0:65:71:78:99:d4:30:8a:6f:
5f:6a:79:32:92:db:e8:41:20:61:30:ac:0d:6b:a4:
a2:12:2f:e7:8a:0c:c1:fa:b6:23:ee:35:f3:1d:e5:
e4:cd:6a:94:9b:00:30:83:05:14:ec:bb:ce:ac:13:
e6:2f:85:ee:8d:95:b2:2a:ab:cb:06:84:13:e9:9a:
90:c6:21:99:03:ff:9c:a7:d5:9c:b0:bb:14:1f:e1:
a0:ea:7b:10:0d:ce:4d:81:47:d8:c3:05:11:a4:c8:
0c:21:70:3c:67:c0:fb:83:d2:19:72:25:9d:fd:57:
a3:3a:8a:14:66:3e:5e:fd:0b:52:6d:9d:09:91:c4:
15:2e:4d:8a:39:04:0d:a5:0c:d0:a0:a3:34:3c:33:
e3:b1:48:4c:55:c3:a5:2a:da:d0:c2:15:14:59:15:
8b:b3:4a:44:1a:e7:73:b8:8e:2d:f5:98:37:64:ca:
39:95:24:ba:e6:09:e7:22:7e:80:e7:66:7e:f6:43:
9f:f8:1f:b7:0b:b6:68:4a:3a:59:25:93:22:81:fa:
fa:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:C3:86:C2:CE:CF:40:DF:C8:61:2E:78:38:2A:93:3B:89:3D:52:B3
X509v3 Authority Key Identifier:
keyid:E0:AE:9F:AD:9E:25:90:82:B0:6C:CB:B9:4A:F4:78:F6:B8:61:25:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/E0AE9FAD9E259082B06CCBB94AF478F6B86125F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E0AE9FAD9E259082B06CCBB94AF478F6B86125F9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/E0AE9FAD9E259082B06CCBB94AF478F6B86125F9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:69:3e:e8:69:3f:6c:a9:be:50:65:89:46:16:6b:da:0a:e6:
a7:b6:d9:b4:02:dc:cc:6a:bf:43:17:d9:69:56:af:3d:30:8e:
05:8c:16:00:3e:1b:f4:a1:38:30:ff:2b:80:3f:8a:58:3d:ba:
a4:15:47:ef:34:13:ce:57:a5:d8:ca:69:82:fd:c9:0c:df:13:
44:fb:28:b4:e4:04:b0:49:57:fb:2e:d0:31:b4:21:38:f4:1b:
bf:0f:33:7c:dc:7e:44:36:a6:1f:92:d7:fa:c7:45:7b:85:f8:
cb:74:29:31:4c:19:24:54:34:13:d9:7b:4d:e3:d1:2e:e5:8a:
95:bd:de:70:68:75:7b:ce:81:7c:a8:5a:65:1f:e6:85:71:97:
fe:8d:9d:6f:78:51:c6:46:f0:30:ff:71:55:72:2e:b4:43:00:
68:d3:a8:45:58:99:ba:45:af:67:d1:86:82:4b:a8:6e:fc:ef:
91:73:93:46:64:e5:43:e1:c8:51:69:b3:75:00:45:c1:30:74:
35:db:e2:2f:ea:00:97:fd:89:bd:4d:18:c1:f1:dd:fb:3a:59:
02:47:17:95:a9:35:6e:ad:1a:1d:e9:6a:2f:a9:b2:bd:d1:c1:
41:34:db:6b:4d:7a:7c:3d:56:5b:12:01:06:76:1b:1e:69:3c:
e5:98:20:8d
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUVCE4kSjUROv1eT/dA+Cj7BprvI8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTBBRTlGQUQ5RTI1OTA4MkIwNkNDQkI5NEFGNDc4RjZC
ODYxMjVGOTAeFw0yNjA3MjQwMzMzNDZaFw0yNjA3MjUwNTMyNDZaMDMxMTAvBgNV
BAMTKDlDQzM4NkMyQ0VDRjQwREZDODYxMkU3ODM4MkE5MzNCODkzRDUyQjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs07DlRg+9YGpkw+/lBLiCuxRJ
O8stvwNgfUP9HBAFA/ceHAueqbfDUuHDuyCKPczDjLBlcXiZ1DCKb19qeTKS2+hB
IGEwrA1rpKISL+eKDMH6tiPuNfMd5eTNapSbADCDBRTsu86sE+Yvhe6NlbIqq8sG
hBPpmpDGIZkD/5yn1ZywuxQf4aDqexANzk2BR9jDBRGkyAwhcDxnwPuD0hlyJZ39
V6M6ihRmPl79C1JtnQmRxBUuTYo5BA2lDNCgozQ8M+OxSExVw6Uq2tDCFRRZFYuz
SkQa53O4ji31mDdkyjmVJLrmCecifoDnZn72Q5/4H7cLtmhKOlklkyKB+vpPAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUnMOGws7PQN/IYS54OCqTO4k9UrMwHwYDVR0j
BBgwFoAU4K6frZ4lkIKwbMu5SvR49rhhJfkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YjQ5MTJjOWItZGNlNC00MGU2LTk1ODgtZDdjYThjMzdlZjRkLzAvRTBBRTlGQUQ5
RTI1OTA4MkIwNkNDQkI5NEFGNDc4RjZCODYxMjVGOS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FMEFFOUZBRDlFMjU5MDgyQjA2Q0NCQjk0QUY0NzhGNkI4NjEy
NUY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjQ5MTJjOWItZGNlNC00MGU2LTk1
ODgtZDdjYThjMzdlZjRkLzAvRTBBRTlGQUQ5RTI1OTA4MkIwNkNDQkI5NEFGNDc4
RjZCODYxMjVGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEdpPuhpP2ypvlBliUYWa9oK5qe22bQC3Mxq
v0MX2WlWrz0wjgWMFgA+G/ShODD/K4A/ilg9uqQVR+80E85XpdjKaYL9yQzfE0T7
KLTkBLBJV/su0DG0ITj0G78PM3zcfkQ2ph+S1/rHRXuF+Mt0KTFMGSRUNBPZe03j
0S7lipW93nBodXvOgXyoWmUf5oVxl/6NnW94UcZG8DD/cVVyLrRDAGjTqEVYmbpF
r2fRhoJLqG7875Fzk0Zk5UPhyFFps3UARcEwdDXb4i/qAJf9ib1NGMHx3fs6WQJH
F5WpNW6tGh3pai+psr3RwUE022tNenw9VlsSAQZ2Gx5pPOWYII0=
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:52:27 2026 by rpki-client