
$ rpki-client -vvf rpki-rsync.idnic.net/repo/b57f0e6c-145a-4cf3-b283-42c4af819188/0/E37B0ECEEE1B7CCC291448F04F5224C8485B08AC.mft
File: E37B0ECEEE1B7CCC291448F04F5224C8485B08AC.mft (raw, json)
Hash identifier: Sd1NgLa3hRS8Lx5ztnXxaxewB0SNUyi1Ybj31XFI1ss=
Subject key identifier: B4:FD:39:3A:76:6A:99:20:EC:AB:9B:71:70:A4:EC:59:11:1D:66:D3
Authority key identifier: E3:7B:0E:CE:EE:1B:7C:CC:29:14:48:F0:4F:52:24:C8:48:5B:08:AC
Certificate issuer: /CN=E37B0ECEEE1B7CCC291448F04F5224C8485B08AC
Certificate serial: 204DC2004B74C5C823277C4BEA8A36B0F1FE8CA8
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E37B0ECEEE1B7CCC291448F04F5224C8485B08AC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b57f0e6c-145a-4cf3-b283-42c4af819188/0/E37B0ECEEE1B7CCC291448F04F5224C8485B08AC.mft
Manifest number: 0E
Signing time: Tue 12 May 2026 11:57:32 +0000
Manifest this update: Tue 12 May 2026 11:52:32 +0000
Manifest next update: Wed 13 May 2026 12:23:32 +0000
Files and hashes: 1: 3130332e3134392e3134302e302f32332d3234203d3e20313331373133.roa (hash: gGN3R5F2InSe76pqM3oQM2xm190h/AfNVtpMhoQ3+bg=)
2: E37B0ECEEE1B7CCC291448F04F5224C8485B08AC.crl (hash: aUujbYS1/754idUg0LUGmAqWaX5og2oLIarPZ3/3W3k=)
3: 323030313a6466333a323938303a3a2f34382d3438203d3e20313331373133.roa (hash: 80Gvop42Sr4Mv89QUfWoI6OrfNSDVB/7edd/HH4ZzLY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b57f0e6c-145a-4cf3-b283-42c4af819188/0/E37B0ECEEE1B7CCC291448F04F5224C8485B08AC.crl
rsync://rpki-rsync.idnic.net/repo/b57f0e6c-145a-4cf3-b283-42c4af819188/0/E37B0ECEEE1B7CCC291448F04F5224C8485B08AC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E37B0ECEEE1B7CCC291448F04F5224C8485B08AC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:4d:c2:00:4b:74:c5:c8:23:27:7c:4b:ea:8a:36:b0:f1:fe:8c:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E37B0ECEEE1B7CCC291448F04F5224C8485B08AC
Validity
Not Before: May 12 11:52:32 2026 GMT
Not After : May 13 12:23:32 2026 GMT
Subject: CN=B4FD393A766A9920ECAB9B7170A4EC59111D66D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:84:da:9d:fa:6f:b7:f6:52:f6:14:2f:fc:71:
2d:4d:4b:56:62:51:39:a9:1b:2d:7c:b8:f5:dd:84:
59:f8:01:37:f2:98:72:d8:6f:d2:c8:f7:d9:96:8b:
d3:51:f9:9d:d9:44:27:b2:f7:fc:0c:34:4d:39:96:
f1:1a:4f:7d:f5:aa:27:e8:70:6a:b7:64:39:7d:a0:
6e:54:3f:56:e6:9b:ad:62:2c:48:ca:b5:73:b0:34:
94:fa:0b:d7:3f:77:f2:85:4b:1b:75:d2:68:6b:a1:
cd:13:1b:11:68:c3:84:01:6c:6a:43:e3:02:a3:b8:
83:3a:5b:14:33:7a:98:06:94:3e:d3:f7:61:7c:a8:
54:46:e5:99:fa:39:4e:ca:26:b2:6a:b1:99:90:3d:
0d:78:0a:82:ed:b3:99:41:09:0d:9c:86:e5:7a:77:
02:84:a8:42:ac:2a:00:22:f8:57:fb:c9:66:31:0f:
b5:2c:ce:f2:55:2f:e8:fe:c2:a5:a9:fd:fe:cc:8f:
78:83:fa:b1:d9:fa:16:01:fe:94:76:13:fc:86:c1:
91:9b:a5:bb:4e:f2:f8:89:93:da:1c:e8:2c:99:63:
35:23:5f:b9:10:83:9a:00:03:18:a9:8d:4f:ec:0a:
3f:f6:9b:43:35:03:ca:65:4a:22:cc:2b:15:9d:c7:
3f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:FD:39:3A:76:6A:99:20:EC:AB:9B:71:70:A4:EC:59:11:1D:66:D3
X509v3 Authority Key Identifier:
keyid:E3:7B:0E:CE:EE:1B:7C:CC:29:14:48:F0:4F:52:24:C8:48:5B:08:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b57f0e6c-145a-4cf3-b283-42c4af819188/0/E37B0ECEEE1B7CCC291448F04F5224C8485B08AC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E37B0ECEEE1B7CCC291448F04F5224C8485B08AC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b57f0e6c-145a-4cf3-b283-42c4af819188/0/E37B0ECEEE1B7CCC291448F04F5224C8485B08AC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:ec:c6:bf:9a:90:38:da:83:58:2e:83:e5:b8:0c:1a:47:2f:
32:17:c1:e5:0a:13:57:62:71:c5:88:90:58:d1:90:c6:0f:75:
b8:01:62:bc:1f:6f:34:71:7b:c4:1d:6d:fb:6c:98:76:b4:cd:
b7:c6:2b:29:1b:d0:dc:f7:3c:ee:32:f6:80:15:c3:19:d3:e0:
a4:41:b7:2e:a7:a9:5b:36:e8:76:2e:dc:a9:8e:c7:e6:7c:2d:
86:42:97:8e:3a:e8:d6:fa:74:32:8a:39:ba:17:42:ad:48:d2:
38:d0:a3:5b:8d:9f:f7:cf:64:56:fe:1b:cc:b5:82:63:0c:f0:
cb:f7:01:59:2a:fd:40:4b:81:be:8a:5d:03:98:bf:08:6c:1d:
c2:9b:6c:aa:9f:2a:26:8e:ea:01:d4:73:c5:73:49:ac:b3:58:
aa:26:9f:e4:68:82:8e:1a:5c:97:64:29:2a:c2:5d:2a:cd:fb:
ef:9e:2e:a8:65:96:a1:60:87:8a:be:74:e0:19:b0:f2:a5:03:
82:64:21:c5:ac:48:35:53:58:81:24:93:42:01:81:96:31:2d:
66:a5:a1:d4:c8:f5:96:15:40:a2:17:58:49:6d:d9:a4:e7:ad:
82:8e:00:be:30:66:c6:69:e4:ed:d4:0d:67:b6:8d:ab:55:7c:
6d:fb:d9:97
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUIE3CAEt0xcgjJ3xL6oo2sPH+jKgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTM3QjBFQ0VFRTFCN0NDQzI5MTQ0OEYwNEY1MjI0Qzg0
ODVCMDhBQzAeFw0yNjA1MTIxMTUyMzJaFw0yNjA1MTMxMjIzMzJaMDMxMTAvBgNV
BAMTKEI0RkQzOTNBNzY2QTk5MjBFQ0FCOUI3MTcwQTRFQzU5MTExRDY2RDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZhNqd+m+39lL2FC/8cS1NS1Zi
UTmpGy18uPXdhFn4ATfymHLYb9LI99mWi9NR+Z3ZRCey9/wMNE05lvEaT331qifo
cGq3ZDl9oG5UP1bmm61iLEjKtXOwNJT6C9c/d/KFSxt10mhroc0TGxFow4QBbGpD
4wKjuIM6WxQzepgGlD7T92F8qFRG5Zn6OU7KJrJqsZmQPQ14CoLts5lBCQ2chuV6
dwKEqEKsKgAi+Ff7yWYxD7UszvJVL+j+wqWp/f7Mj3iD+rHZ+hYB/pR2E/yGwZGb
pbtO8viJk9oc6CyZYzUjX7kQg5oAAxipjU/sCj/2m0M1A8plSiLMKxWdxz/nAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUtP05OnZqmSDsq5txcKTsWREdZtMwHwYDVR0j
BBgwFoAU43sOzu4bfMwpFEjwT1IkyEhbCKwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YjU3ZjBlNmMtMTQ1YS00Y2YzLWIyODMtNDJjNGFmODE5MTg4LzAvRTM3QjBFQ0VF
RTFCN0NDQzI5MTQ0OEYwNEY1MjI0Qzg0ODVCMDhBQy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FMzdCMEVDRUVFMUI3Q0NDMjkxNDQ4RjA0RjUyMjRDODQ4NUIw
OEFDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjU3ZjBlNmMtMTQ1YS00Y2YzLWIy
ODMtNDJjNGFmODE5MTg4LzAvRTM3QjBFQ0VFRTFCN0NDQzI5MTQ0OEYwNEY1MjI0
Qzg0ODVCMDhBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAKjsxr+akDjag1gug+W4DBpHLzIXweUKE1di
ccWIkFjRkMYPdbgBYrwfbzRxe8QdbftsmHa0zbfGKykb0Nz3PO4y9oAVwxnT4KRB
ty6nqVs26HYu3KmOx+Z8LYZCl4466Nb6dDKKOboXQq1I0jjQo1uNn/fPZFb+G8y1
gmMM8Mv3AVkq/UBLgb6KXQOYvwhsHcKbbKqfKiaO6gHUc8VzSayzWKomn+Rogo4a
XJdkKSrCXSrN+++eLqhllqFgh4q+dOAZsPKlA4JkIcWsSDVTWIEkk0IBgZYxLWal
odTI9ZYVQKIXWElt2aTnrYKOAL4wZsZp5O3UDWe2jatVfG372Zc=
-----END CERTIFICATE-----
Generated at Tue May 12 22:49:58 2026 by rpki-client