
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d04d6427-3f03-4d21-b8cc-bbfd2a3f8c33/0/E205BAF9253BD3679578372318D2263D430F4D99.mft
File: E205BAF9253BD3679578372318D2263D430F4D99.mft (raw, json)
Hash identifier: qmVTKtl1yARteJs9EtLAkrLSRlbUoNpgtvxT79h4FAQ=
Subject key identifier: 65:7F:CC:D5:53:F9:5B:90:7D:1F:96:3B:DF:7E:62:A5:D7:8A:E7:23
Authority key identifier: E2:05:BA:F9:25:3B:D3:67:95:78:37:23:18:D2:26:3D:43:0F:4D:99
Certificate issuer: /CN=E205BAF9253BD3679578372318D2263D430F4D99
Certificate serial: 525828FE6E988016753151F8FB0C4BFD33337253
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E205BAF9253BD3679578372318D2263D430F4D99.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d04d6427-3f03-4d21-b8cc-bbfd2a3f8c33/0/E205BAF9253BD3679578372318D2263D430F4D99.mft
Manifest number: 0106
Signing time: Sun 15 Nov 2026 09:25:53 +0000
Manifest this update: Sun 15 Nov 2026 09:20:53 +0000
Manifest next update: Mon 16 Nov 2026 10:03:53 +0000
Files and hashes: 1: E205BAF9253BD3679578372318D2263D430F4D99.crl (hash: QGICg8pseEOS66s7E1YhpA6GFpca7buwMua0QaNmAbM=)
2: 3130332e3136342e3133362e302f32332d3234203d3e203137393935.roa (hash: HZWp6s4pZWF/5Jmtyb043W9PpmxxelaQFAtDR552/AM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d04d6427-3f03-4d21-b8cc-bbfd2a3f8c33/0/E205BAF9253BD3679578372318D2263D430F4D99.crl
rsync://rpki-rsync.idnic.net/repo/d04d6427-3f03-4d21-b8cc-bbfd2a3f8c33/0/E205BAF9253BD3679578372318D2263D430F4D99.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E205BAF9253BD3679578372318D2263D430F4D99.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 16 Nov 2026 10:03:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:58:28:fe:6e:98:80:16:75:31:51:f8:fb:0c:4b:fd:33:33:72:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E205BAF9253BD3679578372318D2263D430F4D99
Validity
Not Before: Nov 15 09:20:53 2026 GMT
Not After : Nov 16 10:03:53 2026 GMT
Subject: CN=657FCCD553F95B907D1F963BDF7E62A5D78AE723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ac:87:02:42:3c:34:7b:ed:92:89:46:6d:5e:
7f:ac:1a:01:f9:d0:48:18:d4:27:c5:5a:11:06:96:
7f:d9:2b:1b:f6:3a:fb:08:04:ff:7f:ac:73:7d:75:
b8:41:37:d0:93:8e:22:1f:d8:71:95:51:d0:06:bf:
ad:de:73:16:16:3e:8d:6b:b7:24:df:3c:1f:8f:af:
84:97:88:8f:cf:7b:df:c6:e8:cb:7d:b5:8f:0c:d3:
fc:71:52:e9:bd:b6:46:f6:58:e9:5f:0b:c0:5d:ef:
1b:3d:9e:53:39:ad:31:47:d8:f6:68:c3:4f:ab:06:
ad:d8:92:96:d7:cd:b3:9d:61:71:94:9f:7b:9e:81:
7a:f0:f8:6b:e6:1e:fa:83:e4:6d:87:6d:fe:72:08:
ca:fe:68:e5:d6:fb:ca:97:64:24:15:d2:a2:3e:29:
fc:47:82:f2:87:ba:31:29:3c:e4:57:3a:d4:e3:02:
10:85:1b:1a:a0:26:9a:58:98:d2:8c:28:3f:eb:7c:
ef:c3:4a:53:96:01:78:7b:95:2a:78:e9:a7:1e:f7:
4e:2c:80:7f:32:a0:d6:23:06:fe:ba:c6:1b:11:6e:
0a:f8:d2:b0:fa:79:ac:2f:35:be:60:a1:79:68:99:
45:88:55:09:a6:8a:5f:6c:14:3c:d0:f9:18:7b:41:
0d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:7F:CC:D5:53:F9:5B:90:7D:1F:96:3B:DF:7E:62:A5:D7:8A:E7:23
X509v3 Authority Key Identifier:
keyid:E2:05:BA:F9:25:3B:D3:67:95:78:37:23:18:D2:26:3D:43:0F:4D:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d04d6427-3f03-4d21-b8cc-bbfd2a3f8c33/0/E205BAF9253BD3679578372318D2263D430F4D99.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E205BAF9253BD3679578372318D2263D430F4D99.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d04d6427-3f03-4d21-b8cc-bbfd2a3f8c33/0/E205BAF9253BD3679578372318D2263D430F4D99.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:db:93:6f:f3:6c:ed:87:96:21:1c:6a:3e:e5:6d:5d:1e:62:
51:ef:57:8c:1e:de:45:ed:21:f7:5e:61:5b:87:0b:1f:38:ae:
b0:b4:1c:2d:7d:84:02:4a:e6:c1:79:30:45:ec:66:a3:19:e7:
e4:cf:01:1e:ad:88:ad:35:3f:c0:10:d2:64:b5:b0:5f:65:a7:
3e:05:26:a7:49:26:82:d2:82:24:61:01:78:0a:f3:f2:72:60:
db:86:50:57:26:32:39:f9:93:41:53:5f:28:79:69:25:fd:0f:
8a:a8:d3:ee:81:aa:a0:8e:37:13:8a:3f:8f:e1:6c:7f:7d:2f:
81:1c:51:31:f5:4a:c6:1a:46:a6:69:b2:37:4c:c2:83:16:87:
f9:08:c3:37:e0:15:88:b1:2a:36:ec:14:2c:b8:fa:ee:9b:96:
fb:3e:98:e7:0f:7e:72:dd:89:0b:fa:49:52:4f:c5:4e:ee:3a:
5d:c7:10:08:4c:44:85:ee:54:8c:37:13:76:f9:01:e3:3e:76:
ae:e4:47:df:90:2f:b4:47:7c:1d:ae:86:61:a5:82:94:60:ae:
0f:ef:c5:1e:ab:1d:3e:33:40:76:4b:78:f3:5d:3b:d1:dd:bf:
79:dc:d4:dd:46:06:7f:97:35:72:7f:a6:89:ba:78:70:be:4f:
4c:c6:77:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:55:19 2026 by rpki-client