
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/E1AE51C8B4FB85A0C6F681266B78AEB4E206B05B.mft
File: E1AE51C8B4FB85A0C6F681266B78AEB4E206B05B.mft (raw, json)
Hash identifier: v0e9JrnQbPfAD1NYBSgV5Codvly0h44ccv9mHC21tpc=
Subject key identifier: BC:4D:95:58:6B:60:D7:A7:02:1C:A5:BA:50:04:5C:DD:3D:11:B7:87
Authority key identifier: E1:AE:51:C8:B4:FB:85:A0:C6:F6:81:26:6B:78:AE:B4:E2:06:B0:5B
Certificate issuer: /CN=E1AE51C8B4FB85A0C6F681266B78AEB4E206B05B
Certificate serial: 490C358B14592B44DF2B24A0F95B6E4DED2DEB02
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E1AE51C8B4FB85A0C6F681266B78AEB4E206B05B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/E1AE51C8B4FB85A0C6F681266B78AEB4E206B05B.mft
Manifest number: 0D
Signing time: Tue 12 May 2026 12:17:42 +0000
Manifest this update: Tue 12 May 2026 12:12:42 +0000
Manifest next update: Wed 13 May 2026 15:04:42 +0000
Files and hashes: 1: E1AE51C8B4FB85A0C6F681266B78AEB4E206B05B.crl (hash: qtbFQp10N1iaSX54Zaivbb4PUvaTcjFQAwbq1C8ILXI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/E1AE51C8B4FB85A0C6F681266B78AEB4E206B05B.crl
rsync://rpki-rsync.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/E1AE51C8B4FB85A0C6F681266B78AEB4E206B05B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E1AE51C8B4FB85A0C6F681266B78AEB4E206B05B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 15:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:0c:35:8b:14:59:2b:44:df:2b:24:a0:f9:5b:6e:4d:ed:2d:eb:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1AE51C8B4FB85A0C6F681266B78AEB4E206B05B
Validity
Not Before: May 12 12:12:42 2026 GMT
Not After : May 13 15:04:42 2026 GMT
Subject: CN=BC4D95586B60D7A7021CA5BA50045CDD3D11B787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:37:7e:4f:5e:dc:5f:aa:2d:20:77:b2:8c:62:
ef:77:ab:60:4f:3d:a2:13:f2:92:64:33:9f:16:1b:
0c:92:30:be:5c:47:cd:7b:76:54:a5:ee:df:18:5d:
0e:9e:37:76:08:7a:d1:03:db:10:0b:a7:b1:96:3e:
f1:79:0c:ed:80:fb:d1:97:d4:ed:20:83:9b:0d:38:
86:2b:b7:d9:f7:a7:7d:f1:2d:67:f9:10:9f:6e:09:
c2:75:90:9b:6d:39:df:d0:d3:31:e4:29:00:71:b9:
d3:05:68:8f:f2:fb:5a:a4:26:e7:2b:cc:b7:b4:6d:
22:fb:89:f3:18:2b:98:6a:b6:e7:2b:d7:49:46:84:
72:bb:0d:29:d3:a0:d6:4c:73:d2:ba:bd:68:63:8b:
f1:84:9e:05:da:be:38:f3:98:00:9e:98:89:a6:22:
39:15:2c:ac:f5:d8:9c:c8:82:1e:00:21:da:b4:e2:
fb:71:80:f8:fe:52:bf:e9:d4:95:71:c5:0a:a9:de:
c3:1c:0e:47:e6:9e:3b:0a:44:48:78:60:e7:5e:36:
c2:9d:e7:4f:8e:ea:c9:b3:cb:89:b9:93:b0:50:38:
9f:52:5a:aa:b2:72:65:97:f9:34:2d:f8:e5:a8:61:
bf:ae:cb:2b:eb:b5:f6:db:15:e9:e4:2a:91:f2:69:
0d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:4D:95:58:6B:60:D7:A7:02:1C:A5:BA:50:04:5C:DD:3D:11:B7:87
X509v3 Authority Key Identifier:
keyid:E1:AE:51:C8:B4:FB:85:A0:C6:F6:81:26:6B:78:AE:B4:E2:06:B0:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/E1AE51C8B4FB85A0C6F681266B78AEB4E206B05B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E1AE51C8B4FB85A0C6F681266B78AEB4E206B05B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/E1AE51C8B4FB85A0C6F681266B78AEB4E206B05B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:4e:1f:4d:b7:25:98:36:c5:02:59:3a:ab:c8:08:2b:6d:af:
01:23:fa:5c:b9:77:27:c1:d6:7a:7f:f7:73:a6:28:bb:ee:8e:
1c:3e:8e:19:e8:0f:47:f0:ee:d9:67:89:a0:f1:50:db:ce:48:
77:7d:89:8f:40:c3:f8:b2:11:f2:b7:67:0d:24:24:bf:b7:73:
f2:b1:73:38:02:1e:54:c4:00:5b:95:43:9c:ca:6b:8c:f2:76:
13:5b:7d:82:e8:8e:c9:3b:c1:33:1f:e8:49:8c:6e:86:56:0c:
f8:aa:b7:7f:dd:72:9b:99:94:03:ba:0c:ac:83:20:4a:73:95:
e7:97:19:15:3c:59:3d:99:52:65:3c:b4:57:cf:48:4b:dd:5e:
18:34:3b:de:00:d7:f5:7a:4a:21:29:3c:f0:78:10:f6:06:d6:
16:07:84:7e:48:56:84:4f:2d:aa:e8:f1:f7:b2:f4:d2:a1:97:
c4:46:53:fa:2f:2b:05:6b:9d:17:93:1b:13:55:99:53:a4:08:
08:4a:60:1b:41:c3:28:17:30:1c:3f:11:5a:78:1f:d5:6b:b5:
ff:1d:64:20:d6:d6:29:ea:6e:55:dc:ef:59:97:63:89:2a:26:
40:44:eb:d5:02:7e:1c:7a:65:e3:19:0f:67:06:48:69:61:9f:
2b:67:c9:da
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUSQw1ixRZK0TfKySg+VtuTe0t6wIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTFBRTUxQzhCNEZCODVBMEM2RjY4MTI2NkI3OEFFQjRF
MjA2QjA1QjAeFw0yNjA1MTIxMjEyNDJaFw0yNjA1MTMxNTA0NDJaMDMxMTAvBgNV
BAMTKEJDNEQ5NTU4NkI2MEQ3QTcwMjFDQTVCQTUwMDQ1Q0REM0QxMUI3ODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/N35PXtxfqi0gd7KMYu93q2BP
PaIT8pJkM58WGwySML5cR817dlSl7t8YXQ6eN3YIetED2xALp7GWPvF5DO2A+9GX
1O0gg5sNOIYrt9n3p33xLWf5EJ9uCcJ1kJttOd/Q0zHkKQBxudMFaI/y+1qkJucr
zLe0bSL7ifMYK5hqtucr10lGhHK7DSnToNZMc9K6vWhji/GEngXavjjzmACemImm
IjkVLKz12JzIgh4AIdq04vtxgPj+Ur/p1JVxxQqp3sMcDkfmnjsKREh4YOdeNsKd
50+O6smzy4m5k7BQOJ9SWqqycmWX+TQt+OWoYb+uyyvrtfbbFenkKpHyaQ1LAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUvE2VWGtg16cCHKW6UARc3T0Rt4cwHwYDVR0j
BBgwFoAU4a5RyLT7haDG9oEma3iutOIGsFswDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZDgzNDljZDQtYzA3OS00MWZmLWFhOWUtMzZmM2Q0NDgyNjQ1LzAvRTFBRTUxQzhC
NEZCODVBMEM2RjY4MTI2NkI3OEFFQjRFMjA2QjA1Qi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FMUFFNTFDOEI0RkI4NUEwQzZGNjgxMjY2Qjc4QUVCNEUyMDZC
MDVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDgzNDljZDQtYzA3OS00MWZmLWFh
OWUtMzZmM2Q0NDgyNjQ1LzAvRTFBRTUxQzhCNEZCODVBMEM2RjY4MTI2NkI3OEFF
QjRFMjA2QjA1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAG5OH023JZg2xQJZOqvICCttrwEj+ly5dyfB
1np/93OmKLvujhw+jhnoD0fw7tlniaDxUNvOSHd9iY9Aw/iyEfK3Zw0kJL+3c/Kx
czgCHlTEAFuVQ5zKa4zydhNbfYLojsk7wTMf6EmMboZWDPiqt3/dcpuZlAO6DKyD
IEpzleeXGRU8WT2ZUmU8tFfPSEvdXhg0O94A1/V6SiEpPPB4EPYG1hYHhH5IVoRP
Laro8fey9NKhl8RGU/ovKwVrnReTGxNVmVOkCAhKYBtBwygXMBw/EVp4H9Vrtf8d
ZCDW1inqblXc71mXY4kqJkBE69UCfhx6ZeMZD2cGSGlhnytnydo=
-----END CERTIFICATE-----
Generated at Wed May 13 04:16:32 2026 by rpki-client