
$ rpki-client -vvf repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.mft
File: E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.mft (raw, json)
Hash identifier: tNVlXjIxgs+ULUNAKxdyg+L0ASky0JrIGCqPfO26CM0=
Subject key identifier: BC:56:4E:93:64:85:7D:E1:20:39:AE:43:8E:61:86:26:36:79:24:76
Authority key identifier: E6:FE:A7:CE:7F:6F:A5:EA:E0:5E:BB:DF:D8:6F:D5:3E:84:FA:75:A8
Certificate issuer: /CN=E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8
Certificate serial: 29E36B8D8CAA674E05378321A3DD11BE11746E84
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.mft
Manifest number: DE
Signing time: Mon 03 Nov 2025 19:40:49 +0000
Manifest this update: Mon 03 Nov 2025 19:35:49 +0000
Manifest next update: Thu 06 Nov 2025 23:35:49 +0000
Files and hashes: 1: 3230332e37372e3230392e302f32342d3234203d3e203138333933.roa (hash: KUR9n4Zbr1Zb+02eEmjJT/AW53aBQ88o/bMZanP8qGw=)
2: 3230332e37372e3231362e302f32342d3234203d3e203138333933.roa (hash: 1x5BDs/Hd42tytuoj0eaAhNiq0H+PcR0fKy7n2rzIvk=)
3: 3230332e37372e3231302e302f32342d3234203d3e203138333933.roa (hash: iWMhjvfQ90b0ccxxANfrIanrHwujuPgFaL6IJZ5mDY0=)
4: 3230332e37372e3231312e302f32342d3234203d3e203138333933.roa (hash: wSxhqwpwkbtjSiwgdCbS81ShWGfJk6E76hm4y5v0tzA=)
5: 3230332e37372e3230382e302f32332d3234203d3e203138333933.roa (hash: cga9PxYRW2W/2S5ScnKBu2lZ2AUOp8KXxWiIXgyAwvw=)
6: 3230332e37372e3231392e302f32342d3234203d3e203138333933.roa (hash: yh5BBZ3OXt4wTUFIbbsc12s7A5O0jiPeoA543bBAogk=)
7: E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.crl (hash: lXUOAabwj7AuVKlaF+uXiffDJVZrOiUcyQgbgtDSMAQ=)
8: 3230332e37372e3231342e302f32342d3234203d3e203138333933.roa (hash: UlinjK/yzI8iSu9wbbCL97rGVWgn8NYRcVdH3cSBAHA=)
9: 3230332e37372e3231382e302f32342d3234203d3e203138333933.roa (hash: iyyv0v9FPRc4OP+Ae13xeuXUyw/NcmfDBPRlMwPk3Tc=)
10: 3230332e37372e3231372e302f32342d3234203d3e203138333933.roa (hash: 4gwT1HUZTiBF2VJsBDZIrYvkF0xtU3GBfDlgLs35T4U=)
11: 3230332e37372e3232302e302f32342d3234203d3e203138333933.roa (hash: c/XbFe4dPRB2q+OfVzGCTy9c4E7hXAP72IIURBQoeTI=)
12: 3230332e37372e3231322e302f32342d3234203d3e203138333933.roa (hash: zZSCQKvYtynTJ9WRFDeHrJZpzNaRf3w9cC4VjoPzxPg=)
13: 3230332e37372e3231332e302f32342d3234203d3e203138333933.roa (hash: SNItP+o1mCV3SKpmpi/InsKYLB5gdOg5tF9GMKwDZ3Y=)
14: 3230332e37372e3230382e302f32342d3234203d3e203138333933.roa (hash: dxNySDas4tRRRPBFWfK7118vL0i6sIfqhHAi9ml0Gp0=)
15: 3230332e37372e3232312e302f32342d3234203d3e203138333933.roa (hash: 0xxFOLf/6koMhGzcQfSFolx4Pf39+A7zbUOk9Q0J1O0=)
16: 3230332e37372e3232332e302f32342d3234203d3e203138333933.roa (hash: c/P2d5MbewwKYaGTQHc/ayeKqyO7ZuocO/YexYPUny0=)
17: 3230332e37372e3232322e302f32342d3234203d3e203138333933.roa (hash: FEAhTIH5UVtwATfIbp4cqVZNeh5njuSbc3BUBNoy9J0=)
18: 3230332e37372e3231352e302f32342d3234203d3e203138333933.roa (hash: g4hVaVf9DOtfqhmHz5N0bEmkStUlA25ce7Ah4ERrvdM=)
19: 323430363a326330303a3a2f33322d3332203d3e203138333933.roa (hash: ZvIOYubJ+KOpLdAH6lWrdFzQ/UkrzTNaoN6Xo2ij/oU=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.crl
rsync://repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 06 Nov 2025 23:35:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:e3:6b:8d:8c:aa:67:4e:05:37:83:21:a3:dd:11:be:11:74:6e:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8
Validity
Not Before: Nov 3 19:35:49 2025 GMT
Not After : Nov 6 23:35:49 2025 GMT
Subject: CN=BC564E9364857DE12039AE438E61862636792476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:4d:c5:65:01:8b:54:e0:c5:88:40:7f:f9:7f:
92:4d:6f:b0:85:8f:b3:f7:ad:f8:6e:79:5b:ce:f6:
d1:f2:d9:64:d6:26:8a:a2:53:5f:f1:f2:4d:08:a2:
32:30:33:06:b1:39:ae:64:d4:cb:c1:ec:3a:92:c7:
5a:65:d0:61:03:bb:bc:2e:26:d9:7c:24:0f:47:ea:
e6:62:1d:a4:ff:1c:73:0b:24:20:db:24:c1:8d:b3:
3e:20:dd:e5:b0:08:4c:ba:1f:7e:34:b9:b8:ad:c9:
24:97:6a:ef:b7:b3:01:1a:06:d0:01:2e:44:7b:89:
31:b6:98:ac:cc:f4:16:5c:2f:56:d8:87:21:d3:33:
f2:7b:33:86:37:1c:45:d6:ec:11:41:e6:54:e8:2d:
e8:b9:48:5e:ce:e3:50:0d:21:34:41:b7:63:12:63:
85:b2:ef:59:ac:ab:67:96:39:ee:b2:3e:51:94:a2:
17:65:03:36:0e:de:b4:c8:ab:c8:97:64:ac:82:c7:
a1:b4:30:12:3e:34:7b:19:d9:d7:db:6f:56:a4:19:
7d:8b:50:79:10:43:cc:45:d3:66:37:a0:dc:fa:7c:
f7:36:c9:11:14:ac:7e:ac:7c:a1:b3:dd:ac:f1:50:
6d:3a:a1:e1:71:92:32:f7:e6:ef:b8:ff:51:dc:b7:
4d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:56:4E:93:64:85:7D:E1:20:39:AE:43:8E:61:86:26:36:79:24:76
X509v3 Authority Key Identifier:
keyid:E6:FE:A7:CE:7F:6F:A5:EA:E0:5E:BB:DF:D8:6F:D5:3E:84:FA:75:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:a9:cc:21:0e:a3:c5:21:4e:8c:4a:52:1c:68:49:e5:f7:e2:
bf:be:6f:47:0e:af:99:7c:43:9f:91:50:a9:96:88:3f:c6:4a:
90:07:db:7e:66:52:81:ca:1f:1c:f2:53:b5:42:fc:ae:3c:1f:
f0:e9:ca:39:f2:79:fa:8a:07:b8:f4:90:9a:ed:0b:84:14:78:
45:9c:b8:43:af:d5:b4:23:63:68:22:9d:ec:cf:68:90:50:14:
21:46:ba:f7:8b:21:57:63:64:be:b0:60:8e:2b:eb:cc:f8:96:
4a:75:d4:a6:c9:24:a5:c6:50:27:87:33:23:e8:26:65:75:c1:
8a:6c:db:cb:b5:b8:38:70:98:14:be:48:08:46:99:6f:fb:d1:
ed:ae:23:f4:0b:f0:90:1e:44:cd:73:93:28:45:d2:68:db:31:
2f:b5:5e:6a:92:c3:19:ea:db:50:aa:d5:f6:c7:b8:88:61:eb:
ec:8b:44:c0:06:01:54:77:e9:f8:58:4c:0d:6f:3e:45:76:76:
3b:52:c2:be:38:2f:28:a7:5e:c0:a8:d8:67:6f:74:87:a3:3e:
a2:b5:c2:18:15:d4:d0:26:b3:2f:e6:69:3b:8d:05:f0:0b:8a:
05:0b:04:4b:e9:5c:5b:4d:ef:ae:ce:3c:97:28:b5:62:d2:f1:
d2:d0:4c:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:35:32 2025 by rpki-client