
$ rpki-client -vvf rpki-rsync.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.mft
File: E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.mft (raw, json)
Hash identifier: OiVJ8GqfwcpfUeWaQzESg2N0DS7jSMPOpY2t7TqGFYg=
Subject key identifier: 35:88:0C:2A:9E:28:3E:BF:FD:87:ED:72:0C:3A:1F:FD:02:B3:97:72
Authority key identifier: E5:F6:F9:E5:DD:9D:34:BD:A0:8C:45:31:BA:70:87:61:A3:5A:DE:60
Certificate issuer: /CN=E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60
Certificate serial: 7CD477A356B850A83C3F1806C3B07F7ACCDCC4E7
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.mft
Manifest number: 77
Signing time: Wed 29 Jul 2026 04:41:50 +0000
Manifest this update: Wed 29 Jul 2026 04:36:50 +0000
Manifest next update: Thu 30 Jul 2026 04:44:50 +0000
Files and hashes: 1: 3130332e3137382e3137312e302f32342d3234203d3e20313339393532.roa (hash: aDinqjPhgNq50kNy+lg2Iba0bDegBSFkr3DIakb0nTU=)
2: E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.crl (hash: YwN8kIz/OLCxc68pjtwAtumPtFf8I1UDbyXu5AHxYiA=)
3: 3130332e3137382e3137302e302f32342d3234203d3e20313339393532.roa (hash: Q+Zpu9s7FFAblJfI/9bq1CU9BNldDzB+MO83xGJv/O8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.crl
rsync://rpki-rsync.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 04:44:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:d4:77:a3:56:b8:50:a8:3c:3f:18:06:c3:b0:7f:7a:cc:dc:c4:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60
Validity
Not Before: Jul 29 04:36:50 2026 GMT
Not After : Jul 30 04:44:50 2026 GMT
Subject: CN=35880C2A9E283EBFFD87ED720C3A1FFD02B39772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:42:b0:60:b5:2e:71:e4:22:9c:41:10:d4:c4:
de:ee:a1:66:fd:f8:33:6a:b1:5c:37:c9:89:86:a0:
0f:0e:80:4b:8d:d9:b9:8a:a4:d2:68:0e:26:91:04:
2c:a0:5a:fb:bf:55:6e:19:b0:d1:cb:b9:b9:7a:b8:
c1:02:5a:7b:dd:48:7e:eb:c1:47:a9:03:92:cc:0f:
b8:df:25:1d:98:b7:6e:84:6b:f4:4b:fa:df:7e:05:
ae:73:8d:44:d5:ec:f5:d2:c2:ff:c2:fb:0b:72:3b:
df:cd:8c:ba:3c:79:55:09:4f:01:4c:f3:c3:1b:72:
ab:aa:07:8f:3f:11:a7:97:bf:5e:d2:e9:76:47:ac:
ec:f5:5a:89:d1:9b:d7:00:1d:90:d0:11:20:85:12:
ec:99:47:21:66:5f:3b:c6:a3:3a:6d:20:73:51:60:
65:7b:61:6c:9d:67:af:7d:60:b5:35:18:a0:c1:0e:
63:bd:88:11:53:cc:97:b2:d3:18:d2:1f:86:02:16:
cd:1e:d5:37:53:4a:4b:de:69:39:3d:fc:b5:dc:dd:
0d:ad:7a:f8:62:56:c8:ec:db:86:05:8f:93:80:34:
e7:bc:12:20:06:7c:5b:40:43:78:cb:a8:2c:4a:54:
6e:9b:a8:0f:21:e7:2c:75:50:55:b1:21:db:66:20:
60:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:88:0C:2A:9E:28:3E:BF:FD:87:ED:72:0C:3A:1F:FD:02:B3:97:72
X509v3 Authority Key Identifier:
keyid:E5:F6:F9:E5:DD:9D:34:BD:A0:8C:45:31:BA:70:87:61:A3:5A:DE:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:19:e5:60:98:e9:1f:76:55:7f:b7:3b:7d:d4:4d:4a:04:6c:
93:d7:3b:51:d7:45:0c:fc:e2:cb:47:ee:72:b3:76:44:aa:e7:
d5:72:8e:57:f9:65:18:ac:f3:5b:6c:dd:b4:ce:cc:e8:81:d5:
44:92:74:db:5d:e3:b0:e6:ec:90:c4:47:85:2f:00:c7:a5:a1:
91:26:20:7a:fe:d0:d4:bf:b6:c2:aa:74:b0:a4:f3:1e:17:4e:
64:59:3f:3f:ed:21:f0:14:c6:29:e2:6b:a1:a8:c3:a0:6f:6f:
6d:77:6c:24:f9:00:9d:41:40:e9:c1:14:72:2b:f9:06:a8:94:
45:8e:03:01:35:9d:64:08:8a:35:d8:a2:3d:61:23:1d:e8:9b:
8a:1d:76:86:2b:5e:0b:e9:ed:77:d5:53:b5:dc:46:79:5f:f8:
2e:71:70:06:49:99:1f:f6:47:3e:2f:30:61:25:93:70:fa:a5:
ce:d2:47:31:85:ad:cc:47:33:08:e6:59:10:0a:98:06:47:7e:
5f:b2:b2:1f:5f:13:c3:fd:70:df:54:d8:49:96:cf:ca:cf:29:
32:7a:6c:ac:8d:ad:c6:bb:61:45:4c:01:91:e4:9c:d4:15:8a:
b0:b9:f4:05:e2:9f:14:bc:4c:78:13:e3:91:81:a1:e7:ef:d2:
66:bf:5e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:02:14 2026 by rpki-client