
$ rpki-client -vvf rpki-rsync.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.mft
File: ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.mft (raw, json)
Hash identifier: OC0WGw948g9KrrF3bXEqKaNh0MTA9wcov3VqZUGumXE=
Subject key identifier: 33:33:DC:5A:3A:BC:0B:60:DE:0F:97:A2:D1:03:F1:8F:0D:1B:5C:5B
Authority key identifier: EC:A0:04:7E:A8:E4:DC:E9:2E:BC:57:2E:E8:A1:1D:17:C6:B6:48:72
Certificate issuer: /CN=ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872
Certificate serial: 6A85E0B8F51DFA86173B0B492F6243471618ADDA
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.mft
Manifest number: 39
Signing time: Sat 13 Jun 2026 03:58:51 +0000
Manifest this update: Sat 13 Jun 2026 03:53:51 +0000
Manifest next update: Sun 14 Jun 2026 05:51:51 +0000
Files and hashes: 1: ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.crl (hash: iW1WGzNii7tqamAiCwg6UFbH2I2zJcd4t5P03NLUUu4=)
2: 3135372e36362e35382e302f32332d3233203d3e203633383633.roa (hash: UIZ5WPv7k1hpGcTiFHJVpKxY08OSIOQ+IDxbkKabgJw=)
3: 3135372e36362e35392e302f32342d3234203d3e203633383633.roa (hash: xBh74co4G4oy4kEOH1+s92iqFVlcazWJc0LznYHJ110=)
4: 3135372e36362e35382e302f32342d3234203d3e203633383633.roa (hash: a6w3hGAhWsxMabz324Q4GA5dPuEuhj0nKmf3WW+KTCc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.crl
rsync://rpki-rsync.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 21:18:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:85:e0:b8:f5:1d:fa:86:17:3b:0b:49:2f:62:43:47:16:18:ad:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872
Validity
Not Before: Jun 13 03:53:51 2026 GMT
Not After : Jun 14 05:51:51 2026 GMT
Subject: CN=3333DC5A3ABC0B60DE0F97A2D103F18F0D1B5C5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:61:c6:bd:c6:4c:66:c3:59:20:2e:1a:4d:af:
ac:7b:a5:8a:0b:e8:a6:5c:bd:75:4e:a2:7e:da:88:
8f:d6:07:6a:b6:9d:ba:67:59:f3:58:90:2c:94:75:
85:86:cd:da:4d:0b:0d:62:57:6b:ec:45:41:0f:a4:
e6:bc:60:dc:60:8d:b8:5c:eb:68:0a:25:60:ab:84:
8a:a6:b5:b5:c7:dd:be:78:d7:74:ab:c8:9b:b4:01:
8c:1c:70:1d:8c:ac:48:13:61:ea:71:eb:16:a8:c2:
4a:a1:57:cb:43:46:37:32:59:f3:35:6e:22:d2:e8:
20:fa:77:66:91:8d:31:d7:f0:dc:9f:6c:da:c2:f4:
fa:b9:e9:b1:2a:25:ed:b4:75:fc:12:c7:ae:b1:4f:
bd:8e:dd:d4:ef:38:8b:2a:8a:e1:e4:17:8d:7d:09:
b4:cf:fa:62:87:01:9b:9b:15:cb:13:06:d5:74:48:
a3:31:ac:e2:61:4e:81:4b:50:f1:67:73:c6:36:ac:
61:d9:05:6c:35:e1:75:42:55:42:e6:48:a0:2a:f6:
81:1c:1d:67:0f:af:52:28:39:d9:2e:a2:f9:49:8e:
03:27:c4:2d:ec:18:03:8a:7c:ba:d9:09:96:38:57:
e8:68:e8:fe:1f:1e:c6:6b:08:77:45:e4:03:2e:4f:
55:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:33:DC:5A:3A:BC:0B:60:DE:0F:97:A2:D1:03:F1:8F:0D:1B:5C:5B
X509v3 Authority Key Identifier:
keyid:EC:A0:04:7E:A8:E4:DC:E9:2E:BC:57:2E:E8:A1:1D:17:C6:B6:48:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:3f:2a:3b:cc:fc:f0:98:5b:b1:95:b3:80:f3:bf:14:a0:51:
26:3d:67:0d:a1:a1:94:2d:13:05:d2:ad:7c:4e:bc:8a:72:81:
fc:29:1d:9c:12:2a:d2:63:9c:2f:ce:95:4a:ac:1b:33:d2:1e:
b4:81:82:f8:0a:f0:ec:37:54:fa:64:f8:52:7b:83:d5:27:7b:
26:6f:d4:c2:d9:09:1d:bc:d7:d1:c7:cd:25:d2:4c:ad:ee:25:
f2:61:37:96:4c:0e:b7:e8:e4:c6:b6:03:c5:fa:3d:e9:cc:14:
b9:44:7e:3d:9d:74:ed:00:b8:fa:48:ab:d1:dc:99:43:0b:df:
5b:99:86:6a:ea:ef:d8:68:92:5f:aa:7a:f5:ae:b6:93:d7:13:
60:f4:57:90:dc:f2:a6:19:bb:85:d1:70:24:2d:5a:e8:05:da:
5f:2e:63:3f:ae:16:02:71:80:28:07:a2:d4:23:42:5f:bb:27:
74:6f:88:b0:49:da:83:a4:df:d0:6c:be:04:04:f4:02:c6:65:
72:9d:36:75:f8:fc:1b:f9:8e:6e:08:24:d6:06:59:0e:f2:3f:
6b:a0:8c:77:b3:a6:59:5b:37:fb:06:31:7c:77:bb:ab:bd:65:
fe:aa:26:4b:6f:7b:27:c4:5c:32:df:bb:3a:7f:96:c3:71:92:
d6:09:9e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 12:55:25 2026 by rpki-client