
$ rpki-client -vvf rpki-rsync.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.mft
File: ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.mft (raw, json)
Hash identifier: Tf6Zkr6G9vY2su2U9ZVOdyJBTO9/nDz82E4bxyL6pl4=
Subject key identifier: 96:98:2B:3D:CD:00:C8:EB:0D:E0:58:65:C2:EA:F9:14:DC:12:F5:66
Authority key identifier: EC:A0:04:7E:A8:E4:DC:E9:2E:BC:57:2E:E8:A1:1D:17:C6:B6:48:72
Certificate issuer: /CN=ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872
Certificate serial: 57D5E74E8FCA900D0E527E7C817F147F13D58C0A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.mft
Manifest number: 76
Signing time: Tue 28 Jul 2026 21:53:37 +0000
Manifest this update: Tue 28 Jul 2026 21:48:37 +0000
Manifest next update: Wed 29 Jul 2026 23:14:37 +0000
Files and hashes: 1: 3135372e36362e35382e302f32342d3234203d3e203633383633.roa (hash: a6w3hGAhWsxMabz324Q4GA5dPuEuhj0nKmf3WW+KTCc=)
2: 3135372e36362e35392e302f32342d3234203d3e203633383633.roa (hash: xBh74co4G4oy4kEOH1+s92iqFVlcazWJc0LznYHJ110=)
3: ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.crl (hash: BNavfMI4EuXLo6o1PR9D5Hf5nnJ9VqZd5mZisBY0Cxs=)
4: 3135372e36362e35382e302f32332d3233203d3e203633383633.roa (hash: UIZ5WPv7k1hpGcTiFHJVpKxY08OSIOQ+IDxbkKabgJw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.crl
rsync://rpki-rsync.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 09:55:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:d5:e7:4e:8f:ca:90:0d:0e:52:7e:7c:81:7f:14:7f:13:d5:8c:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872
Validity
Not Before: Jul 28 21:48:37 2026 GMT
Not After : Jul 29 23:14:37 2026 GMT
Subject: CN=96982B3DCD00C8EB0DE05865C2EAF914DC12F566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:bd:45:70:b2:85:72:a1:13:d2:f6:19:a6:3a:
2b:6b:45:0f:38:de:26:4c:06:0c:4d:1e:88:ad:ab:
4a:6e:5a:3b:a7:b2:26:1f:f3:67:34:14:61:91:57:
1e:b6:bc:74:23:da:69:fc:e3:07:2a:cd:f4:aa:30:
7e:68:7d:29:e7:c0:31:b0:01:b0:a4:da:a7:04:64:
98:de:9f:96:81:b1:91:95:a1:50:ae:aa:cd:0d:39:
d5:30:08:1f:cc:18:18:38:f6:2c:39:27:71:4e:fa:
fd:42:d3:f6:0f:5a:fd:14:21:18:fb:d8:73:65:39:
31:81:83:05:fc:04:4e:9c:6c:68:a1:cf:ac:56:45:
99:04:d3:f9:d6:51:6e:6a:46:2f:43:1a:01:64:f4:
38:60:48:39:55:dd:5c:da:47:c2:df:40:44:d9:fc:
5f:06:79:a3:de:8d:9b:a0:11:91:de:a1:1d:d1:3b:
8c:8e:5f:25:18:cb:1d:92:a8:f2:2c:5e:d9:88:df:
f7:50:22:1d:40:5a:fa:08:f1:c4:d0:3b:18:86:1b:
3e:59:1c:d9:ea:bc:f4:c9:ff:cd:6f:2e:bc:bf:ed:
00:19:fc:0f:cd:17:f9:cb:da:7a:08:9f:a8:95:eb:
f6:5f:48:1b:4b:88:18:22:bf:25:b6:b8:c3:23:4d:
e9:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:98:2B:3D:CD:00:C8:EB:0D:E0:58:65:C2:EA:F9:14:DC:12:F5:66
X509v3 Authority Key Identifier:
keyid:EC:A0:04:7E:A8:E4:DC:E9:2E:BC:57:2E:E8:A1:1D:17:C6:B6:48:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:d0:8c:d7:99:8e:cf:75:24:fb:71:23:86:93:9d:0c:e5:9e:
78:7a:cc:10:65:56:5a:61:df:e5:5b:aa:8f:10:36:37:32:4d:
71:ba:9c:46:22:33:2d:98:99:f3:1f:e2:84:e0:29:04:d6:0f:
3c:80:e5:e8:ee:be:a2:c0:9f:09:4b:7f:cb:99:60:fc:10:b3:
e6:30:7e:92:df:8b:78:9e:4e:56:fe:6d:21:c5:29:4a:f9:97:
2d:6d:be:fa:5b:74:44:86:c1:ad:3a:67:b7:ee:39:57:2a:e6:
b0:12:35:80:67:d4:51:1e:5e:db:43:56:38:b6:f6:63:be:dd:
e4:34:9d:94:5e:7f:17:23:31:76:d9:4d:59:0a:77:ed:f8:37:
22:2d:3f:b1:38:4d:ac:a4:e3:d0:5f:45:69:89:a9:c4:c9:00:
17:44:d6:d6:ff:46:cc:21:88:7b:08:1c:49:37:6f:18:09:e1:
8b:18:7a:44:b4:15:12:b6:d2:fb:ca:c9:b9:c0:9c:5f:d0:24:
bc:0d:0a:c4:ab:6a:2d:fe:80:f0:20:e0:c0:7f:d9:c4:e2:5a:
30:72:c0:32:aa:32:6a:92:eb:e8:55:b6:74:76:62:6d:fb:7f:
9d:a5:07:eb:1a:0a:78:bf:fe:d4:83:f4:8e:2f:ac:46:2a:2b:
df:e5:1c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:03:47 2026 by rpki-client