
$ rpki-client -vvf rpki-rsync.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/E88BC8A7F27D2A5B7520E87760889CD042853ADE.mft
File: E88BC8A7F27D2A5B7520E87760889CD042853ADE.mft (raw, json)
Hash identifier: l9JXVOrEE9JYomOtzTy4t70SVGEaNs/LB0gv/3/PlPI=
Subject key identifier: BA:3C:AB:03:53:F7:FC:67:AC:BC:C6:9D:25:DA:CD:83:5E:1D:93:78
Authority key identifier: E8:8B:C8:A7:F2:7D:2A:5B:75:20:E8:77:60:88:9C:D0:42:85:3A:DE
Certificate issuer: /CN=E88BC8A7F27D2A5B7520E87760889CD042853ADE
Certificate serial: 0A760C99AA5E93EDF630DC7E704753D078EBA5CA
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E88BC8A7F27D2A5B7520E87760889CD042853ADE.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/E88BC8A7F27D2A5B7520E87760889CD042853ADE.mft
Manifest number: 3E
Signing time: Wed 17 Jun 2026 01:39:49 +0000
Manifest this update: Wed 17 Jun 2026 01:34:49 +0000
Manifest next update: Thu 18 Jun 2026 02:07:49 +0000
Files and hashes: 1: 3130332e3130352e37372e302f32342d3234203d3e203535363736.roa (hash: 89aIdO+EcaO2EgEgxRB/RqjR0BzQuTZKwEZg7t/EUN8=)
2: 3130332e3130352e37362e302f32342d3234203d3e20313336383734.roa (hash: StV9pAMf1Ct261g28sLeCDLoQr5OW67xNFsrQ9jD6wc=)
3: E88BC8A7F27D2A5B7520E87760889CD042853ADE.crl (hash: /921CNFKZjHOLGMy0m9uaZL2zVK45cZLvIxDr3HBX3o=)
4: 3130332e3130352e37382e302f32342d3234203d3e203535363736.roa (hash: T79Acu3dFfSJnZwf5MfpW3ZPl2jn6Xl5KVc/Lh8xgf0=)
5: 3130332e3130352e37362e302f32342d3234203d3e203535363736.roa (hash: Q3r0bAYb72ZQ2Fp1fAghigXkWh4LdobhrwQdO/opI/0=)
6: 323430323a326334303a3a2f34382d3438203d3e20313336383734.roa (hash: zi1G9BahVDm/M7Dcf6hyf4kk3uCGA92haLufy2kBDKs=)
7: 3130332e3130352e37382e302f32342d3234203d3e20313336383734.roa (hash: HjyzaNQUCQhEFQ4hKYw2ku34SqSG+Q21ZyHYmX0dpFM=)
8: 3130332e3130352e37392e302f32342d3234203d3e203535363736.roa (hash: SHELRlR+bO1G1+56lQPkLv609BfDTEBVrD9A+nbY330=)
9: 323430323a326334303a3a2f34382d3438203d3e203535363736.roa (hash: vki+XStGqNG/jPbkEYt4lyDUr4IU7G8v5buzOalFaw0=)
10: 3130332e3130352e37392e302f32342d3234203d3e20313336383734.roa (hash: gkAC5+StdnMaSqYuGVBT+3ErlRAaXIJGp1TwiVqa81g=)
11: 3130332e3130352e37362e302f32332d3234203d3e20313336383734.roa (hash: cc/saxfe9KKXtfm7XzpNhS/kTpo6bsyBLZi4D549YFI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/E88BC8A7F27D2A5B7520E87760889CD042853ADE.crl
rsync://rpki-rsync.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/E88BC8A7F27D2A5B7520E87760889CD042853ADE.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E88BC8A7F27D2A5B7520E87760889CD042853ADE.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 02:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:76:0c:99:aa:5e:93:ed:f6:30:dc:7e:70:47:53:d0:78:eb:a5:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E88BC8A7F27D2A5B7520E87760889CD042853ADE
Validity
Not Before: Jun 17 01:34:49 2026 GMT
Not After : Jun 18 02:07:49 2026 GMT
Subject: CN=BA3CAB0353F7FC67ACBCC69D25DACD835E1D9378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:72:85:84:f8:8c:71:d4:5e:46:1e:c2:65:ce:
7e:0a:40:2e:f7:69:24:27:97:34:87:08:b5:31:1b:
53:67:bc:f5:82:bc:d2:db:3b:a8:17:b5:1c:d7:5c:
9c:75:a4:e7:90:4f:87:48:06:5e:63:41:73:0a:de:
43:30:4f:d2:42:59:35:21:1a:21:b3:33:be:49:eb:
6c:cf:ff:91:05:ec:42:09:bf:4d:b2:5c:c4:3d:d1:
b2:6f:cd:25:af:fd:f6:d0:42:b8:35:c9:44:01:f2:
22:6c:b2:9b:ac:87:3d:5e:19:bd:e8:08:7e:88:cc:
28:ab:c0:94:9d:de:21:10:b8:1b:d1:4c:18:61:38:
c2:ed:d7:e0:a1:be:9c:fa:45:d3:f2:68:e8:88:2e:
f6:ca:67:8c:bc:06:bb:1a:9b:b1:68:88:c6:f1:76:
41:59:db:68:ad:be:44:20:78:74:25:a7:97:cf:2d:
a3:b6:e0:a4:d3:e6:ba:59:48:03:8d:e4:48:87:5d:
58:55:4f:79:24:2c:92:d0:83:bf:72:b5:89:72:92:
f3:96:23:91:c3:c3:90:40:00:ff:39:18:57:11:b3:
a0:67:0a:8c:b9:1c:5e:33:b3:85:03:ee:7f:68:00:
a6:50:31:4b:c6:3e:92:6b:e2:d8:51:fe:f1:42:2b:
e6:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:3C:AB:03:53:F7:FC:67:AC:BC:C6:9D:25:DA:CD:83:5E:1D:93:78
X509v3 Authority Key Identifier:
keyid:E8:8B:C8:A7:F2:7D:2A:5B:75:20:E8:77:60:88:9C:D0:42:85:3A:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/E88BC8A7F27D2A5B7520E87760889CD042853ADE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E88BC8A7F27D2A5B7520E87760889CD042853ADE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/E88BC8A7F27D2A5B7520E87760889CD042853ADE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:bf:4b:22:e4:66:a2:7e:72:3d:4f:0c:d9:8f:25:5d:8c:fb:
82:e6:43:7a:f8:b9:3f:1a:46:a1:49:68:54:d6:24:d8:3b:d3:
65:ff:11:b6:46:b2:7c:a9:db:45:ca:3b:e5:aa:17:7c:ee:8c:
b0:4e:93:02:50:71:d6:75:dc:d6:86:46:b5:de:9c:b2:89:cf:
b1:16:2a:85:c3:6c:80:7d:7d:44:ae:da:af:b8:a8:93:4f:a5:
e9:90:bc:b3:33:41:bc:f2:15:d2:1c:07:8c:0e:b8:f8:66:37:
6c:ed:8d:da:1c:64:7d:00:45:63:83:1a:b9:9a:60:e9:97:eb:
9e:e2:fd:52:01:82:1c:1e:39:3f:96:f2:52:4b:b8:eb:ea:60:
80:72:83:bb:59:63:e4:dd:cf:63:ca:66:21:fe:bc:0a:e8:7d:
5c:0d:3f:8a:74:e5:0f:93:55:66:fe:42:c3:19:42:97:2f:db:
65:37:4c:48:ee:86:eb:e5:b2:b7:66:10:59:cc:1f:f5:b6:0a:
67:c5:ab:a3:8c:f5:68:ab:f5:a9:92:92:4d:d9:b4:5b:91:26:
ef:a4:d1:0a:72:d1:41:f0:ff:86:a5:c6:c2:a9:92:da:c7:d7:
73:a0:bd:fe:bd:c3:48:af:c7:05:7b:c3:40:be:20:76:1c:ff:
79:1f:f5:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:40:39 2026 by rpki-client