
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/EC464ACDD6858B613E13B13344BB988E92418A08.mft
File: EC464ACDD6858B613E13B13344BB988E92418A08.mft (raw, json)
Hash identifier: r2u2ZCQlESo9F1SIdmBVvAmb45melKH9vFgCyjEzulE=
Subject key identifier: E3:29:E8:DC:EE:0F:72:4F:98:29:4E:9F:F5:F0:09:50:44:2B:52:48
Authority key identifier: EC:46:4A:CD:D6:85:8B:61:3E:13:B1:33:44:BB:98:8E:92:41:8A:08
Certificate issuer: /CN=EC464ACDD6858B613E13B13344BB988E92418A08
Certificate serial: 573FC041C479ED73704E76E877307E168C7E64BE
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EC464ACDD6858B613E13B13344BB988E92418A08.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/EC464ACDD6858B613E13B13344BB988E92418A08.mft
Manifest number: C0
Signing time: Tue 22 Sep 2026 15:25:25 +0000
Manifest this update: Tue 22 Sep 2026 15:20:25 +0000
Manifest next update: Wed 23 Sep 2026 17:16:25 +0000
Files and hashes: 1: 323430343a353938303a3a2f33322d3332203d3e20313334363535.roa (hash: 6uEfVOnDlCA/pNIFT5bC9JCmVynI5FIoh7TLhoyhIys=)
2: 3130332e3230392e3138342e302f32322d3234203d3e20313334363535.roa (hash: LvmXxn8tofzUOQD7Y8MBoEUbiMdg2W3vi+Y9WTB64Ck=)
3: EC464ACDD6858B613E13B13344BB988E92418A08.crl (hash: 2OFbi2qi5aB/A4W6JzXyyiXkcOjSUvGUc0CghOGajxY=)
4: 3130332e3234372e3231312e302f32342d3234203d3e20313334363535.roa (hash: 729mihHGdMx9/AKOob41I1TKRP4K3/svpHuBRoC4uAA=)
5: 3230332e39362e3232382e302f32332d3234203d3e20313334363535.roa (hash: qct805YAJVrMqEwmp7GMGrHlEnZ8CXcTrUlU+oMYiDE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/EC464ACDD6858B613E13B13344BB988E92418A08.crl
rsync://rpki-rsync.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/EC464ACDD6858B613E13B13344BB988E92418A08.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EC464ACDD6858B613E13B13344BB988E92418A08.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 23 Sep 2026 17:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:3f:c0:41:c4:79:ed:73:70:4e:76:e8:77:30:7e:16:8c:7e:64:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC464ACDD6858B613E13B13344BB988E92418A08
Validity
Not Before: Sep 22 15:20:25 2026 GMT
Not After : Sep 23 17:16:25 2026 GMT
Subject: CN=E329E8DCEE0F724F98294E9FF5F00950442B5248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:52:90:16:1d:1a:3e:e4:b4:a9:a4:86:18:ee:
9e:8e:53:7d:2d:a1:69:d1:e9:ae:b2:3a:50:ea:4e:
04:8e:c4:eb:14:69:9b:2a:20:4a:1b:1e:e1:9b:b9:
ff:6f:35:80:84:a1:46:c8:55:da:a8:ca:a0:03:a4:
2f:31:c9:af:08:cc:6d:8a:e5:aa:50:9c:4a:1a:a8:
13:f1:3d:ae:56:9a:0f:1a:39:b9:56:14:fb:22:58:
ea:fa:ed:0f:1b:9b:4c:b2:8b:d4:f1:d6:47:91:c6:
59:20:56:89:b7:bf:22:93:ec:8a:33:8b:54:ed:89:
5a:e3:c8:c2:b0:1e:a6:0b:cc:93:0f:9b:d5:cb:18:
dd:f6:90:19:00:89:72:b9:a9:4f:6b:6f:27:0d:6c:
04:f8:ac:05:7f:65:78:19:b9:69:ea:5e:ea:65:30:
5e:bd:85:23:89:d5:fb:0f:50:2d:cf:f6:7a:96:c3:
91:ec:aa:e0:7f:cb:86:72:da:8a:39:d0:a6:b8:76:
9c:6a:08:66:d2:ce:a4:27:52:20:35:ba:a7:27:08:
41:83:a1:17:c0:a3:3d:4f:a9:7a:67:a8:68:d0:46:
23:40:57:27:04:a2:07:5e:bd:1d:5e:5c:46:d2:9d:
42:b6:90:ea:a9:75:0f:a5:62:05:22:4b:d5:6c:bf:
c4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:29:E8:DC:EE:0F:72:4F:98:29:4E:9F:F5:F0:09:50:44:2B:52:48
X509v3 Authority Key Identifier:
keyid:EC:46:4A:CD:D6:85:8B:61:3E:13:B1:33:44:BB:98:8E:92:41:8A:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/EC464ACDD6858B613E13B13344BB988E92418A08.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EC464ACDD6858B613E13B13344BB988E92418A08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/EC464ACDD6858B613E13B13344BB988E92418A08.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:38:2c:fd:0c:a3:a9:63:71:96:de:c1:6e:3c:cb:c3:59:a8:
ba:76:1f:9a:2f:a3:e4:0d:a6:a9:38:7a:cf:64:3e:13:7d:2f:
0f:3a:23:3c:9a:df:69:20:55:9e:fc:56:a8:7f:b4:f6:e3:06:
d7:c4:7b:2a:b8:ed:8a:53:0d:34:a7:5f:ce:9c:c9:08:e2:55:
a5:e5:19:8a:21:28:1a:d6:e3:62:a7:65:8d:ce:53:f1:0a:31:
ee:0d:8f:b1:5e:21:05:6f:26:76:8a:f3:00:56:34:eb:76:99:
a4:02:59:90:02:85:18:8b:a2:54:47:6f:d2:97:f8:72:d8:da:
0b:62:5f:c8:33:8c:74:24:02:cf:bb:86:0f:2e:4e:c5:9d:fe:
08:15:ad:ac:2f:c3:38:26:08:af:5c:d2:7e:1e:ca:0a:4d:0d:
bf:dc:31:56:8e:06:67:86:59:bb:3e:ad:2c:5b:3a:92:9a:f8:
09:f0:62:ba:3e:76:d8:f7:36:da:c2:dd:2a:c1:1d:90:d7:f9:
57:54:8e:8e:ab:53:aa:b9:35:6a:09:20:ef:a4:2c:32:45:1c:
20:9b:b2:8e:11:6c:f0:ec:74:2e:f1:f8:e3:bb:1e:e6:3e:c1:
0a:85:af:af:53:f4:a8:94:bd:ed:dc:fd:a2:5e:c2:27:5b:8c:
87:06:c4:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:58:31 2026 by rpki-client