
$ rpki-client -vvf rpki-rsync.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/E1CBE571A9B35E54880250F3C035E3A2C5EA3688.mft
File: E1CBE571A9B35E54880250F3C035E3A2C5EA3688.mft (raw, json)
Hash identifier: dqp73zAbTMk5gwYLSYnTi8DRGnqnzGwXA0zVZIvkpOo=
Subject key identifier: 23:68:C4:25:C4:06:E4:8C:B4:04:AA:A9:8E:CD:33:EC:98:D0:68:C0
Authority key identifier: E1:CB:E5:71:A9:B3:5E:54:88:02:50:F3:C0:35:E3:A2:C5:EA:36:88
Certificate issuer: /CN=E1CBE571A9B35E54880250F3C035E3A2C5EA3688
Certificate serial: 1202A7D80E2D64ABFF859EFA005EC6927FA52903
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E1CBE571A9B35E54880250F3C035E3A2C5EA3688.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/E1CBE571A9B35E54880250F3C035E3A2C5EA3688.mft
Manifest number: 3F
Signing time: Wed 17 Jun 2026 06:15:26 +0000
Manifest this update: Wed 17 Jun 2026 06:10:26 +0000
Manifest next update: Thu 18 Jun 2026 07:18:26 +0000
Files and hashes: 1: E1CBE571A9B35E54880250F3C035E3A2C5EA3688.crl (hash: H5j3Bf3jnCKMGBCyaG93zZMpU0AQtnDyxpveFdV1T2I=)
2: 3130332e3130362e3131322e302f32322d3234203d3e20313336383830.roa (hash: sb2b0BvTmrzj1UZrNAjcbapczR2THwPhTn7rFLIGhwc=)
3: 323430323a343234303a3a2f33322d3332203d3e20313336383830.roa (hash: P320z9KUFpWQ3fuDHhMBAn5wP+R8TtjEv0OQMaUZbt0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/E1CBE571A9B35E54880250F3C035E3A2C5EA3688.crl
rsync://rpki-rsync.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/E1CBE571A9B35E54880250F3C035E3A2C5EA3688.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E1CBE571A9B35E54880250F3C035E3A2C5EA3688.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:02:a7:d8:0e:2d:64:ab:ff:85:9e:fa:00:5e:c6:92:7f:a5:29:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1CBE571A9B35E54880250F3C035E3A2C5EA3688
Validity
Not Before: Jun 17 06:10:26 2026 GMT
Not After : Jun 18 07:18:26 2026 GMT
Subject: CN=2368C425C406E48CB404AAA98ECD33EC98D068C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f2:a8:32:3f:07:63:18:cd:4f:97:7c:02:6b:
51:55:0e:c9:62:72:14:b6:ce:43:64:40:f2:6f:d8:
d1:6e:a1:a2:9e:20:41:3c:a1:f7:8c:08:1f:73:2c:
10:4e:fe:d1:57:9e:34:51:e1:af:bb:e8:a9:47:f1:
5b:11:00:e2:15:b3:76:30:13:82:f3:97:05:f9:82:
fd:ee:17:58:1d:bc:c1:f9:1f:71:45:ac:17:90:ba:
88:76:55:87:dd:af:be:2d:94:10:5e:75:fd:89:a3:
a4:8a:cd:9f:11:5f:91:51:b2:4e:81:53:4e:9d:13:
40:49:08:4d:cd:07:b3:ff:3b:c3:b7:d9:af:c8:06:
82:30:3f:21:fd:6b:cf:db:e4:a6:79:bc:13:da:cb:
69:a4:da:cc:00:48:86:7a:cc:c4:73:9b:21:ed:89:
14:87:90:25:66:e9:06:7b:1c:77:f8:c2:35:a1:10:
c5:55:4f:14:0b:99:cc:36:39:bc:9c:d2:44:84:1a:
7d:df:8f:ec:5a:7c:ac:05:4c:8d:f7:ec:68:c1:0a:
f8:ec:05:bc:e5:0f:a8:ee:9e:a7:55:f0:1b:65:0a:
89:90:79:d7:ff:85:c4:64:59:df:fa:e9:ea:f5:20:
fe:c9:a5:cc:e8:7d:0c:2e:95:d2:f7:a7:08:05:4c:
07:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:68:C4:25:C4:06:E4:8C:B4:04:AA:A9:8E:CD:33:EC:98:D0:68:C0
X509v3 Authority Key Identifier:
keyid:E1:CB:E5:71:A9:B3:5E:54:88:02:50:F3:C0:35:E3:A2:C5:EA:36:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/E1CBE571A9B35E54880250F3C035E3A2C5EA3688.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E1CBE571A9B35E54880250F3C035E3A2C5EA3688.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/E1CBE571A9B35E54880250F3C035E3A2C5EA3688.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:50:24:5f:a2:88:ec:02:a7:80:02:57:5d:85:48:0f:9c:66:
61:8e:f8:72:26:87:92:45:03:77:23:22:f1:b4:42:39:5d:2a:
4f:69:bd:b4:e4:0b:9b:ae:7d:c9:03:59:fe:e5:c3:3c:a1:ae:
90:7a:5a:aa:cf:77:51:9a:9e:79:81:f5:17:df:4c:7d:50:f0:
78:45:6c:17:60:86:9d:91:77:d2:e1:51:aa:9f:47:fb:ad:98:
92:c9:29:46:a5:70:6e:19:97:35:d7:1d:d6:ef:8c:54:4f:c8:
00:ee:f8:73:c8:7f:e6:67:7a:d2:30:14:9d:7b:37:5e:55:d0:
12:b1:76:be:62:f3:99:7e:df:7f:5a:4d:9a:fd:4b:cd:a5:dc:
e2:eb:1c:8d:a8:e7:3c:41:17:6b:00:26:b9:db:53:71:06:28:
a0:e1:1a:12:e0:ff:9f:15:cc:7a:1f:18:11:97:8d:e2:af:ac:
e4:25:83:5c:0f:e7:32:aa:0e:91:9c:26:db:f9:a2:22:b7:07:
9e:91:20:a0:c4:8e:c4:c1:75:ba:fc:1b:e4:0f:35:01:5b:e0:
9e:68:d6:f5:9e:e0:45:8f:82:35:f1:1c:ea:42:ab:93:72:c5:
76:6d:81:c5:94:e2:1e:75:48:2e:e9:0f:70:51:ae:95:8f:e5:
af:27:2d:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:33:34 2026 by rpki-client