
$ rpki-client -vvf rpki-rsync.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/0/E58CEA1741CC123421BB7B3012F855F3EAAEA625.mft
File: E58CEA1741CC123421BB7B3012F855F3EAAEA625.mft (raw, json)
Hash identifier: CICH8o4GoIdvZgHwki34VY1hQivlgYxtqgjD/PsyVZg=
Subject key identifier: 88:6D:48:FD:90:5C:FA:E5:18:D6:FB:B4:7C:5D:CA:DE:39:8F:ED:0C
Authority key identifier: E5:8C:EA:17:41:CC:12:34:21:BB:7B:30:12:F8:55:F3:EA:AE:A6:25
Certificate issuer: /CN=E58CEA1741CC123421BB7B3012F855F3EAAEA625
Certificate serial: 5CA490C22BFD0BEB835DF45C788F6FCD02F310D8
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E58CEA1741CC123421BB7B3012F855F3EAAEA625.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/0/E58CEA1741CC123421BB7B3012F855F3EAAEA625.mft
Manifest number: 38
Signing time: Fri 12 Jun 2026 23:49:13 +0000
Manifest this update: Fri 12 Jun 2026 23:44:13 +0000
Manifest next update: Sun 14 Jun 2026 01:16:13 +0000
Files and hashes: 1: 3139382e31352e31362e302f32342d3234203d3e20313432363339.roa (hash: 0CCDYy/I/lMXwPNc0U/+5ITduVGZmmxxNNoPayR3Zi8=)
2: E58CEA1741CC123421BB7B3012F855F3EAAEA625.crl (hash: SmGHPddSdch8RG5ZXcFRrk4xFKIicRw1yFizbag+SA0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/0/E58CEA1741CC123421BB7B3012F855F3EAAEA625.crl
rsync://rpki-rsync.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/0/E58CEA1741CC123421BB7B3012F855F3EAAEA625.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E58CEA1741CC123421BB7B3012F855F3EAAEA625.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 21:18:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:a4:90:c2:2b:fd:0b:eb:83:5d:f4:5c:78:8f:6f:cd:02:f3:10:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E58CEA1741CC123421BB7B3012F855F3EAAEA625
Validity
Not Before: Jun 12 23:44:13 2026 GMT
Not After : Jun 14 01:16:13 2026 GMT
Subject: CN=886D48FD905CFAE518D6FBB47C5DCADE398FED0C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5c:87:a2:43:45:f5:98:d0:d3:6b:b6:a0:c4:
ba:40:e8:2d:65:72:d9:bb:42:2c:5b:28:2f:70:36:
dc:32:34:4c:60:96:60:61:c5:f2:89:b8:10:e6:03:
81:f0:f8:d7:e1:43:af:af:79:03:8f:b2:f6:11:a0:
e0:ab:7f:0a:ba:34:1a:47:49:4a:ce:f9:9d:67:ff:
1c:13:be:60:79:7d:07:82:94:ff:8f:e0:3c:ef:4a:
54:79:af:1a:6a:80:db:5a:57:98:44:bf:34:e3:e7:
33:18:86:e2:a5:83:01:92:e5:b4:e0:3e:16:fa:aa:
b7:a9:f5:eb:9d:22:f7:19:2d:7a:b6:2f:61:6b:29:
57:96:b3:71:5d:8c:be:75:cb:c2:b6:5e:0b:83:1a:
84:7d:2c:b8:15:78:c3:dd:3e:60:7c:b7:8d:d6:13:
7b:94:9d:de:13:a3:89:76:73:b0:00:43:48:7c:01:
e7:f7:c0:22:52:df:ab:8a:e3:13:27:12:f8:e6:f4:
22:90:59:b0:98:4f:e3:45:33:46:7c:30:94:15:83:
0e:0c:94:9e:a4:50:07:26:f3:85:69:0e:70:b0:dd:
a7:51:3c:a1:67:3c:72:3c:96:e3:1f:8b:2b:77:59:
aa:06:2b:76:4e:ad:1e:34:4e:86:45:06:8f:ba:c9:
5b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:6D:48:FD:90:5C:FA:E5:18:D6:FB:B4:7C:5D:CA:DE:39:8F:ED:0C
X509v3 Authority Key Identifier:
keyid:E5:8C:EA:17:41:CC:12:34:21:BB:7B:30:12:F8:55:F3:EA:AE:A6:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/0/E58CEA1741CC123421BB7B3012F855F3EAAEA625.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E58CEA1741CC123421BB7B3012F855F3EAAEA625.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/0/E58CEA1741CC123421BB7B3012F855F3EAAEA625.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:3b:61:8f:6b:c3:24:cd:d7:d1:37:fa:c7:c8:36:67:d4:5d:
68:dd:24:d0:22:23:47:4f:1b:63:f5:29:1c:43:1f:82:3f:22:
45:a4:6c:49:01:60:62:8c:d8:5f:c7:69:4d:4d:af:49:d5:20:
06:03:0c:70:c4:08:83:f7:ec:de:5c:1f:c0:10:20:be:a0:2c:
3e:16:f1:a7:1b:c3:cb:74:b7:ec:f9:ca:65:c7:cb:a4:66:2b:
82:4b:1d:b2:17:29:d9:41:5e:2f:5a:f2:18:26:09:c0:e1:df:
04:ee:ee:16:08:f7:d7:1c:1e:19:dd:00:48:3c:f7:ff:d4:fd:
88:38:66:b0:b2:87:26:d7:2f:3c:ee:0e:75:a3:48:a9:af:1f:
97:95:a1:36:fc:12:1f:9c:70:bb:51:21:f0:df:10:77:5c:d8:
bb:ef:80:63:23:73:91:e9:29:ec:b3:82:e9:11:75:c9:9f:cd:
ac:ea:af:ca:ea:df:9f:e7:5c:2b:aa:4a:06:9e:f6:c9:25:bc:
cd:fc:16:f1:f2:87:90:a5:5b:12:c6:3e:d9:b7:f6:a9:ad:74:
dd:37:9c:af:4b:a4:2b:26:87:29:a0:85:15:7e:8a:4c:99:ae:
90:13:c9:b0:f4:42:b4:e7:ee:50:f1:fd:cd:e2:89:da:15:17:
c3:0d:b6:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 12:55:32 2026 by rpki-client