
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/E029C9E3702797CC6083E1D4D891799F0F5AA144.mft
File: E029C9E3702797CC6083E1D4D891799F0F5AA144.mft (raw, json)
Hash identifier: SYuFDuq3tpGf+J2F/3sEyQUsLqRfsViU6mHicsZoJYQ=
Subject key identifier: E1:AB:13:4F:2F:56:D5:46:FC:D3:17:C7:C1:A5:80:F1:B0:24:32:D6
Authority key identifier: E0:29:C9:E3:70:27:97:CC:60:83:E1:D4:D8:91:79:9F:0F:5A:A1:44
Certificate issuer: /CN=E029C9E3702797CC6083E1D4D891799F0F5AA144
Certificate serial: 6F41E92832E08F4126D4FB89AC94F87F7D24E392
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E029C9E3702797CC6083E1D4D891799F0F5AA144.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/E029C9E3702797CC6083E1D4D891799F0F5AA144.mft
Manifest number: 3E
Signing time: Wed 17 Jun 2026 08:53:47 +0000
Manifest this update: Wed 17 Jun 2026 08:48:47 +0000
Manifest next update: Thu 18 Jun 2026 12:15:47 +0000
Files and hashes: 1: 3130332e3130392e3230362e302f32342d3234203d3e20313530393335.roa (hash: 8AqsSwbCPBkMa1bd8eWoyuIjrtuzrPJimjGA2fsl3AA=)
2: E029C9E3702797CC6083E1D4D891799F0F5AA144.crl (hash: KnD1Sj5mrVb7Nmrarf3qtlPdpEq41CwQAfPK7D1OrKE=)
3: 3130332e3130392e3230372e302f32342d3234203d3e20313530393335.roa (hash: DY6/Cy+Nw1dnpzSyQJvKM4XZv0DQUdJYanxa6KJ+Sng=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/E029C9E3702797CC6083E1D4D891799F0F5AA144.crl
rsync://rpki-rsync.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/E029C9E3702797CC6083E1D4D891799F0F5AA144.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E029C9E3702797CC6083E1D4D891799F0F5AA144.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:41:e9:28:32:e0:8f:41:26:d4:fb:89:ac:94:f8:7f:7d:24:e3:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E029C9E3702797CC6083E1D4D891799F0F5AA144
Validity
Not Before: Jun 17 08:48:47 2026 GMT
Not After : Jun 18 12:15:47 2026 GMT
Subject: CN=E1AB134F2F56D546FCD317C7C1A580F1B02432D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1f:fa:2a:d5:62:8b:18:38:bf:a6:1a:e7:5b:
5b:07:c8:56:42:67:a2:99:88:b6:06:80:8e:1b:8e:
9b:d3:db:11:25:fb:20:ef:af:21:78:db:39:89:88:
96:9f:d9:81:6b:4e:bf:45:69:c5:91:db:7f:5e:3e:
ea:a9:18:c6:1a:17:ca:e2:cd:a1:b1:7a:31:b2:5b:
34:b7:46:77:8e:72:76:b6:e8:71:43:60:fc:ea:7d:
d7:08:ae:5b:46:41:5c:ac:88:f0:8c:46:6b:fb:1a:
c2:6b:01:39:39:d1:10:06:b8:d8:55:4a:47:d3:c0:
e0:ae:67:ac:6f:c8:85:ec:57:84:dd:c5:6f:29:c4:
c0:7e:83:65:48:ce:fd:a4:33:e5:00:0d:26:18:8e:
67:cd:22:a0:0c:8e:a1:80:c1:29:07:8b:36:a9:ff:
08:69:3a:6f:53:88:86:7c:17:f7:7f:2d:d3:2e:4e:
97:09:c3:34:14:3a:41:eb:19:38:38:79:f9:59:68:
94:5b:69:be:c6:8f:57:e9:b8:c6:34:c0:7b:ac:76:
4d:81:be:cf:9d:df:41:79:45:64:1d:fc:a7:62:01:
ab:4d:7f:6d:55:28:f0:d3:fa:83:96:4b:fb:1f:ad:
aa:67:ff:96:70:a0:96:19:93:d4:e1:ee:29:12:22:
f0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:AB:13:4F:2F:56:D5:46:FC:D3:17:C7:C1:A5:80:F1:B0:24:32:D6
X509v3 Authority Key Identifier:
keyid:E0:29:C9:E3:70:27:97:CC:60:83:E1:D4:D8:91:79:9F:0F:5A:A1:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/E029C9E3702797CC6083E1D4D891799F0F5AA144.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E029C9E3702797CC6083E1D4D891799F0F5AA144.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/E029C9E3702797CC6083E1D4D891799F0F5AA144.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:85:c4:3d:9c:5f:dd:e0:45:98:e1:5a:11:ba:24:35:ff:66:
97:0d:c7:be:20:43:22:7e:bc:aa:8c:12:9e:52:62:f1:6b:9e:
de:7a:66:32:3b:e8:dc:6b:83:d5:af:f1:27:9f:b2:b2:98:65:
5a:14:93:0b:58:5a:d9:86:63:61:27:db:e2:75:8e:77:04:51:
03:36:58:dd:07:9c:b6:77:5c:f1:c6:74:44:21:69:c7:e1:66:
1b:72:fa:96:d7:9d:c8:99:19:7b:d8:8b:5e:39:c7:63:d1:73:
b2:8e:1b:d7:a8:47:3b:97:a9:69:40:94:22:db:65:c7:7d:71:
f3:99:c6:b6:4f:00:52:ab:bb:14:03:48:b6:43:0f:32:8f:c4:
a9:62:01:e2:a3:93:63:39:b5:92:d9:4b:c0:48:eb:ef:31:2f:
65:95:e7:58:21:94:9b:15:44:78:a0:5d:b7:d3:07:e0:d8:28:
a8:52:b2:63:48:5f:25:80:11:e4:c2:1a:b1:6b:9b:f1:d1:42:
b9:0f:4e:aa:d8:7f:18:7a:f1:b2:f5:86:00:0e:4a:75:33:0c:
6e:9c:22:7f:73:71:33:74:8d:5b:7f:8a:22:20:dd:50:cc:80:
0b:af:dc:ca:b0:12:96:27:a3:be:39:f2:08:21:bc:99:50:81:
c8:5a:f2:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:32:07 2026 by rpki-client