
$ rpki-client -vvf repo-rpki.idnic.net/repo/453ac667-4d9e-48d7-afd6-82e98fa76c1e/0/EC1B9BE63137230F6756E222019318C640EBE42E.mft
File: EC1B9BE63137230F6756E222019318C640EBE42E.mft (raw, json)
Hash identifier: 8usSU1JF8gPdBgk3O2ShI0QdYMaQH3CjJiMSjizosEE=
Subject key identifier: 13:5A:8C:45:6B:3A:DC:53:21:EC:B4:A9:FD:AF:A3:3E:24:42:1C:C6
Authority key identifier: EC:1B:9B:E6:31:37:23:0F:67:56:E2:22:01:93:18:C6:40:EB:E4:2E
Certificate issuer: /CN=EC1B9BE63137230F6756E222019318C640EBE42E
Certificate serial: 26FC88EAA2C4B88915C6D780B2092AC35AC4FFE3
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EC1B9BE63137230F6756E222019318C640EBE42E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/453ac667-4d9e-48d7-afd6-82e98fa76c1e/0/EC1B9BE63137230F6756E222019318C640EBE42E.mft
Manifest number: 0156
Signing time: Wed 25 Mar 2026 03:21:49 +0000
Manifest this update: Wed 25 Mar 2026 03:16:49 +0000
Manifest next update: Sat 28 Mar 2026 10:55:49 +0000
Files and hashes: 1: EC1B9BE63137230F6756E222019318C640EBE42E.crl (hash: NoAEPJ+WsklrvoN0k864U32RIxNxcYa7qPhOUrTSALU=)
2: 3135372e31352e3136362e302f32342d3234203d3e20313532333832.roa (hash: K+j/wv1b5Szhnh+2okk5Vxs9kLlA5xCgxCi5XaZj4vs=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/453ac667-4d9e-48d7-afd6-82e98fa76c1e/0/EC1B9BE63137230F6756E222019318C640EBE42E.crl
rsync://repo-rpki.idnic.net/repo/453ac667-4d9e-48d7-afd6-82e98fa76c1e/0/EC1B9BE63137230F6756E222019318C640EBE42E.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EC1B9BE63137230F6756E222019318C640EBE42E.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 10:55:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:fc:88:ea:a2:c4:b8:89:15:c6:d7:80:b2:09:2a:c3:5a:c4:ff:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC1B9BE63137230F6756E222019318C640EBE42E
Validity
Not Before: Mar 25 03:16:49 2026 GMT
Not After : Mar 28 10:55:49 2026 GMT
Subject: CN=135A8C456B3ADC5321ECB4A9FDAFA33E24421CC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ac:0d:ad:8c:b1:50:84:7c:c9:a0:3c:b9:c5:
d0:be:dd:28:e3:1b:c9:9c:6f:68:c9:00:f9:af:5c:
7b:58:4c:fb:02:10:bf:8e:10:75:da:22:58:a0:e2:
1d:4e:62:a2:61:ee:a9:f2:7f:cd:2d:1e:2b:89:03:
85:96:b4:c6:14:c6:fd:d3:4b:73:39:ce:20:7c:4a:
81:b8:31:87:6b:8b:b5:4f:c1:93:45:30:bc:96:a4:
21:68:e6:24:1d:c3:80:8e:dc:fe:70:d7:49:ca:c9:
cb:43:42:74:07:5a:b2:98:34:3f:93:10:2a:70:3c:
67:20:94:9d:ff:b2:cf:28:2a:7b:aa:f5:7c:31:ac:
f7:23:90:6a:da:e0:03:b8:69:b3:61:e4:ea:f5:10:
95:98:93:d7:f8:b3:79:4a:c5:ce:6e:ea:ea:87:94:
bc:c1:17:b2:3b:d1:a4:ce:49:88:24:ce:a9:42:73:
6d:8c:bb:45:8d:ac:29:2e:1b:8c:24:c5:6d:c1:82:
8d:4b:7a:b3:aa:94:c3:64:f4:df:e8:d1:e1:a8:94:
e4:ac:ca:66:42:1e:db:57:70:df:d4:ae:5a:3d:9d:
a3:a9:0f:17:c9:32:45:32:f9:59:6a:a0:d9:7b:c1:
57:a6:da:33:f6:1d:d7:8d:10:b8:28:7f:26:59:01:
22:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:5A:8C:45:6B:3A:DC:53:21:EC:B4:A9:FD:AF:A3:3E:24:42:1C:C6
X509v3 Authority Key Identifier:
keyid:EC:1B:9B:E6:31:37:23:0F:67:56:E2:22:01:93:18:C6:40:EB:E4:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/453ac667-4d9e-48d7-afd6-82e98fa76c1e/0/EC1B9BE63137230F6756E222019318C640EBE42E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EC1B9BE63137230F6756E222019318C640EBE42E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/453ac667-4d9e-48d7-afd6-82e98fa76c1e/0/EC1B9BE63137230F6756E222019318C640EBE42E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:49:38:fd:dc:b8:37:bc:25:85:37:b4:6c:a4:b7:4b:c6:3c:
ee:1f:f0:dd:e2:58:6e:0f:8f:28:7d:59:06:05:51:8c:e8:ad:
1f:ad:7c:b9:ef:00:8d:01:b1:6e:4e:d9:e1:c9:19:6a:2b:a8:
18:37:35:8b:26:d9:c4:59:ea:6b:e1:96:0d:ca:83:ec:9f:99:
9b:48:62:a0:78:2e:2c:34:10:54:01:b7:a3:bd:cf:15:28:a3:
fe:e9:0d:6a:97:29:9a:54:c1:bd:a9:a5:70:97:f6:71:d3:e4:
7f:9a:25:8d:35:7a:76:c0:48:45:b1:f0:50:66:ee:69:72:88:
ae:3b:fe:39:e6:fa:ff:ab:e4:87:7b:bf:2e:a8:a7:e2:71:6c:
51:0d:db:6e:45:49:84:d6:b8:97:0f:92:1a:f5:87:d7:3a:75:
37:18:26:fc:7a:4f:58:5a:56:b8:ea:de:7c:ec:8d:cd:3a:6c:
1a:b9:bf:61:67:84:6b:0b:9c:93:a0:b3:d1:a2:47:f6:35:12:
c5:54:84:85:de:35:77:a1:b8:78:00:69:93:4a:2c:a6:9b:39:
9e:b2:b8:d1:dc:c7:1f:54:f6:13:e7:eb:4a:08:ed:d4:78:61:
96:69:92:d2:26:24:63:80:12:cb:51:13:60:a1:e0:f9:2e:45:
14:fe:03:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:36:15 2026 by rpki-client