
$ rpki-client -vvf rpki-rsync.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/E98212FB2801E9D8F979B478187B22C73E005B8C.mft
File: E98212FB2801E9D8F979B478187B22C73E005B8C.mft (raw, json)
Hash identifier: 1uM/KZHb87VWncxehEjpicCB66uMpAn/LnKV5N7CF7U=
Subject key identifier: E0:7C:2A:06:B4:74:34:76:BD:C3:8B:C9:33:28:79:64:30:D6:5D:A3
Authority key identifier: E9:82:12:FB:28:01:E9:D8:F9:79:B4:78:18:7B:22:C7:3E:00:5B:8C
Certificate issuer: /CN=E98212FB2801E9D8F979B478187B22C73E005B8C
Certificate serial: 5EF9DC23C9B9E4FFBFD44F4A499E740CF9827873
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E98212FB2801E9D8F979B478187B22C73E005B8C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/E98212FB2801E9D8F979B478187B22C73E005B8C.mft
Manifest number: 70
Signing time: Fri 24 Jul 2026 05:46:28 +0000
Manifest this update: Fri 24 Jul 2026 05:41:28 +0000
Manifest next update: Sat 25 Jul 2026 07:19:28 +0000
Files and hashes: 1: 3130332e3130322e3135322e302f32322d3233203d3e203538343034.roa (hash: ZO0PNzhZkxG8w8Ary1RN+d3Qu4+XF4Tx6+LlxY2bCbs=)
2: 3130332e3130322e3135322e302f32322d3234203d3e203538343034.roa (hash: ZcQGtptLynLQhbsDejD5BqWtMIiUWg5vn//LHtPV2PU=)
3: 323030313a6466323a653330303a3a2f34382d3438203d3e203538343034.roa (hash: U8zXjkR0YFC0f3k9g/lm57CdDdRff8CebwGPVl34Erk=)
4: E98212FB2801E9D8F979B478187B22C73E005B8C.crl (hash: HnDuijhTWVg9qxwGOXl6EbRF6vi8qtYIE6IykciyKkI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/E98212FB2801E9D8F979B478187B22C73E005B8C.crl
rsync://rpki-rsync.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/E98212FB2801E9D8F979B478187B22C73E005B8C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E98212FB2801E9D8F979B478187B22C73E005B8C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 07:07:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:f9:dc:23:c9:b9:e4:ff:bf:d4:4f:4a:49:9e:74:0c:f9:82:78:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E98212FB2801E9D8F979B478187B22C73E005B8C
Validity
Not Before: Jul 24 05:41:28 2026 GMT
Not After : Jul 25 07:19:28 2026 GMT
Subject: CN=E07C2A06B4743476BDC38BC93328796430D65DA3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ba:f9:c9:f3:ed:19:79:49:bf:dc:71:61:c6:
02:19:ce:85:58:73:fa:6d:52:7d:24:3e:32:3c:28:
4c:6c:cd:38:4e:dc:9d:a8:1f:5f:38:17:fd:c4:4e:
a1:6d:3d:f2:9d:64:55:21:3b:7b:92:64:a4:58:08:
b1:d2:c1:b5:51:ea:95:12:71:da:db:92:2d:ea:92:
04:ea:2a:74:77:7e:7d:99:45:f4:37:16:c4:30:ab:
1b:8f:1b:29:8b:a8:47:aa:0d:7d:04:03:79:9c:60:
8c:bb:14:4b:3c:36:8d:22:6e:df:ef:c3:34:7a:84:
f1:7b:28:32:77:39:53:70:f9:be:6b:42:5c:6a:6a:
fa:fc:4a:39:b9:a4:4c:6e:ae:84:49:10:4f:8e:85:
49:b3:67:96:94:6a:dc:0a:56:75:4a:40:fb:48:61:
d2:65:e4:81:89:53:e6:80:82:b1:a4:20:7e:4b:67:
14:94:08:c7:fb:77:01:b9:4c:ed:09:61:5a:df:b9:
79:72:cf:98:d6:b9:d2:5b:5d:79:d9:5d:fb:42:9e:
08:c0:e2:8a:cb:2b:a3:c4:21:ba:79:88:3a:b8:65:
f6:66:94:52:ec:ee:fc:c5:be:1a:95:60:7f:c8:7c:
ac:59:af:2c:c3:49:80:d8:5d:fe:fc:78:d9:e8:15:
05:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:7C:2A:06:B4:74:34:76:BD:C3:8B:C9:33:28:79:64:30:D6:5D:A3
X509v3 Authority Key Identifier:
keyid:E9:82:12:FB:28:01:E9:D8:F9:79:B4:78:18:7B:22:C7:3E:00:5B:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/E98212FB2801E9D8F979B478187B22C73E005B8C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E98212FB2801E9D8F979B478187B22C73E005B8C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/E98212FB2801E9D8F979B478187B22C73E005B8C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:62:76:b1:09:1e:a7:a0:18:46:02:fb:95:d6:c7:b7:41:a9:
4a:df:45:85:2d:ae:9d:10:fe:05:df:c8:a0:fe:90:37:e2:42:
c4:a7:47:b7:dc:3d:ff:1d:ef:9d:3f:6b:57:34:12:d7:88:b9:
29:7a:e0:87:eb:4c:4e:73:72:95:0b:43:97:15:19:67:e1:b4:
61:aa:96:5d:e6:bf:a6:32:f8:74:62:d3:87:61:b5:14:b6:62:
c5:c8:21:a0:37:65:15:40:06:59:e9:01:8a:9b:d5:9b:38:cd:
b9:69:c2:65:b0:a1:0e:06:0e:36:e9:5d:47:96:08:f5:79:60:
75:fe:4a:53:3e:2c:d9:36:d4:87:e3:f9:7d:c8:51:3c:9f:22:
7f:97:b9:e9:72:d7:cc:e9:65:ed:34:bb:c5:8a:f4:fa:67:6e:
e2:53:0b:2e:ba:a0:9e:78:6f:47:0e:90:a1:84:23:2e:f6:b0:
ab:6f:b7:7a:e6:ab:7a:14:ea:6e:66:06:e2:a0:20:cf:df:45:
59:32:77:94:2a:1e:44:e8:8f:30:41:17:e8:52:eb:f5:85:8d:
56:aa:10:2f:9c:01:7b:33:ca:71:c4:24:fc:a5:64:64:21:f5:
65:05:ac:86:e5:18:c5:6a:cf:48:13:32:a5:94:79:91:38:f0:
b3:09:32:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:42:11 2026 by rpki-client