
$ rpki-client -vvf rpki-rsync.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.mft
File: ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.mft (raw, json)
Hash identifier: HW1qESBxsr61TOIpBnKQA+CJeCT95qiv82YPIjexlio=
Subject key identifier: C4:BD:03:CB:2F:87:9C:13:96:21:40:84:61:60:60:62:7B:55:B9:7A
Authority key identifier: EC:A0:04:7E:A8:E4:DC:E9:2E:BC:57:2E:E8:A1:1D:17:C6:B6:48:72
Certificate issuer: /CN=ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872
Certificate serial: 56CD8B3BF3E606FC94DC55EACC56FC884FC28412
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.mft
Manifest number: 70
Signing time: Fri 24 Jul 2026 08:24:45 +0000
Manifest this update: Fri 24 Jul 2026 08:19:45 +0000
Manifest next update: Sat 25 Jul 2026 11:27:45 +0000
Files and hashes: 1: 3135372e36362e35382e302f32342d3234203d3e203633383633.roa (hash: a6w3hGAhWsxMabz324Q4GA5dPuEuhj0nKmf3WW+KTCc=)
2: 3135372e36362e35382e302f32332d3233203d3e203633383633.roa (hash: UIZ5WPv7k1hpGcTiFHJVpKxY08OSIOQ+IDxbkKabgJw=)
3: ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.crl (hash: TXF7fQ6JgvIB1b4dswzK8EdWqLDKIKThuOzL9EQltL4=)
4: 3135372e36362e35392e302f32342d3234203d3e203633383633.roa (hash: xBh74co4G4oy4kEOH1+s92iqFVlcazWJc0LznYHJ110=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.crl
rsync://rpki-rsync.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 09:22:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:cd:8b:3b:f3:e6:06:fc:94:dc:55:ea:cc:56:fc:88:4f:c2:84:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872
Validity
Not Before: Jul 24 08:19:45 2026 GMT
Not After : Jul 25 11:27:45 2026 GMT
Subject: CN=C4BD03CB2F879C1396214084616060627B55B97A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:43:2e:3a:0a:53:43:e0:64:73:cb:27:45:f9:
29:95:fa:96:4f:39:87:02:01:4e:5a:9e:80:b8:2f:
0d:41:71:91:6f:bc:6c:47:f4:21:f0:c7:45:84:af:
33:08:03:3b:34:7e:36:21:98:af:fc:58:6d:fb:d0:
3f:42:76:50:22:ef:9c:4f:45:57:a5:0b:30:c6:d2:
e0:3c:21:f7:5e:1c:4b:4d:2d:31:5e:7f:51:fb:81:
4b:49:d2:9e:4b:e9:6f:61:2e:01:7d:4f:5b:9a:d7:
c9:42:6f:2b:53:72:de:4b:c1:60:e9:af:6b:06:28:
cc:9b:eb:10:cd:19:8f:05:a9:82:7c:c4:6f:ea:68:
d7:65:e1:6a:8d:74:2a:f9:2b:95:1b:06:c7:03:9a:
3f:c3:42:e3:c8:1b:d0:86:5f:50:4f:95:29:ac:23:
f0:9f:bf:bf:d7:37:02:65:b5:75:73:f3:d0:6e:4e:
5c:95:48:63:37:fa:e5:4e:d2:19:1d:6f:7f:7f:90:
c6:c6:46:b6:49:46:6d:6b:04:08:d9:96:f8:ee:7c:
e5:12:08:7e:53:4d:0a:31:ad:85:51:16:54:b8:ba:
43:9a:88:2d:f4:c7:26:17:76:8c:0f:74:1d:b0:a9:
84:e5:39:d9:33:f6:d4:f6:ec:a3:cf:9e:fc:9e:dc:
62:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:BD:03:CB:2F:87:9C:13:96:21:40:84:61:60:60:62:7B:55:B9:7A
X509v3 Authority Key Identifier:
keyid:EC:A0:04:7E:A8:E4:DC:E9:2E:BC:57:2E:E8:A1:1D:17:C6:B6:48:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
df:c0:c0:00:c3:3f:bd:ad:9f:90:eb:45:c9:af:df:2a:6a:08:
5d:6a:05:e9:30:c6:83:ee:6c:fc:b3:cd:d1:a4:b9:bc:bc:a6:
5a:34:96:1c:c6:12:23:18:53:3c:a8:10:c0:37:3c:4b:57:c2:
bb:45:08:e9:1b:a7:1e:fb:b4:bd:a6:2b:a1:a8:b4:e2:96:ac:
11:09:d8:9d:e0:c4:8b:1e:ce:53:b5:c0:8b:a1:34:e3:71:68:
e4:49:19:7e:88:61:a0:f3:8d:4c:e0:6a:5b:39:1f:f6:08:b5:
0c:ea:53:7a:f5:ab:38:c7:d8:f1:d8:7c:1f:6a:cd:10:31:71:
df:6a:37:75:d9:2d:89:ac:e1:15:2c:3c:3f:3d:5d:18:f4:08:
60:5e:4d:4f:7f:cd:ba:2f:da:31:6f:d8:a1:0a:10:58:5a:df:
58:3e:2f:ce:0b:f1:1d:07:99:3c:9e:ce:05:e9:fd:1c:73:d6:
b0:3f:f1:54:c0:2c:5a:c8:df:8f:30:d2:51:0e:95:fe:d7:1f:
96:7d:39:1c:15:a5:33:c9:0c:6e:9a:dc:37:be:74:69:f0:63:
63:80:1f:12:16:4c:ba:cf:b5:3c:08:1b:c1:74:78:63:19:04:
34:ee:2e:9a:02:4b:50:ad:5c:05:75:da:46:b6:ea:af:94:9a:
cf:98:0d:a2
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUVs2LO/PmBvyU3FXqzFb8iE/ChBIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUNBMDA0N0VBOEU0RENFOTJFQkM1NzJFRThBMTFEMTdD
NkI2NDg3MjAeFw0yNjA3MjQwODE5NDVaFw0yNjA3MjUxMTI3NDVaMDMxMTAvBgNV
BAMTKEM0QkQwM0NCMkY4NzlDMTM5NjIxNDA4NDYxNjA2MDYyN0I1NUI5N0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwQy46ClND4GRzyydF+SmV+pZP
OYcCAU5anoC4Lw1BcZFvvGxH9CHwx0WErzMIAzs0fjYhmK/8WG370D9CdlAi75xP
RVelCzDG0uA8IfdeHEtNLTFef1H7gUtJ0p5L6W9hLgF9T1ua18lCbytTct5LwWDp
r2sGKMyb6xDNGY8FqYJ8xG/qaNdl4WqNdCr5K5UbBscDmj/DQuPIG9CGX1BPlSms
I/Cfv7/XNwJltXVz89BuTlyVSGM3+uVO0hkdb39/kMbGRrZJRm1rBAjZlvjufOUS
CH5TTQoxrYVRFlS4ukOaiC30xyYXdowPdB2wqYTlOdkz9tT27KPPnvye3GIVAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUxL0Dyy+HnBOWIUCEYWBgYntVuXowHwYDVR0j
BBgwFoAU7KAEfqjk3OkuvFcu6KEdF8a2SHIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NDZiMDVmMzYtZTE3NC00ZGFkLWJjMmEtMDg5MjZjNWRkMDQ2LzAvRUNBMDA0N0VB
OEU0RENFOTJFQkM1NzJFRThBMTFEMTdDNkI2NDg3Mi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC9FQ0EwMDQ3RUE4RTREQ0U5MkVCQzU3MkVFOEExMUQxN0M2QjY0
ODcyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDZiMDVmMzYtZTE3NC00ZGFkLWJj
MmEtMDg5MjZjNWRkMDQ2LzAvRUNBMDA0N0VBOEU0RENFOTJFQkM1NzJFRThBMTFE
MTdDNkI2NDg3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAN/AwADDP72tn5DrRcmv3ypqCF1qBekwxoPu
bPyzzdGkuby8plo0lhzGEiMYUzyoEMA3PEtXwrtFCOkbpx77tL2mK6GotOKWrBEJ
2J3gxIsezlO1wIuhNONxaORJGX6IYaDzjUzgals5H/YItQzqU3r1qzjH2PHYfB9q
zRAxcd9qN3XZLYms4RUsPD89XRj0CGBeTU9/zbov2jFv2KEKEFha31g+L84L8R0H
mTyezgXp/Rxz1rA/8VTALFrI348w0lEOlf7XH5Z9ORwVpTPJDG6a3De+dGnwY2OA
HxIWTLrPtTwIG8F0eGMZBDTuLpoCS1CtXAV12ka26q+Ums+YDaI=
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:03:13 2026 by rpki-client