
$ rpki-client -vvf rpki-rsync.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/E88BC8A7F27D2A5B7520E87760889CD042853ADE.mft
File: E88BC8A7F27D2A5B7520E87760889CD042853ADE.mft (raw, json)
Hash identifier: v01mP7Y+hnq80XGYUH1yvKtF/JpmzZ9zgiz0Wn5WOXA=
Subject key identifier: E8:65:0B:BE:F6:B6:CD:19:30:6F:FF:2E:7F:2E:88:82:5E:62:C5:07
Authority key identifier: E8:8B:C8:A7:F2:7D:2A:5B:75:20:E8:77:60:88:9C:D0:42:85:3A:DE
Certificate issuer: /CN=E88BC8A7F27D2A5B7520E87760889CD042853ADE
Certificate serial: 6940F81FA9D44FE707CA4CA3C9264F0449098316
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E88BC8A7F27D2A5B7520E87760889CD042853ADE.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/E88BC8A7F27D2A5B7520E87760889CD042853ADE.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 19:25:26 +0000
Manifest this update: Tue 12 May 2026 19:20:26 +0000
Manifest next update: Wed 13 May 2026 22:51:26 +0000
Files and hashes: 1: E88BC8A7F27D2A5B7520E87760889CD042853ADE.crl (hash: jX+9p004c6Pv5voAKPuuuILqN3G2l/GnD/gCidQ9Clk=)
2: 3130332e3130352e37392e302f32342d3234203d3e20313336383734.roa (hash: gkAC5+StdnMaSqYuGVBT+3ErlRAaXIJGp1TwiVqa81g=)
3: 3130332e3130352e37362e302f32342d3234203d3e203535363736.roa (hash: Q3r0bAYb72ZQ2Fp1fAghigXkWh4LdobhrwQdO/opI/0=)
4: 323430323a326334303a3a2f34382d3438203d3e20313336383734.roa (hash: zi1G9BahVDm/M7Dcf6hyf4kk3uCGA92haLufy2kBDKs=)
5: 3130332e3130352e37372e302f32342d3234203d3e203535363736.roa (hash: 89aIdO+EcaO2EgEgxRB/RqjR0BzQuTZKwEZg7t/EUN8=)
6: 3130332e3130352e37392e302f32342d3234203d3e203535363736.roa (hash: SHELRlR+bO1G1+56lQPkLv609BfDTEBVrD9A+nbY330=)
7: 3130332e3130352e37362e302f32332d3234203d3e20313336383734.roa (hash: cc/saxfe9KKXtfm7XzpNhS/kTpo6bsyBLZi4D549YFI=)
8: 3130332e3130352e37382e302f32342d3234203d3e20313336383734.roa (hash: HjyzaNQUCQhEFQ4hKYw2ku34SqSG+Q21ZyHYmX0dpFM=)
9: 3130332e3130352e37362e302f32342d3234203d3e20313336383734.roa (hash: StV9pAMf1Ct261g28sLeCDLoQr5OW67xNFsrQ9jD6wc=)
10: 3130332e3130352e37382e302f32342d3234203d3e203535363736.roa (hash: T79Acu3dFfSJnZwf5MfpW3ZPl2jn6Xl5KVc/Lh8xgf0=)
11: 323430323a326334303a3a2f34382d3438203d3e203535363736.roa (hash: vki+XStGqNG/jPbkEYt4lyDUr4IU7G8v5buzOalFaw0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/E88BC8A7F27D2A5B7520E87760889CD042853ADE.crl
rsync://rpki-rsync.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/E88BC8A7F27D2A5B7520E87760889CD042853ADE.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E88BC8A7F27D2A5B7520E87760889CD042853ADE.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:40:f8:1f:a9:d4:4f:e7:07:ca:4c:a3:c9:26:4f:04:49:09:83:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E88BC8A7F27D2A5B7520E87760889CD042853ADE
Validity
Not Before: May 12 19:20:26 2026 GMT
Not After : May 13 22:51:26 2026 GMT
Subject: CN=E8650BBEF6B6CD19306FFF2E7F2E88825E62C507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a8:4c:66:7e:6a:7c:49:b5:f6:2f:e7:92:0b:
c1:ef:48:12:bb:c6:49:93:04:32:e8:df:ac:eb:02:
45:e1:5c:d6:c0:d2:96:e8:f8:cb:ca:59:05:e7:ce:
8b:a9:78:cc:40:91:75:53:1e:e8:27:86:bd:8e:26:
5b:2c:0b:26:2c:8e:06:46:ee:af:a8:9f:3a:f0:fc:
66:90:57:5c:ae:57:3d:f8:5b:70:2d:08:b0:bb:ba:
75:b8:c4:ba:5c:ea:e0:ea:6b:2a:95:48:7d:a9:38:
8c:63:b4:47:23:8b:70:8e:e0:46:16:05:33:08:4e:
04:33:fc:2e:7e:50:dc:68:27:79:f0:3e:63:89:02:
2b:52:cb:57:05:0f:cc:63:b3:35:13:31:8e:2e:a8:
c6:38:50:d3:8f:26:22:e9:c5:e9:1e:3a:3a:4b:54:
3c:e1:7d:74:77:21:b3:d8:14:83:bf:0a:6f:69:ee:
70:99:df:ec:12:3a:94:fd:42:f7:25:93:b1:95:cb:
59:43:ab:5c:b7:71:e5:51:3d:d8:46:22:f5:f3:58:
13:1b:86:40:fe:6f:f6:98:8c:d4:22:0d:25:0c:35:
ef:c1:3e:65:bf:0b:f7:9c:cc:a0:88:69:e6:ea:47:
88:e4:32:88:9d:78:f7:d6:bb:52:d3:60:0a:3a:5a:
c1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:65:0B:BE:F6:B6:CD:19:30:6F:FF:2E:7F:2E:88:82:5E:62:C5:07
X509v3 Authority Key Identifier:
keyid:E8:8B:C8:A7:F2:7D:2A:5B:75:20:E8:77:60:88:9C:D0:42:85:3A:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/E88BC8A7F27D2A5B7520E87760889CD042853ADE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E88BC8A7F27D2A5B7520E87760889CD042853ADE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/E88BC8A7F27D2A5B7520E87760889CD042853ADE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:fe:20:67:52:f9:b4:1f:43:89:e0:ff:8d:44:25:81:52:4a:
76:3c:72:ab:13:e7:2a:87:7f:94:01:cf:e1:8a:a3:30:05:ba:
51:a4:94:5c:aa:fd:27:c8:b7:56:f3:9e:fc:92:5c:79:74:5c:
3d:35:a1:22:5b:e3:a3:b6:51:f9:22:a0:6b:92:d4:fc:bb:09:
1b:be:28:8e:eb:44:0c:4d:9a:ff:08:e7:e6:a9:b2:92:1e:64:
b9:3a:7f:f8:88:e2:29:b8:53:f2:1e:58:f5:8e:89:f6:02:01:
39:25:a0:b5:58:59:3f:1f:05:64:d9:e6:9f:3a:9c:25:c5:ed:
77:d5:51:b9:4f:e1:0c:8e:03:03:22:d4:7b:8b:10:46:b8:a8:
e8:c1:30:a3:b0:ad:46:ac:bb:a4:f5:f8:f8:01:58:bd:18:88:
67:f4:ac:b6:b3:65:66:02:f1:aa:30:84:ce:19:bc:7e:b0:6b:
20:71:ba:f6:44:c1:9a:c9:7d:20:79:12:91:c5:82:b1:5b:81:
d3:d5:3e:e8:36:9c:28:56:e9:82:e6:80:32:61:89:f5:a4:92:
01:b5:bb:24:16:df:af:3e:98:13:59:6b:6d:5b:0d:54:44:c3:
f6:4a:e7:69:38:ad:a5:44:18:c0:af:d3:7f:60:da:ec:5e:72:
4f:d6:7e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:10:55 2026 by rpki-client