
$ rpki-client -vvf rpki-rsync.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/E88BC8A7F27D2A5B7520E87760889CD042853ADE.mft
File: E88BC8A7F27D2A5B7520E87760889CD042853ADE.mft (raw, json)
Hash identifier: +8OlWTXacY/URmblN4ehigjJRJR/wk+4cuXwYjCFhxg=
Subject key identifier: 28:2E:45:8F:75:C2:1C:09:B3:02:6E:0A:E2:BD:87:B3:02:C6:36:8C
Authority key identifier: E8:8B:C8:A7:F2:7D:2A:5B:75:20:E8:77:60:88:9C:D0:42:85:3A:DE
Certificate issuer: /CN=E88BC8A7F27D2A5B7520E87760889CD042853ADE
Certificate serial: 1B4B3EA512ECD873B395555F9252CD3D05304959
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E88BC8A7F27D2A5B7520E87760889CD042853ADE.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/E88BC8A7F27D2A5B7520E87760889CD042853ADE.mft
Manifest number: 6F
Signing time: Fri 24 Jul 2026 00:09:18 +0000
Manifest this update: Fri 24 Jul 2026 00:04:18 +0000
Manifest next update: Sat 25 Jul 2026 02:21:18 +0000
Files and hashes: 1: 3130332e3130352e37392e302f32342d3234203d3e20313336383734.roa (hash: gkAC5+StdnMaSqYuGVBT+3ErlRAaXIJGp1TwiVqa81g=)
2: 3130332e3130352e37362e302f32342d3234203d3e203535363736.roa (hash: Q3r0bAYb72ZQ2Fp1fAghigXkWh4LdobhrwQdO/opI/0=)
3: 3130332e3130352e37372e302f32342d3234203d3e203535363736.roa (hash: 89aIdO+EcaO2EgEgxRB/RqjR0BzQuTZKwEZg7t/EUN8=)
4: 3130332e3130352e37362e302f32342d3234203d3e20313336383734.roa (hash: StV9pAMf1Ct261g28sLeCDLoQr5OW67xNFsrQ9jD6wc=)
5: 323430323a326334303a3a2f34382d3438203d3e20313336383734.roa (hash: zi1G9BahVDm/M7Dcf6hyf4kk3uCGA92haLufy2kBDKs=)
6: 3130332e3130352e37362e302f32332d3234203d3e20313336383734.roa (hash: cc/saxfe9KKXtfm7XzpNhS/kTpo6bsyBLZi4D549YFI=)
7: E88BC8A7F27D2A5B7520E87760889CD042853ADE.crl (hash: BUwgNmK+lZA6GShZu7K9RQxyVKG94/mJ/ppL8eypNew=)
8: 3130332e3130352e37382e302f32342d3234203d3e203535363736.roa (hash: T79Acu3dFfSJnZwf5MfpW3ZPl2jn6Xl5KVc/Lh8xgf0=)
9: 323430323a326334303a3a2f34382d3438203d3e203535363736.roa (hash: vki+XStGqNG/jPbkEYt4lyDUr4IU7G8v5buzOalFaw0=)
10: 3130332e3130352e37392e302f32342d3234203d3e203535363736.roa (hash: SHELRlR+bO1G1+56lQPkLv609BfDTEBVrD9A+nbY330=)
11: 3130332e3130352e37382e302f32342d3234203d3e20313336383734.roa (hash: HjyzaNQUCQhEFQ4hKYw2ku34SqSG+Q21ZyHYmX0dpFM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/E88BC8A7F27D2A5B7520E87760889CD042853ADE.crl
rsync://rpki-rsync.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/E88BC8A7F27D2A5B7520E87760889CD042853ADE.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E88BC8A7F27D2A5B7520E87760889CD042853ADE.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 02:21:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:4b:3e:a5:12:ec:d8:73:b3:95:55:5f:92:52:cd:3d:05:30:49:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E88BC8A7F27D2A5B7520E87760889CD042853ADE
Validity
Not Before: Jul 24 00:04:18 2026 GMT
Not After : Jul 25 02:21:18 2026 GMT
Subject: CN=282E458F75C21C09B3026E0AE2BD87B302C6368C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:2b:59:f7:b0:31:1f:3c:ea:9e:11:3e:18:3a:
cc:32:75:a2:5e:c2:5a:32:d1:30:20:10:78:04:5f:
0a:bd:a6:b1:c3:04:f7:31:d3:3d:e8:90:67:bf:e2:
a4:58:66:98:2a:e9:72:74:8f:c5:f5:2a:7c:37:64:
66:12:f4:f8:79:e1:9f:0a:bb:d2:0e:2d:87:f3:f3:
c3:a7:c6:92:95:8b:31:11:66:5c:53:78:66:3f:f4:
f5:81:ad:42:06:6a:61:f2:9f:e3:c5:4a:6a:67:54:
c9:06:38:00:83:6b:18:c3:62:83:01:57:71:a5:4e:
4d:1a:9d:b3:1d:6e:4c:3f:d4:9b:8b:ee:fb:80:a8:
35:89:c0:d7:fe:cb:0d:ae:a9:1f:2b:71:66:99:57:
4f:74:a6:96:66:27:29:cb:5b:fe:92:d5:c7:2a:f8:
7f:ec:88:a9:e6:af:50:c8:85:74:cb:9c:ce:c0:d7:
74:28:dc:c7:2a:e1:82:3e:12:58:0e:3c:80:c3:df:
a0:8c:d0:03:bd:93:40:3a:93:b0:19:85:4c:33:19:
b7:88:91:66:4d:4c:a5:c1:a7:56:91:f4:66:85:0f:
00:cf:37:8c:0e:45:f6:4b:52:a2:36:30:c4:fb:c1:
a7:8e:7a:45:b4:bc:91:70:a1:e8:f5:62:67:17:12:
e2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:2E:45:8F:75:C2:1C:09:B3:02:6E:0A:E2:BD:87:B3:02:C6:36:8C
X509v3 Authority Key Identifier:
keyid:E8:8B:C8:A7:F2:7D:2A:5B:75:20:E8:77:60:88:9C:D0:42:85:3A:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/E88BC8A7F27D2A5B7520E87760889CD042853ADE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E88BC8A7F27D2A5B7520E87760889CD042853ADE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/E88BC8A7F27D2A5B7520E87760889CD042853ADE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:be:af:55:69:68:fa:e5:bf:1f:13:95:08:56:3d:d9:85:5c:
9f:91:de:14:34:6d:25:82:5d:47:7b:45:2a:c5:27:27:d4:2f:
53:0e:4e:b7:37:a6:c1:0f:d8:89:1a:21:6d:c7:6f:98:27:03:
b2:a8:4e:ff:03:77:9e:0e:0f:5b:1c:3f:4b:4e:42:2f:14:a6:
69:9c:eb:0b:3a:7a:bd:91:1e:97:cf:c5:15:85:c4:42:1f:c1:
40:94:a5:a5:12:3a:5d:41:8f:9e:1b:6c:b2:74:73:aa:c8:87:
31:78:61:c7:62:77:66:3a:1d:7c:cf:fd:90:a7:37:81:ce:be:
52:50:ea:fc:4e:d1:0e:d5:82:46:d5:b5:30:22:51:ec:69:b0:
a6:83:d4:ae:ec:da:6c:1b:fe:4a:97:10:65:66:72:e3:97:40:
b0:ca:b2:e9:7b:98:8e:ca:f7:35:56:56:eb:67:87:dc:b6:bc:
52:cc:bd:87:a2:a9:4c:1e:0d:0e:81:ea:fe:7c:71:4f:3f:e3:
c5:ad:e7:9d:32:6b:02:d4:67:eb:be:8f:cd:29:1c:bb:17:3e:
34:1f:b2:e0:5d:d0:6e:30:e5:ef:4b:5f:f7:e4:15:bd:1e:d7:
3b:3a:d6:2f:38:64:9e:41:36:33:6e:28:95:2b:c7:d2:49:39:
8d:3e:c7:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:14:04 2026 by rpki-client