
$ rpki-client -vvf rpki-rsync.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/E30A78294D1A6B6A63D27E37DD6FC6E7B80F9ED2.mft
File: E30A78294D1A6B6A63D27E37DD6FC6E7B80F9ED2.mft (raw, json)
Hash identifier: sX/UQebelUYQm6E5cY0241DzviHYeaj8Gy1lUktyTUg=
Subject key identifier: E1:29:1D:52:27:06:55:0E:EE:90:B7:DB:20:DB:8F:AA:3E:93:D0:17
Authority key identifier: E3:0A:78:29:4D:1A:6B:6A:63:D2:7E:37:DD:6F:C6:E7:B8:0F:9E:D2
Certificate issuer: /CN=E30A78294D1A6B6A63D27E37DD6FC6E7B80F9ED2
Certificate serial: 3E7125BA9EFE71B512CA4A858AC9D9539CBF8A38
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E30A78294D1A6B6A63D27E37DD6FC6E7B80F9ED2.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/E30A78294D1A6B6A63D27E37DD6FC6E7B80F9ED2.mft
Manifest number: 71
Signing time: Fri 24 Jul 2026 03:48:59 +0000
Manifest this update: Fri 24 Jul 2026 03:43:59 +0000
Manifest next update: Sat 25 Jul 2026 06:57:59 +0000
Files and hashes: 1: 323430373a633663303a3a2f33322d3438203d3e20313432333634.roa (hash: PIAfDzknn9MyXCe2w271kJi6m07dYGdxpQ/h99WENdo=)
2: 3130332e3137302e3130302e302f32342d3234203d3e20313432333634.roa (hash: G9l0N/5Yff3x6/dE83tqKmpystb7dUXqvchJKY01Vfc=)
3: 3130332e3137302e3130312e302f32342d3234203d3e20313432333634.roa (hash: SLypnwrf3BxVH5EVMKZIAtA3FLjbxPQy2OlEBbQP8b8=)
4: E30A78294D1A6B6A63D27E37DD6FC6E7B80F9ED2.crl (hash: VgnSuHXaAnNmKWmtCmQPLjlTv3vKeezjql20/l+vr10=)
5: 3130332e3137302e3130302e302f32332d3234203d3e20313432333634.roa (hash: OU9KpCVaFyFqRPmbCa6ZHBE8msf8iFpD0/BG/bOi1fc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/E30A78294D1A6B6A63D27E37DD6FC6E7B80F9ED2.crl
rsync://rpki-rsync.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/E30A78294D1A6B6A63D27E37DD6FC6E7B80F9ED2.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E30A78294D1A6B6A63D27E37DD6FC6E7B80F9ED2.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 04:30:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:71:25:ba:9e:fe:71:b5:12:ca:4a:85:8a:c9:d9:53:9c:bf:8a:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E30A78294D1A6B6A63D27E37DD6FC6E7B80F9ED2
Validity
Not Before: Jul 24 03:43:59 2026 GMT
Not After : Jul 25 06:57:59 2026 GMT
Subject: CN=E1291D522706550EEE90B7DB20DB8FAA3E93D017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c7:05:c0:c3:5e:5e:0e:09:a0:94:7d:8d:62:
a6:51:6e:77:b7:03:c2:58:35:fe:3c:b8:93:8a:81:
7e:88:bb:21:b5:32:39:11:68:c9:d9:61:7d:a7:61:
33:eb:a8:d3:26:21:ae:6d:1b:86:d4:79:08:d4:48:
0a:46:2f:4a:1e:9d:3c:fb:af:c4:b9:db:0d:b9:39:
a8:34:8d:45:22:c1:b7:d2:04:33:cc:0a:c9:16:23:
ea:c2:14:bc:d5:ea:e7:a8:43:e2:b9:3e:a1:66:96:
2e:5d:bb:4c:63:ce:71:b6:6e:7f:76:de:4b:3d:4a:
ab:b3:04:3a:ca:72:8d:db:c9:e7:c0:1d:44:0b:6d:
df:34:6f:f1:2f:33:e8:58:ec:e9:85:b3:61:84:73:
bc:38:31:fc:2f:66:6d:c6:be:b4:f6:91:a6:9d:30:
f7:74:fd:40:a8:31:44:a2:c8:b4:92:0b:b4:2d:47:
73:29:95:66:8e:2a:b7:cd:49:1a:b1:10:8c:8a:bf:
ef:a1:23:39:2e:e2:f3:91:f5:22:f9:f8:81:0e:ba:
57:9c:a1:11:88:e2:8e:b4:ad:1a:04:46:12:b5:08:
97:0c:0a:1e:3e:13:d7:f7:e8:14:d8:0b:e9:24:eb:
44:6f:0e:dc:f5:b7:24:25:fc:52:09:5c:71:9e:ac:
d8:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:29:1D:52:27:06:55:0E:EE:90:B7:DB:20:DB:8F:AA:3E:93:D0:17
X509v3 Authority Key Identifier:
keyid:E3:0A:78:29:4D:1A:6B:6A:63:D2:7E:37:DD:6F:C6:E7:B8:0F:9E:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/E30A78294D1A6B6A63D27E37DD6FC6E7B80F9ED2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E30A78294D1A6B6A63D27E37DD6FC6E7B80F9ED2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/E30A78294D1A6B6A63D27E37DD6FC6E7B80F9ED2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:1b:d8:b1:ed:d1:65:9c:f9:27:1f:41:8c:26:be:89:92:bb:
e8:f1:78:d3:7f:9d:70:1e:ce:36:85:3c:bd:8f:38:93:07:44:
f6:0d:34:e1:02:e9:19:bc:0e:e5:ec:4b:87:1a:6b:4d:2c:71:
17:a8:0b:b3:79:59:a7:bd:ae:cb:4a:58:2a:61:1e:77:39:81:
ba:c1:65:27:b3:f7:ee:fa:d8:6e:8f:4c:aa:fd:90:46:fa:e8:
d0:40:35:bd:c0:cb:45:13:80:14:bd:e7:6d:f0:51:ef:e8:e6:
d6:4e:cb:ef:26:a6:bf:e4:51:9b:38:17:ea:4d:e1:4b:0e:6d:
7d:63:c7:b2:ff:69:e6:4e:a3:fd:52:ee:a9:ab:97:34:e4:ad:
e2:02:cf:fc:18:04:f9:cc:19:20:95:fb:8d:89:01:10:22:28:
3b:4b:5c:6d:b7:8d:0c:1e:bd:43:ca:78:10:a8:57:c3:e5:d5:
8e:49:a8:d2:46:13:1e:11:28:a7:eb:6b:5a:9e:a7:52:5e:07:
ef:78:98:54:53:2f:e0:54:e4:97:33:c2:3c:81:d0:ef:3a:0e:
e5:66:a5:67:e1:75:0e:1f:15:dd:4d:a8:25:12:11:08:f1:ad:
1b:d3:fa:fd:8a:3a:52:0c:2c:bf:ce:b1:d4:ca:e0:25:fc:74:
d4:a2:cc:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:10:20 2026 by rpki-client