
$ rpki-client -vvf rpki-rsync.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/EC464ACDD6858B613E13B13344BB988E92418A08.mft
File: EC464ACDD6858B613E13B13344BB988E92418A08.mft (raw, json)
Hash identifier: haoqBodr9SyQLca8QRuDzVPJWOqVCboIH61MjaSO5lU=
Subject key identifier: 5A:9D:08:3C:20:11:48:0B:B8:5E:5E:6D:29:0C:B8:67:C4:12:5E:3C
Authority key identifier: EC:46:4A:CD:D6:85:8B:61:3E:13:B1:33:44:BB:98:8E:92:41:8A:08
Certificate issuer: /CN=EC464ACDD6858B613E13B13344BB988E92418A08
Certificate serial: 6F795DA639514F895A3CF721FCA8548AA0CFC342
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EC464ACDD6858B613E13B13344BB988E92418A08.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/EC464ACDD6858B613E13B13344BB988E92418A08.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 16:46:23 +0000
Manifest this update: Tue 12 May 2026 16:41:23 +0000
Manifest next update: Wed 13 May 2026 18:02:23 +0000
Files and hashes: 1: 3230332e39362e3232382e302f32332d3234203d3e20313334363535.roa (hash: qct805YAJVrMqEwmp7GMGrHlEnZ8CXcTrUlU+oMYiDE=)
2: 3130332e3234372e3231312e302f32342d3234203d3e20313334363535.roa (hash: 729mihHGdMx9/AKOob41I1TKRP4K3/svpHuBRoC4uAA=)
3: EC464ACDD6858B613E13B13344BB988E92418A08.crl (hash: hZ8CPblrbNDlL/056bVR00ymx6/jAzS7q+STFl77PPg=)
4: 323430343a353938303a3a2f33322d3332203d3e20313334363535.roa (hash: 6uEfVOnDlCA/pNIFT5bC9JCmVynI5FIoh7TLhoyhIys=)
5: 3130332e3230392e3138342e302f32322d3234203d3e20313334363535.roa (hash: LvmXxn8tofzUOQD7Y8MBoEUbiMdg2W3vi+Y9WTB64Ck=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/EC464ACDD6858B613E13B13344BB988E92418A08.crl
rsync://rpki-rsync.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/EC464ACDD6858B613E13B13344BB988E92418A08.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EC464ACDD6858B613E13B13344BB988E92418A08.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 18:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:79:5d:a6:39:51:4f:89:5a:3c:f7:21:fc:a8:54:8a:a0:cf:c3:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC464ACDD6858B613E13B13344BB988E92418A08
Validity
Not Before: May 12 16:41:23 2026 GMT
Not After : May 13 18:02:23 2026 GMT
Subject: CN=5A9D083C2011480BB85E5E6D290CB867C4125E3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4d:d5:08:2a:31:70:61:13:2c:75:3e:4b:14:
1f:43:cd:09:7e:b6:71:c6:ad:b6:43:26:1c:6c:20:
14:6b:c9:25:a3:bd:b6:05:3d:81:a7:75:ad:ec:88:
e8:2d:44:08:f8:be:6c:24:f6:ff:05:e4:9c:e1:22:
30:a6:e8:19:70:dd:c0:df:57:2d:b1:f7:18:06:e7:
de:9b:5a:b2:a3:43:bd:4a:ad:39:fa:26:f2:b2:03:
20:b1:f3:1a:2a:48:6d:8f:91:6f:1c:16:55:3e:d8:
ce:ea:44:c0:40:d6:2c:57:92:10:87:83:2f:48:c9:
5d:85:2a:5f:4e:ff:10:81:52:26:a9:0d:a0:af:40:
97:aa:e6:2b:84:49:bc:fb:ac:55:20:e1:e1:c8:68:
42:19:71:93:87:33:f1:4c:41:22:86:65:40:59:c3:
40:7b:26:62:4e:64:eb:c7:fb:0a:af:b2:b6:08:32:
d9:69:5d:79:ec:cd:8e:4a:fe:7c:24:84:3f:4f:16:
d8:97:c2:af:c3:b4:25:84:b5:93:95:87:f4:33:30:
58:c6:b9:4e:e3:32:70:e9:19:1f:88:fd:b5:92:48:
01:f0:ae:80:5c:7c:76:1e:22:42:00:ea:b1:66:68:
e2:30:4a:4e:75:50:35:0f:26:a0:91:87:cf:f5:78:
94:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:9D:08:3C:20:11:48:0B:B8:5E:5E:6D:29:0C:B8:67:C4:12:5E:3C
X509v3 Authority Key Identifier:
keyid:EC:46:4A:CD:D6:85:8B:61:3E:13:B1:33:44:BB:98:8E:92:41:8A:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/EC464ACDD6858B613E13B13344BB988E92418A08.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EC464ACDD6858B613E13B13344BB988E92418A08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/EC464ACDD6858B613E13B13344BB988E92418A08.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:2b:e8:7d:3d:3f:6e:5d:f6:ea:39:83:ea:a4:e2:b4:64:81:
b5:f7:9b:cf:22:fb:76:e5:1f:6c:52:45:7e:48:4c:51:48:ac:
61:a4:56:7f:2b:d3:37:db:51:43:bd:23:1a:37:df:ee:25:bb:
68:e8:1c:04:5a:73:3a:b2:f3:9b:08:ac:6d:ed:f0:dc:37:57:
c9:9e:be:13:d8:74:07:8e:08:bb:ba:13:e2:f8:28:c6:f7:28:
08:0b:04:c5:7a:f9:47:9c:7c:9d:cf:b4:73:ed:54:60:f4:77:
eb:37:d5:bd:93:de:f6:4f:a8:ef:1d:90:dd:db:bb:73:a9:81:
93:d4:db:68:ba:99:a4:42:8f:be:4b:74:aa:3c:c8:18:fe:54:
e4:d7:73:41:c5:42:ee:04:0d:31:dd:97:c6:3c:01:e8:cb:07:
43:ff:9c:b8:0d:bd:30:26:2b:ed:d6:aa:8d:d1:6f:df:a5:9e:
5d:c7:3e:c1:f4:a4:98:9d:e6:2e:1d:3a:ef:c7:bf:f2:6b:c8:
31:45:cb:81:2a:33:9d:75:67:bf:12:cf:08:d8:18:e0:6c:cf:
ae:cc:71:ae:4a:f7:f7:cb:ef:a3:cd:b9:f0:6a:f7:b4:48:f6:
f3:82:ce:6e:2d:27:c2:80:47:72:e2:c7:3a:cf:07:13:86:5f:
de:f9:35:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:08:58 2026 by rpki-client