
$ rpki-client -vvf rpki-rsync.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/EC464ACDD6858B613E13B13344BB988E92418A08.mft
File: EC464ACDD6858B613E13B13344BB988E92418A08.mft (raw, json)
Hash identifier: mGgrOkVzl8JNq6Eb6/XbdHKcWfRCURxb4bpq/R088lg=
Subject key identifier: 52:0A:16:03:52:EB:2D:18:5A:4B:A2:81:A0:F2:A5:37:58:03:13:00
Authority key identifier: EC:46:4A:CD:D6:85:8B:61:3E:13:B1:33:44:BB:98:8E:92:41:8A:08
Certificate issuer: /CN=EC464ACDD6858B613E13B13344BB988E92418A08
Certificate serial: 37B84266DA1E4CCFAB0CD2E451F427C215E03F12
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EC464ACDD6858B613E13B13344BB988E92418A08.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/EC464ACDD6858B613E13B13344BB988E92418A08.mft
Manifest number: 6F
Signing time: Thu 23 Jul 2026 15:18:38 +0000
Manifest this update: Thu 23 Jul 2026 15:13:38 +0000
Manifest next update: Fri 24 Jul 2026 15:39:38 +0000
Files and hashes: 1: 3130332e3234372e3231312e302f32342d3234203d3e20313334363535.roa (hash: 729mihHGdMx9/AKOob41I1TKRP4K3/svpHuBRoC4uAA=)
2: 3230332e39362e3232382e302f32332d3234203d3e20313334363535.roa (hash: qct805YAJVrMqEwmp7GMGrHlEnZ8CXcTrUlU+oMYiDE=)
3: 323430343a353938303a3a2f33322d3332203d3e20313334363535.roa (hash: 6uEfVOnDlCA/pNIFT5bC9JCmVynI5FIoh7TLhoyhIys=)
4: EC464ACDD6858B613E13B13344BB988E92418A08.crl (hash: Bx1pFHh9QfFTmOXIPTGM/AjLkOifdQLybqpCOni5vys=)
5: 3130332e3230392e3138342e302f32322d3234203d3e20313334363535.roa (hash: LvmXxn8tofzUOQD7Y8MBoEUbiMdg2W3vi+Y9WTB64Ck=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/EC464ACDD6858B613E13B13344BB988E92418A08.crl
rsync://rpki-rsync.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/EC464ACDD6858B613E13B13344BB988E92418A08.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EC464ACDD6858B613E13B13344BB988E92418A08.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 15:39:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:b8:42:66:da:1e:4c:cf:ab:0c:d2:e4:51:f4:27:c2:15:e0:3f:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC464ACDD6858B613E13B13344BB988E92418A08
Validity
Not Before: Jul 23 15:13:38 2026 GMT
Not After : Jul 24 15:39:38 2026 GMT
Subject: CN=520A160352EB2D185A4BA281A0F2A53758031300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:11:e1:06:ce:3b:1e:bb:8b:a2:8d:9f:00:67:
b2:2c:05:ca:2a:78:98:e5:c7:86:3a:c2:01:29:b6:
f9:e8:41:c5:6b:5d:30:d3:70:38:f0:5f:a1:3e:5e:
81:6a:56:19:47:14:19:f1:ea:73:4a:73:ea:99:e2:
26:49:1c:4e:db:20:db:50:d0:14:d1:7a:74:29:e1:
3a:be:7f:3f:f9:d9:81:e2:fe:a8:8a:c7:bd:01:ea:
69:ea:d0:f3:13:20:0d:e6:d2:0d:95:93:cd:bb:11:
ca:28:64:32:82:54:d6:6f:1c:f9:f0:c1:98:66:96:
8e:97:79:ba:35:54:9f:96:b5:88:7a:e5:0a:5a:20:
c9:4a:43:2d:c2:11:62:13:62:be:2a:75:08:49:96:
e5:ee:73:cd:25:e8:55:ff:86:19:c7:1c:5d:fd:46:
36:29:e1:4f:66:d4:e8:92:f8:e9:2c:1e:c2:57:ef:
21:c4:a2:09:55:37:60:7e:1f:eb:f3:04:61:72:c2:
d5:7d:8e:20:e6:9f:7b:6f:be:a0:85:cd:83:d9:53:
f5:15:fa:5e:a0:68:85:e9:ca:73:6b:ea:91:24:d9:
81:9a:0c:1d:4f:18:ae:1b:53:ed:6e:f2:d2:6a:76:
d5:9c:94:32:45:49:32:24:97:e7:3a:62:0c:77:1c:
08:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:0A:16:03:52:EB:2D:18:5A:4B:A2:81:A0:F2:A5:37:58:03:13:00
X509v3 Authority Key Identifier:
keyid:EC:46:4A:CD:D6:85:8B:61:3E:13:B1:33:44:BB:98:8E:92:41:8A:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/EC464ACDD6858B613E13B13344BB988E92418A08.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EC464ACDD6858B613E13B13344BB988E92418A08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/EC464ACDD6858B613E13B13344BB988E92418A08.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:48:da:2d:23:df:01:5f:c4:a1:f2:18:1f:9a:b2:df:17:7f:
b8:56:33:30:d2:1a:0c:d1:5a:c9:78:0a:53:63:ab:6a:85:85:
30:91:7b:d0:36:31:dd:b8:c3:df:09:ed:28:36:9f:9a:4a:49:
39:7e:b8:e3:b6:7a:b5:64:2f:84:06:54:8e:a2:98:1c:4a:f1:
c4:9a:1a:3c:a1:90:42:57:dd:66:a1:5e:28:4e:ec:49:f8:f5:
05:4e:1d:5c:1a:68:e6:b8:8f:db:0d:fe:3f:1e:7d:1e:20:f1:
fc:3a:a4:ee:92:b1:73:eb:d3:57:35:3e:26:1d:92:d9:8d:bb:
27:48:88:a8:8e:d3:a5:e5:6b:d1:ab:08:79:61:50:d1:4e:c2:
7f:d9:5c:dc:3d:ea:04:01:af:b8:4d:b8:a6:32:18:63:e0:c7:
89:d4:ea:f8:4c:c5:3d:94:63:86:6c:47:0e:75:0a:12:ba:4b:
c9:75:e4:95:d3:5b:df:3c:38:56:0e:b4:fb:14:0b:b2:99:f9:
44:f8:96:66:be:26:57:81:cc:df:a3:3a:ff:d1:26:f6:ed:93:
36:2c:f0:93:71:d6:4a:20:73:a9:0b:a3:d0:72:89:6c:ba:61:
61:2f:24:56:36:99:96:98:c0:22:3e:70:c8:1b:d6:5c:28:ee:
78:77:78:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:10:14 2026 by rpki-client