
$ rpki-client -vvf rpki-rsync.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/EC464ACDD6858B613E13B13344BB988E92418A08.mft
File: EC464ACDD6858B613E13B13344BB988E92418A08.mft (raw, json)
Hash identifier: zfGvmRZHedrkvRitDIeA0bJNVjVtpeyRuWzH46A6I/Q=
Subject key identifier: 69:C1:9A:5A:31:1F:33:C2:1E:E1:E0:10:44:30:F5:9D:B9:D0:14:26
Authority key identifier: EC:46:4A:CD:D6:85:8B:61:3E:13:B1:33:44:BB:98:8E:92:41:8A:08
Certificate issuer: /CN=EC464ACDD6858B613E13B13344BB988E92418A08
Certificate serial: 311B7D8405A9803B5F1DD387AEDA27E8C061DF9F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EC464ACDD6858B613E13B13344BB988E92418A08.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/EC464ACDD6858B613E13B13344BB988E92418A08.mft
Manifest number: 70
Signing time: Fri 24 Jul 2026 07:43:55 +0000
Manifest this update: Fri 24 Jul 2026 07:38:55 +0000
Manifest next update: Sat 25 Jul 2026 10:37:55 +0000
Files and hashes: 1: EC464ACDD6858B613E13B13344BB988E92418A08.crl (hash: TGB29b+TyJfHpL67UIueJtSNBrQ0O7ZPTB38Qdhwt4o=)
2: 3130332e3234372e3231312e302f32342d3234203d3e20313334363535.roa (hash: 729mihHGdMx9/AKOob41I1TKRP4K3/svpHuBRoC4uAA=)
3: 3230332e39362e3232382e302f32332d3234203d3e20313334363535.roa (hash: qct805YAJVrMqEwmp7GMGrHlEnZ8CXcTrUlU+oMYiDE=)
4: 323430343a353938303a3a2f33322d3332203d3e20313334363535.roa (hash: 6uEfVOnDlCA/pNIFT5bC9JCmVynI5FIoh7TLhoyhIys=)
5: 3130332e3230392e3138342e302f32322d3234203d3e20313334363535.roa (hash: LvmXxn8tofzUOQD7Y8MBoEUbiMdg2W3vi+Y9WTB64Ck=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/EC464ACDD6858B613E13B13344BB988E92418A08.crl
rsync://rpki-rsync.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/EC464ACDD6858B613E13B13344BB988E92418A08.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EC464ACDD6858B613E13B13344BB988E92418A08.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 07:07:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:1b:7d:84:05:a9:80:3b:5f:1d:d3:87:ae:da:27:e8:c0:61:df:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC464ACDD6858B613E13B13344BB988E92418A08
Validity
Not Before: Jul 24 07:38:55 2026 GMT
Not After : Jul 25 10:37:55 2026 GMT
Subject: CN=69C19A5A311F33C21EE1E0104430F59DB9D01426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:89:4a:8c:cf:ec:c3:e2:78:09:7b:5f:80:1f:
42:c9:fb:55:4e:5e:be:b6:af:14:36:c3:4a:d9:b8:
4c:9f:87:5a:0a:52:68:77:35:51:82:b9:58:20:3a:
5d:74:2b:96:bf:5f:15:1e:90:66:37:3d:16:7a:8c:
ac:83:87:fe:d5:e4:eb:66:89:3a:d0:95:d9:e1:80:
5e:a5:ca:99:0f:97:a6:02:08:3d:ee:f7:02:86:3a:
d5:28:2f:a6:7f:1d:ac:96:75:33:9c:71:36:ab:2a:
c4:66:da:fe:7d:21:28:e9:06:58:3a:9c:32:96:cb:
fd:67:d9:ff:ea:dd:0a:80:5e:fa:1e:13:3b:fc:8a:
a3:cf:0f:c4:63:c3:a2:61:ac:8d:24:dd:bf:14:db:
e0:64:8c:6a:ea:bc:4e:83:7b:20:24:ed:07:9f:99:
75:ef:b9:08:12:fd:e7:a4:bf:c9:6d:42:08:0a:19:
87:83:2b:f9:b4:12:98:69:1f:f5:ce:59:39:c2:d3:
5b:c1:a3:5a:b6:1c:dd:1c:d0:f6:49:70:7d:64:d5:
28:04:2e:e7:1f:a1:8d:16:79:64:ba:29:5c:20:09:
65:35:84:d0:ca:ae:fb:3b:6e:68:89:fb:46:13:a7:
4b:06:a2:54:09:8e:cd:1d:3b:2f:bc:11:c2:d5:40:
c3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:C1:9A:5A:31:1F:33:C2:1E:E1:E0:10:44:30:F5:9D:B9:D0:14:26
X509v3 Authority Key Identifier:
keyid:EC:46:4A:CD:D6:85:8B:61:3E:13:B1:33:44:BB:98:8E:92:41:8A:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/EC464ACDD6858B613E13B13344BB988E92418A08.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EC464ACDD6858B613E13B13344BB988E92418A08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/EC464ACDD6858B613E13B13344BB988E92418A08.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:88:b9:22:5c:aa:b2:26:7f:d4:83:47:52:25:41:7b:08:4e:
05:fc:fc:6a:f0:6e:5f:20:46:df:2e:82:18:57:33:72:f0:76:
51:51:a4:46:ee:10:d0:b2:17:36:53:7a:ca:ed:f8:f9:e9:46:
f6:8d:80:83:eb:88:d6:48:a9:5c:fb:29:85:ff:6a:4f:f6:ac:
0a:83:5c:07:09:e4:51:52:fc:cb:dd:c5:9b:c6:85:e9:dd:af:
0f:ba:a0:83:49:a1:a7:ae:c8:6d:5e:83:47:28:2c:a1:ed:31:
ea:6c:28:f1:f6:68:78:c0:40:21:3a:fc:e3:b6:69:81:ab:0b:
0f:c9:54:d5:5a:5c:04:94:76:14:18:34:9f:ca:40:32:21:e8:
f0:1d:0f:c3:b9:e5:7e:d8:4f:fe:af:df:ac:90:5d:68:d4:b2:
94:ea:22:d1:7c:5d:fa:e0:ac:c2:2a:19:9d:51:21:9c:09:c2:
90:2b:19:2c:4d:15:b9:38:1d:ea:f2:21:52:ac:43:49:93:76:
8f:73:43:1a:72:b6:bf:0d:fa:fb:f6:85:83:a5:1a:e7:20:69:
ca:09:2a:d2:db:b4:bf:92:4a:e2:53:18:65:12:c4:24:31:61:
5b:75:ff:fd:a4:ad:eb:17:83:35:ac:d3:66:11:12:64:de:6a:
4f:96:ba:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:41:53 2026 by rpki-client