
$ rpki-client -vvf rpki-rsync.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/EC59C36AB88A35CEA64B4ED019F2F05317672299.mft
File: EC59C36AB88A35CEA64B4ED019F2F05317672299.mft (raw, json)
Hash identifier: X9lsrL71c6ZTbKms9bNze/uLJY1CWcw4BVzERlsDCvI=
Subject key identifier: EA:EF:9C:86:FB:FF:3B:A3:16:C7:58:92:68:62:66:B7:D4:4F:5B:35
Authority key identifier: EC:59:C3:6A:B8:8A:35:CE:A6:4B:4E:D0:19:F2:F0:53:17:67:22:99
Certificate issuer: /CN=EC59C36AB88A35CEA64B4ED019F2F05317672299
Certificate serial: 3BDB370A0C2C58080E0B7A864B27FF5D3B19CA8A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EC59C36AB88A35CEA64B4ED019F2F05317672299.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/EC59C36AB88A35CEA64B4ED019F2F05317672299.mft
Manifest number: 0E
Signing time: Tue 12 May 2026 09:20:42 +0000
Manifest this update: Tue 12 May 2026 09:15:42 +0000
Manifest next update: Wed 13 May 2026 12:24:42 +0000
Files and hashes: 1: 3230322e3132372e39372e302f32342d3234203d3e203137393130.roa (hash: YPwGvhjJSaspOvLgrZ3Fyf5ldBDtpaa3xSbfWjcGrDA=)
2: EC59C36AB88A35CEA64B4ED019F2F05317672299.crl (hash: Dp123U4UO28ON7Ko71NMdFSasnvi4Pff1dLgH6nVSWY=)
3: 3230322e3132372e39392e302f32342d3234203d3e203137393130.roa (hash: Ju2Rnafj0JXyXCFyRIYbsuCCwhT0mQqqDAAoegLW2lk=)
4: 3230322e3132372e39362e302f32302d3234203d3e203137393130.roa (hash: +dGVRe6EsrE8x8JkrbEl5y9M3KyI6+RObwSg+1Gl944=)
5: 3231302e37392e3230382e302f32302d3234203d3e203137393130.roa (hash: 5vaZfShfqgbUD5UrW2OwsFkdXsmnoUQ2LgDSdBEsxKs=)
6: 3230322e3132372e39362e302f32302d3230203d3e203137393130.roa (hash: AfPj1/WANHCA8ksluVDxgnesb53b+Rlio8ADTE+u1pQ=)
7: 3230322e3132372e39362e302f32342d3234203d3e203137393130.roa (hash: +30yZ3DQ/J4gQPQfBONcQspdy36OErhmpY2jH4HzLiQ=)
8: 3230322e3132372e3130302e302f32342d3234203d3e203137393130.roa (hash: n+eUGlNoGxyXiKbu/ITCTX0cNeFjGes4nvyKs6e972Y=)
9: 3230322e3132372e39382e302f32342d3234203d3e203137393130.roa (hash: nvBOhOQVzXAnJ4HGpau+WjYJtRHl8i2975iE/qVl3BQ=)
10: 3231302e37392e3230382e302f32302d3230203d3e203137393130.roa (hash: 57swP2LUwPdheqaXWgJ8pT9nt0r4LCH8JoFCbrhNwuw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/EC59C36AB88A35CEA64B4ED019F2F05317672299.crl
rsync://rpki-rsync.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/EC59C36AB88A35CEA64B4ED019F2F05317672299.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EC59C36AB88A35CEA64B4ED019F2F05317672299.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:db:37:0a:0c:2c:58:08:0e:0b:7a:86:4b:27:ff:5d:3b:19:ca:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC59C36AB88A35CEA64B4ED019F2F05317672299
Validity
Not Before: May 12 09:15:42 2026 GMT
Not After : May 13 12:24:42 2026 GMT
Subject: CN=EAEF9C86FBFF3BA316C75892686266B7D44F5B35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f4:40:1b:c9:65:b1:80:ec:86:f5:31:2e:c9:
1d:21:d9:13:3d:52:83:ab:b3:0e:12:a8:86:b7:2e:
f1:33:54:43:68:f0:98:2b:34:db:6a:58:9b:f8:13:
e1:cf:8c:e5:5d:06:32:ef:97:10:f8:91:bf:af:1a:
36:cc:27:43:1f:e2:58:94:3b:f0:86:e4:3f:16:6b:
8a:42:20:95:b7:86:70:d3:fa:55:88:03:87:cd:75:
6f:a1:2c:c7:4f:0b:be:38:17:04:d8:90:f6:ed:ab:
4a:cf:e3:e9:18:d6:b5:e6:10:1a:76:45:eb:fb:64:
00:b3:c8:88:31:96:08:0d:d2:10:6e:0c:52:2e:e5:
07:92:1b:f0:62:d4:1a:36:91:93:e5:94:a7:89:c9:
70:43:0a:2f:bb:8d:77:6c:f1:e5:1f:1e:9e:13:a6:
df:90:40:44:8f:c1:2a:e9:b3:6d:7b:e7:1a:a8:85:
83:9d:40:b6:67:0c:08:d9:0b:d3:63:ba:eb:c6:32:
2f:43:df:66:91:7a:41:11:f1:79:1f:be:00:e3:1f:
11:5e:f1:d8:b9:90:f0:fc:7b:d6:3c:64:92:cd:fb:
82:0c:04:83:53:0b:23:48:59:5d:92:17:74:a2:30:
ef:6c:bb:07:f4:99:85:83:45:0a:d9:13:b6:87:64:
c6:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:EF:9C:86:FB:FF:3B:A3:16:C7:58:92:68:62:66:B7:D4:4F:5B:35
X509v3 Authority Key Identifier:
keyid:EC:59:C3:6A:B8:8A:35:CE:A6:4B:4E:D0:19:F2:F0:53:17:67:22:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/EC59C36AB88A35CEA64B4ED019F2F05317672299.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EC59C36AB88A35CEA64B4ED019F2F05317672299.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/EC59C36AB88A35CEA64B4ED019F2F05317672299.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:96:7e:a5:d9:d3:0c:3d:99:0d:80:e7:00:f6:ae:52:59:5b:
f5:34:41:aa:3c:e5:23:48:f0:75:ee:7e:9f:a6:20:ca:46:9a:
37:36:ad:8b:84:75:63:01:6d:9d:02:2e:0d:bf:ca:0f:d3:4c:
d1:2c:bd:43:c6:c7:3e:d5:65:be:2b:8c:33:c2:4b:9e:58:52:
f8:4b:05:99:e3:d3:d1:9a:a5:d2:78:1b:08:29:8d:2b:bd:7a:
86:00:fe:4a:99:d8:07:e7:dd:07:4b:33:60:cc:ee:6d:96:66:
a0:ca:a1:d7:17:65:95:3f:01:36:e9:14:6a:ba:93:ce:fb:e8:
23:5b:57:84:a1:c2:73:9a:fa:5b:4e:ac:18:ec:8f:ce:e9:2e:
9e:d7:b7:3d:64:87:53:c1:b3:1a:fe:52:65:5e:ed:e7:20:b1:
5e:1f:e4:a9:f4:e2:6c:de:d7:a0:10:a5:4e:d0:39:52:14:15:
27:3b:9f:ca:d2:d4:b4:51:01:2c:74:c3:b3:83:b1:b1:a7:05:
30:44:00:97:13:21:b4:eb:ee:1d:26:59:65:7c:3a:11:83:4a:
fa:5b:8a:ff:24:32:86:ff:5a:27:aa:5c:03:8b:90:95:3d:23:
32:d0:02:f0:97:40:68:13:61:35:11:e0:db:e8:19:2b:e0:ea:
5f:4e:24:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:36:37 2026 by rpki-client