
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/EC59C36AB88A35CEA64B4ED019F2F05317672299.mft
File: EC59C36AB88A35CEA64B4ED019F2F05317672299.mft (raw, json)
Hash identifier: mfSpAeyZ52tom7o/BB51ik2zK9X0akF2A+n5V2K4gdI=
Subject key identifier: 12:B4:9B:6F:F9:BA:3D:71:44:65:BE:51:04:27:2A:72:3F:17:71:AC
Authority key identifier: EC:59:C3:6A:B8:8A:35:CE:A6:4B:4E:D0:19:F2:F0:53:17:67:22:99
Certificate issuer: /CN=EC59C36AB88A35CEA64B4ED019F2F05317672299
Certificate serial: 0618D7A890967AAFC05D2C1A24537CC32CAFB25B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EC59C36AB88A35CEA64B4ED019F2F05317672299.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/EC59C36AB88A35CEA64B4ED019F2F05317672299.mft
Manifest number: C1
Signing time: Wed 23 Sep 2026 23:25:03 +0000
Manifest this update: Wed 23 Sep 2026 23:20:03 +0000
Manifest next update: Fri 25 Sep 2026 01:34:03 +0000
Files and hashes: 1: 3230322e3132372e39392e302f32342d3234203d3e203137393130.roa (hash: Ju2Rnafj0JXyXCFyRIYbsuCCwhT0mQqqDAAoegLW2lk=)
2: EC59C36AB88A35CEA64B4ED019F2F05317672299.crl (hash: HvKvZdPlx6teDOQkjc39NrekRqA17+KgBM5A+WNkOzI=)
3: 3230322e3132372e39372e302f32342d3234203d3e203137393130.roa (hash: YPwGvhjJSaspOvLgrZ3Fyf5ldBDtpaa3xSbfWjcGrDA=)
4: 3230322e3132372e39362e302f32302d3230203d3e203137393130.roa (hash: AfPj1/WANHCA8ksluVDxgnesb53b+Rlio8ADTE+u1pQ=)
5: 3231302e37392e3230382e302f32302d3230203d3e203137393130.roa (hash: 57swP2LUwPdheqaXWgJ8pT9nt0r4LCH8JoFCbrhNwuw=)
6: 3230322e3132372e39362e302f32302d3234203d3e203137393130.roa (hash: +dGVRe6EsrE8x8JkrbEl5y9M3KyI6+RObwSg+1Gl944=)
7: 3230322e3132372e39362e302f32342d3234203d3e203137393130.roa (hash: +30yZ3DQ/J4gQPQfBONcQspdy36OErhmpY2jH4HzLiQ=)
8: 3230322e3132372e3130302e302f32342d3234203d3e203137393130.roa (hash: n+eUGlNoGxyXiKbu/ITCTX0cNeFjGes4nvyKs6e972Y=)
9: 3231302e37392e3230382e302f32302d3234203d3e203137393130.roa (hash: 5vaZfShfqgbUD5UrW2OwsFkdXsmnoUQ2LgDSdBEsxKs=)
10: 3230322e3132372e39382e302f32342d3234203d3e203137393130.roa (hash: nvBOhOQVzXAnJ4HGpau+WjYJtRHl8i2975iE/qVl3BQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/EC59C36AB88A35CEA64B4ED019F2F05317672299.crl
rsync://rpki-rsync.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/EC59C36AB88A35CEA64B4ED019F2F05317672299.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EC59C36AB88A35CEA64B4ED019F2F05317672299.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:18:d7:a8:90:96:7a:af:c0:5d:2c:1a:24:53:7c:c3:2c:af:b2:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC59C36AB88A35CEA64B4ED019F2F05317672299
Validity
Not Before: Sep 23 23:20:03 2026 GMT
Not After : Sep 25 01:34:03 2026 GMT
Subject: CN=12B49B6FF9BA3D714465BE5104272A723F1771AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d5:56:58:26:c8:03:01:22:51:6b:5c:b5:2f:
44:23:fd:26:b2:14:f6:c3:2b:45:cf:26:5a:c0:8c:
86:2a:93:82:8c:77:3d:58:22:b7:ab:89:9e:36:47:
52:4a:a5:f5:bc:0a:87:69:e4:56:4f:f5:e3:f3:1f:
e1:1f:68:98:e1:d0:d5:7e:be:b5:45:a8:69:22:2c:
a4:97:0c:fe:a2:66:0d:2e:13:22:6d:fc:ec:3d:08:
a0:b7:1c:ee:40:02:ed:c0:e2:c7:9c:d7:66:05:86:
05:06:b2:e3:e7:84:05:db:8d:fd:01:2d:19:28:fd:
1d:6c:3c:65:58:98:d4:7d:a4:09:69:ae:e0:4f:0a:
42:f4:7e:17:37:74:55:b6:9d:8d:a2:9b:76:67:5a:
d8:c9:af:2d:d6:0c:de:e4:73:31:35:ef:29:db:d7:
83:4d:f7:42:08:e3:75:c1:28:09:af:5e:70:38:42:
15:a9:1e:1b:3c:66:5b:b6:af:7c:f1:bc:07:6c:a4:
a3:a4:7b:40:0f:4d:07:68:76:10:0c:02:7a:07:db:
b0:49:5a:4e:9f:8a:4f:db:70:24:90:92:9b:d6:c3:
1a:23:ec:3d:36:64:4f:81:99:a6:e5:cd:02:2c:24:
27:0c:31:84:06:92:b0:33:ca:15:90:40:03:49:3f:
f7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:B4:9B:6F:F9:BA:3D:71:44:65:BE:51:04:27:2A:72:3F:17:71:AC
X509v3 Authority Key Identifier:
keyid:EC:59:C3:6A:B8:8A:35:CE:A6:4B:4E:D0:19:F2:F0:53:17:67:22:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/EC59C36AB88A35CEA64B4ED019F2F05317672299.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EC59C36AB88A35CEA64B4ED019F2F05317672299.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/EC59C36AB88A35CEA64B4ED019F2F05317672299.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:ed:df:0e:3d:6d:62:89:da:8a:68:8c:75:72:a9:17:43:f6:
2f:e1:79:0d:75:56:ee:e4:6c:a2:12:e2:05:01:a7:f4:fe:65:
00:00:a9:71:d8:49:cb:16:ed:b5:2c:83:99:c6:e4:81:c5:06:
fa:9a:e1:cf:26:fc:75:3c:80:d9:a5:45:0f:da:c4:fe:a8:9f:
ea:58:41:a9:b2:ca:62:6e:0e:e7:ff:cc:15:69:91:fb:ca:d2:
40:1b:38:5e:4c:78:4b:34:8c:b8:d8:05:32:a9:ed:1c:fe:02:
31:59:3b:26:b8:ec:a5:ed:df:48:3c:03:69:6b:79:0f:77:15:
f6:ed:d1:d0:92:a3:7b:d3:26:af:f7:01:fa:21:ba:eb:71:23:
77:5d:2e:a1:cd:96:c3:86:20:89:09:43:61:5d:d5:24:d7:57:
9b:3f:3b:59:a6:5b:ae:a5:c1:96:be:2e:35:a9:b5:3c:99:aa:
ff:b1:64:dc:fc:d2:28:50:bb:63:0e:c4:05:18:bf:62:00:f1:
76:64:45:85:fc:96:60:a5:1e:f9:e8:49:5f:ba:d1:5b:63:c2:
11:dc:22:26:a6:bb:63:67:72:1e:6e:16:7c:d9:12:89:cf:c4:
63:45:bc:84:d7:35:24:62:9c:e5:bb:25:40:d8:ec:6c:fe:da:
ce:3b:b9:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:39:02 2026 by rpki-client