
$ rpki-client -vvf rpki-rsync.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/2EAB22DEDA17C8633520C765C1BECE6852B8BD70.mft
File: 2EAB22DEDA17C8633520C765C1BECE6852B8BD70.mft (raw, json)
Hash identifier: DWdFX+T5XWqx3d2BZKIIlig8CiINF3G1bR6iTl0oKgo=
Subject key identifier: AC:C5:37:88:E9:19:2F:CD:98:92:7A:2D:45:20:5B:D9:E9:6F:94:11
Authority key identifier: 2E:AB:22:DE:DA:17:C8:63:35:20:C7:65:C1:BE:CE:68:52:B8:BD:70
Certificate issuer: /CN=2EAB22DEDA17C8633520C765C1BECE6852B8BD70
Certificate serial: 3D3BF9985C0F9024EA75A294BFBA0E307E7E34A6
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2EAB22DEDA17C8633520C765C1BECE6852B8BD70.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/2EAB22DEDA17C8633520C765C1BECE6852B8BD70.mft
Manifest number: 6E
Signing time: Thu 23 Jul 2026 15:03:23 +0000
Manifest this update: Thu 23 Jul 2026 14:58:23 +0000
Manifest next update: Fri 24 Jul 2026 18:16:23 +0000
Files and hashes: 1: 323430343a326363303a35343a3a2f34362d3436203d3e20313331373336.roa (hash: R7p8u3fUD9Q1PWm/nzBs05bZYIMNm4aJaBgF+3K7/6A=)
2: 3130332e3133322e31332e302f32342d3234203d3e20313331373336.roa (hash: NS29Duq3Ad0Oay5mRumCSue0EKVMXVW+d3uV6la1Mk4=)
3: 3130332e3133322e31352e302f32342d3234203d3e20313331373336.roa (hash: dpRjxkyvMZSuMwoiOFiEbs0aVfBM9F5a6WoDjj2reGk=)
4: 323430343a326363303a34303a3a2f34362d3436203d3e20313331373336.roa (hash: xUpoxjFUHIIvNkT92mjiWI0plg15apjL+jPNvQQ2Uk8=)
5: 323430343a326363303a32303a3a2f34332d3433203d3e20313331373336.roa (hash: fToGnwAHAJ5VtIANKumAt4uzlSvc7R1/Zv4oJQS4kF0=)
6: 3130332e3133322e31322e302f32342d3234203d3e20313331373336.roa (hash: VaVs+XiSWxs1hEguef/hHo/bNFA4CcDh7KZrSmxpBag=)
7: 323430343a326363303a34633a3a2f34362d3436203d3e20313331373336.roa (hash: cS+IrgZpY9aClZBoWCUDEv2Phmt7SwlOezLlcCoBSPI=)
8: 2EAB22DEDA17C8633520C765C1BECE6852B8BD70.crl (hash: xtiN3k8O1dEUDYBT9tiLCqm8DAuvyjuhwH9bf7Jbz14=)
9: 323430343a326363303a34383a3a2f34362d3436203d3e20313331373336.roa (hash: jZfpgRC0d5fkEjm8vD7qc9gZsnKZQYBh0EboO+Uho7s=)
10: 3130332e3133322e31342e302f32342d3234203d3e20313331373336.roa (hash: HJc5JvMy8GHohXvfOoaZGX6TD+10pfnhOdLgXA7YFDo=)
11: 323430343a326363303a35383a3a2f34362d3436203d3e20313331373336.roa (hash: 2ePu3EHR90dClUt0r5HRZza+Dx4B+Kag1aBuSmuBj9s=)
12: 323430343a326363303a34343a3a2f34362d3436203d3e20313331373336.roa (hash: GR4L5FJqVS9TJ+dvaa8HynQA+y7YhiRBbKDogiUCsq4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/2EAB22DEDA17C8633520C765C1BECE6852B8BD70.crl
rsync://rpki-rsync.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/2EAB22DEDA17C8633520C765C1BECE6852B8BD70.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2EAB22DEDA17C8633520C765C1BECE6852B8BD70.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 18:16:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:3b:f9:98:5c:0f:90:24:ea:75:a2:94:bf:ba:0e:30:7e:7e:34:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2EAB22DEDA17C8633520C765C1BECE6852B8BD70
Validity
Not Before: Jul 23 14:58:23 2026 GMT
Not After : Jul 24 18:16:23 2026 GMT
Subject: CN=ACC53788E9192FCD98927A2D45205BD9E96F9411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9f:6c:42:8e:29:e9:0e:70:33:e1:23:eb:66:
3d:21:7f:22:83:3a:e7:12:58:39:4b:e7:7f:fc:23:
9c:f0:da:c2:f6:30:60:33:4e:68:ab:eb:f0:0d:e5:
41:84:a8:1b:dd:dc:78:43:64:10:a1:db:17:0f:1d:
a6:47:3c:2e:58:51:63:84:2a:ce:07:25:3f:f5:17:
06:4e:78:48:51:11:f0:df:d5:2e:ca:4e:4e:d5:e6:
d8:83:16:59:e0:fb:79:4b:77:a0:3a:07:e4:98:d6:
30:d1:7e:dc:ad:b1:9f:6f:1c:0e:83:7e:ec:a4:49:
96:d2:69:4b:9a:9f:87:c0:eb:68:24:df:3c:a4:c0:
4f:f4:9c:c2:33:40:59:eb:89:4f:a2:24:27:f6:61:
d6:dc:d8:9e:88:83:8c:84:d3:de:f0:d8:e7:c8:df:
30:75:c4:f2:53:ba:58:f5:31:68:12:10:33:72:95:
41:d7:28:ce:ff:e7:41:d8:48:6d:01:9f:78:a2:68:
6c:61:3f:f9:7a:16:53:1f:5f:fb:8f:97:f9:ef:f8:
38:4e:61:ad:a5:8f:0c:fb:bd:3d:d3:dc:bf:7c:39:
16:19:61:11:23:52:78:e3:d1:ee:4d:42:6d:05:65:
ab:35:45:6a:e1:c2:5f:8f:6d:5e:00:63:1c:b1:61:
01:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:C5:37:88:E9:19:2F:CD:98:92:7A:2D:45:20:5B:D9:E9:6F:94:11
X509v3 Authority Key Identifier:
keyid:2E:AB:22:DE:DA:17:C8:63:35:20:C7:65:C1:BE:CE:68:52:B8:BD:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/2EAB22DEDA17C8633520C765C1BECE6852B8BD70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2EAB22DEDA17C8633520C765C1BECE6852B8BD70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/2EAB22DEDA17C8633520C765C1BECE6852B8BD70.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:8d:80:cf:aa:c6:4f:d9:9a:f8:18:26:fb:a2:69:f8:51:28:
1a:cf:7c:f1:21:84:c5:02:55:c1:41:82:41:53:31:97:14:21:
3f:3f:06:a6:ff:40:3f:8f:2e:12:66:d2:7b:0c:85:09:93:f8:
8b:32:e2:38:c8:74:fb:70:88:e2:a5:be:fa:42:2c:3b:cc:ab:
ab:3f:58:0e:d0:2c:ff:38:42:e8:d5:8e:ee:b9:b8:db:43:ef:
d3:d7:53:45:8b:fd:0d:e5:5c:5e:a1:32:d6:eb:70:ae:9d:a9:
22:5f:d2:c9:6d:d9:59:20:93:7e:6f:28:2e:a1:ad:a7:d6:4e:
a6:a7:1c:e8:c5:d5:d0:e2:15:5e:6c:72:f9:27:fd:23:f3:41:
55:4f:ff:6c:79:01:e0:c7:71:4e:11:e3:61:f5:7b:78:64:16:
ee:7b:f9:29:7e:97:59:3b:2e:ab:e4:38:80:5f:55:76:e5:c2:
8e:2e:03:62:33:f3:da:51:d2:3c:72:79:3c:7d:cc:f9:15:1d:
b2:b5:17:44:6e:cb:41:a7:9d:14:97:62:d6:93:b9:f5:1d:9b:
55:19:ad:46:f0:12:e3:d6:70:b5:a3:a9:12:aa:d4:db:0e:f2:
7d:8e:3e:a3:bc:7c:dd:02:8e:e2:e7:29:44:5f:12:ab:1c:17:
cf:e4:6e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:20:06 2026 by rpki-client