
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/2EB8CBE7A479277AC03EE80F365DD883BE38DD88.mft
File: 2EB8CBE7A479277AC03EE80F365DD883BE38DD88.mft (raw, json)
Hash identifier: MjTAt3cx8q692hH7NNVDQtIH2E6rKPopKrDwc0m2GiI=
Subject key identifier: D8:DB:D1:04:C4:18:8A:B2:50:47:6B:30:E2:19:8B:F9:38:9D:AA:96
Authority key identifier: 2E:B8:CB:E7:A4:79:27:7A:C0:3E:E8:0F:36:5D:D8:83:BE:38:DD:88
Certificate issuer: /CN=2EB8CBE7A479277AC03EE80F365DD883BE38DD88
Certificate serial: 4FA22FE1C35C06E84DDC7C0A96C4943247ECC045
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2EB8CBE7A479277AC03EE80F365DD883BE38DD88.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/2EB8CBE7A479277AC03EE80F365DD883BE38DD88.mft
Manifest number: 6F
Signing time: Thu 23 Jul 2026 13:16:14 +0000
Manifest this update: Thu 23 Jul 2026 13:11:14 +0000
Manifest next update: Fri 24 Jul 2026 15:23:14 +0000
Files and hashes: 1: 3130332e3136362e362e302f32332d3234203d3e203137393935.roa (hash: BwjnFjz5sFQQdxCMf3i5N8Aax7h3Sveq3upFP+p+HDs=)
2: 2EB8CBE7A479277AC03EE80F365DD883BE38DD88.crl (hash: Kh9sDW8xeWf1bXHbB/EPC9MsNjWrn++GhGQCJPvfvUc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/2EB8CBE7A479277AC03EE80F365DD883BE38DD88.crl
rsync://rpki-rsync.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/2EB8CBE7A479277AC03EE80F365DD883BE38DD88.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2EB8CBE7A479277AC03EE80F365DD883BE38DD88.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 15:23:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:a2:2f:e1:c3:5c:06:e8:4d:dc:7c:0a:96:c4:94:32:47:ec:c0:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2EB8CBE7A479277AC03EE80F365DD883BE38DD88
Validity
Not Before: Jul 23 13:11:14 2026 GMT
Not After : Jul 24 15:23:14 2026 GMT
Subject: CN=D8DBD104C4188AB250476B30E2198BF9389DAA96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:51:85:e5:dd:08:76:7d:37:36:05:c5:02:d2:
a8:c0:f1:72:76:95:4a:8c:0d:35:3f:5d:7d:38:ad:
4d:32:2e:34:20:db:09:02:16:95:06:72:8e:8e:75:
90:dd:6b:6f:6f:21:cb:45:26:42:10:81:ce:73:0f:
e8:13:f3:7d:83:d5:7d:01:c3:e8:5b:ac:cd:8e:52:
c8:43:2f:60:d4:47:5e:22:3f:b2:63:50:7f:34:50:
fb:76:52:95:08:a9:ff:3d:2a:3d:c1:b4:3e:a1:f1:
e7:df:48:ae:16:19:e6:eb:27:11:e4:6d:cf:b5:b0:
12:8c:84:26:e6:e6:9f:7d:86:7f:79:7c:4f:94:55:
74:51:69:49:81:61:4c:42:f7:f9:21:1b:06:22:26:
d8:b6:6e:c9:62:35:08:0f:5a:83:f4:c4:a1:bc:47:
9b:0b:f7:8d:18:a2:f7:be:b8:3b:2c:ab:6c:11:98:
61:b5:63:67:c6:6d:65:2f:86:63:71:3f:07:7b:10:
9b:0e:6d:d9:16:f9:7b:e2:5c:27:81:1b:54:10:c7:
03:a1:13:13:d8:48:56:24:b3:83:fb:3d:17:b1:46:
c6:2e:f5:88:79:4d:1b:ec:0e:28:f2:e8:87:9e:7d:
bf:94:83:28:47:98:6d:15:a0:3e:8f:35:34:e2:7f:
30:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:DB:D1:04:C4:18:8A:B2:50:47:6B:30:E2:19:8B:F9:38:9D:AA:96
X509v3 Authority Key Identifier:
keyid:2E:B8:CB:E7:A4:79:27:7A:C0:3E:E8:0F:36:5D:D8:83:BE:38:DD:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/2EB8CBE7A479277AC03EE80F365DD883BE38DD88.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2EB8CBE7A479277AC03EE80F365DD883BE38DD88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/2EB8CBE7A479277AC03EE80F365DD883BE38DD88.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:1d:c9:10:3c:16:39:33:53:3d:05:0f:cd:93:7c:6c:e4:f2:
a6:51:a1:7d:21:79:e1:2e:a6:ad:e2:19:3c:cd:a7:ac:3b:c7:
b8:bb:61:d9:bd:86:a2:a5:e8:ee:eb:c1:bb:43:c6:5f:af:0f:
b7:ec:5e:12:98:13:b4:5e:59:43:6b:66:d0:b9:11:1a:91:b6:
97:fe:10:66:9a:8a:21:39:d0:f8:73:db:12:d3:5e:9b:25:48:
d6:0b:b7:5b:64:c4:8d:4f:b7:2d:4b:39:ef:97:ef:e2:2a:b5:
d7:1b:65:dc:b5:79:09:b6:8f:d2:c8:8b:87:29:9b:bb:10:8d:
17:11:c8:24:5a:7c:4e:b9:d8:f0:ad:9d:03:a6:b7:e2:7c:73:
e9:15:a2:46:c3:14:d4:a0:d6:07:b2:56:8e:67:32:0c:3a:96:
88:5c:0d:73:e0:a9:5c:bd:40:e5:b8:ab:ca:bb:08:1b:06:6b:
7b:a1:2b:5d:dd:ca:be:a9:f9:ef:8d:6c:af:06:7b:aa:b0:62:
36:07:17:e4:51:19:b9:06:fa:96:22:59:3b:41:35:38:e8:d1:
26:8a:31:42:12:20:ef:46:c0:7f:66:10:92:92:13:49:dd:86:
3c:3b:88:e2:86:13:96:62:72:b4:67:47:13:9d:29:b0:92:31:
f0:85:e8:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:22:52 2026 by rpki-client