
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/E029C9E3702797CC6083E1D4D891799F0F5AA144.mft
File: E029C9E3702797CC6083E1D4D891799F0F5AA144.mft (raw, json)
Hash identifier: nQfz7rW/+IiOLrzB11s3efvC6jAxNplctOUGKbEnSfo=
Subject key identifier: 9B:79:30:33:3C:AA:19:B2:EF:BE:88:53:2A:83:DF:84:8E:61:45:D7
Authority key identifier: E0:29:C9:E3:70:27:97:CC:60:83:E1:D4:D8:91:79:9F:0F:5A:A1:44
Certificate issuer: /CN=E029C9E3702797CC6083E1D4D891799F0F5AA144
Certificate serial: 7C8A3134AC10B05DBB9632E79351136C21143E55
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E029C9E3702797CC6083E1D4D891799F0F5AA144.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/E029C9E3702797CC6083E1D4D891799F0F5AA144.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 17:17:05 +0000
Manifest this update: Tue 12 May 2026 17:12:05 +0000
Manifest next update: Wed 13 May 2026 21:10:05 +0000
Files and hashes: 1: 3130332e3130392e3230372e302f32342d3234203d3e20313530393335.roa (hash: DY6/Cy+Nw1dnpzSyQJvKM4XZv0DQUdJYanxa6KJ+Sng=)
2: 3130332e3130392e3230362e302f32342d3234203d3e20313530393335.roa (hash: 8AqsSwbCPBkMa1bd8eWoyuIjrtuzrPJimjGA2fsl3AA=)
3: E029C9E3702797CC6083E1D4D891799F0F5AA144.crl (hash: OlQTbKduJeQhwnsaBbdRuziZsDRQdLMhm1jXxIsL+VE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/E029C9E3702797CC6083E1D4D891799F0F5AA144.crl
rsync://rpki-rsync.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/E029C9E3702797CC6083E1D4D891799F0F5AA144.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E029C9E3702797CC6083E1D4D891799F0F5AA144.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:8a:31:34:ac:10:b0:5d:bb:96:32:e7:93:51:13:6c:21:14:3e:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E029C9E3702797CC6083E1D4D891799F0F5AA144
Validity
Not Before: May 12 17:12:05 2026 GMT
Not After : May 13 21:10:05 2026 GMT
Subject: CN=9B7930333CAA19B2EFBE88532A83DF848E6145D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a0:e5:6d:44:e4:b7:26:2d:c5:6f:e7:d9:85:
72:d4:9c:6a:96:a1:38:83:0b:49:18:fd:91:49:46:
be:97:1b:14:e2:f5:ed:24:10:97:11:b1:70:98:3b:
19:2d:78:7f:d5:27:94:e7:9a:20:5b:2c:50:e9:76:
44:e1:0d:aa:79:7a:b7:86:5d:a2:62:fc:69:94:11:
05:ec:29:98:97:6b:fa:3e:71:49:cd:7c:13:03:17:
c2:96:95:c1:d0:ce:90:95:f4:8f:65:82:37:b4:58:
52:16:8a:ea:31:3a:fa:69:ef:0e:fe:27:29:69:29:
3f:7a:54:82:d3:be:20:38:fb:1c:91:ad:fe:13:26:
9f:bd:4e:54:4c:29:65:38:69:48:f2:e8:ca:93:7b:
a0:58:3f:94:42:d3:83:43:b0:be:92:6d:16:d2:39:
eb:a2:bd:cf:48:db:e3:bd:fd:76:d1:6d:3b:fd:25:
56:2d:d1:4f:8e:07:79:cb:d5:dc:75:58:6c:33:69:
c8:35:cc:63:f7:d4:92:e0:0d:b3:44:d2:77:d9:f2:
15:ad:85:10:c2:0d:10:a0:bf:ff:97:90:07:33:ae:
8e:8f:87:62:24:26:7c:b5:da:37:28:2f:0a:ab:9c:
a0:16:e4:4c:9a:6f:ff:5f:b8:7d:94:fd:60:67:5c:
2c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:79:30:33:3C:AA:19:B2:EF:BE:88:53:2A:83:DF:84:8E:61:45:D7
X509v3 Authority Key Identifier:
keyid:E0:29:C9:E3:70:27:97:CC:60:83:E1:D4:D8:91:79:9F:0F:5A:A1:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/E029C9E3702797CC6083E1D4D891799F0F5AA144.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E029C9E3702797CC6083E1D4D891799F0F5AA144.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/E029C9E3702797CC6083E1D4D891799F0F5AA144.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:52:44:fe:54:2a:17:a8:7b:21:b7:ff:c6:95:6c:59:a5:5e:
10:89:1f:2d:a6:1f:11:f9:2d:cf:ee:ae:42:55:7c:e2:4e:86:
b9:43:dd:bc:c3:1f:d6:50:61:18:97:60:2c:be:2d:6f:2e:9d:
0e:9e:f7:c6:34:f8:2f:27:e2:eb:f0:ce:a6:37:b1:0f:6b:04:
1f:7e:e2:0b:c5:88:fd:8e:b4:6e:bb:f8:4c:36:0b:b5:48:23:
54:48:f0:ae:60:d6:3d:6f:d0:bb:f3:f4:2f:e8:b2:9d:c6:2b:
2a:e2:c2:f9:0e:e2:bf:37:20:0d:0f:cb:43:b8:74:fc:7a:41:
34:ea:a3:c3:06:25:84:79:e1:82:56:19:73:5c:64:c2:7a:27:
3b:50:0e:2f:33:8c:a7:e5:24:39:94:53:d9:32:35:69:7b:5e:
95:e4:d5:b5:dc:dc:f4:a1:84:90:47:c7:a0:02:b8:08:e9:22:
96:f2:5c:c6:23:c8:36:c1:95:32:6a:c6:07:05:2d:1c:f7:94:
1e:8b:d7:b4:45:78:c8:b2:a1:70:05:9e:71:88:38:04:51:d5:
6b:0f:2b:87:51:e9:d6:1b:56:72:86:80:53:6a:1f:e7:77:43:
f5:d3:c8:a8:61:04:1c:37:cb:b5:d1:04:9b:f5:da:05:c0:f8:
ba:b5:af:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:36:41 2026 by rpki-client