
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/E029C9E3702797CC6083E1D4D891799F0F5AA144.mft
File: E029C9E3702797CC6083E1D4D891799F0F5AA144.mft (raw, json)
Hash identifier: pyvfCUt2BfF4iFbc+QZaSYhi7xlV0ShLhDVWUv/uNrA=
Subject key identifier: 43:78:6D:36:49:D5:45:DF:9E:98:4C:41:0F:D2:8E:90:76:77:A3:7E
Authority key identifier: E0:29:C9:E3:70:27:97:CC:60:83:E1:D4:D8:91:79:9F:0F:5A:A1:44
Certificate issuer: /CN=E029C9E3702797CC6083E1D4D891799F0F5AA144
Certificate serial: 092AAD859A1FC3AD11E149FE0FECEC4A20ADB9A4
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E029C9E3702797CC6083E1D4D891799F0F5AA144.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/E029C9E3702797CC6083E1D4D891799F0F5AA144.mft
Manifest number: 6E
Signing time: Thu 23 Jul 2026 19:13:40 +0000
Manifest this update: Thu 23 Jul 2026 19:08:40 +0000
Manifest next update: Fri 24 Jul 2026 22:47:40 +0000
Files and hashes: 1: 3130332e3130392e3230372e302f32342d3234203d3e20313530393335.roa (hash: DY6/Cy+Nw1dnpzSyQJvKM4XZv0DQUdJYanxa6KJ+Sng=)
2: 3130332e3130392e3230362e302f32342d3234203d3e20313530393335.roa (hash: 8AqsSwbCPBkMa1bd8eWoyuIjrtuzrPJimjGA2fsl3AA=)
3: E029C9E3702797CC6083E1D4D891799F0F5AA144.crl (hash: ZtRpEQvVG4s+3s7PGYTkQb0bhuEeca3ZYUnSYfylaZI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/E029C9E3702797CC6083E1D4D891799F0F5AA144.crl
rsync://rpki-rsync.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/E029C9E3702797CC6083E1D4D891799F0F5AA144.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E029C9E3702797CC6083E1D4D891799F0F5AA144.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 22:47:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:2a:ad:85:9a:1f:c3:ad:11:e1:49:fe:0f:ec:ec:4a:20:ad:b9:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E029C9E3702797CC6083E1D4D891799F0F5AA144
Validity
Not Before: Jul 23 19:08:40 2026 GMT
Not After : Jul 24 22:47:40 2026 GMT
Subject: CN=43786D3649D545DF9E984C410FD28E907677A37E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:bd:a4:16:f5:87:c2:91:29:a3:8d:30:22:c4:
d3:ee:34:e5:8c:6d:e0:34:8f:ca:8c:2c:52:33:e3:
05:5d:3e:0f:3b:ce:51:f6:fc:5a:2c:11:3c:36:7f:
b5:90:d6:d0:a7:fa:32:ed:e8:30:27:bc:76:45:5b:
4c:c9:c5:7a:1d:5f:69:2d:80:c0:de:76:f5:59:1b:
87:73:50:53:38:5f:29:03:ec:69:84:d3:4f:99:c5:
d1:8f:e8:3c:41:86:15:7d:6a:0b:1e:2c:78:de:e9:
98:eb:b8:fa:54:92:52:1e:66:20:ba:ab:fe:d6:3f:
79:26:ad:fb:88:c5:66:d5:9a:64:07:a0:fe:75:73:
35:01:13:f5:f2:95:5c:ae:65:1e:11:ee:f9:e4:43:
da:da:53:5a:89:b0:d3:c8:b6:e9:77:a6:bb:aa:30:
24:eb:09:67:32:ab:bf:b6:bf:93:ac:2c:fd:e2:35:
d1:2e:0b:ee:b3:27:b1:4f:22:21:ae:4a:b0:29:92:
05:ff:7a:f2:8a:2a:8f:67:5b:9e:49:99:8a:dc:7f:
e1:1d:22:1f:25:62:45:7a:cd:8a:46:ea:62:e8:58:
83:25:29:ab:bd:2b:64:4b:e7:35:20:e3:9d:a1:6f:
f7:5c:43:ba:6b:1d:40:76:57:7c:7e:a0:cd:a4:a5:
ca:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:78:6D:36:49:D5:45:DF:9E:98:4C:41:0F:D2:8E:90:76:77:A3:7E
X509v3 Authority Key Identifier:
keyid:E0:29:C9:E3:70:27:97:CC:60:83:E1:D4:D8:91:79:9F:0F:5A:A1:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/E029C9E3702797CC6083E1D4D891799F0F5AA144.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E029C9E3702797CC6083E1D4D891799F0F5AA144.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/E029C9E3702797CC6083E1D4D891799F0F5AA144.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:ca:1c:86:ce:be:80:d2:fa:ad:2e:34:8e:b9:22:e8:0e:65:
87:15:ef:99:4e:c8:bd:e5:cb:f3:06:c9:70:52:f7:41:c4:bd:
ab:79:fa:15:c3:4c:16:6a:fb:ee:8c:65:b6:42:6a:ca:61:35:
e7:a7:77:e8:dd:d8:0a:c6:04:cc:22:27:f8:9a:b3:ad:67:93:
ca:6c:dc:88:65:4f:88:a3:14:c6:0c:ed:ed:0b:d1:28:27:6f:
16:6f:ac:e7:3c:e4:f2:38:7f:9d:e3:a8:45:1f:5a:b9:88:a5:
ee:e3:ad:38:63:bc:97:1e:41:d3:a1:37:90:18:9f:5e:e4:90:
56:7b:b2:bd:d4:7b:07:37:d8:61:66:76:c2:3d:2d:1b:f9:be:
fc:2a:02:ae:6f:00:e6:cc:81:f7:ed:b9:93:24:12:50:19:32:
09:96:81:b7:a3:5c:6e:13:41:2f:f7:b3:e0:24:bc:52:b4:89:
d6:56:7c:14:69:91:64:b0:ec:d0:4a:37:2b:f2:2b:95:5f:e3:
d4:a6:8c:6a:87:e0:f8:5a:86:bc:5f:78:10:c2:aa:df:ea:f6:
4e:20:5b:43:8b:6b:3c:8a:d3:a0:9c:cb:ed:c5:ad:66:3d:3c:
78:ca:c1:2e:31:c5:05:3e:40:98:69:68:e6:22:dd:97:45:22:
d6:63:ab:1e
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUCSqthZofw60R4Un+D+zsSiCtuaQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTAyOUM5RTM3MDI3OTdDQzYwODNFMUQ0RDg5MTc5OUYw
RjVBQTE0NDAeFw0yNjA3MjMxOTA4NDBaFw0yNjA3MjQyMjQ3NDBaMDMxMTAvBgNV
BAMTKDQzNzg2RDM2NDlENTQ1REY5RTk4NEM0MTBGRDI4RTkwNzY3N0EzN0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClvaQW9YfCkSmjjTAixNPuNOWM
beA0j8qMLFIz4wVdPg87zlH2/FosETw2f7WQ1tCn+jLt6DAnvHZFW0zJxXodX2kt
gMDedvVZG4dzUFM4XykD7GmE00+ZxdGP6DxBhhV9agseLHje6ZjruPpUklIeZiC6
q/7WP3kmrfuIxWbVmmQHoP51czUBE/XylVyuZR4R7vnkQ9raU1qJsNPItul3pruq
MCTrCWcyq7+2v5OsLP3iNdEuC+6zJ7FPIiGuSrApkgX/evKKKo9nW55JmYrcf+Ed
Ih8lYkV6zYpG6mLoWIMlKau9K2RL5zUg452hb/dcQ7prHUB2V3x+oM2kpcppAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUQ3htNknVRd+emExBD9KOkHZ3o34wHwYDVR0j
BBgwFoAU4CnJ43Anl8xgg+HU2JF5nw9aoUQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZWM4ODkyZWItZGRjMC00Y2I2LTk1N2MtYjY1M2YyOGJiZjM5LzAvRTAyOUM5RTM3
MDI3OTdDQzYwODNFMUQ0RDg5MTc5OUYwRjVBQTE0NC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FMDI5QzlFMzcwMjc5N0NDNjA4M0UxRDREODkxNzk5RjBGNUFB
MTQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWM4ODkyZWItZGRjMC00Y2I2LTk1
N2MtYjY1M2YyOGJiZjM5LzAvRTAyOUM5RTM3MDI3OTdDQzYwODNFMUQ0RDg5MTc5
OUYwRjVBQTE0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGvKHIbOvoDS+q0uNI65IugOZYcV75lOyL3l
y/MGyXBS90HEvat5+hXDTBZq++6MZbZCasphNeend+jd2ArGBMwiJ/ias61nk8ps
3IhlT4ijFMYM7e0L0SgnbxZvrOc85PI4f53jqEUfWrmIpe7jrThjvJceQdOhN5AY
n17kkFZ7sr3Uewc32GFmdsI9LRv5vvwqAq5vAObMgfftuZMkElAZMgmWgbejXG4T
QS/3s+AkvFK0idZWfBRpkWSw7NBKNyvyK5Vf49SmjGqH4PhahrxfeBDCqt/q9k4g
W0OLazyK06Ccy+3FrWY9PHjKwS4xxQU+QJhpaOYi3ZdFItZjqx4=
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:54:20 2026 by rpki-client