
$ rpki-client -vvf repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/EC9D9872A710FE713DC62241D587703BDF7DC1D6.mft
File: EC9D9872A710FE713DC62241D587703BDF7DC1D6.mft (raw, json)
Hash identifier: f+Fu2l33UO1dHoo8HyRv0qQh1URyXoJXMkTbNLCHOQ4=
Subject key identifier: 69:C2:69:50:33:58:8F:16:79:E8:55:4A:BC:04:B4:65:E1:D6:2C:F4
Authority key identifier: EC:9D:98:72:A7:10:FE:71:3D:C6:22:41:D5:87:70:3B:DF:7D:C1:D6
Certificate issuer: /CN=EC9D9872A710FE713DC62241D587703BDF7DC1D6
Certificate serial: 6C182AEB5F3DDCD541EE30D7597DA125122FAD09
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9D9872A710FE713DC62241D587703BDF7DC1D6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/EC9D9872A710FE713DC62241D587703BDF7DC1D6.mft
Manifest number: 83
Signing time: Wed 18 Mar 2026 08:42:39 +0000
Manifest this update: Wed 18 Mar 2026 08:37:39 +0000
Manifest next update: Sat 21 Mar 2026 12:44:39 +0000
Files and hashes: 1: 323430323a656538303a35363a3a2f34382d3438203d3e20313332363437.roa (hash: ILpEJfv/S+leWwxiBN0hUwFSsvpCv7zbnSPVhks28zg=)
2: 34352e3132362e35362e302f32332d3234203d3e20313332363437.roa (hash: QEOORRsX013DVlDd6rBsgIGW4zrmYxd/HqJrafpumMI=)
3: 323430323a656538303a3a2f33322d3438203d3e20313332363437.roa (hash: wwYKe/sjxREQnj5G37QP1SEX1SplROb7ytmXu6rBig8=)
4: 323430323a656538303a623a3a2f34382d3438203d3e20313332363437.roa (hash: vG82X1ya4RP+iLybP3Nf3VH9eiCkt21NvKQm4mVZqlY=)
5: 3130332e31392e3137382e302f32342d3234203d3e20313332363437.roa (hash: +54gsDdv0eW3zDbkaD5HbAoyLmCd/qoIOZWo63Fy2oM=)
6: 323430323a656538303a35383a3a2f34382d3438203d3e20313332363437.roa (hash: 95YayLBo+Z60JGd6py6XLMSdK9u7PSYjLko8lAlklJ4=)
7: 323430323a656538303a633a3a2f34382d3438203d3e20313332363437.roa (hash: 2s6ODMSjUVaffAG6UbhZ8oJIX5hnW9ppp33Tq9tR3wY=)
8: 323030313a6466353a343030303a3a2f34382d3438203d3e20313332363437.roa (hash: ea0BH5+9TDEtitqep4Xyx8IGG6HIfg5zxzhcj4dvnnA=)
9: 3130332e31392e3137362e302f32332d3234203d3e20313332363437.roa (hash: MZSp8BNqe8zJ+1B8Y+uVUUB7aRgdsoqlbK7HkPjCz8s=)
10: 34352e3132362e35362e302f32322d3234203d3e20313332363437.roa (hash: WjfvCYbp65ghPW3ji7G9hoRxTgUciKFJHBsEK0TOyNo=)
11: 34352e3132362e35362e302f32342d3234203d3e20313332363437.roa (hash: iVD71KXe0iI/vtmA+DjA6o/5T6NexfyKd675pvEkuFc=)
12: 3130332e31392e3137392e302f32342d3234203d3e20313332363437.roa (hash: MtiwOPRjzKh8TAh6x51imM/Vbo/YwNmBGuNUEh5cML4=)
13: EC9D9872A710FE713DC62241D587703BDF7DC1D6.crl (hash: An6hPJZybBQDfBgCqOe6t16OntoBYytm6cPZxPyK4qQ=)
14: 34352e3132362e35382e302f32332d3234203d3e20313332363437.roa (hash: MlHDGnO/Vp+hFC8do5e8cQqI6Yre7kW1RmsPeNStRS4=)
15: 3130332e31392e3137362e302f32322d3234203d3e20313332363437.roa (hash: IOhGpn9Wqy2Lz6udKRlZRvUg19CFNIwFC8/KHmyaxxA=)
16: 3130332e31392e3137372e302f32342d3234203d3e20313332363437.roa (hash: eUTXj0qM9U0VlVIo2698+rxVfkNrjLXS73ArKqTPZHc=)
17: 323430323a656538303a3a2f34382d3438203d3e20313332363437.roa (hash: Qq4mQ+yjLEssCXWmnFYkdDNfkAKVVBhzLioN96QRjDk=)
18: 34352e3132362e35392e302f32342d3234203d3e20313332363437.roa (hash: ayAqEs1b1nTm1L0OUHAQCAticCSJ6e0ze/fgkYyk4lc=)
19: 3130332e31392e3137382e302f32332d3234203d3e20313332363437.roa (hash: 6ENOiJDb/1Xm9LcakgjTmelFqd2PFa7ryPrhU6sPGBY=)
20: 3130332e31392e3137362e302f32342d3234203d3e20313332363437.roa (hash: S4kzvu4zbCmfw9stND1YY9BCQd30K/363b7rtm3YUq4=)
21: 323430323a656538303a3137363a3a2f34382d3438203d3e20313332363437.roa (hash: ssoTJWcnOTneohkhAvdxsLglXradXsID6/iYQ5O+53I=)
22: 34352e3132362e35382e302f32342d3234203d3e20313332363437.roa (hash: WUYYTi2XuFyUmWlSOlOmbSyC8k33VJEvWxEEHToe/f4=)
23: 34352e3132362e35372e302f32342d3234203d3e20313332363437.roa (hash: EEcqACfpJzv9e6aJJ3QgCFqjvxlrFVyI4AnnhuBfrzI=)
24: 323430323a656538303a643a3a2f34382d3438203d3e20313332363437.roa (hash: xgpk0l8wHBzrP9AZayJBujyNuU1WlslUVoFQcTt2ROE=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/EC9D9872A710FE713DC62241D587703BDF7DC1D6.crl
rsync://repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/EC9D9872A710FE713DC62241D587703BDF7DC1D6.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9D9872A710FE713DC62241D587703BDF7DC1D6.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Mar 2026 12:44:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:18:2a:eb:5f:3d:dc:d5:41:ee:30:d7:59:7d:a1:25:12:2f:ad:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC9D9872A710FE713DC62241D587703BDF7DC1D6
Validity
Not Before: Mar 18 08:37:39 2026 GMT
Not After : Mar 21 12:44:39 2026 GMT
Subject: CN=69C2695033588F1679E8554ABC04B465E1D62CF4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6a:e4:4f:24:e3:57:a0:de:80:97:15:fd:3b:
1a:f2:c6:2c:0f:54:49:80:55:c4:69:b6:0c:2a:77:
7f:15:62:c2:75:d1:dc:a2:9b:f7:12:f7:1a:f4:cb:
8c:1d:6f:c1:bf:89:4a:ae:17:e7:19:99:64:12:e7:
49:8f:6e:8e:98:9e:8e:42:a2:8e:90:c4:d8:a1:45:
2b:68:fa:38:57:59:94:c0:90:94:07:45:b4:96:98:
18:61:72:22:a9:42:d1:29:5c:0f:37:2b:df:b6:3e:
ab:94:ed:22:b4:c8:78:0a:d0:e8:ff:7e:13:13:ae:
44:ae:bb:a2:b3:c0:64:8c:16:78:13:d8:67:db:96:
1b:84:ec:b6:66:dc:93:a7:1e:df:a9:32:f1:dc:db:
a5:30:ce:8a:ea:8a:4e:55:01:81:d0:7d:b5:f4:48:
38:10:8f:57:42:e8:47:98:11:52:ca:aa:94:56:e2:
a4:4f:ec:b5:3d:ab:3a:43:67:9a:e9:1c:ad:9f:c5:
d4:f4:5d:2f:94:d4:38:f2:bb:51:cf:15:57:b3:76:
0d:a1:1a:e4:e0:b2:98:24:59:6f:0e:70:a5:a8:d0:
e3:b1:24:28:2e:a0:59:84:c4:0d:0a:29:42:ab:b8:
26:04:d1:f7:3c:6a:08:f6:66:22:bf:1a:06:0a:f4:
42:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:C2:69:50:33:58:8F:16:79:E8:55:4A:BC:04:B4:65:E1:D6:2C:F4
X509v3 Authority Key Identifier:
keyid:EC:9D:98:72:A7:10:FE:71:3D:C6:22:41:D5:87:70:3B:DF:7D:C1:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/EC9D9872A710FE713DC62241D587703BDF7DC1D6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9D9872A710FE713DC62241D587703BDF7DC1D6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/EC9D9872A710FE713DC62241D587703BDF7DC1D6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:9e:cd:26:89:89:de:70:5f:37:89:ec:9d:4d:d9:9e:00:81:
1f:ba:8a:34:78:52:d2:b8:82:89:c2:78:a5:73:00:36:7c:ae:
bc:8e:98:68:cb:d6:53:c7:b4:b6:23:33:4d:3b:d8:46:45:45:
73:c1:bc:ed:61:1c:72:34:1f:b5:fa:9c:46:aa:01:d6:af:fd:
ba:47:81:af:85:74:d3:17:11:c5:b4:c9:d9:e6:32:26:2b:a1:
95:3d:d7:f1:3a:21:81:d7:c9:99:a9:77:44:f2:a9:f7:91:15:
3b:b6:ea:80:68:a2:fc:5f:4b:8c:d8:e0:b3:a5:7f:67:31:91:
7f:22:92:c7:e5:6e:50:9f:e7:d8:f3:50:d5:2c:c9:bd:0c:f4:
31:40:0a:c3:74:e7:81:3a:2f:a7:4d:12:2d:46:c0:ab:78:82:
e5:1e:cd:e5:d5:39:a3:a0:03:19:58:a9:55:8e:dc:a2:58:de:
58:f8:75:e2:6c:c1:91:e1:39:d6:97:de:7b:63:dd:df:a1:12:
4e:67:ce:5c:40:8b:b7:0d:b0:62:2e:10:14:2f:07:0c:88:5a:
74:2c:8c:35:55:08:f0:eb:3e:ed:0b:95:dd:f2:a4:ba:8c:b5:
29:4f:9c:9a:39:53:11:dd:a9:e6:c7:4b:14:63:08:21:10:e1:
eb:a4:a7:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 09:26:57 2026 by rpki-client