
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/2E069E30CF7B24CDD77C206550B0BDBDB01683AF.mft
File: 2E069E30CF7B24CDD77C206550B0BDBDB01683AF.mft (raw, json)
Hash identifier: N+/lzjVZqzyACmzW8pAQGqt8V1GvXKZ7mmuh7Hqvq1Q=
Subject key identifier: 8E:66:7A:43:87:E1:71:F3:A4:05:F6:B6:8A:8C:DC:BC:1F:FB:0C:D6
Authority key identifier: 2E:06:9E:30:CF:7B:24:CD:D7:7C:20:65:50:B0:BD:BD:B0:16:83:AF
Certificate issuer: /CN=2E069E30CF7B24CDD77C206550B0BDBDB01683AF
Certificate serial: 13B0B7581D78084D4098C54862B36E28B8A2BCA3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E069E30CF7B24CDD77C206550B0BDBDB01683AF.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/2E069E30CF7B24CDD77C206550B0BDBDB01683AF.mft
Manifest number: 6C
Signing time: Tue 21 Jul 2026 02:39:02 +0000
Manifest this update: Tue 21 Jul 2026 02:34:02 +0000
Manifest next update: Wed 22 Jul 2026 05:55:02 +0000
Files and hashes: 1: 323030313a6466323a376663303a3a2f34382d3438203d3e20313530323432.roa (hash: R//K7f8SQ84W/WhpHi/GP3kDl7olX9IsyMdmQ8qFKuk=)
2: 3130332e37362e39312e302f32342d3234203d3e20313530323432.roa (hash: njSBQKxaBf8FgxYd9UzVWcsd+7NkvHs45etGgjIxXxw=)
3: 2E069E30CF7B24CDD77C206550B0BDBDB01683AF.crl (hash: n96HSR14c/tfZE9bKic0aPZJ/Wu9nvqqbzAu5b04tuA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/2E069E30CF7B24CDD77C206550B0BDBDB01683AF.crl
rsync://rpki-rsync.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/2E069E30CF7B24CDD77C206550B0BDBDB01683AF.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E069E30CF7B24CDD77C206550B0BDBDB01683AF.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Jul 2026 02:08:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:b0:b7:58:1d:78:08:4d:40:98:c5:48:62:b3:6e:28:b8:a2:bc:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E069E30CF7B24CDD77C206550B0BDBDB01683AF
Validity
Not Before: Jul 21 02:34:02 2026 GMT
Not After : Jul 22 05:55:02 2026 GMT
Subject: CN=8E667A4387E171F3A405F6B68A8CDCBC1FFB0CD6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:cc:5b:fc:61:fd:f7:df:3a:21:26:be:3f:e9:
d2:89:07:ca:2c:a5:45:fd:1d:33:42:57:ac:03:f4:
59:d7:28:71:18:24:03:55:0b:39:de:e3:03:50:eb:
b5:51:86:08:42:83:23:e3:3f:61:ab:df:8e:a6:ed:
cd:0e:ad:15:b6:85:ca:41:0e:9d:73:66:2c:93:fb:
81:41:bc:5e:f4:08:08:90:6c:dc:13:46:6f:13:e4:
36:70:2a:19:48:62:33:ea:9d:ff:88:c2:cc:36:f4:
c4:4d:8b:12:14:7b:8a:d7:93:30:a5:9f:a9:a7:59:
57:ac:76:9a:84:a2:7a:78:60:2f:40:10:17:ed:ef:
dd:fb:f0:e0:27:fa:73:62:dc:f6:4f:62:07:0d:0d:
04:62:7f:8c:78:ef:87:16:c5:7a:69:d3:40:ed:89:
76:53:c2:d0:7e:6b:63:f9:9d:eb:ed:04:0d:13:ee:
b3:1f:23:9b:df:3d:85:7e:3d:2c:4a:48:9c:8a:9b:
50:17:70:6a:84:f7:4a:e4:79:10:5f:d2:76:6a:14:
3a:ed:12:bb:2d:90:af:72:76:d4:e8:ff:f2:d7:f0:
fb:85:7b:a1:46:1c:a7:95:15:0d:73:4b:c9:24:51:
fc:ca:e6:b1:50:f1:bd:06:6c:6b:41:6e:67:28:8d:
de:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:66:7A:43:87:E1:71:F3:A4:05:F6:B6:8A:8C:DC:BC:1F:FB:0C:D6
X509v3 Authority Key Identifier:
keyid:2E:06:9E:30:CF:7B:24:CD:D7:7C:20:65:50:B0:BD:BD:B0:16:83:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/2E069E30CF7B24CDD77C206550B0BDBDB01683AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E069E30CF7B24CDD77C206550B0BDBDB01683AF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/2E069E30CF7B24CDD77C206550B0BDBDB01683AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:c0:08:37:f9:3d:5f:6e:30:49:a9:e9:99:57:e8:af:20:f0:
78:c2:7b:13:ec:11:df:c0:5b:9b:db:98:3c:45:bd:a3:99:a5:
28:eb:d6:33:ea:e9:84:94:d7:b5:26:a1:82:3f:a2:0d:d1:96:
eb:b5:46:cc:d9:42:12:0d:72:c5:6d:87:72:cd:f7:9c:4a:1b:
03:bc:2c:73:0c:a9:02:ed:36:9c:38:0e:34:ca:ce:6e:78:10:
d6:29:6c:66:93:c1:e3:8c:fe:09:67:cc:7c:2c:c6:01:80:65:
12:a7:c9:6e:a8:c0:05:e3:85:fe:49:84:57:4a:c5:80:d5:12:
85:83:0b:62:99:8f:e7:fc:a8:69:79:b7:c4:c5:2e:4a:cc:90:
99:84:59:cc:58:34:34:50:10:a7:1e:74:0d:6c:c9:44:03:92:
71:7f:ae:1d:48:90:99:12:a7:1a:8f:31:8e:d4:ea:3c:b5:be:
0c:bc:ab:39:d1:05:69:9e:ec:ef:e0:e5:06:b8:10:d6:21:b8:
30:c4:b3:7b:57:fa:7b:7a:af:a1:13:c7:6d:66:94:09:82:fc:
b8:34:74:4c:51:10:f7:52:46:29:d8:2b:7e:cb:cc:35:0a:f5:
48:b4:42:52:aa:e0:9f:95:54:45:11:db:4e:82:46:7f:0d:c1:
c6:83:06:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:49:58 2026 by rpki-client