
$ rpki-client -vvf rpki-rsync.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/E88BC8A7F27D2A5B7520E87760889CD042853ADE.mft
File: E88BC8A7F27D2A5B7520E87760889CD042853ADE.mft (raw, json)
Hash identifier: oDVwmdxwhPChrrD9N3g51iOoVYRfl/jk3RYkLyscoKE=
Subject key identifier: 5E:13:01:FE:C7:72:08:01:C2:65:B2:F9:4E:E5:73:FC:20:B2:0D:F1
Authority key identifier: E8:8B:C8:A7:F2:7D:2A:5B:75:20:E8:77:60:88:9C:D0:42:85:3A:DE
Certificate issuer: /CN=E88BC8A7F27D2A5B7520E87760889CD042853ADE
Certificate serial: D3F7282564A141EB2A132107F718304698AF73
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E88BC8A7F27D2A5B7520E87760889CD042853ADE.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/E88BC8A7F27D2A5B7520E87760889CD042853ADE.mft
Manifest number: 6B
Signing time: Mon 20 Jul 2026 23:50:35 +0000
Manifest this update: Mon 20 Jul 2026 23:45:35 +0000
Manifest next update: Wed 22 Jul 2026 03:46:35 +0000
Files and hashes: 1: 3130332e3130352e37372e302f32342d3234203d3e203535363736.roa (hash: 89aIdO+EcaO2EgEgxRB/RqjR0BzQuTZKwEZg7t/EUN8=)
2: 3130332e3130352e37392e302f32342d3234203d3e20313336383734.roa (hash: gkAC5+StdnMaSqYuGVBT+3ErlRAaXIJGp1TwiVqa81g=)
3: 3130332e3130352e37382e302f32342d3234203d3e203535363736.roa (hash: T79Acu3dFfSJnZwf5MfpW3ZPl2jn6Xl5KVc/Lh8xgf0=)
4: 323430323a326334303a3a2f34382d3438203d3e203535363736.roa (hash: vki+XStGqNG/jPbkEYt4lyDUr4IU7G8v5buzOalFaw0=)
5: 3130332e3130352e37362e302f32332d3234203d3e20313336383734.roa (hash: cc/saxfe9KKXtfm7XzpNhS/kTpo6bsyBLZi4D549YFI=)
6: 3130332e3130352e37382e302f32342d3234203d3e20313336383734.roa (hash: HjyzaNQUCQhEFQ4hKYw2ku34SqSG+Q21ZyHYmX0dpFM=)
7: 3130332e3130352e37362e302f32342d3234203d3e20313336383734.roa (hash: StV9pAMf1Ct261g28sLeCDLoQr5OW67xNFsrQ9jD6wc=)
8: 323430323a326334303a3a2f34382d3438203d3e20313336383734.roa (hash: zi1G9BahVDm/M7Dcf6hyf4kk3uCGA92haLufy2kBDKs=)
9: E88BC8A7F27D2A5B7520E87760889CD042853ADE.crl (hash: gMDq81lcKzwSRJ/Gdj5oIJcV/s6XhSC17UnP71mzhAk=)
10: 3130332e3130352e37362e302f32342d3234203d3e203535363736.roa (hash: Q3r0bAYb72ZQ2Fp1fAghigXkWh4LdobhrwQdO/opI/0=)
11: 3130332e3130352e37392e302f32342d3234203d3e203535363736.roa (hash: SHELRlR+bO1G1+56lQPkLv609BfDTEBVrD9A+nbY330=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/E88BC8A7F27D2A5B7520E87760889CD042853ADE.crl
rsync://rpki-rsync.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/E88BC8A7F27D2A5B7520E87760889CD042853ADE.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E88BC8A7F27D2A5B7520E87760889CD042853ADE.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Jul 2026 02:08:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
d3:f7:28:25:64:a1:41:eb:2a:13:21:07:f7:18:30:46:98:af:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E88BC8A7F27D2A5B7520E87760889CD042853ADE
Validity
Not Before: Jul 20 23:45:35 2026 GMT
Not After : Jul 22 03:46:35 2026 GMT
Subject: CN=5E1301FEC7720801C265B2F94EE573FC20B20DF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:19:88:c7:ae:4a:3d:77:5d:70:3d:f3:87:8a:
2e:b1:75:cd:56:10:83:2a:7e:b9:fd:a5:a3:b6:57:
e7:95:ca:43:5a:d6:1d:ff:e6:b8:32:24:42:fc:92:
e2:ab:73:42:ce:93:28:a1:8e:fa:4f:ae:75:97:ca:
2f:20:79:cc:91:d5:4f:8d:2e:0f:4f:10:64:8d:95:
33:ac:0a:f4:3e:e4:d2:64:6d:56:33:87:dd:08:c9:
83:aa:00:df:2e:a3:51:88:2a:73:14:eb:4e:d2:c7:
c0:21:0e:5b:fd:9c:13:32:74:65:c1:46:97:15:3e:
d3:dc:ae:20:b5:b0:d6:03:f3:e0:92:e0:31:19:35:
8b:91:8a:8d:1f:d8:85:f3:e5:a6:47:c7:d5:ea:c7:
ff:d6:5f:8f:0e:0e:a3:a2:e0:f1:38:9f:aa:08:ab:
a0:38:2b:7e:1c:41:f4:e7:f8:6e:96:ce:da:71:8e:
d1:c9:86:04:33:fa:a7:9d:c2:fb:ee:3a:80:e9:98:
84:87:e3:08:e0:98:42:55:ac:01:87:88:39:22:52:
61:13:10:a7:b5:9e:db:13:78:54:86:00:e0:5b:6d:
0b:18:02:bc:cb:e5:ef:fb:c0:33:7b:c5:ef:70:bc:
08:15:b9:15:7e:ec:6d:a9:09:dc:e6:36:7c:71:92:
dc:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:13:01:FE:C7:72:08:01:C2:65:B2:F9:4E:E5:73:FC:20:B2:0D:F1
X509v3 Authority Key Identifier:
keyid:E8:8B:C8:A7:F2:7D:2A:5B:75:20:E8:77:60:88:9C:D0:42:85:3A:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/E88BC8A7F27D2A5B7520E87760889CD042853ADE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E88BC8A7F27D2A5B7520E87760889CD042853ADE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/E88BC8A7F27D2A5B7520E87760889CD042853ADE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:0a:de:10:6e:ab:99:74:29:57:6e:a1:39:f4:c3:62:33:ef:
6e:9f:f5:e5:ae:65:86:86:ba:52:c0:27:78:54:66:b2:70:e6:
3a:3d:e3:34:24:78:7b:33:95:e1:5e:04:97:77:35:62:ef:32:
9b:d7:fb:65:9e:a2:6d:ad:e6:36:28:47:d6:5b:c8:d2:84:2a:
e1:40:2f:62:af:98:b5:58:f7:1b:d5:7d:c3:bb:48:24:13:26:
7c:cd:c8:3d:85:66:f6:4e:16:a9:34:9c:14:53:72:bb:59:bc:
7e:3c:ec:73:76:ae:fb:b7:8f:14:66:62:e3:42:55:93:1c:b5:
f6:f7:42:33:58:e0:78:d0:e7:bd:f4:db:8f:1b:4c:f9:3e:24:
4a:71:71:c6:09:13:a2:81:0c:f9:9d:9a:91:c4:66:01:20:86:
61:71:ce:97:8c:7f:94:f9:6f:ab:f1:58:cf:a6:3b:4e:c7:36:
a4:a5:9a:2f:13:e6:c6:a9:09:30:e0:95:88:46:4d:5c:ad:d8:
d7:d1:4c:6a:d2:f1:61:8d:1b:d2:98:9e:e8:78:9f:fb:1e:ef:
b1:99:8b:00:aa:51:42:bd:da:71:64:86:68:dd:d9:35:56:2b:
d2:92:bc:5d:dc:e7:c2:a3:6a:d5:84:66:41:41:30:f8:ec:88:
9c:30:64:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:29:15 2026 by rpki-client