
$ rpki-client -vvf rpki-rsync.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/E88BC8A7F27D2A5B7520E87760889CD042853ADE.mft
File: E88BC8A7F27D2A5B7520E87760889CD042853ADE.mft (raw, json)
Hash identifier: lZclWyo4HXCP7yDe4NJWTJMJmFku7ybrsiO8D6CO5m4=
Subject key identifier: 0D:E0:31:97:F6:C5:73:53:60:38:5C:47:7B:84:48:F4:71:DE:3B:81
Authority key identifier: E8:8B:C8:A7:F2:7D:2A:5B:75:20:E8:77:60:88:9C:D0:42:85:3A:DE
Certificate issuer: /CN=E88BC8A7F27D2A5B7520E87760889CD042853ADE
Certificate serial: 228B5CAA05F0F1FB1B143D01B332E78F096F3E05
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E88BC8A7F27D2A5B7520E87760889CD042853ADE.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/E88BC8A7F27D2A5B7520E87760889CD042853ADE.mft
Manifest number: 2B
Signing time: Wed 03 Jun 2026 01:01:02 +0000
Manifest this update: Wed 03 Jun 2026 00:56:02 +0000
Manifest next update: Thu 04 Jun 2026 03:50:02 +0000
Files and hashes: 1: 323430323a326334303a3a2f34382d3438203d3e20313336383734.roa (hash: zi1G9BahVDm/M7Dcf6hyf4kk3uCGA92haLufy2kBDKs=)
2: 3130332e3130352e37372e302f32342d3234203d3e203535363736.roa (hash: 89aIdO+EcaO2EgEgxRB/RqjR0BzQuTZKwEZg7t/EUN8=)
3: 3130332e3130352e37382e302f32342d3234203d3e203535363736.roa (hash: T79Acu3dFfSJnZwf5MfpW3ZPl2jn6Xl5KVc/Lh8xgf0=)
4: E88BC8A7F27D2A5B7520E87760889CD042853ADE.crl (hash: aHzG4MWd9ZL/DNUTkFfVs/FSYBcjzYlFgPSUj7ctINw=)
5: 3130332e3130352e37392e302f32342d3234203d3e20313336383734.roa (hash: gkAC5+StdnMaSqYuGVBT+3ErlRAaXIJGp1TwiVqa81g=)
6: 3130332e3130352e37392e302f32342d3234203d3e203535363736.roa (hash: SHELRlR+bO1G1+56lQPkLv609BfDTEBVrD9A+nbY330=)
7: 3130332e3130352e37382e302f32342d3234203d3e20313336383734.roa (hash: HjyzaNQUCQhEFQ4hKYw2ku34SqSG+Q21ZyHYmX0dpFM=)
8: 323430323a326334303a3a2f34382d3438203d3e203535363736.roa (hash: vki+XStGqNG/jPbkEYt4lyDUr4IU7G8v5buzOalFaw0=)
9: 3130332e3130352e37362e302f32342d3234203d3e203535363736.roa (hash: Q3r0bAYb72ZQ2Fp1fAghigXkWh4LdobhrwQdO/opI/0=)
10: 3130332e3130352e37362e302f32332d3234203d3e20313336383734.roa (hash: cc/saxfe9KKXtfm7XzpNhS/kTpo6bsyBLZi4D549YFI=)
11: 3130332e3130352e37362e302f32342d3234203d3e20313336383734.roa (hash: StV9pAMf1Ct261g28sLeCDLoQr5OW67xNFsrQ9jD6wc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/E88BC8A7F27D2A5B7520E87760889CD042853ADE.crl
rsync://rpki-rsync.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/E88BC8A7F27D2A5B7520E87760889CD042853ADE.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E88BC8A7F27D2A5B7520E87760889CD042853ADE.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 04 Jun 2026 03:50:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:8b:5c:aa:05:f0:f1:fb:1b:14:3d:01:b3:32:e7:8f:09:6f:3e:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E88BC8A7F27D2A5B7520E87760889CD042853ADE
Validity
Not Before: Jun 3 00:56:02 2026 GMT
Not After : Jun 4 03:50:02 2026 GMT
Subject: CN=0DE03197F6C5735360385C477B8448F471DE3B81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fb:d4:9a:0d:4d:48:82:7e:55:72:28:11:45:
f7:3e:a5:93:18:3a:35:56:11:0b:3c:af:8c:db:47:
f9:ed:e8:02:aa:38:de:bb:a4:44:95:f8:96:16:76:
82:54:42:c9:08:a6:37:82:69:f8:29:6d:20:9a:8e:
19:22:ea:11:19:89:61:e0:40:23:c1:d6:b3:0d:ab:
b1:c3:41:8d:73:66:93:7b:3c:ca:05:af:5f:dd:fa:
70:11:ef:75:0f:8a:05:6d:e7:3c:ee:29:93:0d:5f:
36:78:b3:ee:63:e7:a7:3a:3f:9d:a7:db:a0:0c:32:
5c:f7:b7:34:ef:95:d3:31:a8:d8:9c:47:ee:a9:04:
c7:e9:fa:af:5e:9d:d6:2a:d7:87:39:14:df:c1:5f:
dc:0c:f1:15:e7:dc:4d:73:9a:dc:39:51:dd:4e:88:
d0:81:73:8b:e3:d9:5a:0b:d6:ca:04:32:9b:36:1c:
6a:15:12:6b:ac:82:63:65:84:ba:99:bf:36:bf:8d:
3c:7a:92:aa:db:9b:ca:a4:5f:37:bd:11:21:9c:e9:
f5:80:98:d7:7b:28:c6:ea:58:13:a5:4e:d8:0b:71:
b0:34:17:dd:94:5c:43:6a:d3:dc:22:12:bc:a2:5e:
0a:8b:f2:6d:36:cc:eb:0b:4b:23:e9:35:fa:66:1f:
10:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E0:31:97:F6:C5:73:53:60:38:5C:47:7B:84:48:F4:71:DE:3B:81
X509v3 Authority Key Identifier:
keyid:E8:8B:C8:A7:F2:7D:2A:5B:75:20:E8:77:60:88:9C:D0:42:85:3A:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/E88BC8A7F27D2A5B7520E87760889CD042853ADE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E88BC8A7F27D2A5B7520E87760889CD042853ADE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/E88BC8A7F27D2A5B7520E87760889CD042853ADE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:90:13:b4:44:e1:06:9d:92:1e:e2:1d:81:0d:24:04:e8:5d:
c3:1f:c5:3b:65:69:83:5f:88:b1:44:a1:0a:10:aa:f1:8e:6e:
a3:3a:d8:81:1f:40:4a:ef:ca:d3:c8:99:16:c5:9d:b0:29:cd:
1d:9a:c5:46:12:c9:c2:52:af:10:51:87:65:17:68:26:c2:72:
21:6f:61:80:29:ca:d3:79:9d:c3:47:57:05:34:1e:b9:48:1a:
db:aa:6d:6c:ff:42:a1:b4:3f:2d:8d:3b:be:7b:8a:1d:20:33:
b1:d4:bd:c7:1c:16:a8:f0:d5:8c:04:33:b7:06:13:f2:ff:01:
c5:77:a5:fd:e6:d3:d6:e0:b9:e6:c8:07:cf:03:8a:20:83:e4:
c9:82:7f:5e:ba:1f:0b:08:01:10:e9:03:c6:ae:02:b3:9b:0a:
a9:f1:26:9a:34:91:d5:c8:b0:72:a9:76:03:c1:51:89:d4:d3:
c8:a4:81:e2:c9:3f:cf:6f:de:7a:65:5f:91:63:9a:b3:d0:be:
51:61:56:46:42:56:28:de:f0:72:ec:2c:d1:4d:5d:c4:17:41:
11:72:0d:ee:5c:54:e0:d7:2c:b0:e6:79:aa:33:4b:d7:1f:09:
18:ab:97:8c:fe:71:9d:05:d2:97:05:2c:2e:ba:89:e8:72:c0:
fe:e3:24:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:22:37 2026 by rpki-client