
$ rpki-client -vvf rpki-rsync.idnic.net/repo/662c2366-f9ec-4455-a9ff-ff696a107e62/0/0E8E7FF529A30407FEDE18CF892F4E205578CFF4.mft
File: 0E8E7FF529A30407FEDE18CF892F4E205578CFF4.mft (raw, json)
Hash identifier: j0kmicyGX8GHoLi1IiYVxGa8xrJUAufPUlI8fz71tgY=
Subject key identifier: 03:82:29:EC:40:69:1B:E3:67:BD:F1:56:98:A4:CC:72:D9:B1:A9:68
Authority key identifier: 0E:8E:7F:F5:29:A3:04:07:FE:DE:18:CF:89:2F:4E:20:55:78:CF:F4
Certificate issuer: /CN=0E8E7FF529A30407FEDE18CF892F4E205578CFF4
Certificate serial: 5EB5F1DC010463A350963C516A4AF1FE428F7E4B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0E8E7FF529A30407FEDE18CF892F4E205578CFF4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/662c2366-f9ec-4455-a9ff-ff696a107e62/0/0E8E7FF529A30407FEDE18CF892F4E205578CFF4.mft
Manifest number: 2C
Signing time: Wed 03 Jun 2026 02:37:59 +0000
Manifest this update: Wed 03 Jun 2026 02:32:59 +0000
Manifest next update: Thu 04 Jun 2026 05:50:59 +0000
Files and hashes: 1: 3130332e38332e302e302f32342d3234203d3e20313530323532.roa (hash: ESYFLhLUVsrTAfVtaCjm2iupLDG9Q3qv3T4W73aB/40=)
2: 0E8E7FF529A30407FEDE18CF892F4E205578CFF4.crl (hash: 24s50EPqajM0VtAxR+NSHKrKipdgtb9w7hRZF+g+r84=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/662c2366-f9ec-4455-a9ff-ff696a107e62/0/0E8E7FF529A30407FEDE18CF892F4E205578CFF4.crl
rsync://rpki-rsync.idnic.net/repo/662c2366-f9ec-4455-a9ff-ff696a107e62/0/0E8E7FF529A30407FEDE18CF892F4E205578CFF4.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0E8E7FF529A30407FEDE18CF892F4E205578CFF4.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 04 Jun 2026 04:41:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:b5:f1:dc:01:04:63:a3:50:96:3c:51:6a:4a:f1:fe:42:8f:7e:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0E8E7FF529A30407FEDE18CF892F4E205578CFF4
Validity
Not Before: Jun 3 02:32:59 2026 GMT
Not After : Jun 4 05:50:59 2026 GMT
Subject: CN=038229EC40691BE367BDF15698A4CC72D9B1A968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:04:ad:0a:4f:11:4a:b3:9b:01:27:3f:e5:60:
f3:65:5f:1a:1a:d3:1f:35:7a:47:69:e6:dd:0b:ee:
a0:a6:2f:82:df:f9:f1:d5:a3:0d:a6:49:7a:9f:a9:
66:60:18:15:23:c4:a9:5c:cc:c8:26:6a:de:5e:e1:
16:3f:be:da:fe:39:41:47:2b:5c:90:e5:f3:06:78:
0b:fd:4d:b5:f5:c7:01:a1:5a:03:9e:73:f9:84:8c:
d5:f3:30:09:49:5f:42:2a:95:43:bc:69:3e:58:4d:
4f:79:29:03:37:fa:3c:52:ff:45:4b:96:1d:f0:cc:
f3:af:42:b8:c9:c5:6b:fa:52:e8:fb:ca:85:6b:72:
d6:fa:5c:ee:97:1c:97:3b:dd:05:c5:61:ee:e8:a0:
86:ba:f0:93:1b:96:c3:9c:60:a6:57:4f:11:31:ae:
d4:9b:1a:fe:f8:a9:1e:a5:d9:4c:4d:ae:55:30:11:
8e:75:b9:9c:63:54:c0:98:31:fe:37:5a:22:b8:47:
8e:72:fb:1c:65:01:51:e5:d9:5b:b5:74:2e:8e:76:
2d:06:ae:37:fc:94:7c:a4:0c:8b:c8:ec:e1:f6:46:
b3:d6:3d:a9:a2:6e:53:e3:20:5e:25:96:5b:4e:7c:
23:b8:a3:6d:cf:aa:24:f9:5e:b6:4d:7b:18:3d:7c:
c7:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:82:29:EC:40:69:1B:E3:67:BD:F1:56:98:A4:CC:72:D9:B1:A9:68
X509v3 Authority Key Identifier:
keyid:0E:8E:7F:F5:29:A3:04:07:FE:DE:18:CF:89:2F:4E:20:55:78:CF:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/662c2366-f9ec-4455-a9ff-ff696a107e62/0/0E8E7FF529A30407FEDE18CF892F4E205578CFF4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0E8E7FF529A30407FEDE18CF892F4E205578CFF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/662c2366-f9ec-4455-a9ff-ff696a107e62/0/0E8E7FF529A30407FEDE18CF892F4E205578CFF4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:7a:65:6f:4a:f4:c2:0b:3c:30:4c:a7:1f:e9:9c:74:50:ed:
d4:28:98:95:40:23:aa:0a:e3:9c:c8:c7:14:58:01:b0:b8:ee:
a8:0a:a5:3b:1f:32:d5:ce:04:74:f2:e9:3c:de:ae:6a:90:01:
eb:09:49:35:f6:b8:8d:c3:87:f1:eb:88:5c:5d:6b:00:2d:e0:
a3:1e:36:cc:6a:5f:34:47:ef:8c:3d:32:7a:c1:81:a3:15:e1:
bc:ec:26:1d:1b:13:53:f1:f8:85:f3:8e:ec:68:8a:42:6e:20:
1f:de:c3:72:8e:c4:5a:9a:0f:93:9a:75:d8:18:81:7c:af:ca:
22:38:aa:df:9e:ab:31:38:0a:f0:7f:31:e4:fc:fc:ee:26:8d:
b1:bc:68:7d:7f:b9:b8:ba:d8:24:77:b4:e6:8f:84:36:a4:3e:
f7:71:6e:ca:5c:31:54:cb:5f:25:2d:46:af:4d:a5:6a:67:de:
4a:df:d9:a5:02:16:6f:02:09:ba:5e:03:41:7c:22:9c:67:05:
1f:d6:ad:f9:cc:5f:83:13:61:71:bf:a7:d4:31:8e:fa:f8:d0:
bc:12:9a:18:2b:3b:e7:e0:9a:d8:d2:f6:a6:17:48:a7:93:45:
de:73:1f:0a:75:dc:4f:df:20:8e:d1:9b:15:84:7c:05:e9:7c:
b8:3f:27:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:24:39 2026 by rpki-client