
$ rpki-client -vvf rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.mft
File: 2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.mft (raw, json)
Hash identifier: 24YSw/eh0JIHiLc+byGlz2L9kEEiUv3DwMOQwNLNfxI=
Subject key identifier: C5:59:EE:51:57:C2:75:DD:E3:68:18:B7:8A:26:85:B8:74:3E:F5:BF
Authority key identifier: 2E:7A:B1:33:5C:4E:07:C6:D3:46:10:DA:5B:92:0C:49:6F:6B:61:D0
Certificate issuer: /CN=2E7AB1335C4E07C6D34610DA5B920C496F6B61D0
Certificate serial: 5858545198B452658C9EB22B6E650C0387F0F671
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.mft
Manifest number: 2B
Signing time: Tue 02 Jun 2026 17:36:11 +0000
Manifest this update: Tue 02 Jun 2026 17:31:11 +0000
Manifest next update: Wed 03 Jun 2026 21:18:11 +0000
Files and hashes: 1: 3230322e37322e3230352e302f32342d3234203d3e203538353532.roa (hash: FGoSsoOOffTNyyww3u8Ke14hUh1FetMzPI2ZAfmyzQs=)
2: 3230322e37322e3139332e302f32342d3234203d3e203138313533.roa (hash: wJ0OIiNjTdldfLYb19hTKZ+fKESqf6C7MeF3YvJI8Ys=)
3: 2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.crl (hash: Ltx1XInfxvKklijGJXS3qcew/654kB/qY8ie2kzXmI0=)
4: 3230322e37322e3230322e302f32342d3234203d3e203138313533.roa (hash: 08R8uow6CkDSzpj8I0I6g9tHwsOaR/O2coPRJDLApcU=)
5: 3230322e37322e3139342e302f32342d3234203d3e203538353532.roa (hash: x2waDxAivuzwEakd8DLbazFG/EZswmywlTtLdaU69e8=)
6: 3230322e37322e3230312e302f32342d3234203d3e203138313533.roa (hash: 5mZLoNgZhTm39U7OL1mXB6ctYVQTzYRY8BBmuLpMg4Y=)
7: 3230322e37322e3230332e302f32342d3234203d3e203538353532.roa (hash: iby8iV2U2RE+gf7SXobV11P3/zgUaZgIeET+QYf6T1o=)
8: 3230322e37322e3139352e302f32342d3234203d3e203138313533.roa (hash: SCHe3hYSRhgevYCfCBUBkvtKm+wlGx7OZOfJDoM+cQk=)
9: 3230322e37322e3139382e302f32342d3234203d3e203538353532.roa (hash: q93DQl+hjXIQfrcVhu9DN0JHvkzY8J25CxthuhIjous=)
10: 3230322e37322e3139392e302f32342d3234203d3e203538353532.roa (hash: I7aNpMfH7ZHP4Lp/vWgPFU8KVrb9zX35ePeEEjLzIes=)
11: 3230322e37322e3230362e302f32342d3234203d3e203138313533.roa (hash: rYb9medyxCLAhcgseCZT0SUDS0jCzHAqSI7lOKhEDGA=)
12: 3230322e37322e3139322e302f32342d3234203d3e203138313533.roa (hash: 8TVATmR1OegECSp2IvjWnV4bX9F7cZu1ILCCYkpbkRs=)
13: 3230322e37322e3230342e302f32332d3233203d3e203538353532.roa (hash: F2TMv35JZK5AIuzdcDqCbXvGPGE/OVFOpnP/LxPgY6M=)
14: 3230322e37322e3230342e302f32342d3234203d3e203538353532.roa (hash: 8elAsNukKO5kSDzzuWo1Aj5s9RVKBqJn0R9tAyalsQM=)
15: 3230322e37322e3230372e302f32342d3234203d3e203538333839.roa (hash: WHBbJGZmdQKaYyhDTGiF9nJvtfUgtNB8fOyt7IgLmpo=)
16: 3230322e37322e3139362e302f32342d3234203d3e203138313533.roa (hash: 0VsRrjsdIFJeamY9VCTKavELmYTFS3ilP2PUztX74Uc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.crl
rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 10:27:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:58:54:51:98:b4:52:65:8c:9e:b2:2b:6e:65:0c:03:87:f0:f6:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E7AB1335C4E07C6D34610DA5B920C496F6B61D0
Validity
Not Before: Jun 2 17:31:11 2026 GMT
Not After : Jun 3 21:18:11 2026 GMT
Subject: CN=C559EE5157C275DDE36818B78A2685B8743EF5BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6b:dd:10:b2:98:93:1f:00:1f:2a:18:9f:b5:
74:a9:d7:db:14:e0:6c:e2:9e:d0:70:5d:54:ab:4a:
ef:24:73:0c:c3:60:1c:45:cd:82:2b:6f:d9:ab:63:
28:ed:c8:48:03:5c:84:cf:c4:15:16:33:12:a1:07:
bc:39:0c:5f:87:e5:be:8f:af:57:78:5d:fb:83:4a:
62:f3:17:82:45:ac:ea:c0:f2:a0:55:c5:09:9a:12:
ad:e9:a0:00:74:6b:52:1b:43:50:90:7f:8f:5b:49:
4c:f5:85:89:f1:bd:4a:7f:58:59:cc:27:24:fe:85:
d5:56:1c:16:0e:9d:5b:06:53:a9:cf:79:6a:c7:41:
89:e9:e8:2f:f7:d6:db:22:2c:10:2e:b7:98:5d:df:
20:34:37:97:7d:f0:2a:31:a0:b0:cf:18:7a:ec:df:
01:c0:0c:53:d4:a7:f7:68:9f:f5:de:04:2b:c9:73:
6f:ea:f6:69:e9:49:aa:4d:74:7a:db:ee:bd:89:d7:
f1:d1:44:46:94:65:6b:00:81:ed:70:90:19:80:3b:
7b:fe:af:4c:08:d8:a0:e5:bb:46:41:95:9a:37:11:
2d:3d:81:d2:6e:62:13:22:68:1a:57:20:47:5e:2b:
f4:d0:93:94:10:2f:59:33:3e:a2:de:4e:16:34:a5:
d2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:59:EE:51:57:C2:75:DD:E3:68:18:B7:8A:26:85:B8:74:3E:F5:BF
X509v3 Authority Key Identifier:
keyid:2E:7A:B1:33:5C:4E:07:C6:D3:46:10:DA:5B:92:0C:49:6F:6B:61:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:2f:50:bf:90:00:97:11:ef:0e:f3:c9:80:74:21:b2:3b:c4:
1a:d8:4d:a5:88:2f:ff:d6:5e:b3:6b:08:bd:ab:d4:04:b1:88:
72:b7:7b:ed:8e:77:5a:9b:77:e0:7a:8c:8a:1e:97:5e:16:82:
f2:41:90:8c:dc:da:b7:a1:30:47:d3:82:b0:64:99:d2:c3:f6:
7f:f7:54:c9:6e:67:5b:a3:ad:86:99:1c:1e:8a:67:80:66:3e:
6a:19:ff:8e:2b:da:6b:4e:a4:21:73:7f:c0:51:02:27:ae:f1:
de:0d:b3:3b:9e:48:17:d9:d0:f6:02:a1:0c:06:36:d5:4a:44:
52:c2:02:0a:33:44:61:74:37:b7:21:4d:dc:24:fc:ec:30:92:
8f:f6:0e:28:d7:9f:23:46:c8:73:a8:4f:4b:78:a6:3f:82:78:
3a:25:a6:63:59:aa:2f:fe:a0:9a:28:f7:a6:c1:07:3a:5b:aa:
79:50:84:5e:11:0f:c3:da:bd:0f:40:fe:a0:b8:0b:f8:6e:76:
33:80:84:ad:39:94:26:1f:f7:80:3c:f1:c3:a6:6b:7b:84:1b:
4c:98:a5:06:ef:0b:7c:2b:1c:7a:f7:a7:26:2e:b6:3a:75:9e:
f9:1f:86:8f:3c:9f:fa:f1:aa:a8:3f:b9:7f:84:28:86:e0:dd:
5e:2b:f4:30
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUWFhUUZi0UmWMnrIrbmUMA4fw9nEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkU3QUIxMzM1QzRFMDdDNkQzNDYxMERBNUI5MjBDNDk2
RjZCNjFEMDAeFw0yNjA2MDIxNzMxMTFaFw0yNjA2MDMyMTE4MTFaMDMxMTAvBgNV
BAMTKEM1NTlFRTUxNTdDMjc1RERFMzY4MThCNzhBMjY4NUI4NzQzRUY1QkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCna90QspiTHwAfKhiftXSp19sU
4GzintBwXVSrSu8kcwzDYBxFzYIrb9mrYyjtyEgDXITPxBUWMxKhB7w5DF+H5b6P
r1d4XfuDSmLzF4JFrOrA8qBVxQmaEq3poAB0a1IbQ1CQf49bSUz1hYnxvUp/WFnM
JyT+hdVWHBYOnVsGU6nPeWrHQYnp6C/31tsiLBAut5hd3yA0N5d98CoxoLDPGHrs
3wHADFPUp/don/XeBCvJc2/q9mnpSapNdHrb7r2J1/HRREaUZWsAge1wkBmAO3v+
r0wI2KDlu0ZBlZo3ES09gdJuYhMiaBpXIEdeK/TQk5QQL1kzPqLeThY0pdI5AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUxVnuUVfCdd3jaBi3iiaFuHQ+9b8wHwYDVR0j
BBgwFoAULnqxM1xOB8bTRhDaW5IMSW9rYdAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NjlhY2I0YTgtNzgwNC00NTI2LTg0ZDItODY5YjkxYTY3MTlkLzAvMkU3QUIxMzM1
QzRFMDdDNkQzNDYxMERBNUI5MjBDNDk2RjZCNjFEMC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8yRTdBQjEzMzVDNEUwN0M2RDM0NjEwREE1QjkyMEM0OTZGNkI2
MUQwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjlhY2I0YTgtNzgwNC00NTI2LTg0
ZDItODY5YjkxYTY3MTlkLzAvMkU3QUIxMzM1QzRFMDdDNkQzNDYxMERBNUI5MjBD
NDk2RjZCNjFEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHkvUL+QAJcR7w7zyYB0IbI7xBrYTaWIL//W
XrNrCL2r1ASxiHK3e+2Od1qbd+B6jIoel14WgvJBkIzc2rehMEfTgrBkmdLD9n/3
VMluZ1ujrYaZHB6KZ4BmPmoZ/44r2mtOpCFzf8BRAieu8d4NszueSBfZ0PYCoQwG
NtVKRFLCAgozRGF0N7chTdwk/Owwko/2DijXnyNGyHOoT0t4pj+CeDolpmNZqi/+
oJoo96bBBzpbqnlQhF4RD8PavQ9A/qC4C/hudjOAhK05lCYf94A88cOma3uEG0yY
pQbvC3wrHHr3pyYutjp1nvkfho88n/rxqqg/uX+EKIbg3V4r9DA=
-----END CERTIFICATE-----
Generated at Wed Jun 3 04:01:34 2026 by rpki-client