
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/EC59C36AB88A35CEA64B4ED019F2F05317672299.mft
File: EC59C36AB88A35CEA64B4ED019F2F05317672299.mft (raw, json)
Hash identifier: eM/twxzs/rg5L3bJclYm96+QVhhvyyRnHNtkhcyCFxY=
Subject key identifier: EA:73:88:0E:3F:47:41:66:8D:C2:32:4C:99:3F:C4:06:27:42:88:44
Authority key identifier: EC:59:C3:6A:B8:8A:35:CE:A6:4B:4E:D0:19:F2:F0:53:17:67:22:99
Certificate issuer: /CN=EC59C36AB88A35CEA64B4ED019F2F05317672299
Certificate serial: 3C96BB850F7C057AD0F5466B476DFE8506C2760E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EC59C36AB88A35CEA64B4ED019F2F05317672299.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/EC59C36AB88A35CEA64B4ED019F2F05317672299.mft
Manifest number: F8
Signing time: Wed 04 Nov 2026 08:33:59 +0000
Manifest this update: Wed 04 Nov 2026 08:28:59 +0000
Manifest next update: Thu 05 Nov 2026 08:49:59 +0000
Files and hashes: 1: 3231302e37392e3230382e302f32302d3234203d3e203137393130.roa (hash: 5vaZfShfqgbUD5UrW2OwsFkdXsmnoUQ2LgDSdBEsxKs=)
2: 3230322e3132372e39362e302f32342d3234203d3e203137393130.roa (hash: +30yZ3DQ/J4gQPQfBONcQspdy36OErhmpY2jH4HzLiQ=)
3: 3231302e37392e3230382e302f32302d3230203d3e203137393130.roa (hash: 57swP2LUwPdheqaXWgJ8pT9nt0r4LCH8JoFCbrhNwuw=)
4: 3230322e3132372e39392e302f32342d3234203d3e203137393130.roa (hash: Ju2Rnafj0JXyXCFyRIYbsuCCwhT0mQqqDAAoegLW2lk=)
5: 3230322e3132372e39382e302f32342d3234203d3e203137393130.roa (hash: nvBOhOQVzXAnJ4HGpau+WjYJtRHl8i2975iE/qVl3BQ=)
6: 3230322e3132372e39362e302f32302d3234203d3e203137393130.roa (hash: +dGVRe6EsrE8x8JkrbEl5y9M3KyI6+RObwSg+1Gl944=)
7: 3230322e3132372e39362e302f32302d3230203d3e203137393130.roa (hash: AfPj1/WANHCA8ksluVDxgnesb53b+Rlio8ADTE+u1pQ=)
8: EC59C36AB88A35CEA64B4ED019F2F05317672299.crl (hash: 51daMrn7fHEC3SKqfknfVLQ3/Mm5nhvCDuXIa1w+yXY=)
9: 3230322e3132372e3130302e302f32342d3234203d3e203137393130.roa (hash: n+eUGlNoGxyXiKbu/ITCTX0cNeFjGes4nvyKs6e972Y=)
10: 3230322e3132372e39372e302f32342d3234203d3e203137393130.roa (hash: YPwGvhjJSaspOvLgrZ3Fyf5ldBDtpaa3xSbfWjcGrDA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/EC59C36AB88A35CEA64B4ED019F2F05317672299.crl
rsync://rpki-rsync.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/EC59C36AB88A35CEA64B4ED019F2F05317672299.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EC59C36AB88A35CEA64B4ED019F2F05317672299.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Nov 2026 08:49:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:96:bb:85:0f:7c:05:7a:d0:f5:46:6b:47:6d:fe:85:06:c2:76:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC59C36AB88A35CEA64B4ED019F2F05317672299
Validity
Not Before: Nov 4 08:28:59 2026 GMT
Not After : Nov 5 08:49:59 2026 GMT
Subject: CN=EA73880E3F4741668DC2324C993FC40627428844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:da:ab:e6:f7:2b:53:ed:52:f9:2c:70:d8:33:
38:cc:93:cb:81:66:21:a8:a2:12:24:08:cd:31:e5:
7e:00:44:4e:8d:7d:58:08:49:e2:52:69:23:bc:af:
1b:8d:2f:c0:83:38:b8:d3:1d:97:f9:76:5f:a1:30:
a6:c6:26:35:99:04:13:d9:b9:7e:3f:17:8a:5f:71:
b5:2e:96:f3:74:82:86:e1:16:18:d8:d7:c6:00:de:
e6:8d:7b:39:27:b5:b7:5f:c7:c0:d4:ab:76:2d:71:
90:a1:b6:1b:3e:df:f4:75:4b:c4:fd:32:22:0f:9d:
17:64:99:cb:5c:71:e5:8d:e2:fd:2f:ce:6f:70:ce:
4f:93:bb:95:eb:ba:c1:b2:51:36:c7:f1:6a:44:39:
73:10:fd:64:77:e3:7e:4d:cd:59:24:79:05:78:78:
38:30:23:d6:15:f6:b8:49:b3:1e:a1:30:0d:f8:7f:
7a:00:45:9a:48:aa:52:2e:9d:d0:4e:f7:78:f4:1d:
a5:1a:17:85:12:87:78:06:bc:71:72:cc:92:64:3e:
27:37:4a:3c:a1:9e:ab:6c:a8:09:2a:db:eb:50:c6:
2e:dd:5a:f1:1f:ba:85:3a:3a:4a:9f:27:25:ea:8a:
37:a8:78:a2:8f:a8:36:51:04:77:1c:44:1d:d1:42:
f7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:73:88:0E:3F:47:41:66:8D:C2:32:4C:99:3F:C4:06:27:42:88:44
X509v3 Authority Key Identifier:
keyid:EC:59:C3:6A:B8:8A:35:CE:A6:4B:4E:D0:19:F2:F0:53:17:67:22:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/EC59C36AB88A35CEA64B4ED019F2F05317672299.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EC59C36AB88A35CEA64B4ED019F2F05317672299.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/EC59C36AB88A35CEA64B4ED019F2F05317672299.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:74:40:6b:bf:5a:5b:da:fb:6d:bc:e4:36:69:7e:f0:8a:51:
88:e5:cd:b1:f6:2c:e4:e2:b2:f2:89:4f:c1:42:8b:a0:59:db:
77:40:16:d9:ff:22:39:6b:e2:12:06:3a:e4:34:f2:c4:9b:d0:
51:14:da:37:66:c1:91:c3:83:48:68:ae:4c:64:ad:0e:51:b3:
75:c0:41:2f:79:1e:87:2a:a7:6f:ad:41:2f:71:c1:9d:83:38:
8e:3d:be:b7:1c:c0:75:ef:90:68:5c:73:fe:41:99:98:f7:ca:
cd:09:a5:f3:50:98:d2:78:43:b2:8c:8d:9c:e7:54:ca:7b:aa:
7f:11:91:a1:a7:0f:a5:9a:b5:4a:f9:1a:b5:76:62:db:af:f0:
a3:15:37:0c:4b:93:52:b8:cc:f5:2a:91:be:5e:97:b6:9d:38:
f8:2a:38:9d:34:96:21:03:74:a2:55:4e:75:75:ea:9d:35:8b:
87:c5:87:11:07:83:96:c2:b9:5c:d7:45:da:32:a3:06:65:a9:
b8:40:1d:cc:b5:2b:ad:89:34:96:66:a3:c2:88:8b:69:f1:96:
41:51:a9:8b:84:0b:8b:7d:fd:46:35:92:ae:d5:92:4f:ca:86:
80:22:9f:a9:c6:28:40:ee:52:10:7c:4f:2e:46:a6:04:da:35:
ee:68:53:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 01:07:13 2026 by rpki-client