
$ rpki-client -vvf rpki-rsync.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/EC59C36AB88A35CEA64B4ED019F2F05317672299.mft
File: EC59C36AB88A35CEA64B4ED019F2F05317672299.mft (raw, json)
Hash identifier: DqsVpZI4u0eR5V4kJWc7Ze1+ip7L8CN01bmyPfGIhwM=
Subject key identifier: C6:A7:F5:DD:18:A0:EF:A4:E7:74:53:A0:32:CB:E6:C2:E4:2A:DC:24
Authority key identifier: EC:59:C3:6A:B8:8A:35:CE:A6:4B:4E:D0:19:F2:F0:53:17:67:22:99
Certificate issuer: /CN=EC59C36AB88A35CEA64B4ED019F2F05317672299
Certificate serial: 3C10E0AA4CA48A5C86A5E51DB512A9917ACFDBEE
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EC59C36AB88A35CEA64B4ED019F2F05317672299.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/EC59C36AB88A35CEA64B4ED019F2F05317672299.mft
Manifest number: 2B
Signing time: Tue 02 Jun 2026 18:27:17 +0000
Manifest this update: Tue 02 Jun 2026 18:22:17 +0000
Manifest next update: Wed 03 Jun 2026 20:34:17 +0000
Files and hashes: 1: 3230322e3132372e39362e302f32302d3234203d3e203137393130.roa (hash: +dGVRe6EsrE8x8JkrbEl5y9M3KyI6+RObwSg+1Gl944=)
2: 3230322e3132372e39382e302f32342d3234203d3e203137393130.roa (hash: nvBOhOQVzXAnJ4HGpau+WjYJtRHl8i2975iE/qVl3BQ=)
3: 3230322e3132372e3130302e302f32342d3234203d3e203137393130.roa (hash: n+eUGlNoGxyXiKbu/ITCTX0cNeFjGes4nvyKs6e972Y=)
4: 3230322e3132372e39362e302f32342d3234203d3e203137393130.roa (hash: +30yZ3DQ/J4gQPQfBONcQspdy36OErhmpY2jH4HzLiQ=)
5: 3230322e3132372e39372e302f32342d3234203d3e203137393130.roa (hash: YPwGvhjJSaspOvLgrZ3Fyf5ldBDtpaa3xSbfWjcGrDA=)
6: 3230322e3132372e39362e302f32302d3230203d3e203137393130.roa (hash: AfPj1/WANHCA8ksluVDxgnesb53b+Rlio8ADTE+u1pQ=)
7: 3231302e37392e3230382e302f32302d3234203d3e203137393130.roa (hash: 5vaZfShfqgbUD5UrW2OwsFkdXsmnoUQ2LgDSdBEsxKs=)
8: 3230322e3132372e39392e302f32342d3234203d3e203137393130.roa (hash: Ju2Rnafj0JXyXCFyRIYbsuCCwhT0mQqqDAAoegLW2lk=)
9: 3231302e37392e3230382e302f32302d3230203d3e203137393130.roa (hash: 57swP2LUwPdheqaXWgJ8pT9nt0r4LCH8JoFCbrhNwuw=)
10: EC59C36AB88A35CEA64B4ED019F2F05317672299.crl (hash: 7kOZCqxdnQ2bsnOao2cz81s7p4TXvlOVFUWYpOg2myI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/EC59C36AB88A35CEA64B4ED019F2F05317672299.crl
rsync://rpki-rsync.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/EC59C36AB88A35CEA64B4ED019F2F05317672299.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EC59C36AB88A35CEA64B4ED019F2F05317672299.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 10:27:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:10:e0:aa:4c:a4:8a:5c:86:a5:e5:1d:b5:12:a9:91:7a:cf:db:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC59C36AB88A35CEA64B4ED019F2F05317672299
Validity
Not Before: Jun 2 18:22:17 2026 GMT
Not After : Jun 3 20:34:17 2026 GMT
Subject: CN=C6A7F5DD18A0EFA4E77453A032CBE6C2E42ADC24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0a:c0:12:83:e3:b7:b0:5a:26:9f:ca:ae:eb:
17:e0:e6:7e:89:ee:15:b2:14:d3:e5:9f:32:5b:3d:
20:e7:f8:bb:e0:a2:75:0e:b2:ac:9e:c3:dd:eb:d8:
5c:1a:84:0f:97:5a:d5:bc:e5:fa:5b:40:04:d7:77:
37:af:e0:df:84:f8:8b:e3:30:64:50:d3:07:a7:ab:
0f:40:69:25:7f:72:3e:d4:6c:4a:e2:1d:49:d6:67:
be:12:77:8b:07:5c:a7:0f:f7:a2:ae:23:a4:88:1d:
1b:10:f0:d5:d8:f4:40:02:ff:f9:bd:a2:4c:e2:e7:
35:ee:85:fe:3f:33:e6:a3:45:22:20:c4:5c:f7:e6:
cf:19:85:a5:2d:de:a3:cc:99:40:92:45:e8:25:f3:
89:02:68:1d:dc:cf:d3:2f:de:db:82:3b:73:55:af:
31:0c:72:ea:a5:a0:1b:d2:c9:19:44:b5:f2:0f:f7:
46:46:fe:ff:76:7f:b0:52:de:da:91:a7:8b:38:75:
73:38:3e:78:86:81:dd:97:49:22:58:15:d1:7b:db:
68:6f:89:d4:cb:30:1a:9b:1a:61:fe:76:73:a1:6d:
8b:72:9e:43:73:3d:f3:2e:e0:73:06:87:e0:0e:13:
5f:04:b2:c7:2e:5a:58:06:2d:8b:53:f9:69:4f:61:
95:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:A7:F5:DD:18:A0:EF:A4:E7:74:53:A0:32:CB:E6:C2:E4:2A:DC:24
X509v3 Authority Key Identifier:
keyid:EC:59:C3:6A:B8:8A:35:CE:A6:4B:4E:D0:19:F2:F0:53:17:67:22:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/EC59C36AB88A35CEA64B4ED019F2F05317672299.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EC59C36AB88A35CEA64B4ED019F2F05317672299.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/EC59C36AB88A35CEA64B4ED019F2F05317672299.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:62:46:23:78:1d:c1:10:20:3b:c8:23:b9:05:35:4c:c7:37:
03:74:97:7d:e4:93:c0:51:6c:f7:c9:d0:f1:17:6f:42:98:9f:
67:f7:f5:01:2c:f2:31:23:ac:a4:0d:b3:e6:db:f5:d9:57:53:
27:05:1c:87:72:c4:35:f2:a1:8c:f9:cc:13:f5:61:e9:9e:65:
f1:62:93:88:2d:6a:9b:a2:7a:f1:3c:8c:60:d2:7b:3e:2e:3d:
c3:00:5d:3c:49:18:dd:4d:8e:2b:aa:fe:d6:fd:a2:92:e2:21:
cc:5b:5f:c4:fe:9a:dd:78:7b:55:93:0b:01:a6:d2:0c:c1:5b:
b8:7b:25:72:87:50:0e:56:24:b6:04:09:8d:b0:ae:35:44:e5:
a7:28:a7:88:fd:d1:63:26:e1:fc:00:df:04:7d:90:1d:34:ac:
24:6d:69:94:b5:71:d9:ca:63:36:c6:73:60:72:ef:bd:45:61:
ec:98:d4:18:6f:c5:6e:73:fc:83:80:9d:9a:14:4c:67:64:ba:
3a:c6:0f:6c:b0:df:b2:40:b4:be:db:d6:22:bc:cd:93:cc:e7:
f9:c2:a4:30:43:ca:f5:73:57:c8:a2:93:5c:68:2f:44:ef:01:
d1:1f:21:26:14:1a:06:40:b7:a1:14:31:44:58:ce:9a:eb:d1:
60:83:c9:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:50:08 2026 by rpki-client