
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/E029C9E3702797CC6083E1D4D891799F0F5AA144.mft
File: E029C9E3702797CC6083E1D4D891799F0F5AA144.mft (raw, json)
Hash identifier: t6L+9YvL1OyHAZiIRp/k9tzGgUmU6CD/z4pZ95poMFg=
Subject key identifier: FB:C7:6E:BC:54:88:4A:1A:34:21:85:88:FB:B4:15:F0:55:8B:EA:38
Authority key identifier: E0:29:C9:E3:70:27:97:CC:60:83:E1:D4:D8:91:79:9F:0F:5A:A1:44
Certificate issuer: /CN=E029C9E3702797CC6083E1D4D891799F0F5AA144
Certificate serial: 280F65BF096A30639299B38CE5221FB4AF9640F3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E029C9E3702797CC6083E1D4D891799F0F5AA144.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/E029C9E3702797CC6083E1D4D891799F0F5AA144.mft
Manifest number: 6A
Signing time: Mon 20 Jul 2026 18:03:55 +0000
Manifest this update: Mon 20 Jul 2026 17:58:55 +0000
Manifest next update: Tue 21 Jul 2026 20:27:55 +0000
Files and hashes: 1: E029C9E3702797CC6083E1D4D891799F0F5AA144.crl (hash: 71oFXxOV+Sh5q8KfC5mqpgzZSkrLXe10IOmy30328DM=)
2: 3130332e3130392e3230362e302f32342d3234203d3e20313530393335.roa (hash: 8AqsSwbCPBkMa1bd8eWoyuIjrtuzrPJimjGA2fsl3AA=)
3: 3130332e3130392e3230372e302f32342d3234203d3e20313530393335.roa (hash: DY6/Cy+Nw1dnpzSyQJvKM4XZv0DQUdJYanxa6KJ+Sng=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/E029C9E3702797CC6083E1D4D891799F0F5AA144.crl
rsync://rpki-rsync.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/E029C9E3702797CC6083E1D4D891799F0F5AA144.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E029C9E3702797CC6083E1D4D891799F0F5AA144.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Jul 2026 20:27:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:0f:65:bf:09:6a:30:63:92:99:b3:8c:e5:22:1f:b4:af:96:40:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E029C9E3702797CC6083E1D4D891799F0F5AA144
Validity
Not Before: Jul 20 17:58:55 2026 GMT
Not After : Jul 21 20:27:55 2026 GMT
Subject: CN=FBC76EBC54884A1A34218588FBB415F0558BEA38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ff:fe:a0:af:18:ab:b8:dc:57:34:aa:b3:0a:
23:f9:49:0b:ea:09:94:e9:46:ba:a2:59:17:c3:b6:
d8:5d:ee:f0:72:24:38:88:52:6d:fc:b8:39:91:7d:
b1:5b:08:03:40:ae:77:f1:ce:f5:9e:03:13:42:84:
7d:97:f2:12:bd:a3:4d:1a:91:9e:8a:23:c5:f2:4b:
54:fe:53:68:53:fe:5b:59:1e:98:95:68:c4:d8:42:
22:91:39:32:5d:0d:fe:f3:40:ab:c2:ee:de:18:d7:
89:0a:c0:22:14:2b:34:7e:25:97:d0:ce:62:07:25:
80:60:17:25:d6:0b:42:a4:4f:9a:c4:04:f5:b7:da:
bb:4e:12:aa:ca:1c:c7:e6:77:3e:5b:07:a8:71:04:
4d:97:91:ea:b5:5e:60:ec:cc:5d:5d:a0:ec:d4:9f:
e0:58:ff:3e:05:69:ba:95:d1:12:1b:2d:90:5a:52:
8f:6a:b3:3e:3e:68:f5:a8:62:0e:62:da:dc:ff:3d:
23:70:20:1d:7d:ca:41:c1:a1:ca:db:90:cd:40:4e:
8b:9c:7c:07:24:e6:88:be:e5:f6:0b:07:0d:c8:a2:
28:2a:02:0a:8b:05:3a:d8:c3:5c:8b:a1:bb:a0:a6:
32:48:00:e7:1b:52:6b:33:f9:10:71:aa:bb:b5:08:
d2:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:C7:6E:BC:54:88:4A:1A:34:21:85:88:FB:B4:15:F0:55:8B:EA:38
X509v3 Authority Key Identifier:
keyid:E0:29:C9:E3:70:27:97:CC:60:83:E1:D4:D8:91:79:9F:0F:5A:A1:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/E029C9E3702797CC6083E1D4D891799F0F5AA144.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E029C9E3702797CC6083E1D4D891799F0F5AA144.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/E029C9E3702797CC6083E1D4D891799F0F5AA144.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:8a:6d:28:a4:b2:63:68:3d:78:2c:35:e6:59:53:78:7c:04:
59:84:5a:77:1d:49:09:63:ee:bf:5d:a0:2d:7a:6e:6f:13:f2:
ac:af:74:84:ff:3b:b2:02:6a:b3:54:2e:84:96:c1:05:b4:0c:
35:fd:77:d2:d4:00:d8:fe:34:46:7f:f1:1e:e4:82:ff:09:ed:
06:bf:79:db:dc:f3:f7:f8:7c:02:d6:a3:6f:87:67:b1:0e:f4:
c0:77:b1:e6:a8:62:ab:ce:6d:9c:a0:c1:2a:97:d2:b2:00:10:
4a:6d:72:bb:69:08:76:fa:b2:da:e5:da:5f:d5:ca:b3:72:2a:
ab:43:d4:fa:d3:66:cc:a8:46:b0:a7:09:40:39:0e:43:c6:91:
fe:a6:fb:33:6a:eb:a7:98:a9:08:f8:85:c2:33:6a:e0:ca:d0:
42:85:e0:50:24:e3:cb:39:d7:26:23:5c:e1:70:de:d5:f9:b5:
95:d3:d2:97:ab:08:ee:20:41:cb:b0:c3:4d:c3:2f:8e:d7:c8:
03:8a:1e:24:84:7e:1f:94:f8:17:bf:d9:e9:eb:08:c1:88:ad:
57:47:c5:9c:50:57:ec:4c:03:0c:00:75:59:a8:a6:59:30:fb:
42:c0:0c:9d:f3:4a:be:1c:8a:84:ae:20:72:1b:00:a9:a4:c6:
4c:ee:6f:11
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUKA9lvwlqMGOSmbOM5SIftK+WQPMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTAyOUM5RTM3MDI3OTdDQzYwODNFMUQ0RDg5MTc5OUYw
RjVBQTE0NDAeFw0yNjA3MjAxNzU4NTVaFw0yNjA3MjEyMDI3NTVaMDMxMTAvBgNV
BAMTKEZCQzc2RUJDNTQ4ODRBMUEzNDIxODU4OEZCQjQxNUYwNTU4QkVBMzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj//6grxiruNxXNKqzCiP5SQvq
CZTpRrqiWRfDtthd7vByJDiIUm38uDmRfbFbCANArnfxzvWeAxNChH2X8hK9o00a
kZ6KI8XyS1T+U2hT/ltZHpiVaMTYQiKROTJdDf7zQKvC7t4Y14kKwCIUKzR+JZfQ
zmIHJYBgFyXWC0KkT5rEBPW32rtOEqrKHMfmdz5bB6hxBE2Xkeq1XmDszF1doOzU
n+BY/z4FabqV0RIbLZBaUo9qsz4+aPWoYg5i2tz/PSNwIB19ykHBocrbkM1ATouc
fAck5oi+5fYLBw3IoigqAgqLBTrYw1yLobugpjJIAOcbUmsz+RBxqru1CNKzAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU+8duvFSISho0IYWI+7QV8FWL6jgwHwYDVR0j
BBgwFoAU4CnJ43Anl8xgg+HU2JF5nw9aoUQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZWM4ODkyZWItZGRjMC00Y2I2LTk1N2MtYjY1M2YyOGJiZjM5LzAvRTAyOUM5RTM3
MDI3OTdDQzYwODNFMUQ0RDg5MTc5OUYwRjVBQTE0NC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FMDI5QzlFMzcwMjc5N0NDNjA4M0UxRDREODkxNzk5RjBGNUFB
MTQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWM4ODkyZWItZGRjMC00Y2I2LTk1
N2MtYjY1M2YyOGJiZjM5LzAvRTAyOUM5RTM3MDI3OTdDQzYwODNFMUQ0RDg5MTc5
OUYwRjVBQTE0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAKGKbSiksmNoPXgsNeZZU3h8BFmEWncdSQlj
7r9doC16bm8T8qyvdIT/O7ICarNULoSWwQW0DDX9d9LUANj+NEZ/8R7kgv8J7Qa/
edvc8/f4fALWo2+HZ7EO9MB3seaoYqvObZygwSqX0rIAEEptcrtpCHb6strl2l/V
yrNyKqtD1PrTZsyoRrCnCUA5DkPGkf6m+zNq66eYqQj4hcIzauDK0EKF4FAk48s5
1yYjXOFw3tX5tZXT0perCO4gQcuww03DL47XyAOKHiSEfh+U+Be/2enrCMGIrVdH
xZxQV+xMAwwAdVmoplkw+0LADJ3zSr4cioSuIHIbAKmkxkzubxE=
-----END CERTIFICATE-----
Generated at Tue Jul 21 06:40:30 2026 by rpki-client