
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/000E7B7EBF543F37ACF11375D28462A8D3884A2C.mft
File: 000E7B7EBF543F37ACF11375D28462A8D3884A2C.mft (raw, json)
Hash identifier: bcwohDbBsl4oBndbBHdra8Eyz5g9oddg6JHjnDCq+ek=
Subject key identifier: D1:BC:B6:E1:A2:FB:53:84:1C:5B:F5:0A:A1:D3:77:51:7C:F1:D6:60
Authority key identifier: 00:0E:7B:7E:BF:54:3F:37:AC:F1:13:75:D2:84:62:A8:D3:88:4A:2C
Certificate issuer: /CN=000E7B7EBF543F37ACF11375D28462A8D3884A2C
Certificate serial: A44899BCDEBA402ACD264218FC6E06D7B07B62
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/000E7B7EBF543F37ACF11375D28462A8D3884A2C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/000E7B7EBF543F37ACF11375D28462A8D3884A2C.mft
Manifest number: 2B
Signing time: Tue 02 Jun 2026 22:22:56 +0000
Manifest this update: Tue 02 Jun 2026 22:17:56 +0000
Manifest next update: Thu 04 Jun 2026 01:55:56 +0000
Files and hashes: 1: 3130332e3138322e37382e302f32332d3234203d3e20313439363635.roa (hash: sBUWSQhH/+kN71t/+kxa/DRZ1SSem+XB/ohn5pBy7QU=)
2: 3130332e3138322e37392e302f32342d3234203d3e20313439363635.roa (hash: wNmcHEP7INI2aFk4SmiaXDxMKbebGinF42Oo0vPEfiI=)
3: 000E7B7EBF543F37ACF11375D28462A8D3884A2C.crl (hash: 0w9wZEtAsmw2BPU+ZltRxRfpu7aCfuOaZ1ooMQLMers=)
4: 3130332e3138322e37382e302f32342d3234203d3e20313439363635.roa (hash: KYaeVRiuR7REacNL+jOc17uQNgw/wuM1lcqqpw6kOjQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/000E7B7EBF543F37ACF11375D28462A8D3884A2C.crl
rsync://rpki-rsync.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/000E7B7EBF543F37ACF11375D28462A8D3884A2C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/000E7B7EBF543F37ACF11375D28462A8D3884A2C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 10:27:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
a4:48:99:bc:de:ba:40:2a:cd:26:42:18:fc:6e:06:d7:b0:7b:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=000E7B7EBF543F37ACF11375D28462A8D3884A2C
Validity
Not Before: Jun 2 22:17:56 2026 GMT
Not After : Jun 4 01:55:56 2026 GMT
Subject: CN=D1BCB6E1A2FB53841C5BF50AA1D377517CF1D660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e4:9c:89:7b:a2:16:c4:5e:58:64:8c:03:8d:
b9:02:7f:72:10:de:9a:28:7a:34:5c:10:66:73:ef:
10:df:dd:69:b9:2f:56:a0:a2:17:3e:49:26:26:c2:
66:50:78:94:ba:94:e3:3d:12:87:d0:2b:6b:86:8b:
75:4c:2c:55:5a:ed:fc:b0:65:6e:e8:d9:5d:a1:35:
ae:01:6d:fd:d3:bd:ba:dd:0a:b7:a3:c2:10:04:c0:
d5:d2:e0:5c:16:1e:45:60:a7:45:07:37:ad:f1:56:
f4:b5:b7:4b:d6:38:fe:92:d4:36:7b:95:52:e7:eb:
15:b3:5c:3d:20:f9:ec:85:4e:9f:6c:c2:74:7f:ca:
3b:ab:c0:5a:89:96:ca:26:81:5c:0f:9d:4e:81:e6:
aa:1f:7d:75:d8:fe:10:74:15:ac:b8:28:25:f1:f7:
00:22:f5:f8:65:dc:7a:3f:ae:8a:4d:2f:60:89:e2:
dc:88:92:98:fa:33:ae:a8:0f:56:88:f3:8b:11:1e:
62:c6:35:15:08:88:1a:78:09:9b:e3:07:23:12:c2:
75:b0:36:74:af:88:a5:32:88:a5:e7:02:a3:5e:62:
d9:5c:d8:17:f5:54:4c:3d:0e:7b:ca:f9:24:47:80:
53:37:ed:bb:1d:4c:ff:76:84:47:ff:be:99:3f:b2:
6c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:BC:B6:E1:A2:FB:53:84:1C:5B:F5:0A:A1:D3:77:51:7C:F1:D6:60
X509v3 Authority Key Identifier:
keyid:00:0E:7B:7E:BF:54:3F:37:AC:F1:13:75:D2:84:62:A8:D3:88:4A:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/000E7B7EBF543F37ACF11375D28462A8D3884A2C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/000E7B7EBF543F37ACF11375D28462A8D3884A2C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/000E7B7EBF543F37ACF11375D28462A8D3884A2C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:5b:1d:e4:7c:84:47:9a:7c:4d:a4:73:f0:ae:42:45:60:3d:
5a:e7:68:64:67:f0:3e:78:3c:34:08:91:cd:1a:8c:40:74:94:
da:f8:3e:3f:91:cf:55:23:6c:91:fc:56:0a:de:59:3e:4a:35:
7d:18:83:c3:29:8f:02:bc:38:83:f1:c7:d8:cc:bf:9c:ed:10:
76:f1:a1:77:6d:32:f6:e5:e6:35:de:6d:6e:91:c7:85:73:a9:
e1:52:ce:fe:03:9d:1e:1e:dd:f8:da:30:d1:82:1d:bb:fb:8b:
19:d1:1b:f9:79:87:9b:9d:73:6b:5f:f7:59:70:a9:cf:69:c8:
d4:8f:9a:a5:d3:a0:47:69:ec:30:bc:fd:24:52:12:75:c3:53:
3f:25:46:2d:94:ac:1a:52:04:3f:3f:a5:85:30:04:91:8c:e9:
52:e6:ba:81:0d:67:e0:9a:3b:c6:6c:2e:a1:7d:55:a0:2c:a5:
68:bd:8b:9b:92:43:d9:06:3c:1c:42:da:9f:77:e7:2f:ff:81:
28:ee:ae:b5:a5:d5:10:b4:64:bd:83:7a:12:12:0d:7a:e7:9a:
d0:25:d4:3d:90:0c:9f:96:b1:e5:7d:bf:79:ac:b7:b3:4e:bf:
0f:ef:0a:06:df:21:6c:a2:45:76:d5:07:ad:15:4a:62:41:ee:
a3:35:89:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:02:09 2026 by rpki-client