
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/EC464ACDD6858B613E13B13344BB988E92418A08.mft
File: EC464ACDD6858B613E13B13344BB988E92418A08.mft (raw, json)
Hash identifier: 5XCZ0qmENGJDr8zqf5nZInGHavM81AC0pg7uQCYzbfc=
Subject key identifier: 36:6C:A1:72:AB:BC:96:C8:CC:FF:D6:73:49:C2:EB:CF:98:DB:8F:17
Authority key identifier: EC:46:4A:CD:D6:85:8B:61:3E:13:B1:33:44:BB:98:8E:92:41:8A:08
Certificate issuer: /CN=EC464ACDD6858B613E13B13344BB988E92418A08
Certificate serial: 43CB37C8A45643B2F71B8113E431222E25BE6526
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EC464ACDD6858B613E13B13344BB988E92418A08.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/EC464ACDD6858B613E13B13344BB988E92418A08.mft
Manifest number: E9
Signing time: Sat 24 Oct 2026 03:02:52 +0000
Manifest this update: Sat 24 Oct 2026 02:57:52 +0000
Manifest next update: Sun 25 Oct 2026 04:48:52 +0000
Files and hashes: 1: 3230332e39362e3232382e302f32332d3234203d3e20313334363535.roa (hash: qct805YAJVrMqEwmp7GMGrHlEnZ8CXcTrUlU+oMYiDE=)
2: EC464ACDD6858B613E13B13344BB988E92418A08.crl (hash: yAc46j0UaOsQJs2C48ahH8V989oOafz8MDwHH4OZpCQ=)
3: 323430343a353938303a3a2f33322d3332203d3e20313334363535.roa (hash: 6uEfVOnDlCA/pNIFT5bC9JCmVynI5FIoh7TLhoyhIys=)
4: 3130332e3234372e3231312e302f32342d3234203d3e20313334363535.roa (hash: 729mihHGdMx9/AKOob41I1TKRP4K3/svpHuBRoC4uAA=)
5: 3130332e3230392e3138342e302f32322d3234203d3e20313334363535.roa (hash: LvmXxn8tofzUOQD7Y8MBoEUbiMdg2W3vi+Y9WTB64Ck=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/EC464ACDD6858B613E13B13344BB988E92418A08.crl
rsync://rpki-rsync.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/EC464ACDD6858B613E13B13344BB988E92418A08.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EC464ACDD6858B613E13B13344BB988E92418A08.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Oct 2026 03:03:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:cb:37:c8:a4:56:43:b2:f7:1b:81:13:e4:31:22:2e:25:be:65:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC464ACDD6858B613E13B13344BB988E92418A08
Validity
Not Before: Oct 24 02:57:52 2026 GMT
Not After : Oct 25 04:48:52 2026 GMT
Subject: CN=366CA172ABBC96C8CCFFD67349C2EBCF98DB8F17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e9:65:05:57:6a:77:0e:5e:3a:25:e8:22:b8:
28:9b:2e:bb:43:f9:e0:e7:21:31:99:23:0d:d3:89:
9e:df:8c:0c:1d:5f:cb:19:9f:ae:f4:c9:4f:6c:43:
e0:d2:4c:5a:00:1c:fc:54:c3:34:97:15:33:17:98:
d0:25:87:c5:03:da:d7:1b:17:f0:01:c2:ee:d6:6e:
5c:c2:dc:56:69:fc:cd:a9:45:ca:4b:53:ce:8c:f0:
e3:aa:38:1f:f4:32:42:2e:94:49:98:79:1a:e9:f2:
08:c7:69:89:69:f6:9a:cb:c0:9e:a9:08:9b:ef:b2:
7c:5b:ff:6e:2c:5c:7a:e7:08:67:55:90:38:53:30:
1d:21:2e:b8:b5:b2:dd:96:b7:9d:35:a0:26:6e:eb:
27:98:2b:06:0a:57:19:4a:27:8f:37:8a:e1:55:46:
b7:24:47:bd:ab:8a:01:86:ac:ed:a5:2d:8e:53:9b:
e5:da:cf:a6:47:57:35:7b:ff:04:79:cb:0a:02:f9:
d4:c8:71:d7:f1:0d:12:20:2e:2d:b4:a2:58:c6:b2:
d5:e1:79:c0:12:04:04:7e:d9:9f:ad:b5:1b:81:09:
ee:8f:34:da:9c:9c:0e:20:ec:c7:83:5f:60:c1:59:
e3:0e:fb:45:2f:92:37:fe:d2:89:37:a4:0c:b2:0b:
bc:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:6C:A1:72:AB:BC:96:C8:CC:FF:D6:73:49:C2:EB:CF:98:DB:8F:17
X509v3 Authority Key Identifier:
keyid:EC:46:4A:CD:D6:85:8B:61:3E:13:B1:33:44:BB:98:8E:92:41:8A:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/EC464ACDD6858B613E13B13344BB988E92418A08.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EC464ACDD6858B613E13B13344BB988E92418A08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/EC464ACDD6858B613E13B13344BB988E92418A08.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:b6:54:bc:71:cf:28:2f:fa:5a:d2:73:ec:a8:9c:50:67:0d:
ba:71:e0:14:6f:02:cc:d0:f6:6f:92:f4:dc:11:61:67:ce:03:
2c:d1:7b:37:b5:09:da:4f:5d:aa:de:4d:d4:2d:d2:e8:b7:c8:
6b:ee:40:13:ff:4f:aa:d6:46:e4:c3:09:7b:16:db:92:17:80:
29:4e:ab:ea:16:f6:93:a0:8c:ff:61:b3:42:fa:60:c4:8a:12:
d3:59:ca:e5:04:a3:6a:42:74:5d:97:ff:7a:1b:64:0b:18:50:
08:3c:d6:43:d1:b8:b0:bb:08:f7:3b:cd:82:a2:fa:54:cb:78:
ff:14:15:83:30:b4:67:c7:6e:f2:a8:f2:cd:96:89:8f:8a:e2:
ad:bb:4f:72:a7:d2:91:dd:ce:e9:3f:a9:7a:b1:26:27:b8:30:
fe:15:a1:d5:49:28:c8:0d:68:36:2f:a8:81:ad:af:19:4e:50:
c8:3c:da:c5:0b:f9:5c:a8:4b:51:ec:53:03:f8:0e:37:86:d3:
41:ae:fc:32:fa:09:cc:da:9a:01:ab:78:96:98:7c:9d:53:99:
a2:8f:0f:52:fa:0f:9e:6d:c9:f9:35:37:48:8d:72:30:71:39:
1f:1c:81:37:6a:91:9b:b3:df:91:c9:f7:d0:7b:48:f5:44:a7:
3f:17:a9:ce
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUQ8s3yKRWQ7L3G4ET5DEiLiW+ZSYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUM0NjRBQ0RENjg1OEI2MTNFMTNCMTMzNDRCQjk4OEU5
MjQxOEEwODAeFw0yNjEwMjQwMjU3NTJaFw0yNjEwMjUwNDQ4NTJaMDMxMTAvBgNV
BAMTKDM2NkNBMTcyQUJCQzk2QzhDQ0ZGRDY3MzQ5QzJFQkNGOThEQjhGMTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx6WUFV2p3Dl46JegiuCibLrtD
+eDnITGZIw3TiZ7fjAwdX8sZn670yU9sQ+DSTFoAHPxUwzSXFTMXmNAlh8UD2tcb
F/ABwu7WblzC3FZp/M2pRcpLU86M8OOqOB/0MkIulEmYeRrp8gjHaYlp9prLwJ6p
CJvvsnxb/24sXHrnCGdVkDhTMB0hLri1st2Wt501oCZu6yeYKwYKVxlKJ483iuFV
RrckR72rigGGrO2lLY5Tm+Xaz6ZHVzV7/wR5ywoC+dTIcdfxDRIgLi20oljGstXh
ecASBAR+2Z+ttRuBCe6PNNqcnA4g7MeDX2DBWeMO+0Uvkjf+0ok3pAyyC7wBAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUNmyhcqu8lsjM/9ZzScLrz5jbjxcwHwYDVR0j
BBgwFoAU7EZKzdaFi2E+E7EzRLuYjpJBiggwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NjkzOWRiZjEtMzA3NS00NTE5LWJhOTAtY2VlOGQzOTc5ZmNkLzAvRUM0NjRBQ0RE
Njg1OEI2MTNFMTNCMTMzNDRCQjk4OEU5MjQxOEEwOC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FQzQ2NEFDREQ2ODU4QjYxM0UxM0IxMzM0NEJCOTg4RTkyNDE4
QTA4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjkzOWRiZjEtMzA3NS00NTE5LWJh
OTAtY2VlOGQzOTc5ZmNkLzAvRUM0NjRBQ0RENjg1OEI2MTNFMTNCMTMzNDRCQjk4
OEU5MjQxOEEwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBACK2VLxxzygv+lrSc+yonFBnDbpx4BRvAszQ
9m+S9NwRYWfOAyzReze1CdpPXareTdQt0ui3yGvuQBP/T6rWRuTDCXsW25IXgClO
q+oW9pOgjP9hs0L6YMSKEtNZyuUEo2pCdF2X/3obZAsYUAg81kPRuLC7CPc7zYKi
+lTLeP8UFYMwtGfHbvKo8s2WiY+K4q27T3Kn0pHdzuk/qXqxJie4MP4VodVJKMgN
aDYvqIGtrxlOUMg82sUL+VyoS1HsUwP4DjeG00Gu/DL6CczamgGreJaYfJ1TmaKP
D1L6D55tyfk1N0iNcjBxOR8cgTdqkZuz35HJ99B7SPVEpz8Xqc4=
-----END CERTIFICATE-----
Generated at Sat Oct 24 20:46:56 2026 by rpki-client