
$ rpki-client -vvf rpki-rsync.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/2EAB22DEDA17C8633520C765C1BECE6852B8BD70.mft
File: 2EAB22DEDA17C8633520C765C1BECE6852B8BD70.mft (raw, json)
Hash identifier: 0+aQG7Y2Ad/CezCvwc4Bs1O5YmKCwl/AhfjA/6aveHs=
Subject key identifier: C9:31:E4:F0:DB:4C:AB:EC:C2:0F:67:EB:46:E8:E3:1B:10:3A:21:B7
Authority key identifier: 2E:AB:22:DE:DA:17:C8:63:35:20:C7:65:C1:BE:CE:68:52:B8:BD:70
Certificate issuer: /CN=2EAB22DEDA17C8633520C765C1BECE6852B8BD70
Certificate serial: 2D49CDA494220724A702E1CD9EC68FFD099F38D0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2EAB22DEDA17C8633520C765C1BECE6852B8BD70.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/2EAB22DEDA17C8633520C765C1BECE6852B8BD70.mft
Manifest number: 42
Signing time: Sat 20 Jun 2026 02:38:00 +0000
Manifest this update: Sat 20 Jun 2026 02:33:00 +0000
Manifest next update: Sun 21 Jun 2026 05:18:00 +0000
Files and hashes: 1: 323430343a326363303a35343a3a2f34362d3436203d3e20313331373336.roa (hash: R7p8u3fUD9Q1PWm/nzBs05bZYIMNm4aJaBgF+3K7/6A=)
2: 323430343a326363303a34343a3a2f34362d3436203d3e20313331373336.roa (hash: GR4L5FJqVS9TJ+dvaa8HynQA+y7YhiRBbKDogiUCsq4=)
3: 323430343a326363303a34383a3a2f34362d3436203d3e20313331373336.roa (hash: jZfpgRC0d5fkEjm8vD7qc9gZsnKZQYBh0EboO+Uho7s=)
4: 2EAB22DEDA17C8633520C765C1BECE6852B8BD70.crl (hash: XirF7xxJaAzcMrHYtsEuKDR30dphcA8+yL66FKlVrKY=)
5: 323430343a326363303a34303a3a2f34362d3436203d3e20313331373336.roa (hash: xUpoxjFUHIIvNkT92mjiWI0plg15apjL+jPNvQQ2Uk8=)
6: 323430343a326363303a32303a3a2f34332d3433203d3e20313331373336.roa (hash: fToGnwAHAJ5VtIANKumAt4uzlSvc7R1/Zv4oJQS4kF0=)
7: 323430343a326363303a35383a3a2f34362d3436203d3e20313331373336.roa (hash: 2ePu3EHR90dClUt0r5HRZza+Dx4B+Kag1aBuSmuBj9s=)
8: 3130332e3133322e31342e302f32342d3234203d3e20313331373336.roa (hash: HJc5JvMy8GHohXvfOoaZGX6TD+10pfnhOdLgXA7YFDo=)
9: 3130332e3133322e31332e302f32342d3234203d3e20313331373336.roa (hash: NS29Duq3Ad0Oay5mRumCSue0EKVMXVW+d3uV6la1Mk4=)
10: 3130332e3133322e31352e302f32342d3234203d3e20313331373336.roa (hash: dpRjxkyvMZSuMwoiOFiEbs0aVfBM9F5a6WoDjj2reGk=)
11: 323430343a326363303a34633a3a2f34362d3436203d3e20313331373336.roa (hash: cS+IrgZpY9aClZBoWCUDEv2Phmt7SwlOezLlcCoBSPI=)
12: 3130332e3133322e31322e302f32342d3234203d3e20313331373336.roa (hash: VaVs+XiSWxs1hEguef/hHo/bNFA4CcDh7KZrSmxpBag=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/2EAB22DEDA17C8633520C765C1BECE6852B8BD70.crl
rsync://rpki-rsync.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/2EAB22DEDA17C8633520C765C1BECE6852B8BD70.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2EAB22DEDA17C8633520C765C1BECE6852B8BD70.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 21 Jun 2026 05:18:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:49:cd:a4:94:22:07:24:a7:02:e1:cd:9e:c6:8f:fd:09:9f:38:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2EAB22DEDA17C8633520C765C1BECE6852B8BD70
Validity
Not Before: Jun 20 02:33:00 2026 GMT
Not After : Jun 21 05:18:00 2026 GMT
Subject: CN=C931E4F0DB4CABECC20F67EB46E8E31B103A21B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3d:78:50:ba:a4:be:60:e0:6f:10:fe:58:f6:
a1:9c:16:f2:f6:73:7d:e9:a2:bc:fc:c0:c1:da:74:
c7:b1:a8:c6:c1:a1:63:7e:ec:81:7c:2a:13:6b:43:
e8:a4:08:a5:29:06:52:d9:1a:7b:6f:dc:19:ea:f3:
60:15:76:8d:59:50:ff:39:8c:1f:a3:2a:f8:6d:ea:
33:92:e3:e2:9d:74:73:0d:7c:57:60:7c:92:77:89:
f0:21:69:53:dd:0e:66:31:1a:3c:23:c9:ed:91:f2:
f7:b7:fa:29:14:21:f4:53:e8:7a:2c:65:91:d2:a4:
07:2a:c5:79:71:2d:38:d6:aa:3b:11:c5:a5:2b:31:
94:13:3f:19:b1:b3:e2:ec:e0:bd:d9:d2:24:bf:11:
68:f8:25:20:0c:e0:ed:aa:03:cc:8b:c8:99:51:3e:
09:eb:2e:41:b3:44:77:bf:22:b7:52:22:61:df:ad:
24:2a:86:c3:dc:01:0b:00:9e:55:19:f9:3e:87:c2:
6e:db:89:ae:42:77:fe:4f:2b:82:f1:c6:10:b9:e8:
2b:41:78:47:03:ba:c2:c8:70:ec:e8:7b:7f:d7:1b:
31:bf:42:c3:d5:f3:53:19:64:c8:4b:26:e7:62:b3:
53:8b:56:47:18:f1:21:5c:da:69:a6:c4:29:ab:7b:
b8:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:31:E4:F0:DB:4C:AB:EC:C2:0F:67:EB:46:E8:E3:1B:10:3A:21:B7
X509v3 Authority Key Identifier:
keyid:2E:AB:22:DE:DA:17:C8:63:35:20:C7:65:C1:BE:CE:68:52:B8:BD:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/2EAB22DEDA17C8633520C765C1BECE6852B8BD70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2EAB22DEDA17C8633520C765C1BECE6852B8BD70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/2EAB22DEDA17C8633520C765C1BECE6852B8BD70.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:f2:93:c9:61:22:61:5b:05:6a:99:96:a0:d7:ed:4e:b6:fb:
42:ef:f1:d0:79:2a:de:e2:99:07:ab:ef:2a:77:10:ea:b8:30:
56:63:ce:da:c2:21:c3:bd:5e:53:39:01:4f:4e:e0:1f:e8:04:
61:ee:f9:36:de:1a:cc:cf:a8:b5:d7:55:f4:72:80:29:2b:fe:
39:f5:e2:e9:c6:a2:ab:2a:19:1c:1d:26:36:51:31:c0:da:1e:
03:98:70:ad:dc:b0:84:28:56:49:a6:f3:4a:cd:ad:d4:9a:6b:
f9:fc:c8:0b:6c:14:34:23:e8:dd:0e:f5:b1:5a:b7:24:d1:8b:
7d:68:d7:e0:a7:f2:77:27:25:83:08:45:74:1b:05:eb:3e:21:
4c:11:fb:96:e1:fa:2f:fb:00:84:2e:65:73:98:2f:da:05:c7:
98:e6:32:42:1e:10:22:1e:98:56:64:d1:d3:34:99:de:0b:22:
72:21:44:dc:a8:fd:6c:13:da:7a:34:39:c6:fb:de:be:f1:b5:
81:26:94:d3:12:52:33:53:96:c8:ae:a2:e2:88:f7:a0:f4:76:
4e:80:78:23:f1:29:ab:ad:6e:c7:80:03:84:1d:f0:77:83:97:
0c:3b:14:db:2a:7e:13:de:2a:c7:d6:89:b1:02:d4:02:3c:59:
4f:31:b3:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 08:59:24 2026 by rpki-client