
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c883fe75-91e4-4989-bc5e-6a26082dc334/0/ECE455F1182576E06A3CB3EC6393E193B5C28B83.mft
File: ECE455F1182576E06A3CB3EC6393E193B5C28B83.mft (raw, json)
Hash identifier: 7gnWXuiscTgt4wdWowG9xsTnm58fOE4w+1z7XN8bAvY=
Subject key identifier: 01:3E:BA:21:41:35:B3:FA:40:42:91:73:72:77:96:AA:1F:91:B0:3A
Authority key identifier: EC:E4:55:F1:18:25:76:E0:6A:3C:B3:EC:63:93:E1:93:B5:C2:8B:83
Certificate issuer: /CN=ECE455F1182576E06A3CB3EC6393E193B5C28B83
Certificate serial: 5DA27654C95DFCE81518A950BAF820D31C292058
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ECE455F1182576E06A3CB3EC6393E193B5C28B83.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c883fe75-91e4-4989-bc5e-6a26082dc334/0/ECE455F1182576E06A3CB3EC6393E193B5C28B83.mft
Manifest number: F0
Signing time: Wed 28 Oct 2026 14:33:16 +0000
Manifest this update: Wed 28 Oct 2026 14:28:16 +0000
Manifest next update: Thu 29 Oct 2026 15:00:16 +0000
Files and hashes: 1: ECE455F1182576E06A3CB3EC6393E193B5C28B83.crl (hash: wMmGW61lTRdhCibmAJP9s2Z4WJ1Z2LvrusaGHXjOrwo=)
2: 3130332e3139332e3134342e302f32332d3234203d3e203538383231.roa (hash: bdfb+GsmDl+t56+VeA32lX6LBYSedZIz5DSbvJygLVc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c883fe75-91e4-4989-bc5e-6a26082dc334/0/ECE455F1182576E06A3CB3EC6393E193B5C28B83.crl
rsync://rpki-rsync.idnic.net/repo/c883fe75-91e4-4989-bc5e-6a26082dc334/0/ECE455F1182576E06A3CB3EC6393E193B5C28B83.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ECE455F1182576E06A3CB3EC6393E193B5C28B83.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 29 Oct 2026 07:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:a2:76:54:c9:5d:fc:e8:15:18:a9:50:ba:f8:20:d3:1c:29:20:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ECE455F1182576E06A3CB3EC6393E193B5C28B83
Validity
Not Before: Oct 28 14:28:16 2026 GMT
Not After : Oct 29 15:00:16 2026 GMT
Subject: CN=013EBA214135B3FA40429173727796AA1F91B03A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5a:af:e5:28:43:a2:0a:c7:6d:45:be:13:70:
3a:fd:3b:eb:f1:ed:e5:33:0a:2e:28:a6:65:f0:8f:
04:4d:14:22:37:72:15:35:ab:56:b5:ee:2c:25:d3:
54:18:26:ac:69:76:89:f9:c2:7c:ca:38:9c:2a:c7:
33:ca:01:a3:0a:77:5c:13:ac:1d:96:55:81:81:09:
41:ef:a8:37:bf:a7:f8:60:84:e4:34:57:5a:38:e5:
02:58:5c:4b:11:d9:ef:86:d1:3f:c6:5b:77:3a:b6:
de:51:84:46:5a:1c:f5:cc:e1:73:62:82:c0:87:3a:
36:81:39:23:68:58:d2:6d:36:54:ae:96:62:d4:ab:
d8:8f:b5:c4:1f:b6:75:82:b8:4f:a8:d8:21:43:0b:
02:b1:c9:80:1a:fc:6c:05:e6:d4:45:53:95:23:b6:
df:fe:b6:b5:da:ff:f7:e4:dc:6a:a8:18:39:a3:57:
a7:8d:8b:3c:4d:97:ad:84:1b:7f:fa:cc:f6:6d:63:
9f:88:87:fa:ae:62:54:06:a7:ac:84:23:90:7b:53:
89:10:d3:13:87:86:0f:34:25:78:c7:14:3c:e1:3e:
3a:71:a5:a9:4a:11:74:d1:c6:c8:89:49:ea:13:fa:
eb:7f:be:b1:46:c6:31:9d:7f:79:c6:d6:84:a2:3d:
f1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:3E:BA:21:41:35:B3:FA:40:42:91:73:72:77:96:AA:1F:91:B0:3A
X509v3 Authority Key Identifier:
keyid:EC:E4:55:F1:18:25:76:E0:6A:3C:B3:EC:63:93:E1:93:B5:C2:8B:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c883fe75-91e4-4989-bc5e-6a26082dc334/0/ECE455F1182576E06A3CB3EC6393E193B5C28B83.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ECE455F1182576E06A3CB3EC6393E193B5C28B83.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c883fe75-91e4-4989-bc5e-6a26082dc334/0/ECE455F1182576E06A3CB3EC6393E193B5C28B83.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:48:23:58:a6:6a:03:ed:33:19:61:cb:ae:db:46:28:14:b2:
75:a4:56:f7:27:82:31:18:4b:e7:c0:9f:2e:c2:35:3e:28:9f:
7d:3f:31:78:e5:81:22:98:04:a4:11:75:79:3b:cf:2f:77:51:
a4:c0:5c:a9:e3:7f:8b:74:49:c2:b1:cc:c5:e5:60:a0:81:5e:
14:c7:71:ee:c1:d7:fe:50:b8:69:7e:92:5a:1c:c0:42:72:e3:
10:70:bf:9a:5e:8e:a9:49:7a:c7:41:bc:9a:98:55:b6:2c:0c:
2f:80:6f:ce:b3:84:68:71:36:0e:34:19:12:bf:cc:68:0a:12:
a5:70:1c:62:c8:8b:36:69:ae:00:70:da:62:b9:d1:b8:c0:4f:
eb:db:23:c9:bf:e4:ff:8b:33:f0:40:b4:fe:89:6f:d8:a3:c7:
11:52:8c:33:0a:1b:f3:5e:33:df:da:12:74:a0:9c:d9:c3:65:
9c:26:7b:1e:18:68:10:dc:87:a6:74:1b:ef:77:a5:42:5e:94:
4a:96:bb:82:2e:d8:67:48:9e:45:bb:a2:8f:47:6c:dc:2d:1f:
6e:b7:90:f4:80:8c:eb:19:ca:25:e7:fb:3c:a4:73:d6:e4:34:
34:9f:75:00:59:9b:fc:dd:2e:e3:dd:7e:f0:df:fc:67:77:fe:
0d:38:97:a1
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUXaJ2VMld/OgVGKlQuvgg0xwpIFgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUNFNDU1RjExODI1NzZFMDZBM0NCM0VDNjM5M0UxOTNC
NUMyOEI4MzAeFw0yNjEwMjgxNDI4MTZaFw0yNjEwMjkxNTAwMTZaMDMxMTAvBgNV
BAMTKDAxM0VCQTIxNDEzNUIzRkE0MDQyOTE3MzcyNzc5NkFBMUY5MUIwM0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCWq/lKEOiCsdtRb4TcDr9O+vx
7eUzCi4opmXwjwRNFCI3chU1q1a17iwl01QYJqxpdon5wnzKOJwqxzPKAaMKd1wT
rB2WVYGBCUHvqDe/p/hghOQ0V1o45QJYXEsR2e+G0T/GW3c6tt5RhEZaHPXM4XNi
gsCHOjaBOSNoWNJtNlSulmLUq9iPtcQftnWCuE+o2CFDCwKxyYAa/GwF5tRFU5Uj
tt/+trXa//fk3GqoGDmjV6eNizxNl62EG3/6zPZtY5+Ih/quYlQGp6yEI5B7U4kQ
0xOHhg80JXjHFDzhPjpxpalKEXTRxsiJSeoT+ut/vrFGxjGdf3nG1oSiPfH3AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUAT66IUE1s/pAQpFzcneWqh+RsDowHwYDVR0j
BBgwFoAU7ORV8RglduBqPLPsY5Phk7XCi4MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
Yzg4M2ZlNzUtOTFlNC00OTg5LWJjNWUtNmEyNjA4MmRjMzM0LzAvRUNFNDU1RjEx
ODI1NzZFMDZBM0NCM0VDNjM5M0UxOTNCNUMyOEI4My5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FQ0U0NTVGMTE4MjU3NkUwNkEzQ0IzRUM2MzkzRTE5M0I1QzI4
QjgzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzg4M2ZlNzUtOTFlNC00OTg5LWJj
NWUtNmEyNjA4MmRjMzM0LzAvRUNFNDU1RjExODI1NzZFMDZBM0NCM0VDNjM5M0Ux
OTNCNUMyOEI4My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHNII1imagPtMxlhy67bRigUsnWkVvcngjEY
S+fAny7CNT4on30/MXjlgSKYBKQRdXk7zy93UaTAXKnjf4t0ScKxzMXlYKCBXhTH
ce7B1/5QuGl+klocwEJy4xBwv5pejqlJesdBvJqYVbYsDC+Ab86zhGhxNg40GRK/
zGgKEqVwHGLIizZprgBw2mK50bjAT+vbI8m/5P+LM/BAtP6Jb9ijxxFSjDMKG/Ne
M9/aEnSgnNnDZZwmex4YaBDch6Z0G+93pUJelEqWu4Iu2GdInkW7oo9HbNwtH263
kPSAjOsZyiXn+zykc9bkNDSfdQBZm/zdLuPdfvDf/Gd3/g04l6E=
-----END CERTIFICATE-----
Generated at Wed Oct 28 16:30:24 2026 by rpki-client