
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/2EB8CBE7A479277AC03EE80F365DD883BE38DD88.mft
File: 2EB8CBE7A479277AC03EE80F365DD883BE38DD88.mft (raw, json)
Hash identifier: b+fbrXsT3ErqTy7c3ues9O4E2UbmN0Dkgipj2tEvmrE=
Subject key identifier: 2A:5B:F9:8D:C3:08:64:CB:EE:8D:FE:F6:81:4D:D1:8F:97:08:A1:21
Authority key identifier: 2E:B8:CB:E7:A4:79:27:7A:C0:3E:E8:0F:36:5D:D8:83:BE:38:DD:88
Certificate issuer: /CN=2EB8CBE7A479277AC03EE80F365DD883BE38DD88
Certificate serial: 7024ABC9DA7039DB20FB45A51E028EDB334E4C8E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2EB8CBE7A479277AC03EE80F365DD883BE38DD88.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/2EB8CBE7A479277AC03EE80F365DD883BE38DD88.mft
Manifest number: 93
Signing time: Wed 19 Aug 2026 08:23:58 +0000
Manifest this update: Wed 19 Aug 2026 08:18:58 +0000
Manifest next update: Thu 20 Aug 2026 11:10:58 +0000
Files and hashes: 1: 3130332e3136362e362e302f32332d3234203d3e203137393935.roa (hash: BwjnFjz5sFQQdxCMf3i5N8Aax7h3Sveq3upFP+p+HDs=)
2: 2EB8CBE7A479277AC03EE80F365DD883BE38DD88.crl (hash: VModrUmIjCmpkoqPrEDS6JIdHq6d32NcT9Bt3wTki3U=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/2EB8CBE7A479277AC03EE80F365DD883BE38DD88.crl
rsync://rpki-rsync.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/2EB8CBE7A479277AC03EE80F365DD883BE38DD88.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2EB8CBE7A479277AC03EE80F365DD883BE38DD88.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 20 Aug 2026 11:10:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:24:ab:c9:da:70:39:db:20:fb:45:a5:1e:02:8e:db:33:4e:4c:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2EB8CBE7A479277AC03EE80F365DD883BE38DD88
Validity
Not Before: Aug 19 08:18:58 2026 GMT
Not After : Aug 20 11:10:58 2026 GMT
Subject: CN=2A5BF98DC30864CBEE8DFEF6814DD18F9708A121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6c:4b:ee:c8:f8:f4:b3:6e:8e:d9:53:29:c2:
3a:c1:95:6a:c2:59:89:f4:b7:c5:a2:23:5a:61:8e:
24:84:e6:c4:62:12:a7:e8:2e:01:5b:36:58:d3:f0:
6e:f7:26:e0:1f:d4:14:65:24:12:12:7b:50:1e:49:
8d:38:ab:a2:e3:9e:f2:be:5b:70:70:0b:44:c5:2a:
c3:7a:d9:27:e8:f0:92:df:c2:db:f9:66:7f:82:92:
77:d4:42:b9:52:d5:39:19:ba:d7:cf:ce:aa:93:f7:
e1:ea:50:10:74:1f:d6:21:5a:88:b8:cd:bf:b8:68:
63:d9:09:c7:c7:de:19:23:2d:50:9e:f3:8c:7e:8d:
b4:3e:cf:f7:0a:18:6b:09:3f:e5:4e:a9:5e:37:48:
7c:82:e6:b1:c4:3b:3d:78:a1:31:e4:da:50:ec:4e:
98:93:d2:6e:43:59:4c:b5:a5:d6:e7:4a:2a:63:b7:
f1:e3:6c:49:f9:50:58:93:8e:28:fc:90:64:80:03:
2b:d1:e8:1d:1e:3c:fb:aa:b9:c2:64:e3:22:87:64:
ba:b9:18:0e:7b:82:e9:4a:2d:74:bb:3a:a1:90:bd:
10:58:a0:30:0a:74:ba:29:ed:a3:71:96:ca:6a:76:
2d:a1:59:08:8d:3e:3b:95:39:17:3e:70:72:9d:e1:
0a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:5B:F9:8D:C3:08:64:CB:EE:8D:FE:F6:81:4D:D1:8F:97:08:A1:21
X509v3 Authority Key Identifier:
keyid:2E:B8:CB:E7:A4:79:27:7A:C0:3E:E8:0F:36:5D:D8:83:BE:38:DD:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/2EB8CBE7A479277AC03EE80F365DD883BE38DD88.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2EB8CBE7A479277AC03EE80F365DD883BE38DD88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/2EB8CBE7A479277AC03EE80F365DD883BE38DD88.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:fa:a0:b8:e0:a2:c1:38:16:7c:92:e5:ff:e4:6d:7e:2b:9b:
06:27:84:43:1c:a7:f2:6c:8f:19:7c:25:5e:28:94:4b:47:78:
63:94:4c:e1:68:82:b5:d3:b0:01:41:91:63:8d:b9:58:3c:bd:
27:4d:e9:c3:d4:6f:b3:e0:1c:eb:e7:dc:9b:56:d0:73:68:d4:
a3:f2:48:c5:f2:76:68:ff:b6:72:f4:8a:97:26:7b:ad:20:4b:
9e:af:48:90:ce:45:05:ee:a7:d8:e4:e7:81:50:b0:cb:22:d3:
21:6f:b4:a9:b1:66:81:51:1f:2a:fe:dc:35:a1:35:46:23:fb:
03:23:a5:1a:65:3c:f7:9b:12:ba:c1:29:26:01:08:5a:27:1a:
8b:2a:2f:3d:37:9b:71:09:b4:d6:75:f6:02:3d:9a:03:a3:76:
7f:5b:89:3f:cc:12:ad:f5:24:5b:e8:3e:42:15:cd:84:ae:23:
78:f3:ab:08:d9:f0:98:51:b8:8f:94:9c:c5:91:91:43:dc:2f:
ac:02:4a:19:74:64:8c:6b:ed:08:0c:9d:b4:e6:8e:0c:70:5e:
7c:2f:4e:dc:88:5f:43:bb:9b:4d:31:3f:82:e9:1d:1f:c9:50:
1b:9f:34:cd:a1:97:08:ad:44:a1:e2:c5:02:4c:6c:8b:dc:4a:
42:7c:45:1b
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUcCSrydpwOdsg+0WlHgKO2zNOTI4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkVCOENCRTdBNDc5Mjc3QUMwM0VFODBGMzY1REQ4ODNC
RTM4REQ4ODAeFw0yNjA4MTkwODE4NThaFw0yNjA4MjAxMTEwNThaMDMxMTAvBgNV
BAMTKDJBNUJGOThEQzMwODY0Q0JFRThERkVGNjgxNEREMThGOTcwOEExMjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtbEvuyPj0s26O2VMpwjrBlWrC
WYn0t8WiI1phjiSE5sRiEqfoLgFbNljT8G73JuAf1BRlJBISe1AeSY04q6LjnvK+
W3BwC0TFKsN62Sfo8JLfwtv5Zn+CknfUQrlS1TkZutfPzqqT9+HqUBB0H9YhWoi4
zb+4aGPZCcfH3hkjLVCe84x+jbQ+z/cKGGsJP+VOqV43SHyC5rHEOz14oTHk2lDs
TpiT0m5DWUy1pdbnSipjt/HjbEn5UFiTjij8kGSAAyvR6B0ePPuqucJk4yKHZLq5
GA57gulKLXS7OqGQvRBYoDAKdLop7aNxlspqdi2hWQiNPjuVORc+cHKd4QqBAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUKlv5jcMIZMvujf72gU3Rj5cIoSEwHwYDVR0j
BBgwFoAULrjL56R5J3rAPugPNl3Yg7443YgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZGRiOTJlODktOTJkNS00MDY0LTk1MTEtMDY3ZTM1MzY3OWNlLzAvMkVCOENCRTdB
NDc5Mjc3QUMwM0VFODBGMzY1REQ4ODNCRTM4REQ4OC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8yRUI4Q0JFN0E0NzkyNzdBQzAzRUU4MEYzNjVERDg4M0JFMzhE
RDg4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGRiOTJlODktOTJkNS00MDY0LTk1
MTEtMDY3ZTM1MzY3OWNlLzAvMkVCOENCRTdBNDc5Mjc3QUMwM0VFODBGMzY1REQ4
ODNCRTM4REQ4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAK/6oLjgosE4FnyS5f/kbX4rmwYnhEMcp/Js
jxl8JV4olEtHeGOUTOFogrXTsAFBkWONuVg8vSdN6cPUb7PgHOvn3JtW0HNo1KPy
SMXydmj/tnL0ipcme60gS56vSJDORQXup9jk54FQsMsi0yFvtKmxZoFRHyr+3DWh
NUYj+wMjpRplPPebErrBKSYBCFonGosqLz03m3EJtNZ19gI9mgOjdn9biT/MEq31
JFvoPkIVzYSuI3jzqwjZ8JhRuI+UnMWRkUPcL6wCShl0ZIxr7QgMnbTmjgxwXnwv
TtyIX0O7m00xP4LpHR/JUBufNM2hlwitRKHixQJMbIvcSkJ8RRs=
-----END CERTIFICATE-----
Generated at Wed Aug 19 16:07:02 2026 by rpki-client