
$ rpki-client -vvf repo-rpki.idnic.net/repo/31b433a5-72b1-4653-99d3-9469c8b8b762/0/EAD173629E4F955F44EC781A3739775E738ACCFD.mft
File: EAD173629E4F955F44EC781A3739775E738ACCFD.mft (raw, json)
Hash identifier: 0Q7U3Okq4Ug/4GwlwIAcI2oggpqatt1qlRJxM2qr2BQ=
Subject key identifier: 1E:22:72:27:88:49:A8:E5:7B:FF:B7:7E:1A:36:D5:46:D9:9F:6A:9A
Authority key identifier: EA:D1:73:62:9E:4F:95:5F:44:EC:78:1A:37:39:77:5E:73:8A:CC:FD
Certificate issuer: /CN=EAD173629E4F955F44EC781A3739775E738ACCFD
Certificate serial: 64ED59F1B9A7A73A9B0A8D90A4AF5FE7A31E03E5
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EAD173629E4F955F44EC781A3739775E738ACCFD.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/31b433a5-72b1-4653-99d3-9469c8b8b762/0/EAD173629E4F955F44EC781A3739775E738ACCFD.mft
Manifest number: 0131
Signing time: Wed 25 Mar 2026 19:30:50 +0000
Manifest this update: Wed 25 Mar 2026 19:25:50 +0000
Manifest next update: Sat 28 Mar 2026 22:08:50 +0000
Files and hashes: 1: 3135372e36362e32392e302f32342d3234203d3e203539323831.roa (hash: TgXtz6oJv5efAvtzfgig61bBFIXryYgVRq0PKFmn7PM=)
2: EAD173629E4F955F44EC781A3739775E738ACCFD.crl (hash: Y53U8VyUk3ZAzHTiOLe2YiC5T8RAAIzc6jWJO8FgM6M=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/31b433a5-72b1-4653-99d3-9469c8b8b762/0/EAD173629E4F955F44EC781A3739775E738ACCFD.crl
rsync://repo-rpki.idnic.net/repo/31b433a5-72b1-4653-99d3-9469c8b8b762/0/EAD173629E4F955F44EC781A3739775E738ACCFD.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EAD173629E4F955F44EC781A3739775E738ACCFD.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 22:08:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:ed:59:f1:b9:a7:a7:3a:9b:0a:8d:90:a4:af:5f:e7:a3:1e:03:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EAD173629E4F955F44EC781A3739775E738ACCFD
Validity
Not Before: Mar 25 19:25:50 2026 GMT
Not After : Mar 28 22:08:50 2026 GMT
Subject: CN=1E2272278849A8E57BFFB77E1A36D546D99F6A9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d8:30:7b:41:74:8b:26:36:5b:59:c7:aa:f0:
03:0f:0e:9d:81:7f:38:da:21:29:9d:4d:0a:6d:65:
d6:5d:e8:79:e6:fd:8b:bd:ba:6c:7a:6a:36:00:b6:
40:03:26:da:5e:9d:d8:75:da:7c:ce:11:d7:ff:63:
42:63:d1:8e:9a:14:fe:e3:0d:39:10:ac:0e:6c:53:
4a:be:98:e9:c4:65:b7:1d:00:3b:2b:52:f0:bc:12:
07:0d:aa:2a:49:c6:d3:12:44:ea:cc:28:e7:92:02:
b7:50:fa:dd:70:68:0b:e8:c5:6b:7e:96:4e:92:ff:
19:ba:51:b9:54:a9:da:58:04:73:74:59:1b:2e:3b:
e4:a4:10:5d:ba:1c:3a:9c:e5:4a:4c:17:c0:bd:4e:
45:03:97:6f:84:94:e9:4a:c9:f1:9d:74:80:df:25:
70:76:0b:4e:de:8b:c7:eb:fd:a9:4a:31:07:00:59:
88:8a:1c:da:4e:c4:de:77:86:88:5a:99:42:5c:76:
02:12:5c:43:58:f0:f5:8b:90:76:8a:64:12:c9:a1:
8c:45:0a:b9:c0:3d:5f:9c:42:a5:46:54:5f:7f:01:
e6:0c:e4:db:b3:80:cf:a2:5d:25:e3:6e:67:47:e5:
59:17:30:d9:eb:55:aa:32:94:94:e9:43:25:67:4b:
4c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:22:72:27:88:49:A8:E5:7B:FF:B7:7E:1A:36:D5:46:D9:9F:6A:9A
X509v3 Authority Key Identifier:
keyid:EA:D1:73:62:9E:4F:95:5F:44:EC:78:1A:37:39:77:5E:73:8A:CC:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/31b433a5-72b1-4653-99d3-9469c8b8b762/0/EAD173629E4F955F44EC781A3739775E738ACCFD.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EAD173629E4F955F44EC781A3739775E738ACCFD.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/31b433a5-72b1-4653-99d3-9469c8b8b762/0/EAD173629E4F955F44EC781A3739775E738ACCFD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:3c:50:90:7e:be:82:b3:7c:17:11:b9:9f:db:e8:0e:f5:46:
87:b9:1b:48:c8:d8:5e:23:36:db:2c:e6:8f:28:b2:84:33:fe:
e4:02:0d:3f:6f:38:b0:79:bd:40:a6:8a:56:6c:e9:1a:34:9f:
fc:66:44:bd:7c:2a:0e:f0:72:b9:96:97:be:f1:09:5a:ea:34:
06:4d:bb:86:a5:e4:e1:ff:27:fd:7f:d4:90:1e:1a:af:c2:20:
36:ad:f0:1f:e2:0c:60:f7:31:de:5a:de:55:ac:af:b5:fa:d1:
28:51:8c:bb:de:e0:fc:e3:d3:6c:26:cb:55:6c:2c:66:df:0f:
a5:6a:06:2a:37:b6:84:54:67:6d:e4:3a:21:10:a1:05:af:78:
d1:19:84:fd:be:a5:9b:48:bb:94:80:52:90:33:f3:bb:12:ce:
3a:11:3b:ad:be:f3:8c:91:c3:12:ef:0b:91:92:39:09:ff:08:
65:be:d0:a5:f3:f9:fe:e9:fb:09:e9:05:c4:05:9a:f2:9a:76:
44:47:4b:ce:24:b4:38:77:7e:83:d3:14:10:7f:89:a1:ec:51:
54:57:66:b4:63:9a:5e:08:69:c6:b1:31:e5:23:69:64:54:a9:
a3:65:b2:13:2d:21:3f:53:24:50:ba:82:aa:f6:10:9f:fb:10:
fb:c0:1e:08
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUZO1Z8bmnpzqbCo2QpK9f56MeA+UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUFEMTczNjI5RTRGOTU1RjQ0RUM3ODFBMzczOTc3NUU3
MzhBQ0NGRDAeFw0yNjAzMjUxOTI1NTBaFw0yNjAzMjgyMjA4NTBaMDMxMTAvBgNV
BAMTKDFFMjI3MjI3ODg0OUE4RTU3QkZGQjc3RTFBMzZENTQ2RDk5RjZBOUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDj2DB7QXSLJjZbWceq8AMPDp2B
fzjaISmdTQptZdZd6Hnm/Yu9umx6ajYAtkADJtpendh12nzOEdf/Y0Jj0Y6aFP7j
DTkQrA5sU0q+mOnEZbcdADsrUvC8EgcNqipJxtMSROrMKOeSArdQ+t1waAvoxWt+
lk6S/xm6UblUqdpYBHN0WRsuO+SkEF26HDqc5UpMF8C9TkUDl2+ElOlKyfGddIDf
JXB2C07ei8fr/alKMQcAWYiKHNpOxN53hohamUJcdgISXENY8PWLkHaKZBLJoYxF
CrnAPV+cQqVGVF9/AeYM5NuzgM+iXSXjbmdH5VkXMNnrVaoylJTpQyVnS0ynAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUHiJyJ4hJqOV7/7d+GjbVRtmfapowHwYDVR0j
BBgwFoAU6tFzYp5PlV9E7HgaNzl3XnOKzP0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
MWI0MzNhNS03MmIxLTQ2NTMtOTlkMy05NDY5YzhiOGI3NjIvMC9FQUQxNzM2MjlF
NEY5NTVGNDRFQzc4MUEzNzM5Nzc1RTczOEFDQ0ZELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvRUFEMTczNjI5RTRGOTU1RjQ0RUM3ODFBMzczOTc3NUU3MzhB
Q0NGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzFiNDMzYTUtNzJiMS00NjUzLTk5
ZDMtOTQ2OWM4YjhiNzYyLzAvRUFEMTczNjI5RTRGOTU1RjQ0RUM3ODFBMzczOTc3
NUU3MzhBQ0NGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAB88UJB+voKzfBcRuZ/b6A71Roe5G0jI2F4j
Ntss5o8osoQz/uQCDT9vOLB5vUCmilZs6Ro0n/xmRL18Kg7wcrmWl77xCVrqNAZN
u4al5OH/J/1/1JAeGq/CIDat8B/iDGD3Md5a3lWsr7X60ShRjLve4Pzj02wmy1Vs
LGbfD6VqBio3toRUZ23kOiEQoQWveNEZhP2+pZtIu5SAUpAz87sSzjoRO62+84yR
wxLvC5GSOQn/CGW+0KXz+f7p+wnpBcQFmvKadkRHS84ktDh3foPTFBB/iaHsUVRX
ZrRjml4IacaxMeUjaWRUqaNlshMtIT9TJFC6gqr2EJ/7EPvAHgg=
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:48:58 2026 by rpki-client