
$ rpki-client -vvf repo-rpki.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.mft
File: EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.mft (raw, json)
Hash identifier: QJ1LrASSxBz1wxYYebuorX9UY1z/Lj16icjE0qWCwRM=
Subject key identifier: A0:B3:16:2F:80:3E:6D:54:51:08:C0:A0:6C:F6:7F:E3:4B:84:76:C6
Authority key identifier: ED:BD:84:5A:95:97:FE:C4:AD:90:03:0F:90:18:E4:B8:B6:3F:CC:77
Certificate issuer: /CN=EDBD845A9597FEC4AD90030F9018E4B8B63FCC77
Certificate serial: 1C3A3B0F10579B3D48626B9F6A4E2CD4B86C944D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.mft
Manifest number: 0563
Signing time: Thu 26 Mar 2026 01:52:08 +0000
Manifest this update: Thu 26 Mar 2026 01:47:08 +0000
Manifest next update: Sun 29 Mar 2026 07:39:08 +0000
Files and hashes: 1: 3130332e37312e3235352e302f32342d3234203d3e20313335343731.roa (hash: gIKkIGkZm7OxQ7k8KYXU1OguRf76El1DoB7NPk29hSo=)
2: 3130332e3133372e33372e302f32342d3234203d3e20313335343731.roa (hash: mC7pHV7NYsbpeeW0ZP+ibU3Ewbq2p4OfCkZ3LiVxhX4=)
3: EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.crl (hash: VPDBURE+WQrgzYv8uN558uTVGgB2EfbVDqIQ0zUqKFg=)
4: 323030313a6466343a6530303a3a2f34382d3438203d3e20313335343731.roa (hash: PpwdW1Sh67VcI29Rs6SsVeiTKG/TdkizTmZ0n4tpRMU=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.crl
rsync://repo-rpki.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 29 Mar 2026 07:39:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:3a:3b:0f:10:57:9b:3d:48:62:6b:9f:6a:4e:2c:d4:b8:6c:94:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EDBD845A9597FEC4AD90030F9018E4B8B63FCC77
Validity
Not Before: Mar 26 01:47:08 2026 GMT
Not After : Mar 29 07:39:08 2026 GMT
Subject: CN=A0B3162F803E6D545108C0A06CF67FE34B8476C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8b:08:0f:df:d7:54:2c:88:07:c0:44:cf:e8:
8f:60:a7:1a:45:aa:61:1f:e0:5e:82:57:f9:8e:6e:
74:4a:70:61:c8:83:09:3c:ef:72:2e:90:2d:d1:15:
79:89:51:6c:bf:1d:70:fc:48:18:d6:c0:5e:d6:e7:
23:d9:4b:bd:8c:d4:6e:a6:f3:07:86:87:31:41:d7:
33:55:32:8f:64:d2:35:77:4c:88:6d:06:a9:e4:5c:
80:45:2e:3b:2e:10:12:50:7d:32:1b:1c:fb:40:5b:
59:45:bd:00:45:c3:ec:16:2f:59:ea:b1:f1:3c:53:
b6:e4:f5:af:75:98:11:a3:e6:b6:62:e0:d7:31:ab:
23:2c:ba:4f:04:4f:8a:92:23:e8:3e:92:49:44:cc:
ab:92:ec:fa:5c:d1:d6:96:a4:a3:3c:68:de:6f:96:
30:a5:93:78:05:76:64:a0:9d:8a:2b:c6:0b:d4:20:
eb:cd:f4:ec:c4:a7:2f:77:26:5f:86:27:42:9c:5d:
b0:52:e0:b9:31:0a:9d:f3:16:a4:99:3d:21:50:e3:
d4:aa:2b:48:1c:bc:0e:e2:e2:6e:be:4d:e4:61:eb:
86:8d:50:7c:18:5d:5c:0d:b9:6a:28:27:61:18:57:
f9:66:3e:9e:65:a7:0d:c1:7d:0c:1c:2a:2b:3e:aa:
00:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:B3:16:2F:80:3E:6D:54:51:08:C0:A0:6C:F6:7F:E3:4B:84:76:C6
X509v3 Authority Key Identifier:
keyid:ED:BD:84:5A:95:97:FE:C4:AD:90:03:0F:90:18:E4:B8:B6:3F:CC:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:d5:f0:69:7e:53:4e:8e:30:f6:12:09:0b:a8:0e:75:66:18:
73:34:af:e5:bc:09:2f:1f:4b:f9:16:05:a9:4f:32:ff:af:79:
99:d1:2d:52:25:35:23:f1:39:54:f1:58:39:a0:bd:1d:17:82:
81:19:f6:ea:e0:3c:a0:fd:ff:8c:dd:5c:0f:7e:eb:c2:8d:d3:
ff:10:65:d2:10:32:82:74:88:a3:3a:c0:f9:ea:97:7c:61:82:
70:5f:05:df:f0:25:30:27:92:e2:78:cf:37:a2:b0:18:62:ec:
c4:ee:59:34:54:71:ec:f9:54:81:12:64:2b:b0:26:51:a5:85:
ec:8c:e3:b9:2d:46:f8:89:44:67:d6:85:cb:76:a3:47:3c:7b:
63:cc:d5:f1:3b:74:b8:d4:a8:ef:57:1e:85:32:33:7b:af:d7:
15:1e:50:70:0b:5d:bf:24:61:9a:a3:c2:d5:3a:13:ac:e4:d6:
a8:d3:cc:ee:9c:4e:d1:dc:21:d2:22:81:8f:bb:e6:f0:05:03:
9a:04:c3:5e:7a:81:3e:37:36:01:12:cd:ce:4c:12:3d:4a:d3:
11:30:9a:ae:4f:4f:ef:70:8f:e1:fe:b9:bf:84:34:c2:26:93:
17:2e:87:f5:37:15:ff:95:78:fc:4f:31:a7:5a:bf:f4:1c:d8:
dd:b9:16:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:10:11 2026 by rpki-client