
$ rpki-client -vvf repo-rpki.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.mft
File: E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.mft (raw, json)
Hash identifier: sUm/+xx2tSuPvbKW1tN0FpkqgBuvoT79EdfORWpBmv4=
Subject key identifier: 7D:21:D2:A6:B9:35:A9:B7:41:0E:5D:41:13:5B:85:6B:EB:1F:45:7B
Authority key identifier: E0:AC:9F:73:54:2C:4F:A1:E5:2F:9E:56:5E:ED:95:2D:45:28:AB:D5
Certificate issuer: /CN=E0AC9F73542C4FA1E52F9E565EED952D4528ABD5
Certificate serial: 13F89ACB23707E6461F238650DED27F5D8C2AE25
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.mft
Manifest number: 01EF
Signing time: Wed 25 Mar 2026 17:52:08 +0000
Manifest this update: Wed 25 Mar 2026 17:47:08 +0000
Manifest next update: Sun 29 Mar 2026 03:17:08 +0000
Files and hashes: 1: E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.crl (hash: +jdTIw010FcgN8M8TmWpMgiT2STS8mMCLRKRZMyN8Rw=)
2: 3130332e3130312e3231382e302f32332d3234203d3e20313432333437.roa (hash: 2zfFRFwk/C19Fo4LWjVGEDAydcqPi8NpYbWAmcFYAik=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.crl
rsync://repo-rpki.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 29 Mar 2026 03:17:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:f8:9a:cb:23:70:7e:64:61:f2:38:65:0d:ed:27:f5:d8:c2:ae:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E0AC9F73542C4FA1E52F9E565EED952D4528ABD5
Validity
Not Before: Mar 25 17:47:08 2026 GMT
Not After : Mar 29 03:17:08 2026 GMT
Subject: CN=7D21D2A6B935A9B7410E5D41135B856BEB1F457B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:46:51:60:43:88:9a:49:2e:8c:4d:fd:e3:61:
58:56:24:6c:b4:63:01:e5:b5:f6:36:fb:58:f3:a6:
6d:b7:6a:7e:8f:c4:c1:d4:8e:8d:79:16:77:46:2a:
7d:87:33:03:27:42:55:3f:52:1f:70:91:e4:6a:61:
16:f6:ae:19:72:f7:7a:14:a7:02:58:65:29:fd:bc:
2a:eb:55:ad:bd:5f:33:c6:89:a2:f6:d0:5f:41:3d:
40:39:48:52:74:ac:98:92:16:91:4e:8e:c7:d5:55:
fb:7b:06:5d:9e:de:e3:6a:e6:f3:c7:8d:64:3d:2c:
30:10:89:1b:00:13:91:1d:59:69:d5:a8:df:c0:87:
77:42:4e:ae:fa:3a:37:62:99:2a:09:dc:68:aa:9b:
74:22:e4:74:31:4e:5b:ac:8e:4d:39:dd:c8:17:6b:
ec:86:8f:18:fb:fc:42:a1:4e:4a:08:9f:25:88:72:
1e:6c:79:52:c5:ef:c2:04:aa:50:a5:bb:c4:08:6f:
e9:6a:5e:a8:ac:df:db:eb:6d:4d:ae:1c:14:15:91:
9a:31:33:ff:39:d3:57:a2:62:a6:87:7b:b4:51:b5:
0e:a3:25:d1:bd:13:56:2e:42:81:49:3c:90:69:b8:
49:57:2a:62:59:20:97:94:0f:bc:b2:a7:46:e7:1f:
99:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:21:D2:A6:B9:35:A9:B7:41:0E:5D:41:13:5B:85:6B:EB:1F:45:7B
X509v3 Authority Key Identifier:
keyid:E0:AC:9F:73:54:2C:4F:A1:E5:2F:9E:56:5E:ED:95:2D:45:28:AB:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:3e:82:1a:40:1a:75:c1:23:95:33:a2:c8:12:d8:53:18:33:
05:27:f1:a6:0f:a6:82:d0:f9:fb:bd:c2:5c:81:43:9f:86:dc:
14:be:10:bb:13:48:2a:ef:0a:86:71:52:c8:84:d0:08:34:0a:
c5:48:57:2c:22:a2:ab:5f:fa:58:7b:89:ff:fb:17:78:cf:de:
1a:f8:73:ee:ea:5c:1a:83:8b:b2:11:94:fc:06:a3:71:5e:1f:
f4:39:59:04:52:14:be:40:8e:8a:ad:c6:73:0e:b8:56:a5:aa:
b6:d8:19:d0:d2:ea:00:f2:fa:7c:b2:77:1b:a4:df:b6:d5:8b:
13:8a:98:25:8d:bd:46:c7:99:45:4f:07:c6:7b:70:1d:4b:36:
13:00:8d:4b:d8:5c:74:65:7e:02:9e:39:45:b1:67:93:6b:1d:
fa:42:f1:f0:57:8b:40:ea:51:2c:f8:a8:f1:2e:d0:ba:15:c6:
e8:dd:7c:f6:9f:d7:e7:ca:61:3a:47:51:99:6a:3a:21:58:c7:
01:07:45:d9:c0:39:5e:71:d5:f4:04:4a:16:7a:bc:c5:a2:ba:
bc:74:66:b8:3e:32:f1:c6:9d:88:6c:64:3f:f0:6b:2c:9b:7c:
c3:3f:14:e0:ae:fa:e6:87:89:8c:fc:e4:a2:ca:8a:7f:03:69:
f5:bd:15:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:55:27 2026 by rpki-client