
$ rpki-client -vvf repo-rpki.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/EB6A398D686553919657E094022E843191F4573E.mft
File: EB6A398D686553919657E094022E843191F4573E.mft (raw, json)
Hash identifier: 9UPqgzI218qFLvYjPaF2Ogj4cvbxha7KEtnQV1djWo8=
Subject key identifier: 55:E7:3F:98:0A:2A:BE:5B:75:E1:0D:3C:86:2C:91:40:B7:1B:95:A5
Authority key identifier: EB:6A:39:8D:68:65:53:91:96:57:E0:94:02:2E:84:31:91:F4:57:3E
Certificate issuer: /CN=EB6A398D686553919657E094022E843191F4573E
Certificate serial: 45003344A97AAAC89909BD0489916895C577A7F5
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB6A398D686553919657E094022E843191F4573E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/EB6A398D686553919657E094022E843191F4573E.mft
Manifest number: 0296
Signing time: Tue 24 Mar 2026 07:42:39 +0000
Manifest this update: Tue 24 Mar 2026 07:37:39 +0000
Manifest next update: Fri 27 Mar 2026 18:34:39 +0000
Files and hashes: 1: EB6A398D686553919657E094022E843191F4573E.crl (hash: 9hAIT4ORSfDTN+aEHbT6OFgrN2boTMPHhD7wIP6fhBQ=)
2: 3130332e3138312e3234382e302f32332d3234203d3e20313439343030.roa (hash: ZQvUbXHu4oitDR8z2M5lRxDV5Dfgz07kS0tfmIPrPQU=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/EB6A398D686553919657E094022E843191F4573E.crl
rsync://repo-rpki.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/EB6A398D686553919657E094022E843191F4573E.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB6A398D686553919657E094022E843191F4573E.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 27 Mar 2026 18:34:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:00:33:44:a9:7a:aa:c8:99:09:bd:04:89:91:68:95:c5:77:a7:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB6A398D686553919657E094022E843191F4573E
Validity
Not Before: Mar 24 07:37:39 2026 GMT
Not After : Mar 27 18:34:39 2026 GMT
Subject: CN=55E73F980A2ABE5B75E10D3C862C9140B71B95A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:47:1e:f9:49:6d:4e:2f:50:46:24:4f:ba:f2:
3b:de:ce:37:4f:5a:30:11:51:45:96:ca:2b:96:2f:
0f:fc:1f:d2:d0:14:a7:52:1a:ae:ea:76:88:7e:7b:
2c:da:5d:ce:84:ea:21:03:37:79:72:49:9b:24:7f:
33:ed:ec:0a:53:36:e7:06:f6:3e:31:1e:c6:58:ce:
63:8f:8c:25:50:51:57:63:a0:3e:63:60:bd:20:7f:
37:3e:ba:21:ed:18:fe:9e:67:86:93:6c:15:c9:a0:
3e:d1:77:cb:bf:21:b0:db:a6:5c:2c:db:bc:7a:3d:
d8:86:c3:45:d3:99:e9:da:27:5e:af:14:e4:c9:97:
e0:14:d2:17:20:99:4f:83:7a:20:20:2d:6a:fe:2e:
8d:49:d4:88:6a:dd:f5:84:3b:aa:8f:2f:69:f7:73:
e2:05:e9:1e:fd:97:32:54:8a:d1:5e:85:ff:d9:8f:
57:22:7e:ed:28:6a:87:91:03:b0:17:bc:69:82:e2:
2e:91:11:e0:ec:1e:d0:22:59:08:8f:07:65:33:5d:
57:9f:cd:ea:cd:d6:08:51:7d:05:f9:e9:f5:dc:f4:
af:82:fb:50:a5:e0:8a:7d:84:1d:25:fe:de:6c:22:
65:c3:0d:96:9c:ce:84:8d:cc:a3:68:9c:37:57:f1:
dc:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:E7:3F:98:0A:2A:BE:5B:75:E1:0D:3C:86:2C:91:40:B7:1B:95:A5
X509v3 Authority Key Identifier:
keyid:EB:6A:39:8D:68:65:53:91:96:57:E0:94:02:2E:84:31:91:F4:57:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/EB6A398D686553919657E094022E843191F4573E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB6A398D686553919657E094022E843191F4573E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/EB6A398D686553919657E094022E843191F4573E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:35:b3:1d:7c:e7:8f:a8:fd:04:99:45:cd:ba:b8:c6:5f:b4:
62:8f:ee:4a:e4:fc:ec:80:b7:7e:1f:7d:d8:9b:9c:d5:ec:b2:
f2:fc:cb:fd:e1:76:a7:5e:e3:de:ab:95:ff:eb:db:06:b2:55:
82:a6:2a:c4:94:71:8b:3a:a8:ff:40:e8:1a:1e:b0:4b:41:81:
aa:ae:78:b5:3f:20:8d:fb:7d:a7:9b:dc:15:65:14:98:4a:ec:
50:22:f9:6d:1b:c0:27:bf:3d:b5:9b:2c:06:4f:87:dd:02:46:
e0:98:85:27:c7:62:92:7b:85:e9:3f:a0:a8:bd:4c:2a:d2:8d:
1e:08:21:c3:cd:b4:65:87:d1:d5:d7:27:b8:56:0d:3d:ae:f2:
9d:59:ca:66:2b:61:89:45:3b:fb:b8:26:54:33:6c:bb:43:99:
68:cd:c8:9d:1b:64:ab:34:f3:48:37:33:87:87:ec:45:b4:61:
79:2b:bd:59:82:8c:47:19:e1:74:1d:7b:ee:67:8d:48:6e:67:
03:2b:04:b5:ce:ac:1e:68:60:62:bc:7a:6a:9e:84:df:a3:e1:
d7:7c:2d:3d:8c:b6:a2:99:1a:36:50:a1:a6:6a:85:a0:ce:cb:
c9:f8:e5:29:2e:7f:3c:55:aa:76:49:e4:e1:11:3e:dc:b8:4b:
a5:55:fa:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:13:21 2026 by rpki-client