
$ rpki-client -vvf repo-rpki.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.mft
File: EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.mft (raw, json)
Hash identifier: PXZ9fNH4MMRynu/e/Lks7JPf5Rw6fqVYd85El7EGmh0=
Subject key identifier: 47:D1:7A:DC:CF:DD:0A:88:33:62:7D:81:4E:EA:7F:F0:01:EA:21:3F
Authority key identifier: EB:17:E4:6A:BC:B7:8A:51:E4:C5:B9:A1:4B:D7:81:7F:CC:60:92:F9
Certificate issuer: /CN=EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9
Certificate serial: 454422BC51BBDA69322E28AC19631C67E5C248FE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.mft
Manifest number: 055F
Signing time: Thu 26 Mar 2026 06:22:41 +0000
Manifest this update: Thu 26 Mar 2026 06:17:41 +0000
Manifest next update: Sun 29 Mar 2026 14:39:41 +0000
Files and hashes: 1: 3130332e3134372e3231382e302f32342d3234203d3e20313336303831.roa (hash: 02HM7GscUCusvpAfXhQDEcc8ZOiBFbCmHDfQadfKtFE=)
2: 3130332e38362e3130332e302f32342d3234203d3e20313336303831.roa (hash: FH/voLgmuZE3XbtxgnYOWLHEkRd7OKtR53sqhIsyCzA=)
3: EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.crl (hash: PAtK//uVNhdcfXtBKqhMenatMwWLUKmakRvql1w+APs=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.crl
rsync://repo-rpki.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 29 Mar 2026 14:39:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:44:22:bc:51:bb:da:69:32:2e:28:ac:19:63:1c:67:e5:c2:48:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9
Validity
Not Before: Mar 26 06:17:41 2026 GMT
Not After : Mar 29 14:39:41 2026 GMT
Subject: CN=47D17ADCCFDD0A8833627D814EEA7FF001EA213F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:46:49:e6:20:aa:56:95:12:84:a0:cd:bd:5c:
f7:c4:5e:8e:af:b2:7e:88:8d:11:c0:6f:e5:fb:25:
e1:8c:e2:e1:7c:a1:91:70:84:dd:4f:fd:e4:35:09:
4a:70:f5:c1:7c:cc:94:17:65:6b:74:30:c5:1b:ee:
36:d2:51:c3:7c:be:90:28:b5:b6:af:89:27:03:59:
b1:64:eb:41:67:98:54:1a:1f:3c:e7:95:07:57:7f:
cb:b2:29:f2:ba:82:44:05:67:cb:76:da:b9:1a:93:
88:77:fc:c6:10:4d:ce:b4:73:d3:12:b3:a2:49:5b:
5a:70:9f:b0:af:6f:e0:62:77:47:a5:0f:ba:9e:6d:
8e:dd:9e:09:e7:bd:58:6f:c7:85:33:be:38:3e:6d:
19:0d:e3:0a:20:3d:66:04:ce:7d:5a:01:d8:0d:5a:
ed:6c:14:fe:36:84:73:f4:0a:d1:9b:ff:ee:5d:16:
8c:27:0b:f7:46:c5:84:4e:dc:c6:4a:2c:9d:0a:8f:
f6:ae:5f:ff:a7:1d:22:95:63:dd:3a:86:fe:13:02:
5a:96:54:7d:a0:8f:f9:8b:48:6a:b9:db:87:3e:d6:
76:28:57:88:95:a9:38:a0:43:38:76:71:7b:f5:64:
89:f5:2b:27:40:b7:de:fb:b9:d5:e6:c7:b9:04:d5:
dd:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:D1:7A:DC:CF:DD:0A:88:33:62:7D:81:4E:EA:7F:F0:01:EA:21:3F
X509v3 Authority Key Identifier:
keyid:EB:17:E4:6A:BC:B7:8A:51:E4:C5:B9:A1:4B:D7:81:7F:CC:60:92:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:db:25:5b:4f:aa:51:e0:2b:3f:4f:e1:f4:94:4c:ad:8e:ce:
27:2d:44:15:22:71:b0:01:89:8f:52:f7:38:ea:69:59:93:6d:
90:bf:f7:2c:59:8f:d3:36:13:e5:3a:99:cd:13:72:a7:2c:69:
c0:eb:4c:cf:ad:8b:11:2a:12:1c:98:81:73:1a:c1:9a:c9:29:
4f:10:b0:5a:26:54:3b:d1:d2:e0:b2:f7:91:84:1d:15:39:3e:
f2:31:48:38:04:e1:ef:85:ca:a7:4a:73:28:4d:8e:a0:12:3a:
07:1d:ac:40:ba:c6:6e:55:77:14:4c:cb:19:cb:2f:0b:66:51:
42:27:d4:65:e8:ef:47:f1:b9:f0:aa:fd:5c:bb:28:97:d8:29:
bd:2d:b2:6e:03:3f:3f:e1:99:cc:0c:82:a0:a7:c0:94:12:1f:
1e:49:34:80:38:95:26:6b:c6:b6:9d:ef:cd:36:64:2d:00:d4:
9f:21:05:2e:44:cf:a2:64:c2:c1:d0:51:47:cf:36:eb:6b:47:
48:b8:ba:3d:b1:e2:28:4e:61:53:5e:88:74:5e:2e:b5:9e:c0:
0b:f7:1a:28:d3:d6:9e:7d:a1:9d:42:d3:95:98:83:93:f6:55:
84:db:3b:50:f8:d3:08:60:e5:22:ad:1c:fe:d3:d1:0c:30:f7:
03:60:60:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:09:58 2026 by rpki-client