
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/EA9248CB81F3EE7B4C9344FBE431252A1739FD6B.mft
File: EA9248CB81F3EE7B4C9344FBE431252A1739FD6B.mft (raw, json)
Hash identifier: HkqLw2CevUOlqOl6dB8tVMatjJv9xgIElR/37cdktyw=
Subject key identifier: E0:15:E2:8B:08:3C:23:94:22:D3:8D:A5:80:BC:58:EA:0F:9E:29:FD
Authority key identifier: EA:92:48:CB:81:F3:EE:7B:4C:93:44:FB:E4:31:25:2A:17:39:FD:6B
Certificate issuer: /CN=EA9248CB81F3EE7B4C9344FBE431252A1739FD6B
Certificate serial: 5AF51ACCBE842B1C5B8DB00CC681B813620BB6A4
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA9248CB81F3EE7B4C9344FBE431252A1739FD6B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/EA9248CB81F3EE7B4C9344FBE431252A1739FD6B.mft
Manifest number: C3
Signing time: Fri 25 Sep 2026 19:55:17 +0000
Manifest this update: Fri 25 Sep 2026 19:50:17 +0000
Manifest next update: Sat 26 Sep 2026 21:16:17 +0000
Files and hashes: 1: 3231302e38372e3132332e302f32342d3234203d3e20313532303634.roa (hash: ap3QpSwMafndkQYGTllRc8VLk6+JUlWDpLrHeilcohw=)
2: EA9248CB81F3EE7B4C9344FBE431252A1739FD6B.crl (hash: N0CBYIm11gQvOfiJO2VCZPniGOxB/6QIybDNHrANYAk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/EA9248CB81F3EE7B4C9344FBE431252A1739FD6B.crl
rsync://rpki-rsync.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/EA9248CB81F3EE7B4C9344FBE431252A1739FD6B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA9248CB81F3EE7B4C9344FBE431252A1739FD6B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 26 Sep 2026 17:58:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:f5:1a:cc:be:84:2b:1c:5b:8d:b0:0c:c6:81:b8:13:62:0b:b6:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EA9248CB81F3EE7B4C9344FBE431252A1739FD6B
Validity
Not Before: Sep 25 19:50:17 2026 GMT
Not After : Sep 26 21:16:17 2026 GMT
Subject: CN=E015E28B083C239422D38DA580BC58EA0F9E29FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c6:ed:28:e0:8e:4d:83:09:4e:53:5a:43:ca:
6e:52:a3:06:2b:a0:e1:54:03:51:b9:6f:6a:6b:6f:
a4:76:72:29:f3:6f:8a:6f:62:09:53:b5:6f:60:1a:
90:86:c6:c0:96:11:4d:7b:14:81:33:d5:0d:5d:d6:
bd:c5:53:ca:1f:1a:19:8b:29:6d:c9:71:7b:17:dc:
9c:4d:6e:c2:15:ed:b8:49:9e:d7:ec:7a:0f:67:1b:
eb:38:c6:6d:35:b8:ba:8e:34:c8:b0:89:a6:0a:82:
e4:55:2b:5c:fb:90:11:d2:f9:5a:db:e9:8a:8b:6a:
35:ba:dd:e4:89:bb:3a:37:fa:ed:3e:16:65:79:eb:
2d:88:18:95:6c:47:4c:22:0d:2f:a8:e0:44:39:f5:
68:ac:29:7c:ce:5f:0c:5c:0d:41:1b:d9:1f:5a:c8:
05:16:f7:c0:0f:4f:de:ae:58:44:b7:75:cb:a0:cd:
77:e5:5c:33:fb:b8:b0:02:36:2b:89:b4:fe:e5:f3:
f9:dc:de:e0:7d:af:21:e3:64:09:5f:3f:d5:6c:69:
83:e5:63:9c:20:72:39:62:7f:fd:56:9a:de:aa:79:
26:7e:07:ca:2f:c8:f2:bd:a8:29:e1:27:c6:92:30:
04:52:3f:50:cf:24:53:f2:0e:82:dc:9b:75:73:c4:
88:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:15:E2:8B:08:3C:23:94:22:D3:8D:A5:80:BC:58:EA:0F:9E:29:FD
X509v3 Authority Key Identifier:
keyid:EA:92:48:CB:81:F3:EE:7B:4C:93:44:FB:E4:31:25:2A:17:39:FD:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/EA9248CB81F3EE7B4C9344FBE431252A1739FD6B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA9248CB81F3EE7B4C9344FBE431252A1739FD6B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/EA9248CB81F3EE7B4C9344FBE431252A1739FD6B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:f8:0c:b6:a2:16:61:0e:35:3d:99:5b:76:3b:74:d1:3e:5b:
66:1c:e6:62:a8:83:d7:80:e5:d9:74:9b:fe:1b:d8:cf:57:d4:
d5:8f:9b:0a:25:38:e8:e9:f3:40:a4:ce:bd:59:41:21:bc:0b:
b8:f0:14:77:44:66:d7:d1:38:86:75:f1:a1:3c:70:19:41:0d:
ab:ff:67:fe:ee:f3:6c:0d:98:13:f0:df:b0:2b:9e:00:92:ec:
b6:a2:2d:2e:e8:df:52:95:de:a2:f9:94:1b:cd:9a:f8:64:e5:
2d:0f:2d:d2:49:d4:a5:f9:0d:5b:f3:87:96:79:9e:90:14:58:
d4:57:f4:14:65:f6:ae:fb:06:50:1d:38:25:6f:ee:e3:a7:39:
43:7b:a3:08:92:ce:ed:21:29:06:25:57:8d:36:8b:73:2e:8c:
1a:c1:c5:b9:35:10:e2:45:0b:8b:f0:29:85:e1:7e:01:39:d9:
39:6c:da:25:40:65:e3:3f:73:db:69:47:70:17:ad:69:ba:9b:
4e:a7:a6:8f:e2:da:db:fc:ce:55:0b:4e:bc:76:f6:e6:4f:d2:
87:01:50:1a:1d:ed:03:84:4f:11:4f:87:13:44:2d:ef:0e:da:
fd:d9:60:bf:c8:51:f8:c2:71:35:a9:5c:ef:e3:4e:f3:4d:05:
e5:18:b5:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 01:57:45 2026 by rpki-client