
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/EB0A90C9D38126E4861B3243A60EFD2B08C19921.mft
File: EB0A90C9D38126E4861B3243A60EFD2B08C19921.mft (raw, json)
Hash identifier: xbJqa81pQC+pFjvqqqdzp7FR6XudsHHL/lREIN+PXnk=
Subject key identifier: 1C:E3:FA:DB:CE:38:EE:35:8D:A2:6A:2F:DF:86:76:27:7A:13:C1:53
Authority key identifier: EB:0A:90:C9:D3:81:26:E4:86:1B:32:43:A6:0E:FD:2B:08:C1:99:21
Certificate issuer: /CN=EB0A90C9D38126E4861B3243A60EFD2B08C19921
Certificate serial: 7ABECF039325BAFCB23338828AACC5110BA64A1D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB0A90C9D38126E4861B3243A60EFD2B08C19921.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/EB0A90C9D38126E4861B3243A60EFD2B08C19921.mft
Manifest number: C1
Signing time: Wed 23 Sep 2026 15:50:42 +0000
Manifest this update: Wed 23 Sep 2026 15:45:42 +0000
Manifest next update: Thu 24 Sep 2026 17:08:42 +0000
Files and hashes: 1: EB0A90C9D38126E4861B3243A60EFD2B08C19921.crl (hash: dByBcIes56IGUPTvtVBSd3Oy0Q0rKCzAm/BUTDB7org=)
2: 3130332e38372e3230312e302f32342d3234203d3e203538333639.roa (hash: eyEG+YKfrAxVe/iff0IfSqMexA77iMkR7c8W/AMQ12c=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/EB0A90C9D38126E4861B3243A60EFD2B08C19921.crl
rsync://rpki-rsync.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/EB0A90C9D38126E4861B3243A60EFD2B08C19921.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB0A90C9D38126E4861B3243A60EFD2B08C19921.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 17:08:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:be:cf:03:93:25:ba:fc:b2:33:38:82:8a:ac:c5:11:0b:a6:4a:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB0A90C9D38126E4861B3243A60EFD2B08C19921
Validity
Not Before: Sep 23 15:45:42 2026 GMT
Not After : Sep 24 17:08:42 2026 GMT
Subject: CN=1CE3FADBCE38EE358DA26A2FDF8676277A13C153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7d:5b:5b:af:ae:4a:61:ed:c0:c1:4e:a1:5e:
1a:25:26:32:7b:c5:60:03:11:cc:cc:2c:a7:1c:e6:
e3:52:4d:33:d1:b9:94:e1:99:8c:00:16:20:32:e7:
96:9a:cf:d0:71:56:8d:28:9f:cf:bb:a8:d6:01:1f:
23:d4:8d:e9:16:d7:ec:db:01:ba:c8:3c:d7:2f:81:
d1:30:15:a2:9d:9b:d1:ce:fc:43:28:61:32:02:db:
a2:c6:3a:f3:ea:ec:62:d0:b6:64:24:94:19:d4:8b:
4c:3d:ac:62:43:04:ac:b8:b2:23:05:c1:8b:a0:b2:
a4:0b:1d:e6:2b:6a:b5:63:f2:9c:b9:6b:a1:04:91:
bf:32:50:f5:e4:ef:6f:7b:46:bc:9f:09:73:c8:53:
b0:79:7c:c9:12:70:fb:30:dd:83:46:ce:a7:d4:aa:
f5:c6:42:39:c7:33:f0:db:ec:33:26:ca:d3:a1:96:
75:f2:62:c3:b8:fb:3f:ae:69:cf:3a:1c:7f:05:14:
f2:f3:88:b6:a6:41:58:ae:e1:07:3e:6a:db:24:22:
47:a6:04:3b:7b:34:31:97:99:29:11:0f:b7:34:ae:
c9:26:63:b5:84:29:bd:bd:06:e1:53:e8:c6:1a:56:
7a:dd:e7:b1:f4:77:e7:74:fd:fd:2a:45:75:cc:45:
6b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:E3:FA:DB:CE:38:EE:35:8D:A2:6A:2F:DF:86:76:27:7A:13:C1:53
X509v3 Authority Key Identifier:
keyid:EB:0A:90:C9:D3:81:26:E4:86:1B:32:43:A6:0E:FD:2B:08:C1:99:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/EB0A90C9D38126E4861B3243A60EFD2B08C19921.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB0A90C9D38126E4861B3243A60EFD2B08C19921.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/EB0A90C9D38126E4861B3243A60EFD2B08C19921.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:87:fc:58:0f:6e:08:a4:c1:31:04:63:d5:47:b7:57:c5:79:
f4:e1:a7:fe:d0:3b:a5:3e:85:7c:83:fe:5f:19:e2:26:49:ff:
74:74:76:1e:09:cb:55:97:0d:29:4d:fa:a1:cd:f7:38:66:c8:
ca:23:8c:78:27:75:6a:dc:ec:b7:6a:1d:28:c8:88:39:c0:0e:
ea:c6:02:6e:04:44:87:33:83:72:1b:e4:9b:1c:64:cf:67:3f:
b1:9f:8c:a3:77:08:13:87:b5:ba:d7:dc:30:fc:0a:dc:5b:8b:
70:a0:ac:5f:8c:bb:0e:6c:0a:36:e6:51:65:b0:33:13:ff:32:
41:ac:62:b4:c9:91:4f:bd:e5:0b:58:d9:c7:32:ec:be:c7:3a:
b8:8f:98:39:66:e3:e4:43:b7:7f:62:4f:99:bb:ad:bc:3b:47:
64:18:8c:8f:fb:b5:5f:57:2c:18:11:cd:a0:89:92:b0:23:b4:
33:c0:9c:71:28:73:b5:75:ae:ff:e9:b4:fd:96:6a:94:fb:d0:
4a:04:9e:39:e5:a1:13:79:77:ab:f4:48:4f:57:36:64:d5:51:
fc:94:64:64:32:52:ef:a5:ae:e0:90:ca:4a:ee:dd:14:df:56:
4c:4d:50:7c:ef:8b:0f:7c:27:cc:dd:c1:8f:0f:d9:a2:a3:59:
38:b1:b3:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:41:22 2026 by rpki-client