
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/EA4DA064E912527194F47FF125954E84B6DBA21A.mft
File: EA4DA064E912527194F47FF125954E84B6DBA21A.mft (raw, json)
Hash identifier: /FLbmrjEd4IMOE7wzOiI6BoRZ9xkxAushjHV3ups4/c=
Subject key identifier: 89:BC:58:78:38:48:92:BB:7B:99:26:90:59:42:B7:4F:FC:C7:AA:A7
Authority key identifier: EA:4D:A0:64:E9:12:52:71:94:F4:7F:F1:25:95:4E:84:B6:DB:A2:1A
Certificate issuer: /CN=EA4DA064E912527194F47FF125954E84B6DBA21A
Certificate serial: 056288B6B3C7A626EA02787104BA1AC9476D17A5
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA4DA064E912527194F47FF125954E84B6DBA21A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/EA4DA064E912527194F47FF125954E84B6DBA21A.mft
Manifest number: C3
Signing time: Fri 25 Sep 2026 20:46:14 +0000
Manifest this update: Fri 25 Sep 2026 20:41:14 +0000
Manifest next update: Sat 26 Sep 2026 21:01:14 +0000
Files and hashes: 1: EA4DA064E912527194F47FF125954E84B6DBA21A.crl (hash: KEQ7cGlNqB4NOM/82OkdwPSvOyh3iOOKyxqZzqTzeSo=)
2: 3130332e3136312e3230322e302f32332d3234203d3e203338333230.roa (hash: 1s8nntsKiBFp7djfBzyRktp4RKhegiMqm5VcmIqavUQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/EA4DA064E912527194F47FF125954E84B6DBA21A.crl
rsync://rpki-rsync.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/EA4DA064E912527194F47FF125954E84B6DBA21A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA4DA064E912527194F47FF125954E84B6DBA21A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 26 Sep 2026 17:58:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:62:88:b6:b3:c7:a6:26:ea:02:78:71:04:ba:1a:c9:47:6d:17:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EA4DA064E912527194F47FF125954E84B6DBA21A
Validity
Not Before: Sep 25 20:41:14 2026 GMT
Not After : Sep 26 21:01:14 2026 GMT
Subject: CN=89BC5878384892BB7B9926905942B74FFCC7AAA7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0e:98:bd:01:35:d1:1c:71:e3:55:18:c9:3a:
fd:1e:49:40:c1:c6:08:93:73:ed:7e:e0:4a:b5:5b:
39:9a:52:37:13:0d:53:b8:63:d1:5c:0b:7e:0e:28:
df:03:1c:9a:41:39:87:b4:04:f6:ac:c8:37:63:a5:
d1:f5:32:a3:ba:76:9b:4b:47:51:b1:4e:5a:e0:40:
90:4d:dd:08:31:84:87:e7:a1:9e:0c:16:89:c9:49:
56:0b:98:30:54:fc:9b:4f:a9:e8:37:99:45:40:72:
34:29:df:82:17:36:ec:f6:a6:4e:ad:13:c0:88:9b:
16:15:8b:a1:78:3a:ab:e4:aa:74:3d:18:8d:8e:5f:
2f:2d:03:3e:44:28:02:f5:1e:8c:9c:6d:5d:85:12:
ce:89:4e:53:4d:96:e7:64:09:66:9a:41:e4:6a:b8:
d8:bc:38:2b:83:11:86:c7:ab:39:e1:84:db:14:e5:
b5:ab:7c:2f:76:8d:95:ce:c2:89:4f:f5:17:e6:fa:
84:6b:91:27:6e:1a:49:58:bd:07:99:62:5c:ee:1a:
f4:36:09:97:47:23:df:fe:e3:61:42:dc:38:72:30:
81:7f:0a:4f:31:75:80:cb:85:8d:d1:de:5a:eb:91:
86:dd:91:54:03:e7:85:c2:74:4b:71:00:2c:59:73:
5f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:BC:58:78:38:48:92:BB:7B:99:26:90:59:42:B7:4F:FC:C7:AA:A7
X509v3 Authority Key Identifier:
keyid:EA:4D:A0:64:E9:12:52:71:94:F4:7F:F1:25:95:4E:84:B6:DB:A2:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/EA4DA064E912527194F47FF125954E84B6DBA21A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA4DA064E912527194F47FF125954E84B6DBA21A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/EA4DA064E912527194F47FF125954E84B6DBA21A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:91:91:3c:de:3f:2e:ac:cc:99:df:4b:e1:39:47:60:c7:89:
a5:86:83:74:fd:85:dc:f5:c3:ff:02:0f:13:e8:a7:b0:1e:cb:
6c:be:4b:95:95:8a:d3:a1:2b:f3:b9:c8:b6:e7:88:77:49:d1:
d0:93:15:4b:6b:c3:3e:57:e4:de:43:b1:45:75:16:07:ce:c4:
2f:95:15:11:e3:da:46:bc:24:48:50:84:47:30:af:91:be:ef:
c3:08:05:57:8c:a1:07:4d:ac:74:9a:77:3d:fc:d0:30:7c:d3:
cb:31:37:7d:4d:07:93:01:f1:ec:70:c7:0c:78:93:d5:88:f2:
a0:d5:ad:08:0d:dd:d8:7f:e5:3d:8e:af:a0:5b:ea:6f:d6:4d:
2f:75:28:ea:67:41:6b:cc:bf:42:09:c8:b4:7e:41:13:a7:a2:
f9:08:82:13:b7:bc:7f:90:b1:da:bb:24:66:22:10:98:86:2b:
f3:20:aa:f0:1a:19:7c:5a:1b:33:f3:42:07:3b:83:e3:15:eb:
eb:5a:80:93:c7:df:a6:c6:bb:4e:10:81:ed:32:99:3c:09:4d:
5e:ed:e7:ab:d4:78:9e:ff:a0:28:7c:90:ba:c1:20:7b:ec:d2:
19:ae:da:2e:49:c1:f9:29:6a:5b:dd:bf:55:f0:81:1b:b8:34:
79:19:8a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 08:18:59 2026 by rpki-client