
$ rpki-client -vvf rpki-rsync.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/EA4DA064E912527194F47FF125954E84B6DBA21A.mft
File: EA4DA064E912527194F47FF125954E84B6DBA21A.mft (raw, json)
Hash identifier: RcHpltEKN8g0uJEMQFQ7uSeY5BCGkHOjDQPuRuPfczw=
Subject key identifier: B1:67:2C:82:72:DC:14:90:3F:7F:80:9B:5D:17:BE:16:21:9B:AB:34
Authority key identifier: EA:4D:A0:64:E9:12:52:71:94:F4:7F:F1:25:95:4E:84:B6:DB:A2:1A
Certificate issuer: /CN=EA4DA064E912527194F47FF125954E84B6DBA21A
Certificate serial: 3FD41A91FBFEE727FE85609737D5539F47D3CC36
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA4DA064E912527194F47FF125954E84B6DBA21A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/EA4DA064E912527194F47FF125954E84B6DBA21A.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 23:47:59 +0000
Manifest this update: Tue 12 May 2026 23:42:59 +0000
Manifest next update: Thu 14 May 2026 01:49:59 +0000
Files and hashes: 1: 3130332e3136312e3230322e302f32332d3234203d3e203338333230.roa (hash: 1s8nntsKiBFp7djfBzyRktp4RKhegiMqm5VcmIqavUQ=)
2: EA4DA064E912527194F47FF125954E84B6DBA21A.crl (hash: 5aVtm/iQce8C0QzhTVZ6Xn5mR6J7vIa0zxHzLF0AC3Q=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/EA4DA064E912527194F47FF125954E84B6DBA21A.crl
rsync://rpki-rsync.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/EA4DA064E912527194F47FF125954E84B6DBA21A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA4DA064E912527194F47FF125954E84B6DBA21A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:49:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:d4:1a:91:fb:fe:e7:27:fe:85:60:97:37:d5:53:9f:47:d3:cc:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EA4DA064E912527194F47FF125954E84B6DBA21A
Validity
Not Before: May 12 23:42:59 2026 GMT
Not After : May 14 01:49:59 2026 GMT
Subject: CN=B1672C8272DC14903F7F809B5D17BE16219BAB34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:02:23:6e:15:b5:40:c5:2d:1b:c1:88:6d:82:
5d:0a:e2:60:ef:f9:2a:c2:3b:6c:72:42:83:80:ff:
6b:72:fc:24:cf:ba:6a:05:b8:63:d8:67:0a:e3:84:
d7:c5:77:0e:eb:26:7b:c2:af:8e:03:96:9a:b6:19:
e2:fd:e8:45:c5:84:8c:ba:93:5a:06:08:26:8e:6f:
b9:c3:a4:3f:c0:0a:12:05:7a:54:a1:62:7b:71:16:
c3:8b:85:8c:8f:32:ac:98:de:7b:a5:5f:de:ea:f3:
fe:ee:69:8a:4d:53:da:0f:62:52:c8:30:24:33:ae:
6c:ea:43:1b:c0:0b:a5:25:15:cd:2a:c5:64:94:44:
46:88:f0:30:f0:4a:ff:e0:b4:dd:8c:c3:1b:0b:29:
1c:bf:22:15:4a:58:07:37:e2:4a:3f:c3:b1:10:c6:
5e:ab:e9:bf:05:7f:cd:eb:60:75:c1:40:49:3e:f2:
6a:7c:05:92:a7:36:9f:c7:de:4b:93:23:49:c8:79:
c0:a8:68:47:b6:4b:59:59:ad:69:1b:8f:cc:31:88:
8c:71:67:d8:82:73:f5:05:cd:b2:f4:bc:bc:e6:a0:
e5:47:94:84:76:76:e5:e9:7c:16:e7:69:b7:76:a3:
a8:ce:34:ec:18:68:88:ea:ec:3a:f3:ac:3e:ab:cf:
84:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:67:2C:82:72:DC:14:90:3F:7F:80:9B:5D:17:BE:16:21:9B:AB:34
X509v3 Authority Key Identifier:
keyid:EA:4D:A0:64:E9:12:52:71:94:F4:7F:F1:25:95:4E:84:B6:DB:A2:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/EA4DA064E912527194F47FF125954E84B6DBA21A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA4DA064E912527194F47FF125954E84B6DBA21A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/EA4DA064E912527194F47FF125954E84B6DBA21A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:dc:78:cc:05:70:f9:aa:2d:be:9b:79:55:03:8d:e3:90:e3:
f4:32:92:aa:1a:ab:6a:f3:3f:88:96:ad:ba:dd:9c:9c:78:6e:
fc:55:e7:e1:82:3b:86:2b:19:b3:1f:43:03:6f:0e:5f:8f:62:
1d:9d:58:e4:6e:08:88:a2:ca:39:45:14:17:ee:bd:67:2a:6f:
e3:d4:bd:2e:a7:1c:e8:98:98:42:b5:dd:48:f7:e7:26:4c:87:
f4:70:ef:1a:2e:b6:f2:18:a0:50:38:4f:df:09:bf:89:f8:e6:
c2:7d:57:08:32:f6:29:5b:3c:b7:ac:f0:5f:6c:0b:af:1f:b3:
c2:d1:4b:01:d8:58:cd:da:7f:71:4a:53:57:96:9a:e8:1e:4b:
fb:0d:0c:77:84:c7:27:49:c6:34:da:47:ed:74:a9:e0:9d:e9:
f5:25:c4:08:ba:71:c0:19:98:32:6c:86:9c:29:df:91:ec:de:
8e:93:fe:75:34:62:45:3b:74:4c:13:c2:28:59:55:0c:db:ef:
e8:4f:81:df:96:00:24:7f:bc:a9:c3:2c:c1:ca:da:92:60:89:
81:c7:9b:fe:0c:62:fd:22:5a:96:23:3f:75:e3:5f:02:72:02:
89:ba:56:c1:70:5c:ed:f2:18:5e:d7:1e:c6:3b:8e:ea:fd:14:
d2:3e:e2:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:45:50 2026 by rpki-client