
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/71090573-6ad3-4e63-8af4-8a2d582aa0cd/0/EAE046BFFB08A27729B8D486164C8C1E280C169E.mft
File: EAE046BFFB08A27729B8D486164C8C1E280C169E.mft (raw, json)
Hash identifier: jJ5F7E/pV4x9jPB+m6upDX10ant7/KXY2G3+Y2+R+vU=
Subject key identifier: 51:69:65:63:A3:DD:25:2A:D0:0E:2F:2C:B1:36:06:7B:AC:3E:B4:5B
Authority key identifier: EA:E0:46:BF:FB:08:A2:77:29:B8:D4:86:16:4C:8C:1E:28:0C:16:9E
Certificate issuer: /CN=EAE046BFFB08A27729B8D486164C8C1E280C169E
Certificate serial: 08FCCEE11D4D9DE83AAD9AD7155ED010AC6DC6EB
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE046BFFB08A27729B8D486164C8C1E280C169E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/71090573-6ad3-4e63-8af4-8a2d582aa0cd/0/EAE046BFFB08A27729B8D486164C8C1E280C169E.mft
Manifest number: CA
Signing time: Tue 29 Sep 2026 00:04:40 +0000
Manifest this update: Mon 28 Sep 2026 23:59:40 +0000
Manifest next update: Wed 30 Sep 2026 03:32:40 +0000
Files and hashes: 1: EAE046BFFB08A27729B8D486164C8C1E280C169E.crl (hash: WJihSIFQyVQtWmN4s9CYin421PHk7rgskM/o7akruxw=)
2: 3130332e3137342e3131362e302f32342d3234203d3e20313437313030.roa (hash: We8sRw23ra0s7ummEVmNto7+y6Pn15K3D/+wd4Omz9o=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/71090573-6ad3-4e63-8af4-8a2d582aa0cd/0/EAE046BFFB08A27729B8D486164C8C1E280C169E.crl
rsync://rpki-rsync.idnic.net/repo/71090573-6ad3-4e63-8af4-8a2d582aa0cd/0/EAE046BFFB08A27729B8D486164C8C1E280C169E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE046BFFB08A27729B8D486164C8C1E280C169E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 03:09:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:fc:ce:e1:1d:4d:9d:e8:3a:ad:9a:d7:15:5e:d0:10:ac:6d:c6:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EAE046BFFB08A27729B8D486164C8C1E280C169E
Validity
Not Before: Sep 28 23:59:40 2026 GMT
Not After : Sep 30 03:32:40 2026 GMT
Subject: CN=51696563A3DD252AD00E2F2CB136067BAC3EB45B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3d:f4:69:e1:97:4b:e3:61:e1:4e:4f:91:80:
9b:e8:8e:4f:9c:ea:54:56:40:87:ec:ee:aa:9b:5c:
76:9a:a2:f4:21:63:54:70:79:54:6a:ce:dd:3d:ca:
92:74:93:da:8d:13:fd:18:3a:0a:1a:70:74:e5:2a:
53:d1:98:c4:b3:c6:b5:ba:b4:a9:7b:26:2e:89:4d:
e4:86:7f:26:4a:0e:89:93:e9:7b:ed:ee:b5:0b:70:
65:f7:a6:18:ad:da:20:97:e1:86:d7:d0:57:a7:0a:
4d:ef:15:fd:20:43:39:8f:a0:9f:e4:2a:a0:74:47:
e4:36:8a:63:e2:e4:61:9e:e5:63:55:e2:7b:85:b3:
71:52:9b:5e:91:a8:25:a3:73:3b:9e:18:ef:26:5a:
4b:38:3f:13:1e:d3:4b:0c:29:70:19:35:d6:da:a8:
da:4e:a7:a6:0a:27:8c:37:2c:54:06:45:02:48:b8:
69:62:36:ec:c9:1f:9c:a5:02:51:ee:75:c9:39:48:
2e:c0:d9:e5:91:c0:2d:34:4d:b4:07:9c:c9:57:a1:
33:5f:fc:b1:3f:8f:a2:1a:a2:68:c5:b1:96:dc:5a:
1c:52:4c:8d:f7:08:2c:c6:4d:0b:42:84:a1:b2:7d:
7e:a5:3f:de:f9:f1:7c:34:23:b2:bc:c2:b8:df:42:
5d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:69:65:63:A3:DD:25:2A:D0:0E:2F:2C:B1:36:06:7B:AC:3E:B4:5B
X509v3 Authority Key Identifier:
keyid:EA:E0:46:BF:FB:08:A2:77:29:B8:D4:86:16:4C:8C:1E:28:0C:16:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/71090573-6ad3-4e63-8af4-8a2d582aa0cd/0/EAE046BFFB08A27729B8D486164C8C1E280C169E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE046BFFB08A27729B8D486164C8C1E280C169E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/71090573-6ad3-4e63-8af4-8a2d582aa0cd/0/EAE046BFFB08A27729B8D486164C8C1E280C169E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:b2:a7:4e:02:1f:11:47:68:33:be:86:e2:af:96:0d:c5:c6:
af:48:9d:4f:3f:1d:01:7f:85:3a:96:74:fe:38:92:dc:8b:64:
81:c3:f8:e4:ce:85:ea:de:53:5a:9a:d1:4f:e3:dd:4f:4c:d5:
98:8b:d4:8c:a1:fe:f7:31:a2:c9:dc:1e:8a:84:fe:53:6f:7b:
63:26:ac:f5:a5:38:f1:00:80:4c:b7:3c:f4:9b:55:9e:28:84:
47:3b:f5:7c:fd:b5:e3:b3:4b:b2:86:31:5b:b5:25:ea:73:80:
19:ab:2c:f7:42:08:41:68:ce:07:20:0f:d2:8d:30:30:f2:81:
a3:2d:7d:97:e3:f7:2c:85:d9:59:48:58:8a:4c:83:9a:d6:96:
e8:b5:22:41:25:47:55:80:6a:a4:f9:4a:03:c7:bd:00:7f:97:
b1:11:73:e7:03:90:d2:c2:63:3f:f7:fe:cd:1f:63:06:55:75:
00:d9:c9:a7:06:15:29:1d:19:e4:35:28:c8:22:52:18:e7:dc:
97:d6:9c:6f:39:72:3e:73:df:5c:39:93:6f:00:dc:f5:b8:55:
ae:0f:fc:a5:e1:0f:2e:57:64:1e:0f:30:76:0b:52:f7:88:13:
e5:a0:9f:55:d0:48:ce:44:cc:d5:3a:50:14:19:4d:6d:95:49:
4a:7e:1a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 06:54:30 2026 by rpki-client