
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/ED174C0150D63525F5DB20F0992EDEECD70380E5.mft
File: ED174C0150D63525F5DB20F0992EDEECD70380E5.mft (raw, json)
Hash identifier: 0zLzAsx0+Dj9a3sMAtI0m/xzZYOZ0TK/5jQ8qxCLdho=
Subject key identifier: 05:D6:B5:8F:A5:46:2E:F4:47:21:6B:37:9C:44:16:55:36:76:72:A4
Authority key identifier: ED:17:4C:01:50:D6:35:25:F5:DB:20:F0:99:2E:DE:EC:D7:03:80:E5
Certificate issuer: /CN=ED174C0150D63525F5DB20F0992EDEECD70380E5
Certificate serial: 549C5384D01649767309F6FA37235A0C41B22BF1
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED174C0150D63525F5DB20F0992EDEECD70380E5.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/ED174C0150D63525F5DB20F0992EDEECD70380E5.mft
Manifest number: C1
Signing time: Wed 23 Sep 2026 15:35:23 +0000
Manifest this update: Wed 23 Sep 2026 15:30:23 +0000
Manifest next update: Thu 24 Sep 2026 17:49:23 +0000
Files and hashes: 1: 3130332e3131302e33342e302f32332d3234203d3e20313530393336.roa (hash: MaBel9u9pYezsd1ShGGBnY40dDIrzHcanWzm4FOSRAg=)
2: 3130332e3131302e33342e302f32342d3234203d3e203438343635.roa (hash: 3XmUzAiqVZaFyzkEVDaETxoV3L7puo8oceCYnEmmitg=)
3: 3130332e3131302e33352e302f32342d3234203d3e203438343635.roa (hash: bfhOCogzMUQqHoQaSn812eSk7yOuSzPxVDD+Nz5nDsc=)
4: ED174C0150D63525F5DB20F0992EDEECD70380E5.crl (hash: z/2hvYsQr65DSWOgyj3SzU96FPiufxKJzD6QELjuLuY=)
5: 3130332e3131302e33352e302f32342d3234203d3e20313530393336.roa (hash: n4IkgoMW2u0zkFgXDHL0eZSUTKgr/z1ZRj5PZ9Dfmxk=)
6: 3130332e3131302e33342e302f32342d3234203d3e20313530393336.roa (hash: zmRnpGvMIJDXa5x4jILWd60y8Q5Ncg1iyAcAcxswFl4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/ED174C0150D63525F5DB20F0992EDEECD70380E5.crl
rsync://rpki-rsync.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/ED174C0150D63525F5DB20F0992EDEECD70380E5.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED174C0150D63525F5DB20F0992EDEECD70380E5.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 17:49:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:9c:53:84:d0:16:49:76:73:09:f6:fa:37:23:5a:0c:41:b2:2b:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ED174C0150D63525F5DB20F0992EDEECD70380E5
Validity
Not Before: Sep 23 15:30:23 2026 GMT
Not After : Sep 24 17:49:23 2026 GMT
Subject: CN=05D6B58FA5462EF447216B379C441655367672A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:11:a5:7a:f2:0c:70:0a:c0:cc:67:72:d6:50:
de:2e:62:37:4c:58:a5:78:96:fa:bb:2b:5e:6a:51:
0e:5d:f5:7d:26:dc:b9:49:36:bc:f8:4f:a6:5c:a3:
5e:ff:47:24:60:ba:c3:96:b2:ec:2c:a0:0a:eb:24:
29:56:8e:f1:6c:da:87:b8:d8:7e:0d:e3:0a:51:9f:
ef:60:31:1f:7d:0a:c0:ea:c5:3e:1c:61:66:d6:6f:
3c:c0:8a:bd:48:28:a8:0b:44:62:50:e3:f5:c9:6f:
65:4e:2e:07:a6:6a:af:86:ea:69:1e:85:96:08:d8:
fb:2c:e3:df:69:9b:ee:1b:21:c8:a6:20:87:d9:c5:
0b:0d:3f:c4:be:14:a7:0e:33:13:18:c6:b6:f6:16:
9c:ae:f5:4a:65:22:8f:1b:ef:2b:cc:08:5a:1c:70:
d0:01:37:89:74:a9:e3:32:0c:aa:00:66:62:49:74:
8b:ca:75:8f:b2:db:56:4a:fa:f2:f7:6d:5f:e7:f6:
d1:5f:2a:4b:bd:ed:7e:4e:45:0f:ac:41:28:38:b0:
af:b4:8b:88:2b:e8:6b:c4:1f:8c:16:26:01:be:e8:
e4:fc:bb:40:96:cf:8b:da:0d:e3:55:04:46:d6:f1:
03:2f:70:54:2c:32:ac:24:1b:f3:fe:9c:e5:35:63:
89:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:D6:B5:8F:A5:46:2E:F4:47:21:6B:37:9C:44:16:55:36:76:72:A4
X509v3 Authority Key Identifier:
keyid:ED:17:4C:01:50:D6:35:25:F5:DB:20:F0:99:2E:DE:EC:D7:03:80:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/ED174C0150D63525F5DB20F0992EDEECD70380E5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED174C0150D63525F5DB20F0992EDEECD70380E5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/ED174C0150D63525F5DB20F0992EDEECD70380E5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:51:80:69:26:86:56:95:b9:61:b1:67:ea:11:9b:02:8b:ca:
0c:dd:c1:6d:57:f2:6a:14:1c:be:b5:5f:62:f1:62:4a:fb:46:
ea:2d:f3:51:4e:a5:17:4d:99:4f:65:e2:18:9e:6d:62:ec:e3:
45:87:f5:29:1e:83:7a:b1:73:8f:e7:11:3c:a3:d6:c9:02:92:
fe:ea:af:96:73:af:67:52:21:f6:5d:b9:6f:1a:37:73:76:8a:
95:f4:d1:e4:9b:d5:a3:e9:3b:40:f2:eb:5b:a3:50:7c:36:ba:
7b:b5:1a:f0:ba:28:b7:04:48:2e:2f:78:b7:13:98:9e:6c:4c:
48:62:ca:e4:26:15:f7:68:b6:d2:c8:31:c8:b6:f1:70:3b:13:
6a:80:69:26:1f:81:45:7f:14:0d:70:1b:e5:e2:c8:45:da:cf:
59:e6:59:d3:e1:a8:50:40:f0:57:4f:52:1d:c5:75:c0:68:ef:
2c:f1:20:96:14:91:e2:d7:58:53:23:fb:ed:80:41:de:8e:d1:
64:53:f8:56:bc:55:6b:c8:37:a7:7d:5e:ae:db:7e:c9:94:1f:
dc:96:f9:92:d5:3d:93:f7:06:71:17:26:c0:83:f8:23:f4:fc:
6e:81:31:0c:eb:1a:68:d9:f4:69:6e:0a:d0:26:34:07:ce:4f:
cf:e2:f0:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:42:08 2026 by rpki-client