
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/ED174C0150D63525F5DB20F0992EDEECD70380E5.mft
File: ED174C0150D63525F5DB20F0992EDEECD70380E5.mft (raw, json)
Hash identifier: DitREpUsGTT5I75ufVRzDPK0QmJX1Aq/710/yc1KfWY=
Subject key identifier: 5A:34:AF:DD:D2:DB:5A:C4:60:55:FA:E2:A7:52:37:63:B0:28:1F:F2
Authority key identifier: ED:17:4C:01:50:D6:35:25:F5:DB:20:F0:99:2E:DE:EC:D7:03:80:E5
Certificate issuer: /CN=ED174C0150D63525F5DB20F0992EDEECD70380E5
Certificate serial: 16529C37745B70C06BB8B61666343F38C7E5B9F3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED174C0150D63525F5DB20F0992EDEECD70380E5.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/ED174C0150D63525F5DB20F0992EDEECD70380E5.mft
Manifest number: C3
Signing time: Fri 25 Sep 2026 02:33:23 +0000
Manifest this update: Fri 25 Sep 2026 02:28:23 +0000
Manifest next update: Sat 26 Sep 2026 04:57:23 +0000
Files and hashes: 1: 3130332e3131302e33342e302f32332d3234203d3e20313530393336.roa (hash: MaBel9u9pYezsd1ShGGBnY40dDIrzHcanWzm4FOSRAg=)
2: 3130332e3131302e33342e302f32342d3234203d3e203438343635.roa (hash: 3XmUzAiqVZaFyzkEVDaETxoV3L7puo8oceCYnEmmitg=)
3: 3130332e3131302e33352e302f32342d3234203d3e203438343635.roa (hash: bfhOCogzMUQqHoQaSn812eSk7yOuSzPxVDD+Nz5nDsc=)
4: 3130332e3131302e33352e302f32342d3234203d3e20313530393336.roa (hash: n4IkgoMW2u0zkFgXDHL0eZSUTKgr/z1ZRj5PZ9Dfmxk=)
5: 3130332e3131302e33342e302f32342d3234203d3e20313530393336.roa (hash: zmRnpGvMIJDXa5x4jILWd60y8Q5Ncg1iyAcAcxswFl4=)
6: ED174C0150D63525F5DB20F0992EDEECD70380E5.crl (hash: I2Ty/To5uyRM6BspvGH/DpLRUhJQ5uQdFgZ5p/GcoEI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/ED174C0150D63525F5DB20F0992EDEECD70380E5.crl
rsync://rpki-rsync.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/ED174C0150D63525F5DB20F0992EDEECD70380E5.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED174C0150D63525F5DB20F0992EDEECD70380E5.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 26 Sep 2026 04:57:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:52:9c:37:74:5b:70:c0:6b:b8:b6:16:66:34:3f:38:c7:e5:b9:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ED174C0150D63525F5DB20F0992EDEECD70380E5
Validity
Not Before: Sep 25 02:28:23 2026 GMT
Not After : Sep 26 04:57:23 2026 GMT
Subject: CN=5A34AFDDD2DB5AC46055FAE2A7523763B0281FF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:04:dd:d2:cb:a9:6c:01:ed:ef:87:9f:e1:36:
79:36:7a:cb:d7:bf:94:51:32:34:96:52:fd:66:04:
3f:55:10:b4:3e:d3:d6:5f:61:2b:02:18:ec:bd:f1:
d2:89:71:c2:8b:91:20:45:99:c7:07:de:01:0f:c3:
0f:11:81:80:2b:2e:b4:32:99:ea:b2:a2:6d:d2:ec:
6d:67:cc:29:5f:ef:f3:b1:50:40:c7:0e:b4:7c:d0:
e5:4c:88:16:61:f1:13:37:ff:ce:96:3a:1d:34:11:
85:aa:e7:1f:ff:a9:27:05:89:49:94:7d:34:d4:fb:
87:06:24:c9:d8:bb:ea:3d:25:f1:49:ec:98:5f:08:
b3:6b:f1:fc:d1:e1:17:82:6a:69:00:cc:9f:0f:12:
15:e7:9d:fc:ca:1c:43:2c:63:81:c0:74:31:79:7c:
ee:55:94:8f:0e:24:b7:01:26:a0:ed:94:24:7b:92:
06:b6:e9:65:90:ff:d9:9d:68:78:b4:8f:3f:2d:ca:
c1:3c:01:a2:3d:61:36:b6:a5:80:c0:01:79:ff:20:
aa:06:a4:ec:44:c6:85:be:a5:16:de:29:93:b7:19:
8d:02:51:e7:19:e0:14:5f:42:95:fb:6e:14:1d:ba:
7e:a6:a1:80:cb:10:6e:57:0b:fc:6a:af:02:6a:0f:
28:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:34:AF:DD:D2:DB:5A:C4:60:55:FA:E2:A7:52:37:63:B0:28:1F:F2
X509v3 Authority Key Identifier:
keyid:ED:17:4C:01:50:D6:35:25:F5:DB:20:F0:99:2E:DE:EC:D7:03:80:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/ED174C0150D63525F5DB20F0992EDEECD70380E5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED174C0150D63525F5DB20F0992EDEECD70380E5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/ED174C0150D63525F5DB20F0992EDEECD70380E5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:c4:64:0d:95:e7:93:d5:7f:e2:81:82:6b:34:a6:6b:82:4c:
2b:17:df:ec:cb:2c:9a:21:f2:c6:46:20:46:69:f6:6e:e9:a4:
74:72:f4:e2:a9:23:f3:36:2b:bb:6e:3e:f8:93:77:41:3a:bd:
59:9c:4c:9c:06:fe:36:2d:31:6c:09:84:78:17:77:58:2c:79:
6f:42:1e:a0:40:85:26:de:68:90:25:ff:0d:3e:49:4f:e2:ad:
df:3b:e7:14:82:ca:08:d8:1f:50:2e:9c:9a:95:d7:e8:07:0f:
11:5a:59:ec:47:a6:a4:aa:55:5e:c5:bf:52:29:5d:cd:2e:61:
ad:4c:17:f4:ef:e4:dd:d0:9a:04:16:25:be:3c:53:61:00:11:
8d:e0:5d:f4:92:cc:a3:bf:ef:7b:8f:d6:15:af:1f:dd:2c:61:
63:b0:91:d7:58:da:0c:79:69:81:4e:7d:df:c5:43:68:c9:2c:
de:35:d5:a3:4c:c6:7c:7b:f9:fd:cc:2a:48:75:8b:6f:d4:c3:
56:c8:14:56:00:32:ac:48:50:6d:5a:67:f0:62:cd:7a:16:4b:
f5:2d:8a:87:24:2c:fd:43:5b:e1:60:06:a0:18:ef:7c:14:27:
dd:b1:06:e3:e5:4e:62:f9:34:e2:0a:26:1d:05:24:af:92:2b:
b0:e3:43:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:16:04 2026 by rpki-client