
$ rpki-client -vvf rpki-rsync.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.mft
File: ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.mft (raw, json)
Hash identifier: KpflPzS6n4s5cIj7OIo2q96BhZFusJODqYxA0o4JZ9k=
Subject key identifier: 35:01:22:EA:B5:4B:B4:C6:5F:53:13:AC:9F:DC:90:1A:D3:5A:D0:E5
Authority key identifier: ED:7B:59:44:27:AC:B8:0A:1E:B2:E4:E9:2D:5E:6B:A6:86:3E:29:F4
Certificate issuer: /CN=ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4
Certificate serial: 39F597033FC57C85E82BC3D5732121CDF1E75A4E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 19:09:50 +0000
Manifest this update: Tue 12 May 2026 19:04:50 +0000
Manifest next update: Wed 13 May 2026 20:03:50 +0000
Files and hashes: 1: 3130332e3231362e3138382e302f32342d3234203d3e20313431313037.roa (hash: GSlw3zzCCuqCV+/TWCeBscNvFDaa+2WNBQy+mh6Ibro=)
2: 323030313a6466313a666530303a3a2f34382d3438203d3e20313431313037.roa (hash: dibahg/ZGqEkwi1huDaO1AQr5xbgMUcTUuKbdZGTir8=)
3: 3130332e3232302e34372e302f32342d3234203d3e20313431313037.roa (hash: rmdjm7QqoJ2GS17azzOS2oUqFKYvi6CMQRKzm3faQVA=)
4: ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.crl (hash: evJ6TqXnnd305aHoBDVmTQgb1vCSgyOI410jdH7596s=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.crl
rsync://rpki-rsync.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:f5:97:03:3f:c5:7c:85:e8:2b:c3:d5:73:21:21:cd:f1:e7:5a:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4
Validity
Not Before: May 12 19:04:50 2026 GMT
Not After : May 13 20:03:50 2026 GMT
Subject: CN=350122EAB54BB4C65F5313AC9FDC901AD35AD0E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:50:4c:76:86:bb:fb:1d:1d:fc:14:24:2e:d5:
54:56:5e:d6:0b:e5:5b:bd:19:60:69:03:e3:e5:91:
35:a6:48:4a:9f:64:43:cd:41:97:1b:9a:d1:9b:c4:
34:a0:b7:67:f2:b2:40:84:82:3e:29:11:e0:e0:1b:
26:16:5c:2e:bf:3c:9e:80:22:c9:b9:85:29:0d:6d:
ca:f3:8f:6d:12:79:64:cf:42:20:25:be:98:b8:f8:
1c:44:78:ce:6d:7a:0e:78:f1:39:a0:ac:97:24:e4:
36:b2:0f:8b:1b:cb:16:6c:57:68:a4:e0:8b:7f:05:
5b:4e:7b:90:04:03:66:27:e6:29:55:e6:88:0a:37:
95:84:0e:06:12:92:41:94:7b:ea:c4:3a:24:bf:3a:
69:06:87:36:ae:6e:4b:1a:53:96:57:1e:0e:e6:4b:
6b:ab:0e:9c:af:47:27:96:94:f9:7d:95:30:c5:6a:
40:55:45:ec:b6:2a:12:4c:26:43:32:0b:83:f4:5a:
04:79:72:36:c4:33:e7:7d:f4:c9:ad:c2:58:77:4a:
63:d9:ce:ee:30:56:67:32:1c:23:f1:bf:d0:bd:6d:
3f:81:1b:0e:b5:f1:94:61:20:7e:5f:a6:db:89:0e:
2e:37:c3:0a:c5:f0:f5:ce:5c:48:d3:8f:51:b7:67:
a1:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:01:22:EA:B5:4B:B4:C6:5F:53:13:AC:9F:DC:90:1A:D3:5A:D0:E5
X509v3 Authority Key Identifier:
keyid:ED:7B:59:44:27:AC:B8:0A:1E:B2:E4:E9:2D:5E:6B:A6:86:3E:29:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:13:bf:35:1a:7e:25:a7:4e:63:31:a8:eb:e3:2c:f7:c2:37:
9b:aa:1f:eb:eb:51:17:1d:21:ca:d4:3f:8e:4a:6e:ea:36:e4:
3f:3d:49:6e:00:36:b3:d6:de:37:85:75:28:bb:1e:13:da:c3:
55:86:60:65:b8:c1:08:26:7f:6e:eb:07:6a:54:c5:36:b7:22:
5b:4c:78:f3:34:1c:6a:49:b0:6e:53:07:63:5a:29:1a:b5:9c:
92:99:bc:bb:42:f1:76:7c:8d:47:43:d2:ff:d6:31:7a:54:94:
b5:cf:6b:2f:20:33:8f:17:96:be:15:6f:83:e4:a5:5d:71:33:
7d:83:c9:92:6d:2e:b3:cd:b6:41:aa:59:05:45:78:6b:5e:e6:
2c:40:d1:4b:a1:b8:2c:43:d3:1a:91:1c:d1:e9:09:88:42:ed:
38:dc:4d:23:00:03:ff:3e:75:71:74:c1:cd:1f:56:80:12:a6:
48:aa:f8:d6:f1:2f:dd:05:23:19:bf:47:ef:cd:ad:d0:71:3e:
73:68:ba:bf:36:48:6c:79:0b:24:fd:b9:d1:b2:07:8b:ce:1c:
3f:2b:22:08:89:59:d9:28:7c:34:de:d5:27:10:c3:ba:5b:a2:
8a:43:e9:65:60:e6:b0:28:76:e5:ca:c7:c2:ce:23:7a:b4:92:
d0:d2:a4:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:36:02 2026 by rpki-client