
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/2EAB22DEDA17C8633520C765C1BECE6852B8BD70.mft
File: 2EAB22DEDA17C8633520C765C1BECE6852B8BD70.mft (raw, json)
Hash identifier: foGP+ZQPX0f7nXsS9YDHpJX4ngK3kK/QeHWPImraFac=
Subject key identifier: 48:6A:7F:11:D7:AD:CE:CC:04:BA:C5:C5:64:71:EF:94:3C:A3:2C:33
Authority key identifier: 2E:AB:22:DE:DA:17:C8:63:35:20:C7:65:C1:BE:CE:68:52:B8:BD:70
Certificate issuer: /CN=2EAB22DEDA17C8633520C765C1BECE6852B8BD70
Certificate serial: 59DC167328F6A34F8113D3CF66DEBDAA338F0076
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2EAB22DEDA17C8633520C765C1BECE6852B8BD70.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/2EAB22DEDA17C8633520C765C1BECE6852B8BD70.mft
Manifest number: C3
Signing time: Fri 25 Sep 2026 14:07:47 +0000
Manifest this update: Fri 25 Sep 2026 14:02:47 +0000
Manifest next update: Sat 26 Sep 2026 18:04:47 +0000
Files and hashes: 1: 2EAB22DEDA17C8633520C765C1BECE6852B8BD70.crl (hash: o7gAd1HBtXeWKL7LqRpvxEVmP4AbXES4Wl4646h3B1g=)
2: 3130332e3133322e31352e302f32342d3234203d3e20313331373336.roa (hash: dpRjxkyvMZSuMwoiOFiEbs0aVfBM9F5a6WoDjj2reGk=)
3: 323430343a326363303a34343a3a2f34362d3436203d3e20313331373336.roa (hash: GR4L5FJqVS9TJ+dvaa8HynQA+y7YhiRBbKDogiUCsq4=)
4: 3130332e3133322e31332e302f32342d3234203d3e20313331373336.roa (hash: NS29Duq3Ad0Oay5mRumCSue0EKVMXVW+d3uV6la1Mk4=)
5: 3130332e3133322e31322e302f32342d3234203d3e20313331373336.roa (hash: VaVs+XiSWxs1hEguef/hHo/bNFA4CcDh7KZrSmxpBag=)
6: 323430343a326363303a34633a3a2f34362d3436203d3e20313331373336.roa (hash: cS+IrgZpY9aClZBoWCUDEv2Phmt7SwlOezLlcCoBSPI=)
7: 323430343a326363303a34383a3a2f34362d3436203d3e20313331373336.roa (hash: jZfpgRC0d5fkEjm8vD7qc9gZsnKZQYBh0EboO+Uho7s=)
8: 323430343a326363303a35343a3a2f34362d3436203d3e20313331373336.roa (hash: R7p8u3fUD9Q1PWm/nzBs05bZYIMNm4aJaBgF+3K7/6A=)
9: 323430343a326363303a35383a3a2f34362d3436203d3e20313331373336.roa (hash: 2ePu3EHR90dClUt0r5HRZza+Dx4B+Kag1aBuSmuBj9s=)
10: 323430343a326363303a34303a3a2f34362d3436203d3e20313331373336.roa (hash: xUpoxjFUHIIvNkT92mjiWI0plg15apjL+jPNvQQ2Uk8=)
11: 3130332e3133322e31342e302f32342d3234203d3e20313331373336.roa (hash: HJc5JvMy8GHohXvfOoaZGX6TD+10pfnhOdLgXA7YFDo=)
12: 323430343a326363303a32303a3a2f34332d3433203d3e20313331373336.roa (hash: fToGnwAHAJ5VtIANKumAt4uzlSvc7R1/Zv4oJQS4kF0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/2EAB22DEDA17C8633520C765C1BECE6852B8BD70.crl
rsync://rpki-rsync.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/2EAB22DEDA17C8633520C765C1BECE6852B8BD70.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2EAB22DEDA17C8633520C765C1BECE6852B8BD70.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 26 Sep 2026 17:58:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:dc:16:73:28:f6:a3:4f:81:13:d3:cf:66:de:bd:aa:33:8f:00:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2EAB22DEDA17C8633520C765C1BECE6852B8BD70
Validity
Not Before: Sep 25 14:02:47 2026 GMT
Not After : Sep 26 18:04:47 2026 GMT
Subject: CN=486A7F11D7ADCECC04BAC5C56471EF943CA32C33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:c1:a9:ec:ae:00:01:53:b8:04:89:90:d6:b2:
93:7f:cb:a7:fc:bd:7e:cd:b0:d3:74:d7:c0:e8:54:
1c:8f:6d:f0:d8:00:13:82:68:d3:19:47:20:15:11:
ae:54:2d:d6:d5:25:c0:5a:c9:79:5f:0f:de:b7:48:
78:74:dc:4d:c2:28:41:e6:36:10:41:d8:73:1c:33:
e4:1c:ce:7b:c0:f9:8e:81:cd:5c:af:40:56:16:36:
98:55:a6:fe:bd:0a:73:be:52:c2:74:56:01:05:e8:
8a:28:88:04:7c:66:15:c4:28:24:b7:a6:b3:cd:83:
67:33:ce:95:a8:91:91:0f:86:35:03:31:ec:30:89:
f5:c2:d6:3b:2c:f4:61:18:0f:d6:c5:38:c6:dc:6a:
9a:11:21:83:02:1f:45:69:ba:41:f2:25:45:c0:4f:
85:cb:ed:53:ee:38:bc:cf:30:bc:82:28:b8:8f:94:
ff:07:b7:00:f1:5e:57:fc:ae:a5:73:a2:b8:80:6a:
1e:ff:09:38:85:06:25:7b:5e:0a:ae:81:f7:36:d7:
13:4b:be:7c:59:99:91:1a:f4:a1:3a:d3:fd:a0:a5:
50:b8:15:40:1e:7c:17:b9:41:e4:6f:05:e9:a3:db:
e2:32:f4:1d:9a:e1:92:b0:c1:8b:fc:53:60:72:ae:
46:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:6A:7F:11:D7:AD:CE:CC:04:BA:C5:C5:64:71:EF:94:3C:A3:2C:33
X509v3 Authority Key Identifier:
keyid:2E:AB:22:DE:DA:17:C8:63:35:20:C7:65:C1:BE:CE:68:52:B8:BD:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/2EAB22DEDA17C8633520C765C1BECE6852B8BD70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2EAB22DEDA17C8633520C765C1BECE6852B8BD70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/2EAB22DEDA17C8633520C765C1BECE6852B8BD70.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:26:42:2b:fc:68:bb:7b:5b:f3:07:bf:07:b3:43:9e:dd:4e:
93:a2:9d:07:a6:99:38:e6:58:6c:aa:5e:02:8c:e8:42:71:18:
25:ae:df:f4:79:2d:c4:8e:9d:08:9c:65:47:5b:a1:60:82:bb:
71:bb:f8:5d:02:db:4d:42:9f:b7:44:8b:8b:1e:74:67:38:f0:
6c:c1:02:94:56:40:f9:dc:f9:9a:42:d5:34:ca:84:77:3b:0e:
8d:4b:1f:18:18:f4:6a:9b:74:72:71:78:86:62:15:b0:16:c4:
6c:c4:16:02:73:72:1b:e5:08:24:51:75:8b:ac:21:8f:03:d7:
1e:ef:a0:94:25:31:b8:16:26:a2:b4:f2:c2:6e:06:ff:e3:f3:
33:c6:ff:75:45:f7:6b:2e:ed:aa:13:83:59:74:30:19:97:7c:
cc:8f:c5:7b:ee:1b:42:0d:f4:62:45:04:da:26:f8:0d:29:f9:
4f:de:37:a6:f4:42:eb:fd:72:cc:1d:a5:63:a6:a4:a2:69:48:
2b:ca:21:fe:2f:a5:df:82:38:4c:d0:6a:09:da:bd:92:57:29:
ad:4c:8f:17:38:a8:d8:e4:be:b2:49:95:3b:73:0e:6e:f8:2b:
8d:31:a0:ee:49:fa:d0:6b:45:6e:98:27:1c:46:1d:19:78:bd:
65:6b:95:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:07:50 2026 by rpki-client