
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/EAA4FE45195D514CCA759DE1CF2124DCD840A8DB.mft
File: EAA4FE45195D514CCA759DE1CF2124DCD840A8DB.mft (raw, json)
Hash identifier: rUM4ufsiiaPBTpfwV4wA84GNx3BJXFTbwIdIy2RgL8A=
Subject key identifier: F4:0C:A2:A8:F2:39:62:EC:55:77:BB:25:90:0E:66:78:45:DF:56:2D
Authority key identifier: EA:A4:FE:45:19:5D:51:4C:CA:75:9D:E1:CF:21:24:DC:D8:40:A8:DB
Certificate issuer: /CN=EAA4FE45195D514CCA759DE1CF2124DCD840A8DB
Certificate serial: 63FC5517308D6A0412057F8D2E7E83B1FDCF5F36
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAA4FE45195D514CCA759DE1CF2124DCD840A8DB.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/EAA4FE45195D514CCA759DE1CF2124DCD840A8DB.mft
Manifest number: C1
Signing time: Fri 25 Sep 2026 03:49:55 +0000
Manifest this update: Fri 25 Sep 2026 03:44:55 +0000
Manifest next update: Sat 26 Sep 2026 04:12:55 +0000
Files and hashes: 1: EAA4FE45195D514CCA759DE1CF2124DCD840A8DB.crl (hash: kfZGTith4ijI+qAAg5NcLbf6uih8DVdNL8B+brRSjDE=)
2: 3130332e3136312e3131342e302f32332d3234203d3e20313431363132.roa (hash: AuCdih88NSq35lOqDy4yw7F/uYDNOpEkZusC24B4jX8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/EAA4FE45195D514CCA759DE1CF2124DCD840A8DB.crl
rsync://rpki-rsync.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/EAA4FE45195D514CCA759DE1CF2124DCD840A8DB.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAA4FE45195D514CCA759DE1CF2124DCD840A8DB.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 26 Sep 2026 04:12:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:fc:55:17:30:8d:6a:04:12:05:7f:8d:2e:7e:83:b1:fd:cf:5f:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EAA4FE45195D514CCA759DE1CF2124DCD840A8DB
Validity
Not Before: Sep 25 03:44:55 2026 GMT
Not After : Sep 26 04:12:55 2026 GMT
Subject: CN=F40CA2A8F23962EC5577BB25900E667845DF562D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fa:7d:60:07:f5:0b:0d:10:5f:9c:fa:44:c1:
32:06:df:44:e0:b6:f3:6f:ef:58:54:ed:ce:8f:55:
25:d8:e7:20:4b:c3:75:3f:4e:ad:e7:22:40:db:84:
ab:9d:38:c8:3c:e0:56:51:b5:a9:71:23:0d:4e:cc:
b4:c2:b3:8d:8d:22:38:0f:c6:11:f2:bd:1e:09:71:
76:77:77:cc:0d:01:a1:ad:f3:b3:b7:df:ec:f1:04:
9f:eb:9d:71:34:99:21:de:28:3e:88:54:84:e1:71:
05:ed:a5:0d:89:35:e2:19:ef:58:98:dd:70:d8:c4:
fa:73:c9:93:1b:65:41:59:e7:46:dc:4f:22:cd:df:
61:61:e5:96:fc:1b:70:70:77:c3:51:d0:3c:48:de:
a5:7d:7d:98:1b:37:42:df:e1:ae:01:67:7f:7c:09:
37:c4:18:18:fc:cd:d9:73:e1:b1:95:a3:5d:dd:a0:
b8:e7:0e:4b:b0:fb:14:e2:3e:ce:93:c1:54:1f:d9:
f9:ab:08:5c:5f:67:92:2c:c0:80:be:33:b2:79:4b:
72:f6:a2:eb:3a:4c:5b:c1:94:95:c1:1a:1a:43:81:
f8:13:b2:31:03:87:95:96:d4:22:d5:ad:dc:bd:a4:
03:bc:c3:82:c1:f7:d5:b4:5c:3e:76:79:b1:34:a2:
1c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:0C:A2:A8:F2:39:62:EC:55:77:BB:25:90:0E:66:78:45:DF:56:2D
X509v3 Authority Key Identifier:
keyid:EA:A4:FE:45:19:5D:51:4C:CA:75:9D:E1:CF:21:24:DC:D8:40:A8:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/EAA4FE45195D514CCA759DE1CF2124DCD840A8DB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAA4FE45195D514CCA759DE1CF2124DCD840A8DB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/EAA4FE45195D514CCA759DE1CF2124DCD840A8DB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:b3:7f:e0:af:c6:05:c9:de:e2:9f:5c:09:2a:c2:2f:e2:32:
30:4f:55:c6:0c:25:bd:59:82:0f:40:26:17:31:d1:0c:22:91:
99:91:b6:ca:8a:24:af:14:bc:b4:ea:1c:44:0d:b6:18:10:df:
86:db:27:11:ec:57:92:72:41:ab:d6:05:56:08:82:c6:ba:d7:
14:31:e2:74:18:6b:84:34:d3:f8:28:44:b9:ff:53:f0:77:91:
08:ad:f6:da:ea:74:c2:67:95:b1:6d:b4:76:83:e0:c9:72:cb:
38:5d:ce:28:ed:be:5a:df:af:7b:67:ec:cb:d0:39:aa:83:8d:
ad:a3:52:0a:41:c5:3f:8d:ef:53:33:cb:16:e3:59:c5:d5:7e:
d8:f8:c0:f1:dd:20:53:8f:e2:10:63:b8:56:50:12:70:74:89:
9a:b8:3d:4b:78:20:00:b2:ac:df:f2:c2:eb:1e:ba:0a:d1:6d:
ff:05:fd:ff:f3:e6:38:8f:6e:91:e8:12:88:16:04:b4:f5:dd:
1b:89:97:78:5e:37:03:af:f4:d6:25:36:6c:2b:89:1b:3d:a1:
76:98:f6:d5:72:03:63:4f:ca:83:66:a1:2a:59:fc:62:ff:5c:
75:e6:69:28:d5:f0:ec:02:61:ba:eb:40:d4:0b:d4:c7:32:3d:
77:9a:2d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:34:39 2026 by rpki-client