
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/EBFE4CA91514CAC61F1B83534BB158D90BDD4142.mft
File: EBFE4CA91514CAC61F1B83534BB158D90BDD4142.mft (raw, json)
Hash identifier: I9l2i8D4FnH90tXE5wINQdy1Ds5nRue/7RSjIiN/Z0U=
Subject key identifier: 0B:B7:E0:22:15:AB:66:E7:2F:B0:E2:03:C5:B5:97:66:7B:06:C1:86
Authority key identifier: EB:FE:4C:A9:15:14:CA:C6:1F:1B:83:53:4B:B1:58:D9:0B:DD:41:42
Certificate issuer: /CN=EBFE4CA91514CAC61F1B83534BB158D90BDD4142
Certificate serial: 25B5D5EB188F03DC73C3D52945D9BDD90F1EAE9C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EBFE4CA91514CAC61F1B83534BB158D90BDD4142.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/EBFE4CA91514CAC61F1B83534BB158D90BDD4142.mft
Manifest number: C4
Signing time: Fri 25 Sep 2026 15:54:56 +0000
Manifest this update: Fri 25 Sep 2026 15:49:56 +0000
Manifest next update: Sat 26 Sep 2026 15:56:56 +0000
Files and hashes: 1: EBFE4CA91514CAC61F1B83534BB158D90BDD4142.crl (hash: emDz9TZKYhiK267JSRE+svQCK1QeuCOVStAYL3OHhro=)
2: 323030313a6466333a356334303a3a2f34382d3438203d3e20313431313236.roa (hash: hTFuMvwmOj1lUIuO6NPn3OHHpBVIbvNuSActpFl0hWE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/EBFE4CA91514CAC61F1B83534BB158D90BDD4142.crl
rsync://rpki-rsync.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/EBFE4CA91514CAC61F1B83534BB158D90BDD4142.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EBFE4CA91514CAC61F1B83534BB158D90BDD4142.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 26 Sep 2026 15:56:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:b5:d5:eb:18:8f:03:dc:73:c3:d5:29:45:d9:bd:d9:0f:1e:ae:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EBFE4CA91514CAC61F1B83534BB158D90BDD4142
Validity
Not Before: Sep 25 15:49:56 2026 GMT
Not After : Sep 26 15:56:56 2026 GMT
Subject: CN=0BB7E02215AB66E72FB0E203C5B597667B06C186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:82:98:a3:10:5b:ab:41:a4:64:e3:b1:37:a5:
98:02:b0:29:b9:dd:59:54:34:3a:76:43:4f:e0:b0:
0d:96:67:9c:09:52:27:36:b6:0e:31:1c:e8:27:f5:
81:25:c1:ba:f3:10:90:1c:36:76:58:f2:4d:57:03:
80:8b:bc:48:79:82:69:f8:65:d9:36:60:f1:19:43:
e6:50:02:8e:61:b1:bd:46:fa:74:4c:c3:24:67:e6:
5f:cb:70:0a:02:99:18:92:2d:09:e4:ab:b9:93:6d:
1c:36:c0:e8:ad:72:53:a0:03:1d:71:fe:27:dc:88:
f1:ab:c2:e8:32:7d:60:4a:d6:06:3d:fd:71:47:1b:
e0:58:e7:a2:0e:34:8c:2f:94:6b:4e:fd:72:8a:23:
35:cd:2c:63:a7:45:c7:80:e9:ae:07:73:06:59:39:
3a:0a:b8:49:ba:69:29:3d:9d:62:4d:35:de:70:9d:
42:ac:90:f9:29:bf:4d:2b:8c:a5:fa:86:40:2c:bf:
06:70:1d:fe:9d:f7:99:24:08:ec:9b:c4:4e:d1:2e:
c9:94:ec:2f:c3:a1:91:f9:7e:49:4e:39:fa:f2:7f:
dc:c7:02:55:52:d2:72:3e:9b:58:f1:cb:99:9f:05:
72:e1:f0:7e:a9:e3:09:31:96:b5:03:bc:0e:14:8f:
c6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:B7:E0:22:15:AB:66:E7:2F:B0:E2:03:C5:B5:97:66:7B:06:C1:86
X509v3 Authority Key Identifier:
keyid:EB:FE:4C:A9:15:14:CA:C6:1F:1B:83:53:4B:B1:58:D9:0B:DD:41:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/EBFE4CA91514CAC61F1B83534BB158D90BDD4142.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EBFE4CA91514CAC61F1B83534BB158D90BDD4142.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/EBFE4CA91514CAC61F1B83534BB158D90BDD4142.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:71:1d:59:f5:2d:f5:c1:cc:66:96:50:c3:55:97:95:ef:db:
7d:83:ff:4f:70:59:df:4c:61:e2:fd:0d:57:42:58:22:d4:99:
eb:d6:5b:1e:a6:89:f5:0a:72:d1:f9:01:88:c7:0a:47:f2:44:
8c:5a:7b:db:3a:78:56:0b:5c:ac:ac:b3:dc:63:4e:33:d7:8a:
3a:12:96:15:ac:3d:2f:78:26:f4:99:2c:c6:5c:84:ed:4e:c1:
2f:3c:d0:5f:53:98:ed:bb:da:8a:4a:30:21:88:19:41:16:96:
c6:5d:c3:fb:87:e2:89:3a:52:bd:e6:24:cf:7c:15:e5:76:c6:
1d:2d:b0:ff:0b:ee:4a:90:8b:02:42:d0:9a:52:ac:3c:6f:f4:
eb:65:1e:c9:bb:f2:e6:8b:2b:c0:48:ac:a2:f5:82:a4:14:52:
94:56:81:4b:01:ec:77:a3:89:f1:ee:b9:11:5f:ae:dc:0f:4b:
b2:b2:40:53:b7:98:a8:02:b5:16:52:95:8a:fd:44:99:e5:5e:
88:e8:32:f0:c9:e5:1a:e8:55:e8:43:24:12:6d:f2:87:32:96:
ee:8d:39:7a:bb:d2:60:a1:5a:ef:68:f4:a1:68:a1:43:61:ff:
4d:32:9a:a8:70:04:6d:5d:40:6f:a9:fa:ca:e3:04:d6:3e:6d:
7f:b6:70:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:03:42 2026 by rpki-client