
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/EBF23572810F8726C4B72E50589964A910C50B4B.mft
File: EBF23572810F8726C4B72E50589964A910C50B4B.mft (raw, json)
Hash identifier: C/ZZoUEMBKV0+z+L2Nfzbg9QoXKUaw6z13c/045cTno=
Subject key identifier: 20:3F:CC:84:B6:93:8D:8C:2A:2B:41:F9:AD:5C:70:2C:0C:65:37:A9
Authority key identifier: EB:F2:35:72:81:0F:87:26:C4:B7:2E:50:58:99:64:A9:10:C5:0B:4B
Certificate issuer: /CN=EBF23572810F8726C4B72E50589964A910C50B4B
Certificate serial: 3DD6905EDA4FDAC634F0A9EBE38DAB554826C4
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EBF23572810F8726C4B72E50589964A910C50B4B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/EBF23572810F8726C4B72E50589964A910C50B4B.mft
Manifest number: 0F
Signing time: Wed 13 May 2026 00:03:23 +0000
Manifest this update: Tue 12 May 2026 23:58:23 +0000
Manifest next update: Thu 14 May 2026 03:18:23 +0000
Files and hashes: 1: EBF23572810F8726C4B72E50589964A910C50B4B.crl (hash: T83yHVqqLhR0Je2o733ihW8YFCEQemRZqbaXKyqxX0c=)
2: 3130332e3135312e39322e302f32332d3234203d3e203435323935.roa (hash: l97XL+b3anmLCwyyq3iPYCEWOtlJt1r4AiG3G4acaMc=)
3: 323430373a343630303a3a2f33322d3438203d3e203435323935.roa (hash: pwFWQeeNE8aLdvpKEf3Cftf5A02g3uDsYu8O+3yCUbE=)
4: 3131332e3231322e3136302e302f32312d3234203d3e203435323935.roa (hash: sfi5wZHa7EFMZctUVQihd5OvgHWotWx/JrU33FAshF0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/EBF23572810F8726C4B72E50589964A910C50B4B.crl
rsync://rpki-rsync.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/EBF23572810F8726C4B72E50589964A910C50B4B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EBF23572810F8726C4B72E50589964A910C50B4B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 03:18:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:d6:90:5e:da:4f:da:c6:34:f0:a9:eb:e3:8d:ab:55:48:26:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EBF23572810F8726C4B72E50589964A910C50B4B
Validity
Not Before: May 12 23:58:23 2026 GMT
Not After : May 14 03:18:23 2026 GMT
Subject: CN=203FCC84B6938D8C2A2B41F9AD5C702C0C6537A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a7:60:c1:ee:63:61:35:31:d1:9c:73:33:8e:
02:a5:0e:17:13:de:da:6a:d3:e7:97:21:7d:bf:7d:
8c:b4:3f:be:e0:b3:d9:a3:61:8d:6a:a0:77:94:04:
25:7e:98:69:a4:93:64:41:1d:4a:4d:ae:ba:47:17:
2b:b4:52:ea:f9:d9:14:74:26:5c:d6:cb:67:66:5e:
ce:94:4e:02:bd:e0:5a:4e:00:78:b4:f4:45:96:91:
21:ff:24:79:63:ef:3c:b1:6c:3a:9f:e5:6d:fb:91:
11:6f:52:4f:43:7c:b1:f6:58:f3:8e:89:91:09:73:
67:c3:9e:e5:f7:8c:d1:eb:36:45:17:25:47:94:79:
1f:45:c9:dc:2b:da:a2:64:3d:a3:8e:a4:4e:92:d9:
72:48:e4:85:35:0e:93:8c:50:e7:01:0c:96:01:32:
78:a3:52:1f:b1:1b:14:f3:e4:d1:16:68:62:a5:c9:
d4:f2:5a:76:58:a7:9f:06:9f:b5:f8:5b:83:e7:74:
4a:d7:ac:9c:6e:08:60:e0:7e:67:bc:85:45:4f:89:
5d:49:f2:a8:1f:29:0c:19:13:56:a6:fc:63:9a:fd:
cc:cf:65:52:fa:5e:d0:c0:2e:35:4d:07:0c:fc:cb:
d2:a7:5b:c7:8b:1a:2d:1c:13:d6:59:85:ab:bb:11:
46:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:3F:CC:84:B6:93:8D:8C:2A:2B:41:F9:AD:5C:70:2C:0C:65:37:A9
X509v3 Authority Key Identifier:
keyid:EB:F2:35:72:81:0F:87:26:C4:B7:2E:50:58:99:64:A9:10:C5:0B:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/EBF23572810F8726C4B72E50589964A910C50B4B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EBF23572810F8726C4B72E50589964A910C50B4B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/EBF23572810F8726C4B72E50589964A910C50B4B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:59:4a:20:b4:ac:e3:15:a9:83:6c:dd:08:a3:88:3b:25:0f:
aa:dc:81:82:0c:5a:e4:5a:ac:bb:e0:cb:49:d0:5d:b7:c2:32:
3c:4b:44:4a:38:d5:d6:97:dc:d7:25:65:35:d8:24:3c:17:ff:
7b:04:2e:fa:5d:f1:6d:ba:1a:6a:52:35:d5:2d:59:bf:1f:1e:
2a:ce:54:07:c3:cd:2d:bf:8a:d6:24:7f:40:73:87:fc:cd:fb:
72:dd:24:bb:44:9f:11:50:ee:51:92:41:63:0e:e5:4a:ab:57:
09:27:ac:0f:02:16:9c:bc:fe:28:31:94:10:0f:3b:35:b4:07:
89:10:e4:66:cb:e3:f0:cb:ac:ad:56:51:69:06:26:22:0a:5c:
d0:70:67:72:55:d1:3d:bb:00:64:ec:fa:36:1b:9a:92:d8:d3:
01:75:48:58:bb:f5:41:f9:c0:52:f6:25:97:fe:e8:c3:72:e4:
18:fe:cd:c0:dc:ea:c7:7f:01:29:2a:5e:07:29:02:d0:82:2f:
69:9c:b2:27:3b:a7:69:ee:c4:8f:eb:44:40:b4:d4:70:e7:3f:
58:08:20:f2:64:eb:77:93:d1:c6:b0:e3:3c:1a:95:31:2c:80:
2b:bd:d5:cf:7e:05:e7:b7:3f:46:3b:a3:09:25:b7:58:49:28:
16:08:6f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:38:05 2026 by rpki-client