
$ rpki-client -vvf rpki-rsync.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/EA413FBCBE2BF73652D85102495ECE33E9330D0F.mft
File: EA413FBCBE2BF73652D85102495ECE33E9330D0F.mft (raw, json)
Hash identifier: ZkHRovuffChBlBoiUKuQtqQhKvZbk5bF4j60x/D6Fec=
Subject key identifier: E6:5C:A3:53:27:51:B1:BD:C3:93:B1:D4:CD:A3:F4:F7:C8:8D:63:55
Authority key identifier: EA:41:3F:BC:BE:2B:F7:36:52:D8:51:02:49:5E:CE:33:E9:33:0D:0F
Certificate issuer: /CN=EA413FBCBE2BF73652D85102495ECE33E9330D0F
Certificate serial: 60EFDDAAD5BC2A4A23AEC416DE816FF4258FBE33
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA413FBCBE2BF73652D85102495ECE33E9330D0F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/EA413FBCBE2BF73652D85102495ECE33E9330D0F.mft
Manifest number: 6F
Signing time: Thu 23 Jul 2026 15:39:02 +0000
Manifest this update: Thu 23 Jul 2026 15:34:02 +0000
Manifest next update: Fri 24 Jul 2026 19:28:02 +0000
Files and hashes: 1: EA413FBCBE2BF73652D85102495ECE33E9330D0F.crl (hash: ZBOVgaHCjxRqzpvZt0GvVh4/BI6UvKq2TCtFOAUJIv8=)
2: 3130332e3135332e3133342e302f32332d3233203d3e20313430343634.roa (hash: wrEWuCEXvYyJtUKLCBlrSkqSpEscz1bfuLgaervIG1M=)
3: 3130332e3135332e3133352e302f32342d3234203d3e20313430343634.roa (hash: WSddUG6Ud+EGXAnyjU+LN6Z0WaSOYhJ8p87PY2mBdmk=)
4: 323430363a343534303a3a2f33322d3332203d3e20313430343634.roa (hash: g38q9LaZAq4No+F6g8orw8HsN+5ba4Mi+pwZw+eZ3w8=)
5: 3130332e3135332e3133342e302f32342d3234203d3e20313430343634.roa (hash: PJ6SYnJsMTtu1EVv401gG2I/mMRasJM6zvehsyeEO6I=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/EA413FBCBE2BF73652D85102495ECE33E9330D0F.crl
rsync://rpki-rsync.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/EA413FBCBE2BF73652D85102495ECE33E9330D0F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA413FBCBE2BF73652D85102495ECE33E9330D0F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 19:28:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:ef:dd:aa:d5:bc:2a:4a:23:ae:c4:16:de:81:6f:f4:25:8f:be:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EA413FBCBE2BF73652D85102495ECE33E9330D0F
Validity
Not Before: Jul 23 15:34:02 2026 GMT
Not After : Jul 24 19:28:02 2026 GMT
Subject: CN=E65CA3532751B1BDC393B1D4CDA3F4F7C88D6355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:18:de:8f:01:05:0f:a6:aa:29:eb:f3:75:aa:
c0:14:3d:62:09:ea:c6:35:5e:71:fd:85:f7:02:46:
be:4c:24:e1:17:ab:12:2b:bd:f5:4e:40:b3:b6:a1:
2b:a5:ed:b9:56:34:4b:4c:e0:6b:35:72:b5:15:10:
b0:3d:0c:ae:47:2f:7b:67:d1:4e:59:a7:7e:52:52:
89:95:24:75:02:f6:84:5b:47:b4:ac:e8:c8:3b:5a:
5a:ce:bb:a4:f9:fe:88:44:8c:d3:64:08:f6:ca:a5:
b2:a0:5b:af:06:9b:49:0d:2d:e4:b8:76:2a:6b:b8:
32:35:a3:a4:8b:40:a9:8c:a8:67:e8:bc:b6:b7:10:
80:9d:61:79:3d:12:8d:55:53:98:49:0c:2e:ae:ee:
8e:39:88:7f:68:72:71:6b:12:bb:a8:ca:16:57:f6:
ca:3b:96:d9:f2:7d:30:49:e5:10:f8:19:be:56:9e:
0f:9c:d4:5f:b2:0b:b9:31:9a:26:68:c7:ba:44:6e:
85:f8:8e:34:35:a2:af:13:4d:33:f9:53:a0:2e:ce:
38:2e:33:1e:eb:f7:f1:ec:18:96:11:ba:4c:83:56:
a4:d0:35:52:5d:7a:1c:ed:53:bc:3c:dd:b5:0e:84:
7b:ca:b6:6b:9b:9a:05:3f:8d:50:1e:3d:d8:77:9d:
21:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:5C:A3:53:27:51:B1:BD:C3:93:B1:D4:CD:A3:F4:F7:C8:8D:63:55
X509v3 Authority Key Identifier:
keyid:EA:41:3F:BC:BE:2B:F7:36:52:D8:51:02:49:5E:CE:33:E9:33:0D:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/EA413FBCBE2BF73652D85102495ECE33E9330D0F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA413FBCBE2BF73652D85102495ECE33E9330D0F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/EA413FBCBE2BF73652D85102495ECE33E9330D0F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:5b:4d:89:30:e3:08:a9:5a:bb:45:de:a6:a8:6c:cf:9d:59:
62:bd:84:5c:e0:c6:e7:79:d9:da:f1:3e:ee:a0:82:ef:db:4e:
c1:10:3e:63:b7:f6:f6:26:28:5b:5e:84:f0:0e:48:a7:7c:ce:
28:57:29:ec:33:c8:cd:97:f9:e3:4e:7c:e7:97:ce:cc:2d:c4:
0d:af:53:ab:e2:90:7a:63:bf:79:76:2e:3c:ae:e0:1d:4d:6e:
9c:43:ec:7c:3f:57:26:91:27:f7:4a:77:06:66:ec:9f:c6:db:
9c:74:eb:ee:f9:cb:af:39:57:c8:7a:bd:78:82:38:26:41:10:
3f:d3:11:fd:d7:f5:e2:c1:9a:f8:95:b7:ab:4f:ad:69:06:61:
f0:13:47:eb:59:e4:74:28:27:47:18:5a:58:3b:cf:62:26:aa:
8d:c2:e1:ea:43:d2:2a:f3:2b:ac:ac:9f:41:52:43:b7:92:41:
17:f0:42:3e:75:0a:29:13:8a:60:ea:97:70:30:fc:7d:db:01:
10:03:06:4b:d6:82:93:1d:f2:98:02:a5:aa:ff:8d:3f:ca:fd:
f5:93:d2:7f:00:bb:6e:97:cd:97:85:7b:fa:03:c0:ef:c3:2f:
1f:09:5e:b5:b9:27:b8:f2:c0:0a:33:2f:f3:3d:70:34:89:1c:
45:0c:92:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:40:31 2026 by rpki-client