
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E0DE22F577B4244ECB332B87B5831D4AD7DA8007.mft
File: E0DE22F577B4244ECB332B87B5831D4AD7DA8007.mft (raw, json)
Hash identifier: iBcGya3Tg7bOuTIbJrT/TnCaRrt3my/DNie74Fa4UX4=
Subject key identifier: B4:7B:6B:FA:1E:AB:64:A1:E4:29:99:A5:A7:13:55:57:08:DA:5B:7F
Authority key identifier: E0:DE:22:F5:77:B4:24:4E:CB:33:2B:87:B5:83:1D:4A:D7:DA:80:07
Certificate issuer: /CN=E0DE22F577B4244ECB332B87B5831D4AD7DA8007
Certificate serial: 434EDDEEF28F3524966C90E47DB50B5EC44AD365
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E0DE22F577B4244ECB332B87B5831D4AD7DA8007.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E0DE22F577B4244ECB332B87B5831D4AD7DA8007.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 19:25:27 +0000
Manifest this update: Tue 12 May 2026 19:20:27 +0000
Manifest next update: Wed 13 May 2026 23:19:27 +0000
Files and hashes: 1: 3130332e3135332e332e302f32342d3234203d3e20313430333839.roa (hash: h7oJXK+AgIlPZVwTrPckQLETitJhhEg1pMAjxm6/Vyw=)
2: E0DE22F577B4244ECB332B87B5831D4AD7DA8007.crl (hash: gaUbR0CmwZ37+mlxDofl3kf1J+XvSIQ1pDj6LnuytkY=)
3: 3130332e3135332e322e302f32342d3234203d3e20313430333839.roa (hash: 3fZAI9UVM7/UZBavMAQaA62u0fyHX83Z/pKamnkzV24=)
4: 3130332e3135332e322e302f32332d3233203d3e20313430333839.roa (hash: zvVBOICq5pKD2ig8o0wI4pJml9B5+zqomhS6S0vqWcI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E0DE22F577B4244ECB332B87B5831D4AD7DA8007.crl
rsync://rpki-rsync.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E0DE22F577B4244ECB332B87B5831D4AD7DA8007.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E0DE22F577B4244ECB332B87B5831D4AD7DA8007.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:4e:dd:ee:f2:8f:35:24:96:6c:90:e4:7d:b5:0b:5e:c4:4a:d3:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E0DE22F577B4244ECB332B87B5831D4AD7DA8007
Validity
Not Before: May 12 19:20:27 2026 GMT
Not After : May 13 23:19:27 2026 GMT
Subject: CN=B47B6BFA1EAB64A1E42999A5A713555708DA5B7F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:76:fe:54:40:9a:96:44:49:0e:dc:a4:08:4f:
ff:79:03:d2:03:8a:63:42:27:0a:14:60:e4:94:00:
a2:22:dd:fa:e8:3c:3b:a3:94:04:fc:8e:0d:03:fd:
fe:5e:e8:4a:8d:04:a3:fa:73:1d:ad:88:5e:83:2b:
47:03:4a:6e:d0:9c:15:68:17:c8:66:ab:f9:d5:8e:
c3:e3:3f:4a:61:ff:83:ad:9c:f6:16:45:5c:f7:49:
26:0f:17:0e:64:e7:4d:ae:92:36:9d:b1:ce:a3:3f:
55:7e:c0:aa:19:90:c5:76:70:d8:6f:41:7b:49:51:
71:1c:82:a2:ac:66:c2:aa:63:eb:67:be:df:2e:d9:
50:70:1f:41:ef:d4:f1:d2:d3:1e:f9:e2:12:07:72:
d6:c8:f3:7d:aa:c5:40:a4:45:fc:45:38:2c:d6:f9:
87:32:51:b6:4c:f4:d1:a2:93:2f:7e:8a:94:3b:ad:
8c:1a:84:bb:21:0b:70:cf:33:a5:f4:82:a4:cc:d8:
a8:79:77:0c:e7:4c:18:b9:b0:86:f1:af:17:27:b6:
a1:0a:65:0b:32:0d:3f:fc:3b:50:3e:39:1d:1c:b9:
89:c4:2c:17:63:4e:7e:4e:40:e6:83:52:c4:41:fe:
06:28:af:f2:17:cd:b1:08:6f:ae:0b:ef:1b:18:8d:
cc:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:7B:6B:FA:1E:AB:64:A1:E4:29:99:A5:A7:13:55:57:08:DA:5B:7F
X509v3 Authority Key Identifier:
keyid:E0:DE:22:F5:77:B4:24:4E:CB:33:2B:87:B5:83:1D:4A:D7:DA:80:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E0DE22F577B4244ECB332B87B5831D4AD7DA8007.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E0DE22F577B4244ECB332B87B5831D4AD7DA8007.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E0DE22F577B4244ECB332B87B5831D4AD7DA8007.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:b0:fc:8e:91:ec:27:a9:6e:de:50:f6:a3:e0:7c:c7:94:15:
e6:fd:da:2c:ff:fe:9d:14:3d:4a:ec:94:ed:6e:e0:5b:32:22:
96:d0:53:2a:52:b7:83:e2:bb:63:64:7c:46:81:9f:c4:9e:9f:
47:f5:76:1a:0c:cc:48:70:4e:c3:af:31:5e:c6:dd:c6:27:f1:
06:31:36:29:f9:a5:f6:7f:ec:17:ce:6e:6a:05:c5:af:6a:33:
fa:b3:d5:8f:d5:6b:5c:30:0f:d5:3d:fc:3c:10:9a:67:f0:e6:
3b:90:ef:41:ac:87:e7:79:12:65:dd:b8:aa:d6:cc:2c:3c:02:
d6:3c:de:4a:9d:4b:10:03:36:53:92:46:92:ab:6f:52:02:ed:
e0:ca:52:92:a2:b3:28:8d:09:e9:f9:18:d7:b0:63:f5:48:d2:
e8:da:86:0b:71:60:75:cc:34:d8:fd:f0:55:98:85:c0:67:1d:
3e:94:96:8d:fb:01:d7:43:63:74:3b:c6:6d:de:73:cc:48:56:
52:6d:96:a6:6e:6d:99:2e:be:77:bb:12:98:ac:2a:0c:64:4c:
2a:82:a7:5e:ff:7d:1c:75:e8:df:30:99:b3:9d:5b:dd:43:f5:
67:c8:02:2c:16:6c:70:3e:5a:81:88:80:fc:55:94:64:dd:4b:
d5:70:27:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:18:50 2026 by rpki-client