
$ rpki-client -vvf repo-rpki.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/EED8A9475E4020DA0F2BEF589D15102EB06B658F.mft
File: EED8A9475E4020DA0F2BEF589D15102EB06B658F.mft (raw, json)
Hash identifier: UkV+GDgk3NJdtCurN4eUCEbGilWUphTkH7ihPOWHT60=
Subject key identifier: 14:4C:29:21:BA:F2:6B:D0:2D:F9:CE:64:58:71:05:8D:22:37:8D:A1
Authority key identifier: EE:D8:A9:47:5E:40:20:DA:0F:2B:EF:58:9D:15:10:2E:B0:6B:65:8F
Certificate issuer: /CN=EED8A9475E4020DA0F2BEF589D15102EB06B658F
Certificate serial: 15B125E2FAC71ACF191439FD256FEFF41F076C7C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EED8A9475E4020DA0F2BEF589D15102EB06B658F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/EED8A9475E4020DA0F2BEF589D15102EB06B658F.mft
Manifest number: 055A
Signing time: Tue 17 Mar 2026 14:50:51 +0000
Manifest this update: Tue 17 Mar 2026 14:45:51 +0000
Manifest next update: Fri 20 Mar 2026 21:52:51 +0000
Files and hashes: 1: 3130332e37392e39312e302f32342d3234203d3e203634333035.roa (hash: mguZPFd0yEF7BbBBd2+SDugjtQLZV2wjK9kQOQsORjM=)
2: EED8A9475E4020DA0F2BEF589D15102EB06B658F.crl (hash: smmx87EkixgvTIzbWg8vWCKM5Hqo33VkER5be/lmQ7Q=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/EED8A9475E4020DA0F2BEF589D15102EB06B658F.crl
rsync://repo-rpki.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/EED8A9475E4020DA0F2BEF589D15102EB06B658F.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EED8A9475E4020DA0F2BEF589D15102EB06B658F.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Mar 2026 21:52:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:b1:25:e2:fa:c7:1a:cf:19:14:39:fd:25:6f:ef:f4:1f:07:6c:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EED8A9475E4020DA0F2BEF589D15102EB06B658F
Validity
Not Before: Mar 17 14:45:51 2026 GMT
Not After : Mar 20 21:52:51 2026 GMT
Subject: CN=144C2921BAF26BD02DF9CE645871058D22378DA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:44:10:76:0d:1c:2a:1b:5d:f8:a3:e6:69:77:
e3:3a:17:81:b2:c2:0b:1d:f7:90:b3:ea:90:ec:bc:
13:c8:73:9e:4a:70:38:d4:82:f4:c2:4f:3e:88:09:
63:4b:74:3e:99:bf:2a:15:52:6f:40:bf:0b:22:ec:
ea:a9:3a:c8:ef:0b:72:5f:7b:e1:e8:c2:4b:29:4e:
cf:50:a7:74:dd:6f:98:34:94:24:82:27:28:41:92:
9f:c4:39:82:07:ee:cb:fe:6a:59:6b:ca:2d:fd:c3:
41:d7:5e:c5:8a:0d:48:a7:97:73:4d:ff:55:1a:9e:
83:f9:e3:ae:92:e8:ec:51:e2:da:fc:70:a2:3b:fa:
87:73:b8:a5:42:e0:b3:47:f6:19:53:92:06:b9:eb:
d2:63:f8:73:8f:93:d2:49:a1:cb:9d:d7:c7:ae:5d:
dd:d9:b2:36:07:25:57:63:81:66:25:3d:c6:ab:19:
3c:d9:01:4f:3a:eb:c2:cb:68:66:99:eb:9a:5c:14:
a0:91:a6:ba:1d:64:db:29:4f:04:f7:71:1d:56:2d:
2a:0b:ca:74:d6:60:e3:1e:43:5d:c6:f2:f0:49:4f:
19:61:55:18:55:51:45:aa:3e:6d:84:61:b0:a9:2b:
18:1e:f1:cb:6e:7a:c3:cd:fe:ca:50:5e:76:66:48:
ed:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:4C:29:21:BA:F2:6B:D0:2D:F9:CE:64:58:71:05:8D:22:37:8D:A1
X509v3 Authority Key Identifier:
keyid:EE:D8:A9:47:5E:40:20:DA:0F:2B:EF:58:9D:15:10:2E:B0:6B:65:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/EED8A9475E4020DA0F2BEF589D15102EB06B658F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EED8A9475E4020DA0F2BEF589D15102EB06B658F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/EED8A9475E4020DA0F2BEF589D15102EB06B658F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:8b:ea:70:23:18:8c:47:8e:db:e8:7a:ba:ea:e9:3d:99:7b:
d0:71:92:dd:1a:f7:83:2e:be:18:2f:17:83:72:d3:e3:df:fa:
9d:6a:db:86:75:1b:fa:58:e3:9b:f5:b9:74:0f:a7:62:95:cd:
93:c6:83:30:91:2f:b1:d8:75:a7:71:10:3e:b5:e5:b3:1e:f1:
75:dd:fd:05:dd:dd:6b:05:ea:30:19:45:0a:e4:16:79:86:e2:
26:1d:d6:3e:72:89:da:94:67:21:5a:24:c2:19:c8:71:61:b1:
10:45:07:9c:67:1d:45:e7:63:52:22:a5:24:47:f4:0e:84:62:
fc:a5:37:5e:2f:58:d6:6f:f3:d0:25:db:85:08:f3:1b:2f:f9:
8f:1f:f7:fd:17:87:cc:50:cf:d5:7a:9b:55:6b:75:6c:02:72:
a2:ae:a5:a7:72:4d:8e:bb:a0:3a:d1:4c:78:e1:8a:0d:97:78:
82:f4:5e:0f:93:72:1b:fa:2d:18:99:7b:4d:de:bd:b5:a9:cd:
d6:52:fa:fe:d3:1a:b3:7d:81:ab:1e:fb:7b:56:73:7b:20:42:
8a:85:9b:63:21:2e:eb:20:de:48:75:ee:6c:03:45:65:0f:26:
e4:ab:ad:74:e4:f5:34:d9:e2:de:12:73:db:be:48:74:5e:2b:
aa:37:94:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 09:57:59 2026 by rpki-client