
$ rpki-client -vvf repo-rpki.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/EB7AB53449E52996F1539393C3DA704C6F12F359.mft
File: EB7AB53449E52996F1539393C3DA704C6F12F359.mft (raw, json)
Hash identifier: paALa/yY3UQ77ydTFw8Dr/5t1ByUnuOLD2Mwwl+a/Q8=
Subject key identifier: C9:84:12:CE:DD:B1:92:F0:EB:31:C5:A7:11:BA:96:D5:F1:CC:C3:24
Authority key identifier: EB:7A:B5:34:49:E5:29:96:F1:53:93:93:C3:DA:70:4C:6F:12:F3:59
Certificate issuer: /CN=EB7AB53449E52996F1539393C3DA704C6F12F359
Certificate serial: 08CF17CE02CD6900471AA816B024E2F8BF5B2702
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB7AB53449E52996F1539393C3DA704C6F12F359.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/EB7AB53449E52996F1539393C3DA704C6F12F359.mft
Manifest number: 03AD
Signing time: Tue 17 Mar 2026 08:30:41 +0000
Manifest this update: Tue 17 Mar 2026 08:25:41 +0000
Manifest next update: Fri 20 Mar 2026 18:39:41 +0000
Files and hashes: 1: EB7AB53449E52996F1539393C3DA704C6F12F359.crl (hash: 2JyrOTspNr8jwi4mOYMGzznFF8EOfTwgWSjtWzE2jVc=)
2: 3131362e302e302e302f32312d3234203d3e203539313339.roa (hash: tvzxlzO0vwNEL3kdVV0vVfOPTOFF94uCEicPO2IlBZc=)
3: 3130332e3235332e302e302f32322d3234203d3e203539313339.roa (hash: DyW9wD+/QVlej0CI+5sCilJX/+5ZDxLLSw8cy8l6+Ec=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/EB7AB53449E52996F1539393C3DA704C6F12F359.crl
rsync://repo-rpki.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/EB7AB53449E52996F1539393C3DA704C6F12F359.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB7AB53449E52996F1539393C3DA704C6F12F359.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Mar 2026 18:39:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:cf:17:ce:02:cd:69:00:47:1a:a8:16:b0:24:e2:f8:bf:5b:27:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB7AB53449E52996F1539393C3DA704C6F12F359
Validity
Not Before: Mar 17 08:25:41 2026 GMT
Not After : Mar 20 18:39:41 2026 GMT
Subject: CN=C98412CEDDB192F0EB31C5A711BA96D5F1CCC324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f8:29:7c:a0:30:07:16:7f:03:e3:e3:47:b1:
a0:11:d6:f2:f8:c7:40:73:7e:1d:be:b9:a1:fa:9e:
3a:a5:7b:48:98:31:26:b7:ff:7d:58:42:68:a7:27:
93:e8:3c:69:92:15:79:b3:77:f4:d6:25:82:eb:06:
7e:28:23:44:de:bd:b6:79:c2:e9:54:33:19:26:1a:
5f:bb:38:0f:41:55:7d:71:57:a7:83:ad:58:30:0f:
24:66:ee:c6:99:cd:ba:fe:fa:51:1b:1e:73:60:db:
00:45:02:ce:2c:35:8f:a0:a9:3f:05:17:81:78:ac:
56:05:bc:51:4d:e2:2c:70:30:85:b4:7e:db:48:24:
ee:28:82:43:56:9f:97:a8:bc:60:d3:23:c3:f3:af:
ad:18:bb:e9:d0:f7:dc:1f:78:f9:35:8d:5a:60:88:
68:4c:14:7b:2e:69:eb:d5:c2:df:c9:09:f5:26:89:
c5:d5:1c:8d:58:2e:92:e0:4d:bf:43:4d:7a:26:a4:
94:e2:51:65:41:8c:8a:33:a4:0c:1e:f6:43:e9:e0:
de:61:e2:ae:19:5f:1f:b0:67:26:e5:51:ca:8f:11:
87:19:15:52:93:c4:50:ae:50:2d:e5:ff:46:36:12:
a3:64:f9:27:ae:52:7c:44:88:80:ff:8f:42:65:be:
19:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:84:12:CE:DD:B1:92:F0:EB:31:C5:A7:11:BA:96:D5:F1:CC:C3:24
X509v3 Authority Key Identifier:
keyid:EB:7A:B5:34:49:E5:29:96:F1:53:93:93:C3:DA:70:4C:6F:12:F3:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/EB7AB53449E52996F1539393C3DA704C6F12F359.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB7AB53449E52996F1539393C3DA704C6F12F359.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/EB7AB53449E52996F1539393C3DA704C6F12F359.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:b3:54:27:49:5e:31:63:3e:7b:2f:6f:dc:68:cc:4b:7f:6c:
ba:bd:a7:de:c5:2e:c5:d1:0e:0e:93:ef:b8:2a:ff:28:69:34:
d4:60:68:9f:48:c3:67:13:d9:c9:16:ad:d2:73:cf:9d:95:ea:
ab:72:83:b2:03:11:2a:d7:e4:3a:2a:bc:f7:e9:1c:02:f6:0d:
46:f0:10:ce:58:1e:81:c7:b7:7b:8b:85:64:65:6b:45:a7:e7:
02:81:a4:05:09:cc:39:8d:79:f4:32:79:22:a6:33:25:18:39:
bc:a6:eb:36:55:f2:8f:d7:8b:73:75:30:e5:6c:56:70:c7:bb:
bd:79:ff:28:3e:09:45:3d:c4:34:7a:64:91:d1:f9:36:c2:1c:
33:21:ac:62:a3:83:ca:89:fb:72:62:90:ed:72:87:b6:68:46:
97:f2:06:a3:85:ac:5e:a9:91:b3:0f:f3:75:73:40:af:5b:88:
6a:de:44:c6:e7:99:a7:fb:ad:9d:ec:08:81:89:3d:98:ad:c9:
9f:da:f1:e5:54:60:1b:04:0b:7e:a7:64:ff:b6:31:f2:52:3a:
48:ce:86:75:73:52:52:e7:40:e0:19:85:76:3b:57:61:2e:11:
85:b8:19:b5:d7:f4:1d:07:e4:ea:e8:44:c2:91:aa:fb:a3:4b:
19:9a:a4:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 09:56:36 2026 by rpki-client