
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/ED63844C4B15010EA3F230F69A770C2B1C84C105.mft
File: ED63844C4B15010EA3F230F69A770C2B1C84C105.mft (raw, json)
Hash identifier: pi2zLlJWn5UavfiUAucQ6ScZFTWOLqmy40iLdnDhVTM=
Subject key identifier: 2C:99:76:43:7D:60:B1:0B:ED:76:3D:59:74:78:38:79:08:7E:07:48
Authority key identifier: ED:63:84:4C:4B:15:01:0E:A3:F2:30:F6:9A:77:0C:2B:1C:84:C1:05
Certificate issuer: /CN=ED63844C4B15010EA3F230F69A770C2B1C84C105
Certificate serial: 4B267BD7344EA6BEBE02331C95447B2B60B362B3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED63844C4B15010EA3F230F69A770C2B1C84C105.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/ED63844C4B15010EA3F230F69A770C2B1C84C105.mft
Manifest number: A7
Signing time: Fri 04 Sep 2026 11:51:18 +0000
Manifest this update: Fri 04 Sep 2026 11:46:18 +0000
Manifest next update: Sat 05 Sep 2026 15:19:18 +0000
Files and hashes: 1: 3132332e3235332e3234382e302f32332d3234203d3e20313432333739.roa (hash: 1eOUv0Nol5QAajQql0Encer3ZT9+Up46jsqBzqDlEmA=)
2: 323030313a6466303a663530303a3a2f34382d3438203d3e20313432333739.roa (hash: u/f9pBg0fHFgqAdliz0CbmpL4V+/eW84b3JUz0/QPns=)
3: ED63844C4B15010EA3F230F69A770C2B1C84C105.crl (hash: mHVAVrX8rwb8eKr8JUP2UVkMsKfUCT7I4wr6tW9LRQc=)
4: 3132332e3235332e3234382e302f32332d3234203d3e20313336383235.roa (hash: NixEwf5mDvcBcm4WRaep6YCV7NZr3+VpuhyzC3KObpI=)
5: 3130332e39312e32342e302f32322d3234203d3e20313432333739.roa (hash: AnDqHlidff5Ox0jt0yjx0uwvccFAfB7mH1oiPDPa4CY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/ED63844C4B15010EA3F230F69A770C2B1C84C105.crl
rsync://rpki-rsync.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/ED63844C4B15010EA3F230F69A770C2B1C84C105.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED63844C4B15010EA3F230F69A770C2B1C84C105.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Sep 2026 04:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:26:7b:d7:34:4e:a6:be:be:02:33:1c:95:44:7b:2b:60:b3:62:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ED63844C4B15010EA3F230F69A770C2B1C84C105
Validity
Not Before: Sep 4 11:46:18 2026 GMT
Not After : Sep 5 15:19:18 2026 GMT
Subject: CN=2C9976437D60B10BED763D5974783879087E0748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3b:09:f1:e6:24:e8:06:24:ef:db:3f:7d:44:
bb:7c:ea:a7:1e:41:02:49:4f:4d:14:2c:ce:bd:48:
47:d0:ad:c7:0a:64:2f:ad:bf:ec:ff:55:0a:1f:d8:
28:ae:97:2d:d9:5d:5c:3c:ba:d0:4f:ed:64:80:c3:
93:ca:8f:f4:a7:b2:38:24:de:9a:57:61:23:ea:e6:
10:ef:0d:3d:00:fa:d8:35:35:06:42:3f:5c:2d:13:
21:f9:7c:18:55:de:37:db:13:e0:ec:bc:01:cf:9f:
b8:ad:d6:d9:59:3f:64:08:71:a1:32:50:e4:6f:89:
21:0c:ad:96:0f:0f:c1:68:f2:3a:06:63:e2:83:f7:
fb:95:74:61:97:8c:a2:0c:5f:78:6d:99:cf:79:5c:
d1:93:d1:61:63:45:2e:80:f9:0e:0e:2d:ac:73:8c:
19:2c:6f:3e:5c:84:ff:d6:30:d9:16:09:01:ee:13:
8b:31:2b:c0:93:ed:36:bd:f5:26:05:f8:6c:33:91:
56:f0:84:06:a9:3e:43:3f:74:7c:01:d5:d8:07:23:
fe:e5:4f:e9:6f:a2:6a:c0:95:24:de:70:57:08:56:
59:63:f1:6c:37:df:de:fc:fd:3d:1d:80:0b:b2:db:
5a:e2:bf:c7:22:00:4b:9d:2f:cc:1f:4b:ae:b4:52:
2f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:99:76:43:7D:60:B1:0B:ED:76:3D:59:74:78:38:79:08:7E:07:48
X509v3 Authority Key Identifier:
keyid:ED:63:84:4C:4B:15:01:0E:A3:F2:30:F6:9A:77:0C:2B:1C:84:C1:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/ED63844C4B15010EA3F230F69A770C2B1C84C105.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED63844C4B15010EA3F230F69A770C2B1C84C105.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/ED63844C4B15010EA3F230F69A770C2B1C84C105.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:7d:90:10:cd:02:82:ce:12:eb:d7:73:05:48:6d:2d:a7:42:
82:83:c1:8e:b5:07:81:a8:4f:f6:af:04:fd:19:63:c1:48:eb:
18:e5:cd:5a:be:0a:6e:fc:f9:d5:b3:30:4e:b8:98:f3:e6:cd:
5f:03:45:36:9a:40:e2:60:b0:66:36:25:5a:5d:2f:eb:19:87:
61:17:b7:f5:2d:bc:d1:b8:43:d7:86:05:fd:5f:75:ba:03:0c:
ed:97:14:9d:1d:f3:47:0c:09:67:da:ab:98:4d:2e:36:dd:17:
57:9e:2e:ff:15:f9:ae:22:87:08:35:c3:ee:d7:ca:c2:1e:fa:
d6:10:b8:c4:cf:33:88:21:a1:91:ab:99:26:62:6b:40:1e:67:
97:9e:5e:42:b0:3b:d2:99:88:bb:c6:aa:52:e9:27:4e:50:21:
4a:e3:39:d7:13:e1:05:e0:6c:9f:7a:89:58:08:a1:bd:7c:e0:
f9:a0:7b:e8:ec:39:6d:e2:d7:81:a4:77:f8:23:58:d3:ce:b7:
ce:50:7a:e4:5d:37:a2:80:a0:ed:0a:06:8d:9d:a2:89:bd:29:
46:a9:5a:36:b3:ba:a9:4b:f0:79:60:9f:7c:44:b0:ae:3b:f7:
2b:91:96:16:93:24:c5:37:ea:f7:68:3a:6d:3b:d0:4d:d5:68:
d9:1c:18:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 15:25:37 2026 by rpki-client