
$ rpki-client -vvf rpki-rsync.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/EA4DA064E912527194F47FF125954E84B6DBA21A.mft
File: EA4DA064E912527194F47FF125954E84B6DBA21A.mft (raw, json)
Hash identifier: GHfO6k9JQ+CnZCIGepxIMeV6SXy4iewg23PnSMh+NwA=
Subject key identifier: CC:71:05:DC:57:51:FF:0C:3F:23:F0:C3:08:28:7A:DE:F1:BD:32:02
Authority key identifier: EA:4D:A0:64:E9:12:52:71:94:F4:7F:F1:25:95:4E:84:B6:DB:A2:1A
Certificate issuer: /CN=EA4DA064E912527194F47FF125954E84B6DBA21A
Certificate serial: 787044737704456BEB880E3DDA9DFBC4A222C29E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA4DA064E912527194F47FF125954E84B6DBA21A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/EA4DA064E912527194F47FF125954E84B6DBA21A.mft
Manifest number: 2A
Signing time: Tue 02 Jun 2026 09:16:31 +0000
Manifest this update: Tue 02 Jun 2026 09:11:31 +0000
Manifest next update: Wed 03 Jun 2026 10:59:31 +0000
Files and hashes: 1: 3130332e3136312e3230322e302f32332d3234203d3e203338333230.roa (hash: 1s8nntsKiBFp7djfBzyRktp4RKhegiMqm5VcmIqavUQ=)
2: EA4DA064E912527194F47FF125954E84B6DBA21A.crl (hash: /Zk9FRLGikZ0Z3ctNM2P0ULaEgTHs+5UHEohmysp67c=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/EA4DA064E912527194F47FF125954E84B6DBA21A.crl
rsync://rpki-rsync.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/EA4DA064E912527194F47FF125954E84B6DBA21A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA4DA064E912527194F47FF125954E84B6DBA21A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 10:27:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:70:44:73:77:04:45:6b:eb:88:0e:3d:da:9d:fb:c4:a2:22:c2:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EA4DA064E912527194F47FF125954E84B6DBA21A
Validity
Not Before: Jun 2 09:11:31 2026 GMT
Not After : Jun 3 10:59:31 2026 GMT
Subject: CN=CC7105DC5751FF0C3F23F0C308287ADEF1BD3202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:0d:b0:fc:33:f6:0d:4d:87:77:45:cf:b7:0d:
32:27:0f:6b:57:4c:21:d6:01:0c:ab:90:00:46:26:
f2:21:58:d3:39:f5:5f:eb:69:ac:8b:44:e9:c9:96:
35:10:b1:e8:07:96:f4:3d:8e:31:7b:a3:06:71:ba:
23:a2:dc:47:74:f3:f3:0f:c4:12:e2:4d:71:e7:ee:
da:da:d5:b0:5f:d1:81:dc:30:48:b5:b4:01:11:ec:
1d:9b:08:75:1f:86:fe:38:a9:67:31:82:af:a4:33:
0d:df:0b:0d:e3:64:0c:80:e1:e7:ed:56:d6:a9:7a:
1c:b2:29:a9:f7:73:10:1f:e0:64:be:64:ab:b6:50:
b4:1a:a5:9f:6d:4e:bc:80:01:c9:a7:0a:27:b0:91:
f0:34:99:87:54:8c:39:73:5e:df:92:72:6b:a2:d6:
ff:ac:16:a0:5d:f9:48:63:3a:3a:8f:88:68:a1:cd:
e5:d6:45:9a:b1:96:f9:8a:ba:e5:dc:cd:a6:65:68:
b4:46:b0:23:96:36:a4:81:0d:9b:ab:fc:9e:4b:c5:
c3:0c:2a:5d:3d:ca:4a:0f:b0:40:14:f7:5b:ef:57:
95:49:29:9e:52:79:75:2d:14:94:9e:62:40:e2:fb:
f2:88:3b:e4:8c:d6:1d:4f:25:87:e7:63:15:d2:a1:
e7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:71:05:DC:57:51:FF:0C:3F:23:F0:C3:08:28:7A:DE:F1:BD:32:02
X509v3 Authority Key Identifier:
keyid:EA:4D:A0:64:E9:12:52:71:94:F4:7F:F1:25:95:4E:84:B6:DB:A2:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/EA4DA064E912527194F47FF125954E84B6DBA21A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA4DA064E912527194F47FF125954E84B6DBA21A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/EA4DA064E912527194F47FF125954E84B6DBA21A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:cc:9b:fa:02:21:d9:2f:b7:99:64:2f:41:2d:53:07:00:96:
30:34:2e:d6:78:d6:f4:38:ea:d6:2a:f8:e8:b6:7d:d9:55:d8:
8e:53:63:ec:f6:3c:ee:68:85:8b:f9:b5:a7:33:d1:c7:65:ce:
1c:e0:03:38:aa:59:a6:39:66:b6:6a:c7:84:57:98:a5:e1:3a:
71:f8:44:e7:89:28:8d:21:44:d1:02:14:fc:04:85:0c:67:3a:
02:35:dd:92:1a:78:95:0b:d7:4d:47:3c:54:71:2b:3e:c0:05:
3a:ab:3e:2a:9d:70:cc:c9:f4:34:d4:72:bb:13:04:53:12:be:
f7:fa:06:6c:30:e0:cc:d4:1a:dc:63:ac:84:36:b8:b1:d0:81:
53:37:6d:0a:87:0d:40:6f:2a:51:54:0e:39:56:72:d0:71:b7:
b1:ed:cb:0d:a8:71:54:22:4b:32:e2:de:1a:cb:32:59:36:4f:
f6:0c:4c:f8:d4:7c:46:5f:fa:12:0a:d1:96:12:c4:2e:6d:a2:
1f:28:89:b1:7d:12:48:5e:37:7c:65:c6:2d:bc:cf:6b:fb:eb:
8a:6c:38:b4:52:23:96:fc:16:1b:9b:72:f9:fb:78:e8:e6:ed:
97:47:15:18:f9:e4:c2:b0:0b:b9:41:c3:eb:6d:fa:ca:6a:e9:
9e:70:a3:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:16:35 2026 by rpki-client