
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/EA4BA56B93C3D8CB6F45D28F75C6C333765D8D29.mft
File: EA4BA56B93C3D8CB6F45D28F75C6C333765D8D29.mft (raw, json)
Hash identifier: VYB2mrg8uk3iqX8avfBP3AVoLyCeoi1GzXv9wF4f+G8=
Subject key identifier: B0:E9:36:D4:D7:08:05:BF:39:6C:A1:05:E3:A2:7A:6B:45:C6:A3:7F
Authority key identifier: EA:4B:A5:6B:93:C3:D8:CB:6F:45:D2:8F:75:C6:C3:33:76:5D:8D:29
Certificate issuer: /CN=EA4BA56B93C3D8CB6F45D28F75C6C333765D8D29
Certificate serial: 2433D8D9DF83D933BCF73FE814AAD77F4D6A8630
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA4BA56B93C3D8CB6F45D28F75C6C333765D8D29.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/EA4BA56B93C3D8CB6F45D28F75C6C333765D8D29.mft
Manifest number: A8
Signing time: Fri 04 Sep 2026 16:42:23 +0000
Manifest this update: Fri 04 Sep 2026 16:37:23 +0000
Manifest next update: Sat 05 Sep 2026 17:41:23 +0000
Files and hashes: 1: 3130332e35302e3231382e302f32342d3234203d3e20313333383339.roa (hash: wc57sxRbJJ2Vd7jfzFJiFboDvn0uem5mx9xjy6faNAg=)
2: EA4BA56B93C3D8CB6F45D28F75C6C333765D8D29.crl (hash: CgYvkSko6T/+SLhh/XLquC8FDH/z9i+FjHhPSvgO73I=)
3: 323030313a6466303a333330303a3a2f34382d3438203d3e20313333383339.roa (hash: Wmh6qAqJ5qVV5gXIsFnyCjvNYlAqoPmzOMxkkZl30lo=)
4: 3130332e3134342e32322e302f32342d3234203d3e20313333383339.roa (hash: uSCFs14F7hiL1KQ1v1wnxoAG58HChGPsNFjXyvr5ZR8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/EA4BA56B93C3D8CB6F45D28F75C6C333765D8D29.crl
rsync://rpki-rsync.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/EA4BA56B93C3D8CB6F45D28F75C6C333765D8D29.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA4BA56B93C3D8CB6F45D28F75C6C333765D8D29.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Sep 2026 04:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:33:d8:d9:df:83:d9:33:bc:f7:3f:e8:14:aa:d7:7f:4d:6a:86:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EA4BA56B93C3D8CB6F45D28F75C6C333765D8D29
Validity
Not Before: Sep 4 16:37:23 2026 GMT
Not After : Sep 5 17:41:23 2026 GMT
Subject: CN=B0E936D4D70805BF396CA105E3A27A6B45C6A37F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e5:f3:27:32:a2:f0:6d:0e:1f:68:90:ce:30:
a0:c5:11:47:5d:f4:ba:00:69:e7:03:47:f6:d2:ad:
5c:a3:81:46:70:5c:fa:eb:f1:ec:5b:5a:cf:8e:5e:
9c:20:aa:79:63:29:46:49:8b:97:99:11:96:d5:54:
37:3e:cd:2e:56:f4:48:0d:7c:99:cd:59:83:0e:24:
d0:76:ec:a9:1c:2e:db:c7:17:16:aa:e3:89:b6:a7:
7b:8a:15:64:2e:29:aa:f8:aa:6a:64:7c:c9:e3:e7:
8c:31:60:4c:c3:cd:3d:93:01:ac:ae:49:06:a9:0a:
9a:7a:00:ab:18:d4:8f:90:d8:0d:4d:3e:62:b9:00:
76:1b:3a:f1:28:2e:4f:b4:f0:88:35:30:a1:e6:a1:
85:22:e8:ee:0f:8e:5c:b7:bc:da:f5:3c:01:30:7b:
6a:31:1a:34:d2:f3:d5:f6:60:24:2c:59:0c:ae:b8:
cd:43:c7:b2:94:b8:f8:66:ae:ff:da:56:39:59:e2:
fe:36:27:62:97:92:f3:ec:57:c1:86:b7:d3:59:55:
4b:2c:48:ce:14:d5:b4:54:13:5b:ec:75:1c:b5:53:
20:14:85:95:1f:da:ed:cf:1f:ff:95:5a:dc:37:13:
10:ad:15:5b:fb:1c:26:54:76:18:76:dd:29:df:6f:
34:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:E9:36:D4:D7:08:05:BF:39:6C:A1:05:E3:A2:7A:6B:45:C6:A3:7F
X509v3 Authority Key Identifier:
keyid:EA:4B:A5:6B:93:C3:D8:CB:6F:45:D2:8F:75:C6:C3:33:76:5D:8D:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/EA4BA56B93C3D8CB6F45D28F75C6C333765D8D29.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA4BA56B93C3D8CB6F45D28F75C6C333765D8D29.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/EA4BA56B93C3D8CB6F45D28F75C6C333765D8D29.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:85:4b:4c:63:d5:54:b0:4b:5f:24:ee:44:ca:b7:96:b4:99:
ab:e1:d9:7e:af:01:f3:b7:df:92:6e:f3:3c:c9:c5:1e:77:69:
be:a4:19:7d:c5:cb:51:c9:ec:b2:a3:57:73:b7:3e:f7:29:9c:
b4:a1:77:ea:17:eb:7c:98:d5:ca:e0:46:08:4b:e1:cf:47:eb:
56:bb:8e:05:16:71:bc:ad:62:0d:f6:34:18:a1:94:3e:3f:f8:
1f:e5:70:74:00:fd:ea:72:c2:3a:e1:4a:94:fc:c4:db:e4:1e:
64:61:2a:4b:d7:5d:2f:fe:00:87:3a:c9:4a:2f:f4:d4:f3:a9:
e8:74:2e:f3:a1:41:f8:83:05:2c:f2:54:d3:d8:88:1c:1c:e3:
64:9f:db:c7:d3:cb:c6:49:7d:bb:83:a6:94:92:01:84:cd:c7:
02:d3:f5:f1:95:cf:79:45:2e:25:2e:40:0e:5c:45:93:e8:f5:
a8:26:89:39:20:f2:1a:7a:65:db:d7:09:3a:b4:bc:62:33:c9:
9a:c6:85:c4:ac:45:c3:1b:17:53:8c:c7:a3:d8:4f:ef:7d:7c:
c7:26:22:77:f6:55:a8:1c:f0:0b:ec:ac:e9:88:2e:cd:f7:b1:
41:a6:14:07:99:d3:de:54:6f:d0:b8:71:b2:af:1f:91:b8:13:
39:f4:41:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 19:18:41 2026 by rpki-client