
$ rpki-client -vvf rpki-rsync.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/EA4BA56B93C3D8CB6F45D28F75C6C333765D8D29.mft
File: EA4BA56B93C3D8CB6F45D28F75C6C333765D8D29.mft (raw, json)
Hash identifier: eTEBK7dpRKXuDlgzeoDFW20eMBOkyipm4Ot1pWtomTQ=
Subject key identifier: D7:4D:54:F3:FE:4D:B0:49:43:8F:19:3A:00:20:7F:FF:D7:C8:1B:A9
Authority key identifier: EA:4B:A5:6B:93:C3:D8:CB:6F:45:D2:8F:75:C6:C3:33:76:5D:8D:29
Certificate issuer: /CN=EA4BA56B93C3D8CB6F45D28F75C6C333765D8D29
Certificate serial: 2860454884068742A1FB3F1518AC76901ACB9010
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA4BA56B93C3D8CB6F45D28F75C6C333765D8D29.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/EA4BA56B93C3D8CB6F45D28F75C6C333765D8D29.mft
Manifest number: 2B
Signing time: Tue 02 Jun 2026 16:34:59 +0000
Manifest this update: Tue 02 Jun 2026 16:29:59 +0000
Manifest next update: Wed 03 Jun 2026 16:54:59 +0000
Files and hashes: 1: 3130332e3134342e32322e302f32342d3234203d3e20313333383339.roa (hash: uSCFs14F7hiL1KQ1v1wnxoAG58HChGPsNFjXyvr5ZR8=)
2: EA4BA56B93C3D8CB6F45D28F75C6C333765D8D29.crl (hash: l6gWR2bE2FLvpUTyAQ08jutY/uie+V+zh0oHg1ej6i4=)
3: 323030313a6466303a333330303a3a2f34382d3438203d3e20313333383339.roa (hash: Wmh6qAqJ5qVV5gXIsFnyCjvNYlAqoPmzOMxkkZl30lo=)
4: 3130332e35302e3231382e302f32342d3234203d3e20313333383339.roa (hash: wc57sxRbJJ2Vd7jfzFJiFboDvn0uem5mx9xjy6faNAg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/EA4BA56B93C3D8CB6F45D28F75C6C333765D8D29.crl
rsync://rpki-rsync.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/EA4BA56B93C3D8CB6F45D28F75C6C333765D8D29.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA4BA56B93C3D8CB6F45D28F75C6C333765D8D29.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 10:27:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:60:45:48:84:06:87:42:a1:fb:3f:15:18:ac:76:90:1a:cb:90:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EA4BA56B93C3D8CB6F45D28F75C6C333765D8D29
Validity
Not Before: Jun 2 16:29:59 2026 GMT
Not After : Jun 3 16:54:59 2026 GMT
Subject: CN=D74D54F3FE4DB049438F193A00207FFFD7C81BA9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d6:c6:eb:bb:4b:50:f5:f5:0c:45:53:e0:cd:
93:02:88:5d:ce:e7:25:fe:70:95:0d:ac:2c:cb:3b:
89:a3:7e:97:e2:84:df:2e:0f:92:b3:bd:58:a1:cb:
12:6b:8c:8e:50:e2:ef:d7:d0:52:42:1f:07:65:56:
51:a9:b3:d2:7b:21:8a:2f:22:89:b0:34:7a:8c:8f:
a7:72:6a:f8:29:7f:5b:c7:84:c9:3f:ae:d0:4b:98:
6e:75:5e:cc:d5:11:80:9e:c3:2b:21:03:08:25:bd:
aa:03:c4:61:49:23:4b:c8:bb:75:25:99:79:19:a7:
c2:87:37:34:a8:98:df:21:bf:d5:06:4a:a8:b1:dc:
d3:9b:dd:40:1a:5b:7f:fe:a6:34:de:db:92:11:7a:
b3:cc:a5:66:0e:1b:34:05:7d:cd:83:d3:71:4b:7e:
4b:39:5d:e1:3e:35:c2:e5:af:74:5b:1d:53:49:00:
c3:85:4b:5b:57:40:0f:46:d2:54:a4:8b:70:e1:48:
c7:90:d1:df:55:64:11:d4:e1:bd:49:c8:b7:98:e9:
11:60:7e:a9:9c:c3:2a:14:6f:23:24:b9:4d:0f:e7:
13:a2:ea:ea:03:65:a6:b7:78:d3:8f:1f:3b:17:95:
70:73:53:23:4f:10:6c:63:fb:dd:c9:52:58:33:03:
31:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:4D:54:F3:FE:4D:B0:49:43:8F:19:3A:00:20:7F:FF:D7:C8:1B:A9
X509v3 Authority Key Identifier:
keyid:EA:4B:A5:6B:93:C3:D8:CB:6F:45:D2:8F:75:C6:C3:33:76:5D:8D:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/EA4BA56B93C3D8CB6F45D28F75C6C333765D8D29.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA4BA56B93C3D8CB6F45D28F75C6C333765D8D29.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/EA4BA56B93C3D8CB6F45D28F75C6C333765D8D29.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:9b:47:6e:31:14:6c:96:77:e2:35:ef:71:e1:66:f8:66:2c:
a6:c0:ca:b9:da:f1:0d:e9:90:a8:90:15:b6:2a:94:bc:a7:1e:
3a:7e:84:f5:73:a8:6b:3d:be:2d:09:6a:f8:62:b3:d0:4e:58:
6b:80:7b:9d:96:ce:e9:21:68:9e:b0:3c:78:80:8a:2d:00:db:
e2:c7:2c:93:7c:e0:ba:84:ae:ef:73:95:8b:e2:7c:38:5d:3e:
23:e7:64:3f:2e:6c:e7:49:18:86:76:ff:6b:17:97:61:db:c9:
e6:7d:d3:72:cf:1d:41:ba:0c:d6:4f:ee:58:c4:9b:4c:e9:9d:
c5:45:5a:42:c1:85:7e:d5:a7:e6:d1:b0:50:87:ce:81:f9:91:
e5:e2:5a:f5:fb:76:19:4d:c2:f0:b4:45:6c:a8:d8:e3:e4:4e:
1c:60:b7:d2:c7:b8:46:0a:31:5f:ee:6a:b3:f1:8b:d6:fc:0e:
60:9f:7a:b4:cc:4c:cf:66:c5:f7:87:9f:53:8f:24:d5:26:1c:
33:e3:5a:43:57:ca:21:d5:f5:ea:7b:d9:1b:41:7b:45:d0:b6:
a7:81:96:94:a3:9a:ef:b7:51:23:d8:fc:e8:e6:19:53:b3:dc:
db:75:06:57:ed:1d:4d:e3:74:dc:44:42:36:69:95:6b:07:ce:
62:3b:ef:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:04:47 2026 by rpki-client