
$ rpki-client -vvf rpki-rsync.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/EA413FBCBE2BF73652D85102495ECE33E9330D0F.mft
File: EA413FBCBE2BF73652D85102495ECE33E9330D0F.mft (raw, json)
Hash identifier: 27pBom11k7T6OS9zvOaToxYe5Y/QRa0upj96brNC47E=
Subject key identifier: 9B:F3:2B:AF:8B:FE:62:9E:8E:02:D4:91:C8:6D:37:EC:3D:2F:CF:47
Authority key identifier: EA:41:3F:BC:BE:2B:F7:36:52:D8:51:02:49:5E:CE:33:E9:33:0D:0F
Certificate issuer: /CN=EA413FBCBE2BF73652D85102495ECE33E9330D0F
Certificate serial: 5947B2AAF9EF1FAEF909CC04D016EB3001D2A595
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA413FBCBE2BF73652D85102495ECE33E9330D0F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/EA413FBCBE2BF73652D85102495ECE33E9330D0F.mft
Manifest number: 2B
Signing time: Tue 02 Jun 2026 14:17:31 +0000
Manifest this update: Tue 02 Jun 2026 14:12:31 +0000
Manifest next update: Wed 03 Jun 2026 16:21:31 +0000
Files and hashes: 1: 323430363a343534303a3a2f33322d3332203d3e20313430343634.roa (hash: g38q9LaZAq4No+F6g8orw8HsN+5ba4Mi+pwZw+eZ3w8=)
2: EA413FBCBE2BF73652D85102495ECE33E9330D0F.crl (hash: xhqNcoh1GOOcvLNZ0VF58BzwHyPCcld2MaEblu86l1A=)
3: 3130332e3135332e3133342e302f32332d3233203d3e20313430343634.roa (hash: wrEWuCEXvYyJtUKLCBlrSkqSpEscz1bfuLgaervIG1M=)
4: 3130332e3135332e3133342e302f32342d3234203d3e20313430343634.roa (hash: PJ6SYnJsMTtu1EVv401gG2I/mMRasJM6zvehsyeEO6I=)
5: 3130332e3135332e3133352e302f32342d3234203d3e20313430343634.roa (hash: WSddUG6Ud+EGXAnyjU+LN6Z0WaSOYhJ8p87PY2mBdmk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/EA413FBCBE2BF73652D85102495ECE33E9330D0F.crl
rsync://rpki-rsync.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/EA413FBCBE2BF73652D85102495ECE33E9330D0F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA413FBCBE2BF73652D85102495ECE33E9330D0F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 10:27:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:47:b2:aa:f9:ef:1f:ae:f9:09:cc:04:d0:16:eb:30:01:d2:a5:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EA413FBCBE2BF73652D85102495ECE33E9330D0F
Validity
Not Before: Jun 2 14:12:31 2026 GMT
Not After : Jun 3 16:21:31 2026 GMT
Subject: CN=9BF32BAF8BFE629E8E02D491C86D37EC3D2FCF47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2d:2e:ba:16:1e:bb:c1:da:ee:88:43:b5:2f:
cb:b6:d0:61:be:a7:ea:c1:0b:07:52:d3:a5:3c:7d:
50:30:d1:d9:a3:a0:63:fd:05:b0:3d:d2:cf:c2:8b:
60:ac:46:60:83:b0:50:43:65:46:b1:ac:3d:c6:aa:
01:6e:68:f9:89:2e:47:1e:19:ad:fc:d1:70:30:73:
97:80:e1:39:f6:c3:2c:3c:41:dd:de:3a:b2:a9:0c:
4d:72:bb:18:cc:07:58:eb:66:86:5e:82:c0:42:7d:
d2:f8:3d:b6:ab:8a:57:3f:f2:55:e0:45:f4:4f:b2:
a8:4b:1b:34:2b:66:af:1f:20:25:c7:a8:41:79:eb:
c9:44:ad:f4:ed:7c:4f:7e:4e:4a:0c:67:6e:61:ad:
46:35:f9:74:4a:78:f7:4c:ce:9b:46:36:3c:d1:c5:
ed:8f:4e:88:38:ed:24:15:f2:7f:f2:2f:5e:1d:63:
ef:6c:46:58:da:df:ee:62:4a:7b:be:40:2b:11:2e:
d1:0d:3a:7c:dd:1a:1b:a5:69:bd:f4:1a:6e:4f:91:
39:ec:07:60:3a:ce:88:bc:77:d9:93:24:f1:79:cc:
bc:00:06:b9:83:d5:49:ef:bd:71:de:dc:b5:e6:45:
d3:a0:81:1a:8d:9d:0d:d4:4a:6a:43:53:4d:16:21:
3d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:F3:2B:AF:8B:FE:62:9E:8E:02:D4:91:C8:6D:37:EC:3D:2F:CF:47
X509v3 Authority Key Identifier:
keyid:EA:41:3F:BC:BE:2B:F7:36:52:D8:51:02:49:5E:CE:33:E9:33:0D:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/EA413FBCBE2BF73652D85102495ECE33E9330D0F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA413FBCBE2BF73652D85102495ECE33E9330D0F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/EA413FBCBE2BF73652D85102495ECE33E9330D0F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:3f:1a:b0:02:8b:3e:d5:ca:55:72:77:52:2d:f9:0a:9d:c4:
94:70:03:d2:18:75:e4:9c:12:78:5b:b8:f1:0c:e7:42:f0:2e:
5e:b4:8c:68:71:a8:be:29:d6:63:03:8c:d2:71:16:11:2b:64:
7b:ff:6c:81:da:93:00:4b:0c:9d:ee:31:cd:1d:30:56:db:20:
f4:41:ae:02:f1:90:f9:cc:4c:aa:9f:13:bc:4b:32:e7:a7:a7:
58:b7:d5:35:08:79:ab:88:db:cc:32:2d:97:a9:d3:6a:63:04:
65:2c:da:93:42:b5:ca:7a:db:8c:cd:93:bc:33:49:6f:36:f8:
71:18:d2:2d:e3:ec:1e:79:cd:99:84:e1:76:60:70:55:8f:26:
48:57:d2:6e:63:dd:4f:ad:44:58:8a:17:32:85:da:2a:24:09:
9c:cb:c2:5e:eb:66:6c:60:a7:5c:fb:9e:68:96:96:4d:b3:75:
cf:77:00:b9:71:81:80:36:b9:83:cb:6f:87:b1:72:cb:e4:37:
6e:7f:a9:9a:e9:63:44:84:04:28:73:d7:3a:16:1e:e9:43:cc:
23:f4:ae:6c:8b:bc:2a:0e:2d:5b:c2:c9:65:ef:77:b8:1f:54:
ee:ab:c1:d4:0b:cd:47:23:e9:f9:b9:38:3c:1f:47:3d:4e:bd:
86:4b:4a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:39:30 2026 by rpki-client