
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/EA413FBCBE2BF73652D85102495ECE33E9330D0F.mft
File: EA413FBCBE2BF73652D85102495ECE33E9330D0F.mft (raw, json)
Hash identifier: zlNuHAlIJw4rFXafuhbKJt1h/dNCZ0FUc5zGqUEJrgc=
Subject key identifier: B2:C0:30:84:80:10:F5:A6:C0:BB:6F:79:78:9B:A2:BD:70:79:75:BA
Authority key identifier: EA:41:3F:BC:BE:2B:F7:36:52:D8:51:02:49:5E:CE:33:E9:33:0D:0F
Certificate issuer: /CN=EA413FBCBE2BF73652D85102495ECE33E9330D0F
Certificate serial: 75F2C384A0CC552AAE6D753C19D142CAD4975E8B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA413FBCBE2BF73652D85102495ECE33E9330D0F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/EA413FBCBE2BF73652D85102495ECE33E9330D0F.mft
Manifest number: F9
Signing time: Thu 05 Nov 2026 03:02:45 +0000
Manifest this update: Thu 05 Nov 2026 02:57:45 +0000
Manifest next update: Fri 06 Nov 2026 04:10:45 +0000
Files and hashes: 1: 3130332e3135332e3133352e302f32342d3234203d3e20313430343634.roa (hash: WSddUG6Ud+EGXAnyjU+LN6Z0WaSOYhJ8p87PY2mBdmk=)
2: 323430363a343534303a3a2f33322d3332203d3e20313430343634.roa (hash: g38q9LaZAq4No+F6g8orw8HsN+5ba4Mi+pwZw+eZ3w8=)
3: EA413FBCBE2BF73652D85102495ECE33E9330D0F.crl (hash: eKdGMUfPBgOSWroyhKqDgumkeKyb4IqTw/xNSz9wqxs=)
4: 3130332e3135332e3133342e302f32342d3234203d3e20313430343634.roa (hash: PJ6SYnJsMTtu1EVv401gG2I/mMRasJM6zvehsyeEO6I=)
5: 3130332e3135332e3133342e302f32332d3233203d3e20313430343634.roa (hash: wrEWuCEXvYyJtUKLCBlrSkqSpEscz1bfuLgaervIG1M=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/EA413FBCBE2BF73652D85102495ECE33E9330D0F.crl
rsync://rpki-rsync.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/EA413FBCBE2BF73652D85102495ECE33E9330D0F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA413FBCBE2BF73652D85102495ECE33E9330D0F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 06 Nov 2026 04:10:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:f2:c3:84:a0:cc:55:2a:ae:6d:75:3c:19:d1:42:ca:d4:97:5e:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EA413FBCBE2BF73652D85102495ECE33E9330D0F
Validity
Not Before: Nov 5 02:57:45 2026 GMT
Not After : Nov 6 04:10:45 2026 GMT
Subject: CN=B2C030848010F5A6C0BB6F79789BA2BD707975BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:eb:97:be:d4:f1:71:07:94:76:3d:97:fc:39:
24:e1:cd:1a:d4:df:98:2c:25:1a:91:1a:ee:cf:0b:
10:30:c7:46:99:12:27:ed:50:4c:58:0e:95:a7:4a:
22:ca:64:c1:d1:bc:55:23:b1:97:dc:e3:54:06:dd:
4a:51:e1:57:20:d5:71:3b:d7:79:cd:76:87:58:00:
52:a0:a8:14:4b:9e:65:14:4c:e4:18:bd:fc:65:cc:
60:e4:06:e9:29:92:d3:dd:c5:dd:bc:a2:b6:4f:1e:
08:7f:d6:c8:26:69:4c:8f:ae:c5:c8:73:74:32:1d:
e1:33:fc:22:af:0d:34:ae:a2:c1:6c:2a:d7:73:a5:
e1:80:64:24:ea:97:c8:af:17:74:27:14:fe:9f:35:
f7:9d:6c:99:44:cf:40:57:38:f6:5d:e2:0b:9d:ae:
31:42:03:8d:a0:e6:f9:9a:76:cc:e1:22:20:7b:25:
93:c1:99:28:3c:2d:b6:77:99:99:d6:ae:a6:93:e9:
06:58:1b:d6:e7:d3:b5:8d:d2:63:a9:6a:aa:5e:fc:
f5:35:11:d5:10:0e:e0:29:dc:23:36:4e:97:4b:ad:
17:60:14:6c:57:60:f6:5d:41:7b:21:91:79:c5:7b:
29:91:7f:23:22:dd:b8:90:08:85:72:a6:46:59:04:
52:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:C0:30:84:80:10:F5:A6:C0:BB:6F:79:78:9B:A2:BD:70:79:75:BA
X509v3 Authority Key Identifier:
keyid:EA:41:3F:BC:BE:2B:F7:36:52:D8:51:02:49:5E:CE:33:E9:33:0D:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/EA413FBCBE2BF73652D85102495ECE33E9330D0F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA413FBCBE2BF73652D85102495ECE33E9330D0F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/EA413FBCBE2BF73652D85102495ECE33E9330D0F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:1a:6c:86:e9:96:d7:e2:58:44:cb:9a:03:9e:9f:35:d5:86:
53:60:7c:0c:0a:3a:e2:00:61:20:c0:1b:f1:28:d1:95:57:d5:
29:da:a1:b9:eb:08:ba:e4:cd:51:af:d8:73:d4:a2:4f:3e:bc:
43:4e:df:09:32:9b:2b:26:a2:64:8c:05:71:8c:2d:75:a9:7d:
2f:40:0f:a2:f4:77:4e:01:46:40:c5:54:6a:17:a1:7e:ac:41:
b4:bd:7c:6c:ab:df:0d:76:22:0a:d0:53:b7:03:9f:73:c2:a1:
d4:28:f5:59:a5:8f:8f:2e:cc:6e:be:e9:fc:1e:2c:8c:55:75:
3a:1f:e5:67:c7:3f:86:60:84:6d:ce:59:7c:44:02:3f:54:e1:
83:ea:8c:a8:09:72:02:0e:83:55:ed:a0:b8:ee:7f:5c:b5:58:
9b:8a:86:87:b1:4f:e2:0f:3b:f0:8f:a4:86:cc:b0:11:c7:28:
ad:fc:bd:50:a2:75:e9:c5:82:05:a1:ee:c6:6b:9e:0b:fa:c8:
10:9a:f9:00:a5:ed:5d:f7:b8:bd:8e:ed:69:41:cd:6c:8c:bc:
09:c3:0d:43:4e:07:1c:ae:5c:5c:01:3e:eb:1b:bb:b1:87:8f:
1a:a1:bb:38:ec:54:87:c0:19:81:b3:91:80:73:1e:10:af:f2:
ee:d4:f5:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 05:26:45 2026 by rpki-client