
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/ED3057EEDEF9F99D6D10EAA0F47E4D10997C1E6D.mft
File: ED3057EEDEF9F99D6D10EAA0F47E4D10997C1E6D.mft (raw, json)
Hash identifier: Pk6iC+wARUzsBWd+h5vMrAlihIMI3vn00KiphbfQSgs=
Subject key identifier: 0E:18:EA:BF:3A:AF:A1:C0:6F:11:15:1C:85:27:CD:76:F1:7D:A4:04
Authority key identifier: ED:30:57:EE:DE:F9:F9:9D:6D:10:EA:A0:F4:7E:4D:10:99:7C:1E:6D
Certificate issuer: /CN=ED3057EEDEF9F99D6D10EAA0F47E4D10997C1E6D
Certificate serial: 063748E7DDEEC4C14B23DD20E4D1C15359368581
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED3057EEDEF9F99D6D10EAA0F47E4D10997C1E6D.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/ED3057EEDEF9F99D6D10EAA0F47E4D10997C1E6D.mft
Manifest number: 6B
Signing time: Mon 20 Jul 2026 21:32:45 +0000
Manifest this update: Mon 20 Jul 2026 21:27:45 +0000
Manifest next update: Wed 22 Jul 2026 01:29:45 +0000
Files and hashes: 1: 3130332e32312e39332e302f32342d3234203d3e20313331373338.roa (hash: JgYuRVVLY5uhLSJE/sZQYEOvK74P7yfUZ3Eo+U6PjCs=)
2: 3130332e32312e39322e302f32342d3234203d3e20313331373338.roa (hash: y23ei7JhisKDcrmLs/IfTlddxIuJqQ3o+RaQBaZ//Ws=)
3: 3130332e32312e39342e302f32342d3234203d3e20313331373338.roa (hash: boDuLeGcrulC4Uynp3CHSUapz3xB3GO6CYNItPeHTs4=)
4: ED3057EEDEF9F99D6D10EAA0F47E4D10997C1E6D.crl (hash: MsWpM/qE1FUhFlSCGYmozlVlVl9P1OKxiDfjXeXuNOg=)
5: 3130332e32312e39352e302f32342d3234203d3e203435323935.roa (hash: d2NngQ1ClG3KccosIUCvHr+xZx4Rn0+Y8+h4km4ecJk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/ED3057EEDEF9F99D6D10EAA0F47E4D10997C1E6D.crl
rsync://rpki-rsync.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/ED3057EEDEF9F99D6D10EAA0F47E4D10997C1E6D.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED3057EEDEF9F99D6D10EAA0F47E4D10997C1E6D.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Jul 2026 01:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:37:48:e7:dd:ee:c4:c1:4b:23:dd:20:e4:d1:c1:53:59:36:85:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ED3057EEDEF9F99D6D10EAA0F47E4D10997C1E6D
Validity
Not Before: Jul 20 21:27:45 2026 GMT
Not After : Jul 22 01:29:45 2026 GMT
Subject: CN=0E18EABF3AAFA1C06F11151C8527CD76F17DA404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ef:16:ae:7e:7f:42:86:1d:aa:75:fd:99:26:
31:81:fa:65:d8:62:9f:cb:51:aa:de:1a:f6:a1:99:
23:41:24:f6:4a:4e:3a:b9:d1:03:38:4d:88:83:66:
79:25:5a:42:da:9f:7a:7d:d3:bf:1d:dc:c2:f5:d1:
03:fd:22:5c:1b:2b:7f:43:62:56:bd:79:36:b8:87:
b3:d6:94:9c:e3:11:dd:72:24:e5:4e:8b:f2:bc:69:
63:aa:6d:c1:73:f1:c8:9f:1b:bf:2f:6f:97:33:60:
5d:23:af:3d:ee:e6:5c:8d:3e:47:f0:23:e4:9d:24:
e8:b9:be:1f:1f:a6:58:41:66:1b:7f:ce:42:09:80:
fa:6b:f2:2c:60:c2:9b:5d:d8:69:d7:df:5b:23:92:
1f:25:79:b5:91:55:35:9d:6f:90:52:8c:45:12:04:
04:4f:6a:68:0c:3c:8d:2b:04:b3:d4:52:83:4e:8d:
fe:a7:48:5a:6d:95:c3:0f:9c:dd:bc:7b:83:2f:8a:
81:ab:44:7e:b5:d0:15:7c:c1:15:e5:5a:c4:ff:22:
3c:a8:6a:df:c9:cc:b0:40:8b:6c:91:ea:e5:7f:87:
01:01:72:cf:43:80:08:79:b8:f5:bb:4c:fd:0d:e6:
c6:e3:98:24:87:f1:ad:05:27:0b:9d:fc:ff:3e:aa:
f6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:18:EA:BF:3A:AF:A1:C0:6F:11:15:1C:85:27:CD:76:F1:7D:A4:04
X509v3 Authority Key Identifier:
keyid:ED:30:57:EE:DE:F9:F9:9D:6D:10:EA:A0:F4:7E:4D:10:99:7C:1E:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/ED3057EEDEF9F99D6D10EAA0F47E4D10997C1E6D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED3057EEDEF9F99D6D10EAA0F47E4D10997C1E6D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/ED3057EEDEF9F99D6D10EAA0F47E4D10997C1E6D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e0:d5:06:61:a9:ba:28:a5:8c:61:cd:5b:05:1f:a6:34:26:c0:
ab:31:12:d0:2b:b2:2e:91:6b:77:b5:87:3e:dc:4a:39:6e:3a:
6d:0b:86:ef:53:1a:42:51:39:d3:12:51:01:fa:97:b9:a3:d2:
b7:82:b4:cd:9d:40:e2:1e:33:0c:66:15:55:04:5a:36:1d:be:
a3:fe:be:fd:96:17:1a:19:b9:32:20:cb:44:91:8e:80:f3:7a:
c2:fc:ae:f9:a3:a6:b7:20:af:cf:8f:a5:2c:87:ab:97:8f:61:
9d:1a:20:2f:e1:ff:09:8a:88:63:e7:b7:95:97:fa:da:24:87:
2e:21:de:da:d1:d1:af:0f:d7:f8:c7:d3:60:d7:c5:4c:5b:9d:
7b:5e:8e:70:be:82:94:86:d5:6c:bc:fb:11:59:fa:2f:f0:bc:
6f:cd:c9:44:d6:f5:5f:30:92:ff:4e:38:f9:d7:97:c3:af:8b:
1f:25:6d:4d:b7:e7:fa:52:96:02:b4:b5:07:1a:e4:9d:f9:60:
33:58:13:73:fc:6d:35:be:04:ce:6c:e8:8a:7f:51:b8:15:24:
7e:0c:ca:23:07:25:85:e7:6e:80:3f:e1:53:46:39:e3:95:b0:
c5:f8:0a:82:ce:ef:69:8d:f0:40:aa:a1:6c:c7:72:60:8f:ee:
b4:83:d7:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:55:31 2026 by rpki-client