
$ rpki-client -vvf rpki-rsync.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871.mft
File: EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871.mft (raw, json)
Hash identifier: otNEmuxlXbRgkqCBTgfLwZedGxWVRkpAUarIq6HOxy8=
Subject key identifier: 19:E9:A2:4A:74:57:66:D4:28:0A:2C:60:35:8E:64:77:53:7C:AB:EF
Authority key identifier: EA:8B:1F:D5:4B:5A:4E:9B:79:5C:DD:92:9B:58:E7:BD:B2:DA:68:71
Certificate issuer: /CN=EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871
Certificate serial: 7F50D05AE431DC47BC32CA41AF536EF035201EFA
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871.mft
Manifest number: 38
Signing time: Fri 12 Jun 2026 16:20:03 +0000
Manifest this update: Fri 12 Jun 2026 16:15:03 +0000
Manifest next update: Sat 13 Jun 2026 19:56:03 +0000
Files and hashes: 1: 3130332e3137392e38342e302f32342d3234203d3e20313432333037.roa (hash: 2LkAU6HFzcD+uMMYceohJGiq/c/yqAWAinLHczse+RU=)
2: 3130332e3136382e34342e302f32342d3234203d3e20313432333037.roa (hash: RIjxtB34QrKPBshyuKfeBsiSf1Tc4cR0KfHnQu3zHiw=)
3: EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871.crl (hash: WwDl89p0lkjKwJsHe38v3W38kJiYhEvPhOZ/YyjpaGE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871.crl
rsync://rpki-rsync.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 19:56:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:50:d0:5a:e4:31:dc:47:bc:32:ca:41:af:53:6e:f0:35:20:1e:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871
Validity
Not Before: Jun 12 16:15:03 2026 GMT
Not After : Jun 13 19:56:03 2026 GMT
Subject: CN=19E9A24A745766D4280A2C60358E6477537CABEF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:89:84:47:1a:9c:99:95:9c:d4:c2:da:5f:40:
6f:f4:93:56:37:96:df:da:67:3f:9c:93:1d:14:11:
f3:b0:00:0a:48:ce:b6:0e:fd:5b:42:b2:cd:09:e5:
09:da:92:c2:fa:0c:59:74:92:49:0f:e6:8d:10:61:
41:3d:7e:fb:f9:e0:e7:22:af:0c:d5:fc:e2:71:c0:
90:a2:88:b4:92:b2:3f:3e:b8:4c:48:75:80:a1:51:
7c:d3:5c:60:6e:fd:8a:73:4a:36:de:47:24:7e:5b:
8b:9f:52:86:ee:ff:af:ca:23:27:a0:0e:2d:a0:70:
93:76:ff:09:04:d2:4a:25:48:e2:da:2b:23:36:6b:
7f:96:6a:c0:d3:3b:ce:f7:da:7b:47:3b:1a:7e:0a:
fd:26:c1:90:dc:c0:2b:95:01:ac:fa:5f:7d:b0:c1:
af:3e:38:87:57:18:92:05:92:10:f0:57:a5:4d:b9:
f1:42:3f:bc:e8:ba:56:a7:fd:a1:cb:dd:fc:86:6c:
58:93:6a:e7:95:9d:f9:52:3c:ba:71:f1:c6:af:6f:
22:ae:09:8a:bb:df:87:9b:7e:32:5b:9f:3c:8e:fe:
f7:b2:f3:fe:25:aa:69:ea:d0:ad:17:a7:37:79:36:
cf:d5:74:6b:cd:d0:78:84:58:82:8a:b3:b4:19:0c:
ef:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:E9:A2:4A:74:57:66:D4:28:0A:2C:60:35:8E:64:77:53:7C:AB:EF
X509v3 Authority Key Identifier:
keyid:EA:8B:1F:D5:4B:5A:4E:9B:79:5C:DD:92:9B:58:E7:BD:B2:DA:68:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:93:68:9b:88:a7:7c:44:8a:be:bf:96:a9:f1:03:50:5d:ae:
7c:5c:cb:c6:74:f5:29:fd:01:88:61:7e:d3:ed:b7:26:bb:a9:
a5:b8:52:90:d8:03:3c:d0:02:ab:e5:2a:f4:e8:97:36:2b:d4:
18:2d:35:e4:ec:38:f4:9d:4b:7f:cb:4e:37:10:2f:d6:29:c9:
c4:81:c2:29:36:e9:f2:78:2f:92:9f:ce:39:e6:5a:de:70:bc:
80:0f:55:f5:27:8a:75:0f:21:b3:32:47:9c:ad:3b:a5:b9:18:
bf:d4:02:22:8a:c6:c8:7d:09:3c:bc:bc:7b:1a:10:db:4f:4d:
a2:b1:f3:0a:50:32:c3:0e:43:c2:0e:65:08:1d:cb:ac:0c:c1:
c7:3d:a8:47:da:aa:ce:67:f7:92:fe:3d:c2:2c:f3:81:44:ce:
53:bd:2d:fc:e1:51:f7:db:76:07:ff:2a:83:a0:20:d2:35:29:
93:44:7f:8b:71:48:27:3c:46:8c:14:ce:c2:71:e1:bc:de:95:
65:26:7d:1a:b0:d8:f4:d9:9e:54:52:e2:d2:1d:9b:cc:18:33:
21:f6:ed:1a:1f:ef:0e:f3:20:7f:cf:ca:cb:e7:5e:6b:aa:26:
33:1e:0e:67:0c:5f:74:d0:5b:2e:ae:b8:91:a9:85:0c:7a:1a:
65:88:7d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 02:19:21 2026 by rpki-client