
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/EB05D5BB4356C8737A9AA4994302BCA8B46691CD.mft
File: EB05D5BB4356C8737A9AA4994302BCA8B46691CD.mft (raw, json)
Hash identifier: adjcBaI/+GtJyN3gWSoccrijQM8dcblBn5ED6ST+5Go=
Subject key identifier: 9E:D3:97:CF:06:CC:C1:FC:A2:7D:B3:F8:11:A8:37:63:7E:DE:39:B5
Authority key identifier: EB:05:D5:BB:43:56:C8:73:7A:9A:A4:99:43:02:BC:A8:B4:66:91:CD
Certificate issuer: /CN=EB05D5BB4356C8737A9AA4994302BCA8B46691CD
Certificate serial: 1B1B0E509533C611D1EDCAC950CB451EAC1A2897
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB05D5BB4356C8737A9AA4994302BCA8B46691CD.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/EB05D5BB4356C8737A9AA4994302BCA8B46691CD.mft
Manifest number: B8
Signing time: Thu 17 Sep 2026 04:54:32 +0000
Manifest this update: Thu 17 Sep 2026 04:49:32 +0000
Manifest next update: Fri 18 Sep 2026 07:20:32 +0000
Files and hashes: 1: EB05D5BB4356C8737A9AA4994302BCA8B46691CD.crl (hash: WPeNaXOu0bPxLL/PxmJZLU6D35eO4VPnUFlvWYIdMLM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/EB05D5BB4356C8737A9AA4994302BCA8B46691CD.crl
rsync://rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/EB05D5BB4356C8737A9AA4994302BCA8B46691CD.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB05D5BB4356C8737A9AA4994302BCA8B46691CD.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 07:20:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:1b:0e:50:95:33:c6:11:d1:ed:ca:c9:50:cb:45:1e:ac:1a:28:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB05D5BB4356C8737A9AA4994302BCA8B46691CD
Validity
Not Before: Sep 17 04:49:32 2026 GMT
Not After : Sep 18 07:20:32 2026 GMT
Subject: CN=9ED397CF06CCC1FCA27DB3F811A837637EDE39B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d1:f3:21:7a:cd:21:b6:c1:62:f8:7c:20:2f:
28:83:69:7c:c3:54:23:1b:1d:72:17:bd:37:86:9a:
24:70:45:5c:23:39:20:c8:9b:88:58:84:f1:bf:b9:
c9:c1:18:4b:38:81:8b:1e:3e:1c:8b:7d:d0:e0:29:
ac:4c:cc:ff:a4:9c:01:78:6a:94:c5:3e:bb:9d:19:
60:e7:8c:07:12:45:42:8b:5f:7b:c9:88:28:f2:1c:
1b:ea:73:a6:8d:b7:ea:60:40:eb:7f:f1:f4:60:0b:
7d:15:1c:5b:ae:f2:a9:74:a3:ac:8b:99:fb:14:b9:
9d:4b:dc:d1:d6:81:42:7d:00:a9:42:00:31:c3:8a:
a6:a8:f1:54:27:e1:21:44:60:60:fe:fa:cb:c6:19:
31:5c:60:f8:9e:94:17:83:05:19:bb:11:a9:01:3e:
ef:a9:6b:ad:3a:80:13:ef:e0:26:bb:b2:c1:6c:5b:
d3:b6:01:21:8b:f5:4a:dd:e7:4f:d3:e9:2e:dd:9d:
81:db:57:32:f4:1d:89:72:56:e6:e3:82:c5:87:5d:
1d:96:e0:12:8a:6a:95:7b:7d:5f:e0:af:b3:bf:8a:
41:2d:a4:d3:ed:ca:99:80:10:63:ce:e9:d4:a0:98:
3c:4a:c3:b1:29:e5:75:d8:7f:62:b2:d8:0a:9b:26:
26:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:D3:97:CF:06:CC:C1:FC:A2:7D:B3:F8:11:A8:37:63:7E:DE:39:B5
X509v3 Authority Key Identifier:
keyid:EB:05:D5:BB:43:56:C8:73:7A:9A:A4:99:43:02:BC:A8:B4:66:91:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/EB05D5BB4356C8737A9AA4994302BCA8B46691CD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB05D5BB4356C8737A9AA4994302BCA8B46691CD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/EB05D5BB4356C8737A9AA4994302BCA8B46691CD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:25:83:e0:8d:8c:34:54:32:c6:d9:a3:bd:1c:7c:b5:dc:a7:
94:b0:c5:8b:0b:67:42:2c:2a:29:0b:39:34:25:9c:a0:c5:90:
5b:7d:45:6f:9c:88:75:19:33:5d:78:54:c5:22:19:09:42:82:
d0:1a:96:7b:75:a8:d5:45:b4:e6:20:80:fb:47:cb:64:1b:69:
2a:e3:c8:c3:06:f8:79:c3:89:fa:1b:0b:b6:cf:ff:bf:7f:2a:
d3:fc:36:05:c9:dd:f8:5d:f4:c0:ae:0e:4c:f0:cf:1d:37:01:
43:2e:27:a6:49:a6:4d:a2:90:a4:7a:8f:ae:c5:d1:b1:aa:97:
73:ac:a1:5a:01:fe:51:b6:85:33:ee:bc:d0:b0:6d:2f:73:30:
e1:37:a8:a3:25:de:f4:ee:55:be:f4:28:ba:10:bb:7d:97:9b:
12:32:99:af:ca:e3:f4:cb:5a:89:88:3a:00:2b:1c:e2:3c:78:
a5:76:4a:53:0d:55:4d:9c:1b:5b:47:19:85:8e:5f:ee:5b:60:
60:4a:38:75:03:5f:d4:f0:0e:59:86:73:4e:ce:95:27:66:b3:
71:0e:db:ac:0e:04:1f:58:ab:9d:69:5c:c5:79:6d:ce:aa:2f:
11:b7:85:76:92:1c:8d:40:d5:4e:43:a2:f8:29:eb:05:fb:e4:
bf:ef:ad:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 14:29:43 2026 by rpki-client