
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/ED174C0150D63525F5DB20F0992EDEECD70380E5.mft
File: ED174C0150D63525F5DB20F0992EDEECD70380E5.mft (raw, json)
Hash identifier: 8dmquA7+6QigkCe2t8ieyCtd4oOEeP7TT3lrHcT5yGU=
Subject key identifier: 77:42:DD:61:2B:1B:81:F0:C3:8A:A1:27:7E:7C:86:96:49:08:4D:46
Authority key identifier: ED:17:4C:01:50:D6:35:25:F5:DB:20:F0:99:2E:DE:EC:D7:03:80:E5
Certificate issuer: /CN=ED174C0150D63525F5DB20F0992EDEECD70380E5
Certificate serial: 33B9E8D2E9672A7059CA9DAB3152B3177B269B77
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED174C0150D63525F5DB20F0992EDEECD70380E5.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/ED174C0150D63525F5DB20F0992EDEECD70380E5.mft
Manifest number: D4
Signing time: Wed 07 Oct 2026 22:05:00 +0000
Manifest this update: Wed 07 Oct 2026 22:00:00 +0000
Manifest next update: Fri 09 Oct 2026 00:10:00 +0000
Files and hashes: 1: 3130332e3131302e33342e302f32332d3234203d3e20313530393336.roa (hash: MaBel9u9pYezsd1ShGGBnY40dDIrzHcanWzm4FOSRAg=)
2: 3130332e3131302e33352e302f32342d3234203d3e20313530393336.roa (hash: n4IkgoMW2u0zkFgXDHL0eZSUTKgr/z1ZRj5PZ9Dfmxk=)
3: 3130332e3131302e33342e302f32342d3234203d3e20313530393336.roa (hash: zmRnpGvMIJDXa5x4jILWd60y8Q5Ncg1iyAcAcxswFl4=)
4: 3130332e3131302e33352e302f32342d3234203d3e203438343635.roa (hash: bfhOCogzMUQqHoQaSn812eSk7yOuSzPxVDD+Nz5nDsc=)
5: ED174C0150D63525F5DB20F0992EDEECD70380E5.crl (hash: ndwJ/d20C2ZNG7ZRmxSWHkhhCl6x6yMt/efvbXAwD/c=)
6: 3130332e3131302e33342e302f32342d3234203d3e203438343635.roa (hash: 3XmUzAiqVZaFyzkEVDaETxoV3L7puo8oceCYnEmmitg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/ED174C0150D63525F5DB20F0992EDEECD70380E5.crl
rsync://rpki-rsync.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/ED174C0150D63525F5DB20F0992EDEECD70380E5.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED174C0150D63525F5DB20F0992EDEECD70380E5.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 00:10:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:b9:e8:d2:e9:67:2a:70:59:ca:9d:ab:31:52:b3:17:7b:26:9b:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ED174C0150D63525F5DB20F0992EDEECD70380E5
Validity
Not Before: Oct 7 22:00:00 2026 GMT
Not After : Oct 9 00:10:00 2026 GMT
Subject: CN=7742DD612B1B81F0C38AA1277E7C869649084D46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1e:93:89:b8:e7:a6:c4:42:72:1f:56:c4:08:
60:ba:1d:67:7d:95:73:ad:d5:e8:a4:65:79:3a:08:
09:b7:76:f2:8d:a8:74:71:5f:2b:06:b6:2f:b0:28:
89:ca:9b:90:71:b3:12:9d:b1:88:f9:ba:28:08:05:
34:f6:f2:bf:37:a3:69:9b:9c:d9:91:a9:45:85:30:
20:e4:2b:26:01:b7:96:c0:9e:06:c6:f1:30:92:d7:
d2:ed:2e:94:62:2b:ab:bd:f8:14:6f:1f:27:18:be:
11:4a:82:89:c2:9c:ca:4f:ee:ad:73:71:69:5e:98:
02:ae:d4:ab:31:1a:2c:7c:7b:3b:45:4a:52:d2:88:
b0:7c:29:af:b1:9a:39:91:c3:69:9d:9c:e2:0d:08:
f0:5e:db:96:d4:dd:a9:a4:38:4b:a7:ed:92:ff:4c:
81:f1:33:cd:47:49:a5:c7:bd:8b:4a:43:3b:32:16:
74:95:c3:83:f8:0f:1e:62:d6:f7:72:19:f4:52:25:
c5:14:c8:c6:20:2f:33:04:43:a8:8f:2a:ed:53:d7:
d8:6f:33:db:40:4b:0f:db:9f:58:36:b6:69:0d:f5:
4b:42:89:15:72:3d:4d:c2:8e:b0:02:6f:a4:3a:1d:
39:64:c9:9f:9d:07:00:cf:dc:f4:bd:bf:8b:9f:87:
64:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:42:DD:61:2B:1B:81:F0:C3:8A:A1:27:7E:7C:86:96:49:08:4D:46
X509v3 Authority Key Identifier:
keyid:ED:17:4C:01:50:D6:35:25:F5:DB:20:F0:99:2E:DE:EC:D7:03:80:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/ED174C0150D63525F5DB20F0992EDEECD70380E5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED174C0150D63525F5DB20F0992EDEECD70380E5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/ED174C0150D63525F5DB20F0992EDEECD70380E5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:0b:e8:8b:1f:fe:e0:fb:0e:32:b6:e7:1d:fe:66:46:2f:c9:
ed:c8:49:26:4e:0d:ad:58:2b:54:76:30:3c:65:bb:08:92:7e:
a8:7c:75:4b:19:ae:63:fc:bc:81:12:46:e7:67:56:17:6c:d2:
f3:c5:4a:73:8c:60:36:05:03:04:9d:6a:6d:c6:b1:ea:3b:54:
16:bd:dd:5b:bc:83:af:28:07:a6:26:83:ed:88:2a:d6:4d:33:
70:5b:7a:1a:ca:0f:38:5f:2c:ec:f1:0a:3a:df:93:f7:a7:95:
94:43:aa:80:be:bc:62:1e:a1:71:95:ce:f4:fc:fb:ac:23:e6:
0f:c1:91:95:e3:bf:d3:a2:88:15:0f:0d:39:23:15:db:2d:ea:
1c:ff:88:dc:b1:63:c4:fa:c2:77:c3:17:8b:39:b2:31:ed:b1:
fb:b6:34:a8:54:77:a0:97:3e:16:9e:b7:ab:a0:0b:a9:28:9d:
19:30:e7:cc:70:f4:90:03:ab:24:3a:fe:79:f3:b0:9f:0a:ad:
ad:b0:f5:56:73:fd:72:83:fb:03:ab:34:d7:3b:72:d5:41:0e:
50:3b:ba:62:0b:87:ae:cf:25:1f:cf:0b:fa:ee:09:e0:31:a5:
a2:9c:a2:f4:c9:3c:f9:2b:29:ca:8f:13:6a:1f:31:4f:01:7e:
87:bc:81:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 07:53:07 2026 by rpki-client