
$ rpki-client -vvf rpki-rsync.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/ED174C0150D63525F5DB20F0992EDEECD70380E5.mft
File: ED174C0150D63525F5DB20F0992EDEECD70380E5.mft (raw, json)
Hash identifier: T7Vum24g993+yVs1sy22iuayMaSuibXIEwMphXE3UxM=
Subject key identifier: 64:52:70:A1:B9:45:D4:7A:B4:AE:79:31:28:4F:89:26:0F:C9:62:DE
Authority key identifier: ED:17:4C:01:50:D6:35:25:F5:DB:20:F0:99:2E:DE:EC:D7:03:80:E5
Certificate issuer: /CN=ED174C0150D63525F5DB20F0992EDEECD70380E5
Certificate serial: 18618846137A02C3576C47B63945F161627F85C8
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED174C0150D63525F5DB20F0992EDEECD70380E5.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/ED174C0150D63525F5DB20F0992EDEECD70380E5.mft
Manifest number: 05
Signing time: Tue 05 May 2026 10:56:27 +0000
Manifest this update: Tue 05 May 2026 10:51:27 +0000
Manifest next update: Wed 06 May 2026 14:11:27 +0000
Files and hashes: 1: 3130332e3131302e33352e302f32342d3234203d3e20313530393336.roa (hash: n4IkgoMW2u0zkFgXDHL0eZSUTKgr/z1ZRj5PZ9Dfmxk=)
2: 3130332e3131302e33352e302f32342d3234203d3e203438343635.roa (hash: bfhOCogzMUQqHoQaSn812eSk7yOuSzPxVDD+Nz5nDsc=)
3: 3130332e3131302e33342e302f32342d3234203d3e203438343635.roa (hash: 3XmUzAiqVZaFyzkEVDaETxoV3L7puo8oceCYnEmmitg=)
4: 3130332e3131302e33342e302f32332d3234203d3e20313530393336.roa (hash: MaBel9u9pYezsd1ShGGBnY40dDIrzHcanWzm4FOSRAg=)
5: 3130332e3131302e33342e302f32342d3234203d3e20313530393336.roa (hash: zmRnpGvMIJDXa5x4jILWd60y8Q5Ncg1iyAcAcxswFl4=)
6: ED174C0150D63525F5DB20F0992EDEECD70380E5.crl (hash: 38m6zd1UQOJ7jbTIbcLFXz0Uqtn+gKO6UtDGqMN2Cho=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/ED174C0150D63525F5DB20F0992EDEECD70380E5.crl
rsync://rpki-rsync.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/ED174C0150D63525F5DB20F0992EDEECD70380E5.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED174C0150D63525F5DB20F0992EDEECD70380E5.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 06 May 2026 13:33:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:61:88:46:13:7a:02:c3:57:6c:47:b6:39:45:f1:61:62:7f:85:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ED174C0150D63525F5DB20F0992EDEECD70380E5
Validity
Not Before: May 5 10:51:27 2026 GMT
Not After : May 6 14:11:27 2026 GMT
Subject: CN=645270A1B945D47AB4AE7931284F89260FC962DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:99:7a:1f:99:b5:c8:90:4f:67:8c:32:52:ed:
67:14:c3:6a:d4:c8:5d:c4:ab:7d:51:9b:5b:51:ac:
49:d9:94:68:44:4b:34:2b:0a:f5:3f:5b:24:e1:20:
02:f9:f5:43:d1:9e:09:d9:a0:c4:95:09:34:e7:93:
61:97:fd:cf:0b:1c:70:b5:26:1b:a6:95:ad:a8:38:
67:4b:01:be:7e:03:24:03:eb:3b:67:84:18:13:1c:
78:03:de:44:39:0a:36:23:1d:e4:b7:09:9a:20:21:
4b:66:88:8e:80:b5:aa:0c:e5:61:3e:ff:51:19:a0:
40:6f:f0:d5:51:c2:8a:67:30:b5:59:51:d2:d0:46:
32:d9:1e:72:c2:9c:a2:dd:c7:14:ca:ae:1d:2c:12:
93:72:12:fe:6c:ae:b8:2d:d6:b4:d4:e6:2e:6a:9b:
ca:f0:3a:af:e0:47:e5:f1:e3:fd:ed:65:a4:8f:d1:
3d:fd:f3:59:5a:1f:cd:4d:00:dd:b5:22:84:dc:d5:
da:d5:f4:66:10:87:30:4e:c0:b2:40:b2:50:42:57:
eb:3b:95:35:8f:bd:dc:b8:9e:57:6a:38:c6:c8:16:
0e:bf:c5:18:25:ac:ee:54:1e:4e:2e:e9:94:6b:a3:
3d:58:cd:90:40:08:2f:c3:ca:67:1d:72:c3:e3:cf:
2a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:52:70:A1:B9:45:D4:7A:B4:AE:79:31:28:4F:89:26:0F:C9:62:DE
X509v3 Authority Key Identifier:
keyid:ED:17:4C:01:50:D6:35:25:F5:DB:20:F0:99:2E:DE:EC:D7:03:80:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/ED174C0150D63525F5DB20F0992EDEECD70380E5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED174C0150D63525F5DB20F0992EDEECD70380E5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/ED174C0150D63525F5DB20F0992EDEECD70380E5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:f1:9b:ea:19:dd:fb:85:91:94:37:65:58:4f:8b:94:8f:be:
9c:12:db:09:4c:17:e0:53:6a:c5:49:48:e8:f3:a7:7e:8e:a7:
ee:d1:1f:52:87:a8:d3:fd:09:c0:53:e5:8f:7d:a8:91:f6:9d:
8c:96:79:35:95:45:15:dc:98:d8:c4:d5:3e:a8:07:cf:44:c2:
44:65:b2:c4:d5:4e:75:2b:25:5d:ee:62:46:86:53:72:27:8f:
47:65:47:28:99:91:e8:c2:d6:ea:ed:05:b1:04:ff:9d:9f:14:
8a:86:a9:79:97:30:03:16:72:68:b8:6e:70:2f:7f:f8:66:87:
6e:60:4e:45:e9:a4:68:ba:67:3e:80:bb:01:4c:3b:a0:02:ba:
4c:5f:f3:76:18:0e:31:cc:42:e2:b2:28:be:95:ce:f5:52:7f:
10:c8:60:55:dd:a2:85:cf:f4:04:8d:c4:96:79:67:78:0b:1e:
24:99:f4:74:9c:28:2e:48:45:d2:e1:12:b5:4b:9d:89:86:3f:
f0:95:8e:7b:1f:2a:69:d1:66:f1:76:dc:8d:19:47:b0:33:c7:
86:df:65:c1:f5:98:d6:64:c2:49:a4:21:22:c5:cb:ba:14:39:
63:3b:76:38:c3:09:89:48:bb:aa:0e:23:86:16:ad:df:7f:dd:
bc:cc:49:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 17:52:25 2026 by rpki-client