
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/EA4BA56B93C3D8CB6F45D28F75C6C333765D8D29.mft
File: EA4BA56B93C3D8CB6F45D28F75C6C333765D8D29.mft (raw, json)
Hash identifier: G1mIiGcA8pG1f0ZEZLzHq6imp1pfkkjVedckeAehOIU=
Subject key identifier: 77:9C:23:1A:D1:6C:A7:80:39:D7:E4:BE:69:5F:37:C0:1D:CA:B8:07
Authority key identifier: EA:4B:A5:6B:93:C3:D8:CB:6F:45:D2:8F:75:C6:C3:33:76:5D:8D:29
Certificate issuer: /CN=EA4BA56B93C3D8CB6F45D28F75C6C333765D8D29
Certificate serial: 0DD09B03D9F8DD4A5A5912CE4F2052085331F580
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA4BA56B93C3D8CB6F45D28F75C6C333765D8D29.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/EA4BA56B93C3D8CB6F45D28F75C6C333765D8D29.mft
Manifest number: EA
Signing time: Sat 24 Oct 2026 07:58:57 +0000
Manifest this update: Sat 24 Oct 2026 07:53:57 +0000
Manifest next update: Sun 25 Oct 2026 09:05:57 +0000
Files and hashes: 1: EA4BA56B93C3D8CB6F45D28F75C6C333765D8D29.crl (hash: G1xDGrNneItHAvqcQwHF7onp+l+672LCZsXEQ8Zx+64=)
2: 3130332e3134342e32322e302f32342d3234203d3e20313333383339.roa (hash: uSCFs14F7hiL1KQ1v1wnxoAG58HChGPsNFjXyvr5ZR8=)
3: 323030313a6466303a333330303a3a2f34382d3438203d3e20313333383339.roa (hash: Wmh6qAqJ5qVV5gXIsFnyCjvNYlAqoPmzOMxkkZl30lo=)
4: 3130332e35302e3231382e302f32342d3234203d3e20313333383339.roa (hash: wc57sxRbJJ2Vd7jfzFJiFboDvn0uem5mx9xjy6faNAg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/EA4BA56B93C3D8CB6F45D28F75C6C333765D8D29.crl
rsync://rpki-rsync.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/EA4BA56B93C3D8CB6F45D28F75C6C333765D8D29.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA4BA56B93C3D8CB6F45D28F75C6C333765D8D29.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Oct 2026 03:03:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:d0:9b:03:d9:f8:dd:4a:5a:59:12:ce:4f:20:52:08:53:31:f5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EA4BA56B93C3D8CB6F45D28F75C6C333765D8D29
Validity
Not Before: Oct 24 07:53:57 2026 GMT
Not After : Oct 25 09:05:57 2026 GMT
Subject: CN=779C231AD16CA78039D7E4BE695F37C01DCAB807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:07:c5:98:f6:fa:fd:87:f9:ca:62:72:e5:64:
4b:7a:d3:c7:3c:a6:56:97:66:de:8c:4c:8c:59:e2:
da:62:39:6d:48:b6:64:1b:c2:44:c9:be:db:88:57:
09:c7:74:76:79:0e:c3:44:a9:46:3f:62:17:1a:ce:
c0:e3:4d:9d:78:f1:71:cf:d7:c7:ee:d9:fe:27:c0:
09:54:ed:09:a5:1d:49:27:4d:6f:04:90:48:06:1d:
8e:5d:6c:6c:ca:7a:48:df:e5:16:92:88:f8:f1:8c:
b1:f5:fe:5b:f1:7d:8f:d7:9a:94:63:6f:bf:c7:4f:
53:33:4e:3a:d6:87:61:26:72:84:99:7f:90:4f:fa:
12:61:78:3a:6b:70:94:de:3f:21:9d:68:a0:c7:90:
b2:e0:97:76:e3:6e:d7:05:ba:a7:1d:25:c6:0c:d9:
b4:84:2e:cb:b9:7d:48:b9:4f:d8:76:61:4c:28:e6:
e4:ca:e1:f0:7f:2c:a9:77:07:5c:ae:fb:21:16:d7:
e3:25:2c:c0:4b:1c:2e:ff:b1:a0:fb:6e:20:bb:cb:
22:95:c9:d7:b8:aa:0f:0a:80:94:7c:48:65:18:48:
ca:d8:82:df:a7:80:35:f2:1c:0f:53:04:24:bd:de:
f4:12:59:16:78:6c:75:47:16:2e:ed:e4:a6:0e:b6:
29:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:9C:23:1A:D1:6C:A7:80:39:D7:E4:BE:69:5F:37:C0:1D:CA:B8:07
X509v3 Authority Key Identifier:
keyid:EA:4B:A5:6B:93:C3:D8:CB:6F:45:D2:8F:75:C6:C3:33:76:5D:8D:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/EA4BA56B93C3D8CB6F45D28F75C6C333765D8D29.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA4BA56B93C3D8CB6F45D28F75C6C333765D8D29.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/EA4BA56B93C3D8CB6F45D28F75C6C333765D8D29.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:f3:ab:4b:6d:bd:a1:6c:ec:b6:aa:b4:6a:1a:ee:64:84:e9:
84:a5:d5:84:7d:4c:7d:81:27:11:60:a8:91:a9:92:98:76:11:
e3:bb:aa:33:cf:8f:b3:d1:e2:12:76:39:e5:ab:36:7e:84:f0:
bc:67:60:f1:eb:8c:07:fd:79:05:e0:22:3d:34:4c:d1:b0:d7:
bb:55:c5:6f:a8:94:00:01:2c:16:b6:8c:4f:69:98:2a:92:f9:
88:56:91:07:77:a1:c7:a4:44:cb:57:e3:13:76:4c:7c:83:62:
42:fa:42:5b:44:95:c6:e6:81:c8:70:a4:ec:bd:1b:40:9e:87:
80:f7:80:5b:aa:0b:88:b1:9e:ac:f1:f9:67:90:10:9d:8c:cb:
ff:70:3e:f1:a8:97:a4:17:80:30:44:d4:5c:e2:9a:46:b2:c4:
de:d7:3d:f6:84:2d:ad:e2:fd:c8:0a:48:ca:ff:c7:76:3f:91:
a5:12:8b:0d:cb:54:5e:c7:d1:c4:26:97:95:83:2d:3a:55:76:
b6:1d:bf:f5:a9:b6:82:fb:b5:e3:84:9f:58:fe:51:d1:5d:28:
87:43:44:fb:53:10:bb:f9:b5:b1:79:50:f2:af:81:8b:b5:dc:
79:b2:79:42:47:3b:9e:82:15:5f:dd:1f:46:6c:15:bc:4d:85:
ed:88:b0:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:46:00 2026 by rpki-client