
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/EAC36BE8959CA224F62797D3331900441E4C9AA0.mft
File: EAC36BE8959CA224F62797D3331900441E4C9AA0.mft (raw, json)
Hash identifier: VWl1HfQHo/d4zBu4n993DO3Jx8adT7cBE8DrWg1YE/k=
Subject key identifier: 93:34:F0:17:2C:90:1C:FE:71:9A:10:7F:F1:64:47:11:2A:F8:8F:2B
Authority key identifier: EA:C3:6B:E8:95:9C:A2:24:F6:27:97:D3:33:19:00:44:1E:4C:9A:A0
Certificate issuer: /CN=EAC36BE8959CA224F62797D3331900441E4C9AA0
Certificate serial: 7F80961582DBA5FF48CD34D15C8D11C1E33B575C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAC36BE8959CA224F62797D3331900441E4C9AA0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/EAC36BE8959CA224F62797D3331900441E4C9AA0.mft
Manifest number: EA
Signing time: Sat 24 Oct 2026 01:00:20 +0000
Manifest this update: Sat 24 Oct 2026 00:55:20 +0000
Manifest next update: Sun 25 Oct 2026 01:18:20 +0000
Files and hashes: 1: 3130332e3132312e39362e302f32332d3234203d3e20313335343738.roa (hash: m7uPNuZw3t1vASN7WpScOi7UugEIi5WgXEeUkw1LbeE=)
2: 3130332e3132312e39382e302f32332d3234203d3e20313335343738.roa (hash: sNKvsJs//8pNrznC7tNde73755hYJDakfZ44J8CvOhI=)
3: EAC36BE8959CA224F62797D3331900441E4C9AA0.crl (hash: pxyL8ZvuxOpJkm5DyJ9nvvaQs2yTRcEG7d6122B7s1w=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/EAC36BE8959CA224F62797D3331900441E4C9AA0.crl
rsync://rpki-rsync.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/EAC36BE8959CA224F62797D3331900441E4C9AA0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAC36BE8959CA224F62797D3331900441E4C9AA0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Oct 2026 01:18:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:80:96:15:82:db:a5:ff:48:cd:34:d1:5c:8d:11:c1:e3:3b:57:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EAC36BE8959CA224F62797D3331900441E4C9AA0
Validity
Not Before: Oct 24 00:55:20 2026 GMT
Not After : Oct 25 01:18:20 2026 GMT
Subject: CN=9334F0172C901CFE719A107FF16447112AF88F2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4f:e6:b9:61:60:3c:a0:5e:35:45:40:4c:e7:
42:b1:37:05:08:f2:78:a7:fb:ec:eb:6e:e6:ba:9c:
e7:03:d1:49:b5:74:1f:30:ab:8b:d8:59:a6:54:1f:
9f:b6:9b:9a:cc:55:48:55:9d:0c:6a:92:3e:42:1f:
9f:04:d6:ae:5e:fd:73:93:09:df:7f:57:4a:0b:c8:
c4:41:d3:b1:78:5e:a8:d8:51:17:de:35:06:f6:63:
45:a6:58:5a:86:72:09:34:1c:ca:80:64:ad:80:72:
7e:71:e3:bb:83:d8:cd:7d:a8:f7:cc:8e:28:17:ce:
08:8b:6e:6d:e6:2d:06:7f:1a:6e:b4:07:08:a6:0d:
fb:70:eb:5f:01:70:67:91:24:fa:9f:11:06:25:77:
98:1c:9a:96:e1:c9:70:a7:3f:cc:1f:bd:8d:9b:81:
65:ae:bc:79:f9:32:ea:1a:ed:f7:e3:88:43:96:8a:
30:9c:e7:54:44:51:14:3e:33:a5:52:e6:6a:a1:bb:
72:dd:af:ef:84:02:c3:81:1e:ad:11:51:83:c5:e0:
a0:4c:5d:73:d9:b4:ca:05:b4:94:1a:45:7a:90:15:
e4:05:f8:d1:a9:62:bb:34:d3:52:be:05:cb:21:41:
ce:d2:0a:78:85:00:b1:5b:36:e3:40:37:60:a3:a7:
52:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:34:F0:17:2C:90:1C:FE:71:9A:10:7F:F1:64:47:11:2A:F8:8F:2B
X509v3 Authority Key Identifier:
keyid:EA:C3:6B:E8:95:9C:A2:24:F6:27:97:D3:33:19:00:44:1E:4C:9A:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/EAC36BE8959CA224F62797D3331900441E4C9AA0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAC36BE8959CA224F62797D3331900441E4C9AA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/EAC36BE8959CA224F62797D3331900441E4C9AA0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:90:e1:d6:d0:23:9a:c1:82:f6:bc:59:74:50:20:46:70:51:
41:3f:3e:c1:02:43:10:c9:eb:15:38:f4:ae:89:e8:24:63:1a:
75:ce:ea:a0:a2:13:a9:13:5e:ee:18:81:21:fc:41:53:70:d3:
15:59:7a:9f:12:bf:84:76:fc:73:aa:03:41:74:66:4b:d7:5e:
e6:ce:6d:11:21:ef:10:05:0c:b4:68:b2:7b:75:6d:1d:b5:4a:
bd:6d:85:b6:56:49:ca:91:b5:70:0d:2e:b2:c5:4a:ca:01:99:
66:a1:f7:f1:d0:62:89:47:ad:a9:a2:19:b4:dd:58:99:33:4e:
58:49:0e:2f:0b:6c:15:4e:e8:bb:c0:e8:b2:46:14:64:18:ea:
74:1f:c6:8e:82:d7:54:60:11:28:fd:4a:4a:61:30:16:8a:8e:
96:78:7c:9c:ed:d9:67:ef:17:c0:f2:3a:41:40:46:aa:8d:c6:
40:01:bb:d2:57:f8:12:eb:09:df:ee:58:a4:d1:18:bf:63:09:
12:1b:b7:74:35:48:74:98:63:ec:54:f6:78:d8:55:67:cf:c3:
35:29:74:c1:4d:43:72:4b:4b:42:74:d2:0b:f7:35:4b:ae:b1:
a2:de:71:40:87:e6:c5:dc:27:f3:6d:f1:a8:4c:40:7a:9f:1e:
d6:bb:58:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 10:19:44 2026 by rpki-client