
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/EDE74DB94791A93866EC7291214CFE17A2E8847C.mft
File: EDE74DB94791A93866EC7291214CFE17A2E8847C.mft (raw, json)
Hash identifier: peE8AwWK8puXJygiAJS+iYlbof5U6tpL7NFlVNU7Gn8=
Subject key identifier: 11:82:15:F8:04:34:5E:40:FD:1E:F5:37:07:7E:F9:C9:EC:A5:3A:C8
Authority key identifier: ED:E7:4D:B9:47:91:A9:38:66:EC:72:91:21:4C:FE:17:A2:E8:84:7C
Certificate issuer: /CN=EDE74DB94791A93866EC7291214CFE17A2E8847C
Certificate serial: 6BD9896A36ACF9338E2B96205D30475A5281CB44
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EDE74DB94791A93866EC7291214CFE17A2E8847C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/EDE74DB94791A93866EC7291214CFE17A2E8847C.mft
Manifest number: EC
Signing time: Mon 26 Oct 2026 02:50:30 +0000
Manifest this update: Mon 26 Oct 2026 02:45:30 +0000
Manifest next update: Tue 27 Oct 2026 05:46:30 +0000
Files and hashes: 1: EDE74DB94791A93866EC7291214CFE17A2E8847C.crl (hash: VjS49KjFGHgW9FUw9qMGCjywsEt2hBWPs3ztlHdCmk0=)
2: 3132332e3235332e3235322e302f32322d3234203d3e20313339333937.roa (hash: 4l+iqPdBiSlCoKQVmREPhK2V683AQV+EJjvlxdf5bAw=)
3: 3130332e39312e33322e302f32322d3234203d3e203338343936.roa (hash: 8iN/CyAnWulsiAeIh9OXGEEjvzE7Yu0Mej0akYbb1wk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/EDE74DB94791A93866EC7291214CFE17A2E8847C.crl
rsync://rpki-rsync.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/EDE74DB94791A93866EC7291214CFE17A2E8847C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EDE74DB94791A93866EC7291214CFE17A2E8847C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Oct 2026 05:22:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:d9:89:6a:36:ac:f9:33:8e:2b:96:20:5d:30:47:5a:52:81:cb:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EDE74DB94791A93866EC7291214CFE17A2E8847C
Validity
Not Before: Oct 26 02:45:30 2026 GMT
Not After : Oct 27 05:46:30 2026 GMT
Subject: CN=118215F804345E40FD1EF537077EF9C9ECA53AC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:48:86:a8:14:33:ac:d5:88:b8:15:ba:5b:3a:
2d:c3:b4:e5:f7:fc:7c:d6:e9:47:77:8e:16:8d:0a:
71:ed:32:a4:e1:b2:d9:00:f5:0c:05:ec:4c:9e:85:
9a:5a:cb:b2:7f:4a:40:00:a0:56:c9:63:85:ae:fd:
b3:30:e6:38:62:8f:f3:de:7a:51:83:c4:8b:24:90:
7c:f4:63:35:26:7e:7f:60:b0:d4:ac:f8:bc:b0:8a:
aa:e1:11:8f:4f:b5:07:0a:68:b3:14:46:34:31:9e:
5d:af:39:d3:75:14:2b:c3:12:32:65:22:c7:fa:41:
13:d8:f4:f3:ad:14:e3:95:87:1d:a2:63:1d:e5:4f:
1f:f0:bd:69:60:b2:d4:01:80:cd:12:2c:b6:5a:28:
db:eb:50:0c:c4:b4:f9:bb:d2:5e:44:4a:da:ac:de:
79:8f:dc:2a:18:6a:29:76:30:23:8a:bb:0f:c2:89:
22:d3:81:d9:02:89:a5:89:22:b5:b9:5f:8b:c5:53:
21:68:4a:14:70:dd:0f:95:ab:f3:db:e0:48:7c:9a:
af:42:6a:8a:72:e2:48:7f:b7:6d:d4:2a:01:09:6b:
06:19:d7:80:96:d8:c8:fd:d1:ca:79:af:b5:5f:d7:
77:02:9a:3c:c2:fa:93:28:d3:9b:0d:03:f7:fc:1f:
ed:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:82:15:F8:04:34:5E:40:FD:1E:F5:37:07:7E:F9:C9:EC:A5:3A:C8
X509v3 Authority Key Identifier:
keyid:ED:E7:4D:B9:47:91:A9:38:66:EC:72:91:21:4C:FE:17:A2:E8:84:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/EDE74DB94791A93866EC7291214CFE17A2E8847C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EDE74DB94791A93866EC7291214CFE17A2E8847C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/EDE74DB94791A93866EC7291214CFE17A2E8847C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:87:50:1b:5a:ca:55:9e:a8:92:36:7f:97:e3:e1:f0:51:cf:
d0:4b:69:10:85:14:ff:14:dc:0e:1b:8c:9c:bc:e2:c7:80:90:
c9:43:c0:fb:a3:9f:f5:41:3e:83:af:7b:de:97:9a:49:5f:3f:
16:e3:04:57:c5:9d:d7:fc:4d:69:e9:70:33:42:ad:41:8e:dd:
ef:0e:f1:ad:99:dc:81:ec:62:92:7f:01:66:89:69:85:c7:61:
1f:09:5d:8d:56:d3:97:8f:48:b0:91:2a:1b:4a:76:83:ed:15:
63:76:51:24:31:3c:2b:ac:33:ff:56:58:5f:9f:be:e0:6f:8c:
31:bd:20:f0:04:c3:96:9c:b6:cd:9a:c7:e8:4e:f2:18:f7:33:
0f:b8:65:cb:60:5e:41:01:33:ee:49:1a:4e:e2:14:99:d5:ab:
19:5e:9c:9b:cd:c7:92:3b:00:7d:95:5a:48:99:76:1d:a0:2f:
eb:40:8f:7d:e9:09:59:3a:a1:7c:98:b4:06:18:ed:79:2d:a0:
91:5b:38:6b:39:ae:35:96:6c:79:a3:e7:7a:97:a8:7e:25:81:
56:94:75:cb:0a:ef:fb:bd:89:1c:86:1a:dd:73:16:06:60:b3:
8d:26:ee:cc:f5:a2:ca:f4:6d:c2:09:18:d9:df:77:dc:db:e6:
24:86:59:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 13:25:59 2026 by rpki-client