
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/1EBB232203FD5432F4FF5F50C7CA7F672552ED3F.mft
File: 1EBB232203FD5432F4FF5F50C7CA7F672552ED3F.mft (raw, json)
Hash identifier: EnPPRrcNh6Cbxyq49g8AZDttySCVY4GeZ0fiMzF2sAg=
Subject key identifier: A4:4A:CA:F1:6A:66:8F:AC:DD:B4:E3:23:92:F1:52:15:E1:0F:92:29
Authority key identifier: 1E:BB:23:22:03:FD:54:32:F4:FF:5F:50:C7:CA:7F:67:25:52:ED:3F
Certificate issuer: /CN=1EBB232203FD5432F4FF5F50C7CA7F672552ED3F
Certificate serial: 76BE1A17E5B4AD09BA560109085014863745699B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EBB232203FD5432F4FF5F50C7CA7F672552ED3F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/1EBB232203FD5432F4FF5F50C7CA7F672552ED3F.mft
Manifest number: EA
Signing time: Sat 24 Oct 2026 19:38:44 +0000
Manifest this update: Sat 24 Oct 2026 19:33:44 +0000
Manifest next update: Sun 25 Oct 2026 23:25:44 +0000
Files and hashes: 1: 1EBB232203FD5432F4FF5F50C7CA7F672552ED3F.crl (hash: 04iJO49RBL9m6t57+PZDWFETHU8LkgVPm3mLBavFTDQ=)
2: 3130332e31302e3134342e302f32342d3234203d3e203436303537.roa (hash: jBCASy1F6Hwq7/RSM0DnwGAyM9nsMAfX8PewBvtkG60=)
3: 3230322e35322e35322e302f32342d3234203d3e203436303537.roa (hash: B12SJCFtXXNNoUXjwCcqgBMFjVn7huHWD2lTe7WyRQA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/1EBB232203FD5432F4FF5F50C7CA7F672552ED3F.crl
rsync://rpki-rsync.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/1EBB232203FD5432F4FF5F50C7CA7F672552ED3F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EBB232203FD5432F4FF5F50C7CA7F672552ED3F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Oct 2026 19:21:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:be:1a:17:e5:b4:ad:09:ba:56:01:09:08:50:14:86:37:45:69:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1EBB232203FD5432F4FF5F50C7CA7F672552ED3F
Validity
Not Before: Oct 24 19:33:44 2026 GMT
Not After : Oct 25 23:25:44 2026 GMT
Subject: CN=A44ACAF16A668FACDDB4E32392F15215E10F9229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:66:45:e8:c5:15:ae:31:82:e7:72:3a:95:93:
71:6f:74:d2:72:3c:38:0a:64:53:38:13:88:6c:6f:
e5:d8:d1:bf:2a:41:ad:14:f2:97:7d:13:4e:30:d1:
08:43:71:fb:b3:1e:34:b4:65:c2:b9:3d:59:dc:b0:
80:e3:c1:6e:80:2c:d8:2d:6f:6d:dd:dc:44:8d:6a:
6f:01:ec:e1:61:05:4b:83:97:24:46:fb:c3:79:b6:
72:9c:e7:1b:44:92:20:51:1e:9d:b2:d5:41:70:03:
42:15:79:27:7a:61:a1:1e:f7:eb:02:2e:2b:0d:5e:
c3:e5:9b:a8:d5:e7:d0:95:24:23:7b:fe:2a:bf:4c:
e5:98:c1:71:ae:3f:40:ed:ee:69:ca:6b:78:cb:ab:
c4:ef:43:d2:8c:5b:6d:05:a2:11:ab:f3:07:1e:66:
15:f4:ae:04:a9:e5:f3:8f:76:53:81:22:5f:87:06:
61:e8:98:7f:c9:87:9e:ac:99:a6:10:5f:5a:7f:93:
7f:16:24:51:81:4d:be:21:df:12:fa:be:0a:13:48:
ba:2b:d0:37:db:34:5b:4b:a8:03:89:2b:bd:73:9d:
d1:90:10:6f:89:67:8a:7a:06:74:0c:1e:13:11:a8:
47:ef:c8:aa:28:c4:ba:64:74:bc:2f:56:5b:93:9a:
10:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:4A:CA:F1:6A:66:8F:AC:DD:B4:E3:23:92:F1:52:15:E1:0F:92:29
X509v3 Authority Key Identifier:
keyid:1E:BB:23:22:03:FD:54:32:F4:FF:5F:50:C7:CA:7F:67:25:52:ED:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/1EBB232203FD5432F4FF5F50C7CA7F672552ED3F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EBB232203FD5432F4FF5F50C7CA7F672552ED3F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/1EBB232203FD5432F4FF5F50C7CA7F672552ED3F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:99:73:19:73:56:91:d5:85:09:74:a0:75:8f:9c:15:65:39:
c2:1d:d5:77:dc:5b:5c:14:b8:0d:8d:5b:df:61:6c:fd:18:61:
a1:52:7e:15:2c:24:d2:b5:dc:26:22:dc:da:a7:77:65:1e:ef:
82:24:54:3f:51:00:b3:09:db:43:a7:cd:47:bb:1c:a2:c9:f1:
71:36:7f:48:e7:dd:58:0a:12:81:c0:c8:be:b7:a0:48:5e:d3:
5f:de:ca:7e:c7:48:ad:a5:cd:a2:7e:86:e6:9e:86:f1:4b:40:
f1:bf:f4:e7:94:bd:07:3d:1f:cb:42:d1:51:92:92:1f:80:6d:
d6:10:db:ee:86:89:fa:88:91:0a:1f:95:9f:48:97:80:76:f8:
4a:58:fc:8c:a7:d4:57:f2:31:60:fd:34:a6:35:44:fb:cb:88:
3a:ee:1c:14:f9:20:8c:9f:21:90:d2:3a:7a:72:fe:ab:2e:0a:
7e:6b:39:4d:87:45:c2:65:de:44:81:ce:ca:c0:8c:e6:b8:11:
f7:3d:5f:48:2a:de:0a:00:c1:84:00:cf:8f:e1:56:9e:8e:f8:
2a:97:ac:9a:99:79:65:af:f2:fd:0f:e0:25:dc:50:ec:de:12:
15:f9:57:bb:0b:c8:0b:a8:b3:21:f4:23:76:3f:b7:cb:ac:83:
3d:db:8a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 06:06:40 2026 by rpki-client