
$ rpki-client -vvf repo-rpki.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.mft
File: EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.mft (raw, json)
Hash identifier: fivKks28eGZP7GkruG4hd0jqGlZVmIBg1dLQ88+R9c0=
Subject key identifier: 8E:8D:8F:1B:E7:22:C2:F0:54:6C:89:E3:1C:36:A7:51:E2:A9:5E:DB
Authority key identifier: EB:78:21:4F:24:8E:FE:08:B4:E4:62:FD:AF:D4:E7:0B:C3:D0:5A:2F
Certificate issuer: /CN=EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F
Certificate serial: 4581432BABCAAC73F9D8C8BDBC1C78EBF10E6A4C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.mft
Manifest number: 012B
Signing time: Sun 01 Mar 2026 23:00:55 +0000
Manifest this update: Sun 01 Mar 2026 22:55:55 +0000
Manifest next update: Thu 05 Mar 2026 06:27:55 +0000
Files and hashes: 1: 3130332e3130312e3231372e302f32342d3234203d3e20313530393431.roa (hash: aAMjUzaN1yMPp7oXLSGICiOHUfNylQXYPCCHO4WZk9E=)
2: EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.crl (hash: BtVYbnqJdBZg3KaX5kxQaJXG5nobPwCmWMvDCaWcduI=)
3: 3130332e3130312e3231362e302f32342d3234203d3e20313530393431.roa (hash: V76cC5CNnJtNiE3A1eNlVqFtp7QA7yYWZJ54/BrVb60=)
4: 3130332e3130312e3231362e302f32332d3233203d3e20313530393431.roa (hash: 0KEJOj4To40f7hQCQKr4Kq8RhTmo523YXQIvq+ZY6HI=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.crl
rsync://repo-rpki.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 06:27:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:81:43:2b:ab:ca:ac:73:f9:d8:c8:bd:bc:1c:78:eb:f1:0e:6a:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F
Validity
Not Before: Mar 1 22:55:55 2026 GMT
Not After : Mar 5 06:27:55 2026 GMT
Subject: CN=8E8D8F1BE722C2F0546C89E31C36A751E2A95EDB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:da:d5:fb:88:11:fb:b6:42:8b:20:c3:13:2b:
c0:a5:e6:56:ea:66:15:d2:a1:ae:e6:53:1a:cd:6b:
b0:8f:46:e5:e1:ed:f7:e5:46:fe:ed:2b:c2:0a:49:
37:47:c3:fe:9e:6d:99:39:9c:ea:57:d0:5e:e3:c4:
94:22:5e:6d:55:80:72:9d:d7:47:cf:89:c6:8a:c6:
c0:b5:a0:e4:ce:fd:4a:a2:b7:d2:a2:19:bf:2c:d1:
d4:2c:69:5e:ae:a4:1e:55:57:c0:66:5a:04:eb:84:
d8:06:78:3a:a1:16:09:88:69:be:02:ca:60:a9:79:
43:0d:00:31:41:35:50:da:b8:b6:0a:dd:71:6d:23:
4c:9f:e3:14:13:ce:b1:0c:98:66:e7:c6:13:56:1a:
e6:5e:b8:68:4d:d1:54:17:6b:e1:ea:52:fe:e3:ea:
da:15:14:bd:a3:89:04:aa:ba:da:ab:43:70:fa:79:
d4:af:94:2a:2d:04:f2:d2:e9:d5:fc:9a:6c:d9:5b:
b4:a0:4f:ac:9e:9f:cb:06:df:44:a0:e5:d6:8c:dd:
27:d0:93:38:cb:28:12:70:91:17:a7:a8:2b:4a:53:
72:d3:a0:57:2e:8f:c7:ec:0f:19:f1:c5:79:9a:3c:
a2:7d:c7:61:ba:f0:14:fe:9c:b0:23:a0:89:45:55:
10:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:8D:8F:1B:E7:22:C2:F0:54:6C:89:E3:1C:36:A7:51:E2:A9:5E:DB
X509v3 Authority Key Identifier:
keyid:EB:78:21:4F:24:8E:FE:08:B4:E4:62:FD:AF:D4:E7:0B:C3:D0:5A:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:21:8f:a8:f0:0e:ae:73:f0:c1:68:ed:36:b6:45:90:b1:7b:
62:d8:67:70:3d:26:d8:29:36:65:ba:6e:be:d8:ba:2f:54:0a:
b3:56:c3:ef:b2:4d:d3:cb:9f:99:bc:98:b9:a0:bc:ed:74:06:
05:58:d2:33:b8:31:a0:1c:c4:2a:8b:2c:1f:bf:13:9b:fd:45:
a4:06:c1:f9:2b:27:c2:d7:64:cc:21:8f:62:1b:60:25:24:6e:
02:00:9b:cb:83:13:d5:c6:39:f8:5e:b4:25:1d:08:cf:ca:2f:
24:fe:80:91:06:e9:11:c0:49:0b:d3:7b:37:02:8b:fb:40:73:
f8:b1:0b:bc:3c:e6:4f:f6:6a:18:1e:57:11:37:c5:40:bd:0d:
a7:f9:31:da:79:f7:28:fd:f5:9b:44:d9:95:a9:49:da:58:e5:
79:54:dc:83:44:3d:ef:db:b7:c6:74:e6:e6:59:82:84:0d:ab:
d7:e5:2b:3a:e3:8c:e5:75:b0:d9:d9:a0:aa:0c:2d:da:c0:5b:
0b:6e:0e:52:97:7c:76:50:da:56:df:a3:6f:17:87:0e:33:47:
98:ba:56:1e:b0:08:d3:c2:3b:23:98:55:02:ca:9d:be:d4:2b:
5a:32:d2:50:f4:25:c2:71:6d:14:c9:6d:e6:b0:62:d1:33:7f:
0c:15:61:0e
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIURYFDK6vKrHP52Mi9vBx46/EOakwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUI3ODIxNEYyNDhFRkUwOEI0RTQ2MkZEQUZENEU3MEJD
M0QwNUEyRjAeFw0yNjAzMDEyMjU1NTVaFw0yNjAzMDUwNjI3NTVaMDMxMTAvBgNV
BAMTKDhFOEQ4RjFCRTcyMkMyRjA1NDZDODlFMzFDMzZBNzUxRTJBOTVFREIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC42tX7iBH7tkKLIMMTK8Cl5lbq
ZhXSoa7mUxrNa7CPRuXh7fflRv7tK8IKSTdHw/6ebZk5nOpX0F7jxJQiXm1VgHKd
10fPicaKxsC1oOTO/Uqit9KiGb8s0dQsaV6upB5VV8BmWgTrhNgGeDqhFgmIab4C
ymCpeUMNADFBNVDauLYK3XFtI0yf4xQTzrEMmGbnxhNWGuZeuGhN0VQXa+HqUv7j
6toVFL2jiQSqutqrQ3D6edSvlCotBPLS6dX8mmzZW7SgT6yen8sG30Sg5daM3SfQ
kzjLKBJwkRenqCtKU3LToFcuj8fsDxnxxXmaPKJ9x2G68BT+nLAjoIlFVRC9AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUjo2PG+ciwvBUbInjHDanUeKpXtswHwYDVR0j
BBgwFoAU63ghTySO/gi05GL9r9TnC8PQWi8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
YTFmMzk3MS0zYTQ3LTQ1NWQtYWIzMC1lN2MyM2I2MWI5ZjIvMC9FQjc4MjE0RjI0
OEVGRTA4QjRFNDYyRkRBRkQ0RTcwQkMzRDA1QTJGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRUI3ODIxNEYyNDhFRkUwOEI0RTQ2MkZEQUZENEU3MEJDM0Qw
NUEyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGExZjM5NzEtM2E0Ny00NTVkLWFi
MzAtZTdjMjNiNjFiOWYyLzAvRUI3ODIxNEYyNDhFRkUwOEI0RTQ2MkZEQUZENEU3
MEJDM0QwNUEyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAM0hj6jwDq5z8MFo7Ta2RZCxe2LYZ3A9Jtgp
NmW6br7Yui9UCrNWw++yTdPLn5m8mLmgvO10BgVY0jO4MaAcxCqLLB+/E5v9RaQG
wfkrJ8LXZMwhj2IbYCUkbgIAm8uDE9XGOfhetCUdCM/KLyT+gJEG6RHASQvTezcC
i/tAc/ixC7w85k/2ahgeVxE3xUC9Daf5Mdp59yj99ZtE2ZWpSdpY5XlU3INEPe/b
t8Z05uZZgoQNq9flKzrjjOV1sNnZoKoMLdrAWwtuDlKXfHZQ2lbfo28Xhw4zR5i6
Vh6wCNPCOyOYVQLKnb7UK1oy0lD0JcJxbRTJbeawYtEzfwwVYQ4=
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:05:18 2026 by rpki-client