
$ rpki-client -vvf repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.mft
File: EBA04070CA27E646C332039E07557734C6732ED2.mft (raw, json)
Hash identifier: rLJ7C7+IbAsQOznI7t7ZuMPLgPXvaeAfGGqCIdTOzmQ=
Subject key identifier: DB:D5:77:FC:2F:9C:79:61:05:A7:14:EA:48:D2:74:91:2E:85:39:F3
Authority key identifier: EB:A0:40:70:CA:27:E6:46:C3:32:03:9E:07:55:77:34:C6:73:2E:D2
Certificate issuer: /CN=EBA04070CA27E646C332039E07557734C6732ED2
Certificate serial: 1C38931F815F14A540C7212DC269A1FBDECB2C79
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBA04070CA27E646C332039E07557734C6732ED2.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.mft
Manifest number: 021B
Signing time: Sat 28 Feb 2026 21:22:09 +0000
Manifest this update: Sat 28 Feb 2026 21:17:09 +0000
Manifest next update: Wed 04 Mar 2026 06:32:09 +0000
Files and hashes: 1: 3130332e3131312e3134312e302f32342d3234203d3e20313431343631.roa (hash: FOKCBmZQR+RvQ/YXjf6i5T2Jp3732D5RrjsxBFstWVo=)
2: 3130332e3131312e3134302e302f32342d3234203d3e20313431343631.roa (hash: bDyPI2WVo6BjRMZp12OHCZAGn1tdLEQqcz47No/uxaA=)
3: 3130332e3131312e3134332e302f32342d3234203d3e20313431343631.roa (hash: vMUSQ2h0yM8CNBMFULwiVWwmyMjPH1qg6y43JB4Vwvw=)
4: EBA04070CA27E646C332039E07557734C6732ED2.crl (hash: iD7UdJjBqqNaErMyjDV6/Jg6ZrM5Nvc38R32e7Ji5Rs=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.crl
rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBA04070CA27E646C332039E07557734C6732ED2.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 06:32:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:38:93:1f:81:5f:14:a5:40:c7:21:2d:c2:69:a1:fb:de:cb:2c:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EBA04070CA27E646C332039E07557734C6732ED2
Validity
Not Before: Feb 28 21:17:09 2026 GMT
Not After : Mar 4 06:32:09 2026 GMT
Subject: CN=DBD577FC2F9C796105A714EA48D274912E8539F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:3d:2d:e9:61:c3:a4:9c:88:a9:e5:f0:91:23:
4d:cb:78:3c:ae:3b:a1:cb:cc:6c:ce:1e:03:f7:a0:
b5:36:b9:4e:8a:84:fc:70:27:a2:56:01:2c:d7:7c:
3f:c3:83:c4:0f:ec:29:75:e7:b0:86:59:e2:5c:9c:
34:d2:3e:92:cf:da:97:f0:1f:64:8a:93:10:05:31:
21:bd:ae:33:5f:0e:39:8f:c0:3a:08:f7:55:86:d9:
bb:05:d5:9d:41:92:6c:fd:ec:12:33:21:e2:70:85:
13:fd:d4:7a:29:fc:3f:32:2c:84:df:b8:80:4e:e4:
20:64:28:4a:27:eb:7d:fb:62:c5:5e:92:8c:cb:5b:
40:82:13:0f:a3:36:c2:93:10:ff:b7:39:26:c5:34:
b0:03:39:52:e1:7c:d2:14:71:e9:ef:dc:be:26:ee:
59:16:9b:15:25:6b:98:db:0f:58:56:c7:5a:cf:11:
f6:d9:ef:49:8b:41:9d:48:e0:50:98:fd:ec:31:08:
5a:ff:a5:e7:85:0f:d0:88:61:99:c6:9c:2c:8d:f9:
d7:ff:37:b2:cc:eb:22:da:d8:07:12:04:90:1a:a6:
93:ee:ba:d4:98:21:11:5d:8f:3a:ca:2d:51:80:b0:
99:a2:6c:8e:74:e0:0f:c3:f6:df:a5:47:bc:35:8e:
86:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:D5:77:FC:2F:9C:79:61:05:A7:14:EA:48:D2:74:91:2E:85:39:F3
X509v3 Authority Key Identifier:
keyid:EB:A0:40:70:CA:27:E6:46:C3:32:03:9E:07:55:77:34:C6:73:2E:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBA04070CA27E646C332039E07557734C6732ED2.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:e9:d2:b2:32:2b:c3:60:e9:ce:f5:92:e8:e5:32:1a:9f:49:
4c:b0:f7:66:be:95:00:75:8f:3f:2e:5c:a7:85:a4:27:b4:ee:
2e:68:18:81:14:ec:eb:76:59:7b:61:12:de:14:de:9d:0a:fe:
b3:6b:3e:b8:22:0d:a6:91:17:3b:bf:64:89:83:70:18:50:e3:
34:ba:18:2b:70:12:55:a4:01:6f:91:82:3c:d0:ba:f6:b4:36:
10:4b:29:ca:d7:e7:34:48:3f:cc:08:0c:81:27:e9:42:51:f4:
aa:8f:dd:51:01:20:08:ec:51:5e:4f:c4:d4:7f:74:99:af:e9:
04:45:bb:03:0a:86:93:24:11:53:40:ac:57:68:d7:57:88:4e:
e5:a2:fe:8c:5e:a0:02:54:c8:70:b6:f5:7c:72:c7:55:5c:47:
2f:40:ea:2d:2b:0f:a6:ac:1f:71:42:7d:de:26:03:a3:54:29:
15:74:f2:0e:11:18:2e:a6:b6:50:cf:77:35:2e:6d:48:8d:20:
f9:fa:69:35:11:02:47:67:89:14:be:39:bd:1e:e1:10:27:1f:
91:49:c6:d9:99:26:f9:93:3a:e4:da:74:89:8e:6e:d7:f2:fc:
05:27:c6:ac:ff:72:41:d3:9a:44:be:cf:89:f9:f9:66:4e:98:
1d:69:23:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:51:52 2026 by rpki-client