
$ rpki-client -vvf repo-rpki.idnic.net/repo/2312a146-f954-47e3-b93f-92c2fe6d89ea/0/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.mft
File: EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.mft (raw, json)
Hash identifier: 7jGcecfcXYGwmniPk0d2SN6XlC+NUfCF8XwqmAT6R0k=
Subject key identifier: 76:64:0A:C1:65:07:64:9E:AA:FD:FB:F6:D4:13:EB:12:0F:CA:E1:AA
Authority key identifier: EB:DA:93:9B:37:F3:6E:8A:9F:58:1B:10:36:E0:1C:32:F1:F3:D9:DF
Certificate issuer: /CN=EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF
Certificate serial: 424EFDD99DB5AFB9C08AC2D5193CBDDC0092DFDC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2312a146-f954-47e3-b93f-92c2fe6d89ea/0/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.mft
Manifest number: 01F0
Signing time: Wed 15 Apr 2026 22:21:51 +0000
Manifest this update: Wed 15 Apr 2026 22:16:51 +0000
Manifest next update: Sun 19 Apr 2026 06:07:51 +0000
Files and hashes: 1: EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.crl (hash: cP3NT8aE9uHAB3+KFb5BpJnQ0axwb9fXfhiT30DQzDw=)
2: 3130332e3132322e302e302f32332d3234203d3e20313335343737.roa (hash: YSf7tTcq2YBd3VoXe5ADd93qTcdEqoHYWIyKTfCU3yg=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/2312a146-f954-47e3-b93f-92c2fe6d89ea/0/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.crl
rsync://repo-rpki.idnic.net/repo/2312a146-f954-47e3-b93f-92c2fe6d89ea/0/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 06:07:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:4e:fd:d9:9d:b5:af:b9:c0:8a:c2:d5:19:3c:bd:dc:00:92:df:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF
Validity
Not Before: Apr 15 22:16:51 2026 GMT
Not After : Apr 19 06:07:51 2026 GMT
Subject: CN=76640AC16507649EAAFDFBF6D413EB120FCAE1AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:32:ca:97:16:98:41:00:22:4a:7a:9f:07:ff:
02:87:82:a1:58:d1:da:d5:6f:d6:34:eb:e1:27:80:
7b:8f:10:2c:63:8b:a2:60:bf:b9:e4:9e:58:0e:b7:
d7:1c:bf:25:96:8c:b2:d3:ce:cf:ef:71:f9:dc:88:
ba:9a:62:af:27:e2:36:28:a8:73:e7:58:38:c1:ee:
de:0f:2d:b9:e4:61:61:37:c6:10:18:d8:6c:60:13:
49:bd:95:89:37:c2:eb:b2:76:fd:7f:3d:0b:ed:86:
9d:59:dd:19:ca:f2:4b:e1:86:b4:1d:de:8b:0f:50:
08:91:f6:a3:f3:e5:de:ec:07:82:88:c5:fd:c4:6f:
f2:5f:fe:7e:08:05:01:d8:a4:8f:46:a6:34:22:94:
57:e9:dc:1a:01:bc:20:91:18:95:ee:94:ac:32:0e:
36:ce:48:92:38:47:2c:7e:1c:a0:63:39:65:67:9c:
16:3b:75:9e:22:f9:a0:60:64:41:66:47:9e:25:9d:
a8:e0:eb:78:f3:8b:f5:ec:74:f5:de:de:37:f9:ed:
21:a5:76:2b:8a:ad:ee:e7:a4:3b:9d:17:21:59:ce:
44:aa:39:a2:3e:00:6e:8c:9a:43:e0:9d:8f:49:94:
f5:43:08:28:f9:d5:02:ce:93:3b:23:94:12:57:5c:
c5:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:64:0A:C1:65:07:64:9E:AA:FD:FB:F6:D4:13:EB:12:0F:CA:E1:AA
X509v3 Authority Key Identifier:
keyid:EB:DA:93:9B:37:F3:6E:8A:9F:58:1B:10:36:E0:1C:32:F1:F3:D9:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2312a146-f954-47e3-b93f-92c2fe6d89ea/0/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2312a146-f954-47e3-b93f-92c2fe6d89ea/0/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:1a:a6:52:f6:e6:a9:e1:2c:d8:74:1c:40:b1:ac:3b:64:90:
6c:dd:68:9f:df:2a:c6:ca:2e:60:ae:14:52:0a:02:3a:61:f9:
88:99:d2:81:c2:9c:36:a5:1c:0f:83:4a:27:87:45:ef:bd:5d:
e6:da:f1:7d:72:a7:90:33:b9:9c:2f:f4:d4:3f:9b:c1:eb:33:
ca:d1:7a:92:1f:e2:a2:55:28:4e:dc:be:93:49:d9:93:fd:9f:
39:73:b7:4a:ba:8a:70:fd:79:8d:49:fc:17:0a:72:fe:26:93:
09:b7:5a:a5:52:b7:69:3f:7e:5f:13:cf:29:cf:cf:32:1d:2a:
80:07:bb:3f:fe:f2:b4:4e:5c:64:55:a1:01:58:f3:c7:3c:c7:
f5:62:a4:69:3d:b5:23:af:98:84:1e:be:b6:83:10:9f:0f:1d:
54:93:cb:c0:ee:63:5c:7f:0b:20:ac:52:4b:a7:0b:b5:cb:8f:
7e:6f:6d:59:7e:fb:8b:98:21:d7:81:32:9b:fe:7e:8c:b1:1a:
89:8f:0f:98:5e:36:52:f3:c4:91:e7:bb:10:a4:58:91:fa:4f:
df:8b:1b:93:66:d2:b6:7e:fe:04:65:45:f3:d5:6b:e3:db:38:
b0:66:6c:03:2b:99:bc:c1:e6:c7:dd:de:2c:af:1f:61:ab:bd:
1c:91:4c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:24:19 2026 by rpki-client