
$ rpki-client -vvf repo-rpki.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/EA581458C8710B7F2862361DF5BE327D72423B7F.mft
File: EA581458C8710B7F2862361DF5BE327D72423B7F.mft (raw, json)
Hash identifier: B1pQvJQFrS5GzoVFkWrA8tBNnnrRED9yVcAkOq9pOOk=
Subject key identifier: ED:4C:2E:7A:34:2F:94:DF:FD:21:81:13:20:51:9E:9E:81:70:77:E7
Authority key identifier: EA:58:14:58:C8:71:0B:7F:28:62:36:1D:F5:BE:32:7D:72:42:3B:7F
Certificate issuer: /CN=EA581458C8710B7F2862361DF5BE327D72423B7F
Certificate serial: 51C4A19C163CD4FCE918F2EC80F1B191D3E9464F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA581458C8710B7F2862361DF5BE327D72423B7F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/EA581458C8710B7F2862361DF5BE327D72423B7F.mft
Manifest number: 0280
Signing time: Sat 28 Feb 2026 04:40:01 +0000
Manifest this update: Sat 28 Feb 2026 04:35:01 +0000
Manifest next update: Tue 03 Mar 2026 07:49:01 +0000
Files and hashes: 1: EA581458C8710B7F2862361DF5BE327D72423B7F.crl (hash: BNuurRiobcGt4PwsUUHMRD95XNhQu/Z3n8S0y3VJIvk=)
2: 3130332e3138352e33382e302f32332d3234203d3e20313339343536.roa (hash: KB1G1+0qfCddZUFEHNbpBoUfnLJXbrwxBEUZeryfQ/8=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/EA581458C8710B7F2862361DF5BE327D72423B7F.crl
rsync://repo-rpki.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/EA581458C8710B7F2862361DF5BE327D72423B7F.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA581458C8710B7F2862361DF5BE327D72423B7F.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 07:49:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:c4:a1:9c:16:3c:d4:fc:e9:18:f2:ec:80:f1:b1:91:d3:e9:46:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EA581458C8710B7F2862361DF5BE327D72423B7F
Validity
Not Before: Feb 28 04:35:01 2026 GMT
Not After : Mar 3 07:49:01 2026 GMT
Subject: CN=ED4C2E7A342F94DFFD21811320519E9E817077E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ba:15:c5:68:84:f5:0e:13:70:54:ff:d7:cc:
8b:27:79:b8:be:e7:55:3b:a8:90:41:6b:2e:a6:b0:
45:69:b5:90:04:e2:b2:1f:15:f7:6c:9a:51:93:ae:
48:2d:f1:63:40:dd:d0:ed:cc:5c:60:ad:fa:d8:04:
d4:ab:67:be:17:2d:eb:7d:aa:27:48:cf:57:80:6b:
ac:f5:3b:e4:f4:b0:83:65:42:5c:1c:16:ac:02:3e:
bb:dc:1d:e0:6e:4d:12:97:cd:3a:47:66:69:ba:59:
f8:b9:e7:97:14:e1:93:af:29:a4:33:e7:39:72:85:
21:2d:74:2e:9b:57:b6:7c:5d:e3:99:7b:bf:af:91:
da:16:5a:c3:6e:e7:b0:ee:4a:b1:b3:22:07:ef:38:
b2:60:af:42:a2:b9:d5:4e:61:cd:05:a1:6f:9f:a2:
b1:9c:78:94:56:9c:39:37:d0:bc:ac:be:40:bf:ee:
d1:e9:40:3f:23:f5:2b:0f:08:3f:f6:3f:c8:55:d3:
a6:14:be:6d:08:7d:53:f2:4c:cc:d2:c4:6a:3e:b8:
d3:99:18:b0:9b:40:26:54:86:46:4c:2a:a1:fc:e7:
74:d5:66:85:48:2b:73:65:31:07:46:3d:93:13:a2:
cf:2c:98:3e:43:fe:5b:de:b1:3e:23:87:e9:34:5a:
f6:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:4C:2E:7A:34:2F:94:DF:FD:21:81:13:20:51:9E:9E:81:70:77:E7
X509v3 Authority Key Identifier:
keyid:EA:58:14:58:C8:71:0B:7F:28:62:36:1D:F5:BE:32:7D:72:42:3B:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/EA581458C8710B7F2862361DF5BE327D72423B7F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA581458C8710B7F2862361DF5BE327D72423B7F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/EA581458C8710B7F2862361DF5BE327D72423B7F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:8e:1a:a1:83:83:3c:eb:11:5f:50:0e:84:f6:b5:83:d2:1f:
c3:ed:4d:6f:76:12:ad:5e:3f:1f:b0:84:2c:48:ba:fb:26:a5:
47:93:ee:61:b9:db:1b:aa:1c:a3:bc:d2:a3:d9:40:c6:cf:dd:
a6:e4:26:89:62:e2:09:c2:82:6f:64:39:c7:89:ac:fe:b4:d2:
3f:56:04:92:95:73:5e:dd:e0:3e:01:e7:85:5b:89:6b:25:e3:
2a:a3:a4:9c:c5:4b:8f:9e:76:e8:b3:1c:83:70:10:77:05:11:
d5:42:e3:d9:cd:29:7f:cb:7a:58:77:5f:26:b8:fa:ad:19:72:
eb:2c:a9:77:0f:e4:e4:1c:7d:dc:d1:14:25:50:74:ca:f0:94:
4d:98:0c:06:96:c0:af:e5:8e:dd:5a:75:21:37:40:71:8a:e5:
87:ea:10:56:29:65:ee:5c:09:13:6d:53:85:f8:b0:6c:64:c5:
a8:67:cb:e8:ce:8f:c2:ea:20:1f:34:f6:ff:f1:86:76:b5:df:
4a:46:f4:7a:f9:8e:99:37:42:c1:a0:a5:59:74:17:37:5b:9f:
3a:d0:97:14:b4:7d:60:1e:63:27:cc:6e:5e:40:7b:bf:11:48:
c6:bc:75:66:40:bd:3d:37:24:c9:22:6e:fe:a4:a3:2f:ee:b2:
a8:94:5e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:02:15 2026 by rpki-client