
$ rpki-client -vvf repo-rpki.idnic.net/repo/31b433a5-72b1-4653-99d3-9469c8b8b762/0/EAD173629E4F955F44EC781A3739775E738ACCFD.mft
File: EAD173629E4F955F44EC781A3739775E738ACCFD.mft (raw, json)
Hash identifier: 8kNV2Px0tWxQiGZpR5NX32DrigWgJ2lpBV/aIupzpWc=
Subject key identifier: D8:B2:0D:21:20:5D:9A:8C:E1:26:52:A7:4A:78:F3:76:0F:18:DA:CA
Authority key identifier: EA:D1:73:62:9E:4F:95:5F:44:EC:78:1A:37:39:77:5E:73:8A:CC:FD
Certificate issuer: /CN=EAD173629E4F955F44EC781A3739775E738ACCFD
Certificate serial: 31ABC8D72631280C68995AE9549F323A79CFA29F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EAD173629E4F955F44EC781A3739775E738ACCFD.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/31b433a5-72b1-4653-99d3-9469c8b8b762/0/EAD173629E4F955F44EC781A3739775E738ACCFD.mft
Manifest number: F1
Signing time: Tue 04 Nov 2025 19:00:42 +0000
Manifest this update: Tue 04 Nov 2025 18:55:42 +0000
Manifest next update: Fri 07 Nov 2025 20:12:42 +0000
Files and hashes: 1: EAD173629E4F955F44EC781A3739775E738ACCFD.crl (hash: MZ/PynOWph9YjXeIvT1L0xeJJ3KcZ0onRhJk9GJi4ZE=)
2: 3135372e36362e32392e302f32342d3234203d3e203539323831.roa (hash: zTHLGAwQAsHOZagfs3+O24ipzV4m2EM9CneqRLVHTaQ=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/31b433a5-72b1-4653-99d3-9469c8b8b762/0/EAD173629E4F955F44EC781A3739775E738ACCFD.crl
rsync://repo-rpki.idnic.net/repo/31b433a5-72b1-4653-99d3-9469c8b8b762/0/EAD173629E4F955F44EC781A3739775E738ACCFD.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EAD173629E4F955F44EC781A3739775E738ACCFD.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 07 Nov 2025 10:49:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:ab:c8:d7:26:31:28:0c:68:99:5a:e9:54:9f:32:3a:79:cf:a2:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EAD173629E4F955F44EC781A3739775E738ACCFD
Validity
Not Before: Nov 4 18:55:42 2025 GMT
Not After : Nov 7 20:12:42 2025 GMT
Subject: CN=D8B20D21205D9A8CE12652A74A78F3760F18DACA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:44:ff:97:53:3a:2c:7d:c8:68:4c:2d:74:61:
f8:29:ae:05:4f:1a:1e:8b:ba:12:a3:57:66:4e:c4:
99:67:d3:95:4b:a1:b6:a8:57:d2:be:bc:db:21:59:
64:eb:7c:01:07:82:83:a6:75:e9:01:91:a9:34:26:
ad:1d:7b:ec:57:2a:ea:54:0c:6a:a1:69:a5:07:ac:
e3:4f:d6:90:01:bb:de:64:62:13:68:ce:64:0c:ca:
02:e5:9b:13:f4:32:3e:12:73:39:d1:c6:63:e8:07:
25:f7:57:81:94:3c:71:f9:8e:98:14:05:f7:b3:e1:
87:91:3a:cb:5b:c8:af:1e:6e:02:9d:c1:84:39:30:
c4:63:c4:3f:72:d5:ff:1e:8e:6b:c3:c6:ea:bb:88:
06:8d:66:d8:e0:63:e5:17:d9:2a:26:f0:17:d4:51:
0b:e9:d1:59:3d:bf:bc:1f:bd:37:0d:65:31:f8:77:
e0:ce:ab:48:f9:62:d5:29:98:8e:63:51:ae:28:27:
6e:1f:8d:34:e0:65:85:56:35:8e:57:74:b4:1c:7c:
dd:d9:97:61:53:11:e7:e9:e8:cb:9a:d9:53:bc:09:
3a:a2:7f:4a:7e:30:c3:cb:92:cb:94:2d:60:0d:24:
a0:9b:ba:09:7d:39:8e:41:a9:c4:d0:cf:ff:85:fa:
91:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:B2:0D:21:20:5D:9A:8C:E1:26:52:A7:4A:78:F3:76:0F:18:DA:CA
X509v3 Authority Key Identifier:
keyid:EA:D1:73:62:9E:4F:95:5F:44:EC:78:1A:37:39:77:5E:73:8A:CC:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/31b433a5-72b1-4653-99d3-9469c8b8b762/0/EAD173629E4F955F44EC781A3739775E738ACCFD.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EAD173629E4F955F44EC781A3739775E738ACCFD.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/31b433a5-72b1-4653-99d3-9469c8b8b762/0/EAD173629E4F955F44EC781A3739775E738ACCFD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:8a:21:63:ce:e0:46:d8:27:4f:40:5a:e4:57:f7:e5:1c:5e:
c9:a5:a2:20:8a:4e:a3:73:b5:c5:94:95:d0:a3:76:7f:f0:fa:
c3:8e:6c:50:26:5c:41:45:01:38:58:85:29:2e:59:1f:2d:fb:
25:c4:14:90:e5:36:12:c7:c7:99:02:63:d1:06:ca:3d:c7:e6:
df:cd:cb:1c:f3:5e:4f:27:a2:cb:db:0f:83:c3:fa:42:b1:bd:
5e:62:8d:61:10:4f:78:19:cc:20:3b:17:be:7e:39:14:b3:12:
7b:43:f0:75:94:5b:92:f5:3b:bb:4b:7e:89:5b:88:32:b7:c5:
86:a4:eb:42:dd:6c:02:78:49:3d:26:ba:b3:f1:e7:5d:9a:95:
5d:6a:f8:e7:c6:86:d8:9d:08:19:78:f4:46:dd:b0:54:dc:9f:
54:9b:2b:e6:fe:00:3e:7b:a9:9c:15:45:12:00:e1:0b:80:c7:
7a:70:36:9a:46:48:2e:9d:91:fd:3a:5d:73:fb:ae:99:8c:c2:
59:03:8c:f8:b1:a2:5d:d9:c3:26:d2:6e:7a:16:05:b8:4b:f3:
a1:a1:83:82:10:30:df:c6:a6:21:5b:c2:9e:bb:45:a0:3e:9f:
e3:4f:94:3c:5b:1f:37:54:ff:dd:54:45:55:7f:de:d7:6d:34:
eb:90:1b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:31:07 2025 by rpki-client