
$ rpki-client -vvf repo-rpki.idnic.net/repo/46118f2b-9f94-4199-a241-8fc51d17e0c5/0/EA1FF21834CE2546B93FF7ABD7A24231492E6157.mft
File: EA1FF21834CE2546B93FF7ABD7A24231492E6157.mft (raw, json)
Hash identifier: a4ffCWpoXoTsXt5fow08P1peYPxD9vrU7Tci9NSBSSg=
Subject key identifier: 09:DD:61:5A:4B:6B:2E:8B:E4:79:2A:24:B4:55:2C:B9:A6:9C:9C:14
Authority key identifier: EA:1F:F2:18:34:CE:25:46:B9:3F:F7:AB:D7:A2:42:31:49:2E:61:57
Certificate issuer: /CN=EA1FF21834CE2546B93FF7ABD7A24231492E6157
Certificate serial: 4C8B08D36088F7AF489381C8EE21A84DE0A89524
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA1FF21834CE2546B93FF7ABD7A24231492E6157.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/46118f2b-9f94-4199-a241-8fc51d17e0c5/0/EA1FF21834CE2546B93FF7ABD7A24231492E6157.mft
Manifest number: 04DF
Signing time: Sun 01 Mar 2026 05:43:51 +0000
Manifest this update: Sun 01 Mar 2026 05:38:51 +0000
Manifest next update: Wed 04 Mar 2026 16:12:51 +0000
Files and hashes: 1: EA1FF21834CE2546B93FF7ABD7A24231492E6157.crl (hash: dhrhXMChygV6k2IsFNZHpQLTOuBej5la4ntU6N9LWU8=)
2: 3130332e3136312e3134392e302f32342d3234203d3e20313431363137.roa (hash: aO5GUOOYzWayE1+nuqtYCqJb6iqD3aY2aScclOaaV0o=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/46118f2b-9f94-4199-a241-8fc51d17e0c5/0/EA1FF21834CE2546B93FF7ABD7A24231492E6157.crl
rsync://repo-rpki.idnic.net/repo/46118f2b-9f94-4199-a241-8fc51d17e0c5/0/EA1FF21834CE2546B93FF7ABD7A24231492E6157.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA1FF21834CE2546B93FF7ABD7A24231492E6157.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 16:12:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:8b:08:d3:60:88:f7:af:48:93:81:c8:ee:21:a8:4d:e0:a8:95:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EA1FF21834CE2546B93FF7ABD7A24231492E6157
Validity
Not Before: Mar 1 05:38:51 2026 GMT
Not After : Mar 4 16:12:51 2026 GMT
Subject: CN=09DD615A4B6B2E8BE4792A24B4552CB9A69C9C14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:80:a5:04:9c:40:ba:aa:c4:d7:6e:18:6f:11:
1c:8b:25:4c:20:06:9a:2f:e4:c1:13:df:52:f1:b0:
8b:24:dd:de:ed:b8:02:7d:13:75:6b:55:f7:ea:33:
fd:59:34:09:45:4f:a6:b8:cf:9b:10:31:a9:91:60:
c4:5d:a5:77:3c:3e:72:ff:af:96:76:39:30:09:6c:
66:63:da:11:19:ae:ca:b7:cc:3a:7e:14:46:e9:1b:
9d:58:58:68:a9:f2:55:ff:aa:19:2d:8a:d3:60:39:
62:ca:7e:d7:6f:86:7c:93:78:a3:db:3f:79:95:26:
9f:6d:33:20:30:03:88:d0:4e:d2:c9:2a:34:fc:b7:
86:e5:a1:67:c5:f5:f0:eb:17:84:bc:23:44:cd:5a:
08:b5:bb:1f:c4:71:c3:5d:17:82:bf:93:87:a3:21:
2f:89:06:e8:62:d8:04:b6:ed:2f:ad:8c:43:cb:17:
6b:94:1f:40:a6:61:30:78:bf:96:70:b9:cb:04:66:
c3:af:fd:9a:48:11:94:9f:aa:cd:44:d0:c8:7a:1a:
3d:d4:19:bd:45:5e:59:fb:aa:cc:09:94:9f:8d:5c:
5e:29:26:a4:66:ef:a1:6e:67:f4:45:cb:c7:bf:7e:
44:37:dc:2b:e7:d6:a1:02:73:93:eb:c8:7c:f0:1e:
ef:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:DD:61:5A:4B:6B:2E:8B:E4:79:2A:24:B4:55:2C:B9:A6:9C:9C:14
X509v3 Authority Key Identifier:
keyid:EA:1F:F2:18:34:CE:25:46:B9:3F:F7:AB:D7:A2:42:31:49:2E:61:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/46118f2b-9f94-4199-a241-8fc51d17e0c5/0/EA1FF21834CE2546B93FF7ABD7A24231492E6157.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA1FF21834CE2546B93FF7ABD7A24231492E6157.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/46118f2b-9f94-4199-a241-8fc51d17e0c5/0/EA1FF21834CE2546B93FF7ABD7A24231492E6157.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:8c:9f:33:e5:ea:fd:08:7c:d0:9a:ca:3d:bc:d6:39:8c:b1:
d6:61:fb:97:6e:61:c5:28:c9:ba:eb:f1:a2:70:44:d4:b3:dd:
0c:ff:86:41:78:c4:de:13:82:55:d9:49:53:95:d8:b6:f2:2e:
5a:b8:51:66:49:3a:0c:f9:af:31:0d:27:dd:66:08:c4:7b:1d:
ce:03:95:2a:9e:ec:38:7b:96:eb:43:a6:31:03:49:87:d7:ce:
f5:1f:0e:d4:a7:b2:3a:ae:5e:40:f4:12:0e:82:98:0a:83:a7:
49:1b:b0:5e:84:73:0c:94:fa:a5:76:05:39:2b:1b:fa:39:29:
9a:ee:1b:62:15:4d:b4:fb:a7:bf:e7:e7:4e:c7:18:7b:dc:bf:
d0:11:47:57:d0:32:2b:df:36:6e:e5:01:36:04:20:b6:4e:b8:
6b:37:3c:29:9f:98:44:d1:dd:c7:b7:e7:b8:07:6c:4d:cf:e5:
89:79:72:99:05:d0:cc:b7:00:e9:20:f4:11:e7:89:15:fd:d1:
f7:fd:09:3a:22:c9:22:3d:19:4c:6c:66:a8:fc:5a:d4:46:9e:
94:d6:18:a5:57:45:43:bc:25:e6:55:fc:ec:d2:c9:2e:81:b1:
20:e3:01:13:58:5e:97:c1:db:53:3f:94:7f:bb:a6:65:24:7c:
d0:1d:31:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:34:30 2026 by rpki-client