
$ rpki-client -vvf repo-rpki.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/EB6A398D686553919657E094022E843191F4573E.mft
File: EB6A398D686553919657E094022E843191F4573E.mft (raw, json)
Hash identifier: yyMBl3t9wCPfsUp/eeC6EAOtVQl61QbQlofuv2Piy9Y=
Subject key identifier: 49:AD:B8:8B:9C:5B:4D:24:F5:F1:AC:8B:8A:91:B6:B1:02:99:8C:98
Authority key identifier: EB:6A:39:8D:68:65:53:91:96:57:E0:94:02:2E:84:31:91:F4:57:3E
Certificate issuer: /CN=EB6A398D686553919657E094022E843191F4573E
Certificate serial: 53356DC98A4F6F4439E4F8A8E9FCD8DE8648FC3E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB6A398D686553919657E094022E843191F4573E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/EB6A398D686553919657E094022E843191F4573E.mft
Manifest number: 028C
Signing time: Sun 01 Mar 2026 07:02:04 +0000
Manifest this update: Sun 01 Mar 2026 06:57:04 +0000
Manifest next update: Wed 04 Mar 2026 07:38:04 +0000
Files and hashes: 1: EB6A398D686553919657E094022E843191F4573E.crl (hash: BAjcWki9Cz4bKzc0IlF1PB3HKRO9toN6TOIW9l1Q4LI=)
2: 3130332e3138312e3234382e302f32332d3234203d3e20313439343030.roa (hash: ZQvUbXHu4oitDR8z2M5lRxDV5Dfgz07kS0tfmIPrPQU=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/EB6A398D686553919657E094022E843191F4573E.crl
rsync://repo-rpki.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/EB6A398D686553919657E094022E843191F4573E.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB6A398D686553919657E094022E843191F4573E.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 07:38:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:35:6d:c9:8a:4f:6f:44:39:e4:f8:a8:e9:fc:d8:de:86:48:fc:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB6A398D686553919657E094022E843191F4573E
Validity
Not Before: Mar 1 06:57:04 2026 GMT
Not After : Mar 4 07:38:04 2026 GMT
Subject: CN=49ADB88B9C5B4D24F5F1AC8B8A91B6B102998C98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c3:72:08:48:0c:db:3c:bf:cc:24:75:77:c9:
5b:14:73:6c:22:4d:9d:b3:00:fb:99:70:c0:cd:37:
e6:1c:a3:c9:d0:99:23:19:02:51:b7:09:3f:32:53:
9a:28:6a:b5:ff:96:54:ea:95:28:63:39:68:02:92:
5a:fb:b7:05:7e:e5:2a:ea:49:fc:6d:50:88:2f:1e:
7c:72:21:6f:b8:09:bb:99:5d:9c:53:cf:16:ca:5f:
32:8e:d5:27:bf:94:9f:66:a7:34:86:35:d2:5a:d6:
91:ed:fa:09:d7:88:a4:7f:25:ac:ec:b6:77:33:eb:
69:77:42:e4:e9:2b:57:e9:ce:4c:6a:76:e6:27:c8:
c0:03:cb:7e:e4:5c:2f:ae:86:35:60:42:bb:a9:ef:
b6:3c:43:3e:d1:b7:db:c3:b5:f2:2f:e9:f5:12:f3:
35:40:9b:79:47:d5:1b:ea:fe:da:55:6d:9d:8f:ea:
db:09:64:b8:eb:d5:ec:15:46:65:77:90:39:d6:bb:
d6:ac:bc:59:d1:cc:ab:f7:ba:a7:c8:c0:53:e5:b6:
ec:7d:4a:16:1d:54:3f:30:25:c2:41:1d:a3:82:e9:
b7:2c:ab:b3:ed:17:16:d6:1d:7e:67:26:fe:1f:4d:
d1:e2:fd:43:10:18:f6:c1:38:c2:76:46:77:92:23:
ab:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:AD:B8:8B:9C:5B:4D:24:F5:F1:AC:8B:8A:91:B6:B1:02:99:8C:98
X509v3 Authority Key Identifier:
keyid:EB:6A:39:8D:68:65:53:91:96:57:E0:94:02:2E:84:31:91:F4:57:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/EB6A398D686553919657E094022E843191F4573E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB6A398D686553919657E094022E843191F4573E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/EB6A398D686553919657E094022E843191F4573E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:22:72:46:47:d0:b8:01:a9:19:44:d3:35:81:fb:42:13:8b:
52:de:ae:86:46:10:9c:44:74:8a:07:47:d4:71:7f:62:85:55:
47:01:b6:8c:a6:8f:95:e7:29:40:99:eb:e9:ae:a1:78:f0:71:
b0:0b:61:3c:e8:1c:7a:58:f7:03:1b:69:83:73:b8:81:ac:15:
5b:66:8a:0b:42:f7:dc:64:e0:31:90:8e:cc:34:75:fa:2e:72:
69:85:f8:e0:c7:da:ef:5e:45:ac:aa:c7:8f:39:e0:dc:e9:9c:
56:7c:ac:ea:92:5d:36:40:87:de:78:a3:3c:19:94:14:2a:ec:
f4:ff:18:5f:a5:f7:0e:f2:87:08:6a:57:4a:c4:5b:ba:9e:03:
84:d6:30:b2:a4:bf:92:f7:22:78:43:93:7e:97:f1:2f:65:d0:
9e:b3:77:46:65:75:66:ff:ad:55:8e:27:5a:63:ab:34:4c:79:
98:c1:ed:64:82:64:e7:4d:76:e7:58:08:1d:30:06:57:08:ac:
3a:b3:0d:cf:b5:dc:bd:34:92:a9:bf:5d:78:8f:88:93:3c:63:
91:fb:4c:6e:8a:d8:71:81:99:fb:84:77:83:21:99:cb:aa:56:
83:0c:cc:b7:98:68:73:12:d3:5f:76:e6:8e:a9:aa:54:b0:67:
95:09:87:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:03:03 2026 by rpki-client