
$ rpki-client -vvf repo-rpki.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/EB6A398D686553919657E094022E843191F4573E.mft
File: EB6A398D686553919657E094022E843191F4573E.mft (raw, json)
Hash identifier: XutPk4ujIRrTb6HaIpDVgHCfctjWM+4kILclNt2KjQU=
Subject key identifier: 2A:08:7E:97:E5:9F:83:2B:22:6E:0B:15:D7:36:1C:D6:4E:6E:48:AB
Authority key identifier: EB:6A:39:8D:68:65:53:91:96:57:E0:94:02:2E:84:31:91:F4:57:3E
Certificate issuer: /CN=EB6A398D686553919657E094022E843191F4573E
Certificate serial: 495BA86179383409AFA1810BA3AAFCB3D8FF3014
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB6A398D686553919657E094022E843191F4573E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/EB6A398D686553919657E094022E843191F4573E.mft
Manifest number: 0257
Signing time: Mon 03 Nov 2025 10:01:49 +0000
Manifest this update: Mon 03 Nov 2025 09:56:49 +0000
Manifest next update: Thu 06 Nov 2025 15:49:49 +0000
Files and hashes: 1: 3130332e3138312e3234382e302f32332d3234203d3e20313439343030.roa (hash: sKkJQmxuHQRpbOu7tarZjRh6SYZHx7wMO0xOOxar2Ro=)
2: EB6A398D686553919657E094022E843191F4573E.crl (hash: hyVVqPiu13DGz45OoJyKMM4DZLB5Um73RnZ4j9dKF1k=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/EB6A398D686553919657E094022E843191F4573E.crl
rsync://repo-rpki.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/EB6A398D686553919657E094022E843191F4573E.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB6A398D686553919657E094022E843191F4573E.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 06 Nov 2025 15:49:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:5b:a8:61:79:38:34:09:af:a1:81:0b:a3:aa:fc:b3:d8:ff:30:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB6A398D686553919657E094022E843191F4573E
Validity
Not Before: Nov 3 09:56:49 2025 GMT
Not After : Nov 6 15:49:49 2025 GMT
Subject: CN=2A087E97E59F832B226E0B15D7361CD64E6E48AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:06:8f:1d:21:38:bb:b1:78:fa:8d:5b:11:56:
a6:2c:5e:ac:19:c6:91:62:0b:a8:ac:29:97:06:04:
ab:b6:53:fc:ac:81:12:c3:08:1a:99:0e:c0:2d:43:
d0:dd:78:5b:92:bb:ed:7c:cc:3e:b0:66:cf:fc:0c:
c4:d2:f6:ef:44:11:8f:52:3c:ca:06:6d:af:c7:4c:
67:b7:d9:f4:9d:42:7c:99:74:e2:69:3c:8d:9f:b1:
4c:c3:16:74:b7:b2:6f:43:50:d1:4c:9d:44:96:9d:
f6:c1:2f:42:78:ec:ab:0e:41:d0:74:ea:09:06:e0:
34:c8:d4:88:78:fc:a8:ab:cc:f2:8b:e2:c8:d2:8d:
8d:de:84:a5:95:44:dc:c0:30:9c:e6:6e:af:f2:da:
85:cc:8f:5d:2a:43:b0:09:96:0f:9e:6f:45:cf:37:
88:d0:f3:8b:5c:85:10:39:10:b4:c7:1d:d1:bd:25:
49:76:6e:90:25:2e:f7:da:4d:3a:22:cb:06:07:69:
d6:bd:da:6f:7b:5b:a8:b7:5a:ec:e3:46:04:cc:cb:
e1:58:ad:75:ec:59:8a:f3:71:0f:d4:0e:2b:43:a1:
b4:82:b9:15:63:75:ec:6d:69:61:df:f2:b5:a0:54:
14:0b:21:40:a6:3a:0c:2b:55:ee:2c:9d:a9:58:43:
df:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:08:7E:97:E5:9F:83:2B:22:6E:0B:15:D7:36:1C:D6:4E:6E:48:AB
X509v3 Authority Key Identifier:
keyid:EB:6A:39:8D:68:65:53:91:96:57:E0:94:02:2E:84:31:91:F4:57:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/EB6A398D686553919657E094022E843191F4573E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB6A398D686553919657E094022E843191F4573E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/EB6A398D686553919657E094022E843191F4573E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:a0:8b:a8:29:38:60:3c:07:b0:fb:c2:b9:b6:b1:c6:a8:b2:
b9:4e:21:26:05:c7:ba:51:72:7f:4c:c5:d1:7f:2a:b0:89:fe:
f3:75:3a:e0:e0:a6:ea:db:4d:cb:de:8d:15:c6:2b:84:7f:5e:
24:ae:12:e0:5a:27:12:98:21:19:61:91:f0:b6:ad:19:da:b3:
1d:cc:28:c7:db:b3:e4:dd:7f:3e:53:d6:c9:cd:77:2c:2b:eb:
0e:92:60:f2:6a:e5:05:43:ac:da:03:94:01:9c:77:e5:40:0b:
29:19:62:86:17:dd:ad:f4:df:03:10:b0:78:72:84:75:84:ed:
66:18:b1:86:03:4e:64:8a:ee:d5:3b:38:36:33:72:1a:b9:9a:
bb:5e:7c:f5:f4:74:2c:43:34:49:ca:09:e5:3d:b0:4e:07:84:
30:cd:61:8f:8d:c0:61:23:57:b8:bb:93:fa:2d:2d:9b:7d:64:
2c:a1:ba:06:c9:a8:89:87:c3:49:8d:03:c2:b3:36:65:6f:a2:
02:fc:b9:46:c8:91:d5:bf:a6:41:cc:4e:6b:45:16:dc:f3:87:
c4:62:14:9d:df:cb:4a:03:c4:eb:f8:52:fb:98:6a:0e:b4:dc:
67:fe:c0:11:65:bd:58:77:a0:9b:1f:bb:21:59:d1:de:ca:d2:
a3:d7:ce:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:09:48 2025 by rpki-client