
$ rpki-client -vvf repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.mft
File: EAAF14D74C27E1502835CCF1541D5D92498C8427.mft (raw, json)
Hash identifier: BKYNhqsqO2WlVAbRpArHPPEK51uuD00CbKRe1IdTXCA=
Subject key identifier: 23:FA:BD:02:BF:5B:BD:5F:0D:23:75:C3:BE:EE:50:5E:AE:F4:B4:3F
Authority key identifier: EA:AF:14:D7:4C:27:E1:50:28:35:CC:F1:54:1D:5D:92:49:8C:84:27
Certificate issuer: /CN=EAAF14D74C27E1502835CCF1541D5D92498C8427
Certificate serial: 284865A19A7C85F6990DE5C47E5C3BF91B7C09F1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EAAF14D74C27E1502835CCF1541D5D92498C8427.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.mft
Manifest number: 013B
Signing time: Sun 01 Mar 2026 00:02:06 +0000
Manifest this update: Sat 28 Feb 2026 23:57:06 +0000
Manifest next update: Wed 04 Mar 2026 07:53:06 +0000
Files and hashes: 1: EAAF14D74C27E1502835CCF1541D5D92498C8427.crl (hash: fwhemZd3wEbWFuOONy21rl/aaGl2nZ45ja3lQcdcoek=)
2: 323030313a6466333a393263303a3a2f34382d3438203d3e20313532343231.roa (hash: Re1BfpdFyUDYjfrU456vx+e4oEcGnjf9fKai/wOjz5g=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.crl
rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EAAF14D74C27E1502835CCF1541D5D92498C8427.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 07:53:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:48:65:a1:9a:7c:85:f6:99:0d:e5:c4:7e:5c:3b:f9:1b:7c:09:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EAAF14D74C27E1502835CCF1541D5D92498C8427
Validity
Not Before: Feb 28 23:57:06 2026 GMT
Not After : Mar 4 07:53:06 2026 GMT
Subject: CN=23FABD02BF5BBD5F0D2375C3BEEE505EAEF4B43F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0c:4b:20:2c:39:8f:ab:17:e2:47:6c:bc:f4:
be:e9:29:a6:0e:75:4a:86:35:c1:3d:8a:b5:82:25:
bc:90:f0:f0:28:54:35:13:27:d2:ac:8a:f0:53:1a:
a8:50:40:61:0f:e9:35:85:b5:31:76:3c:11:87:18:
08:c1:eb:b3:12:d2:8e:41:d6:55:20:9c:b6:ac:d7:
8a:4f:0c:84:bc:98:97:c4:4b:29:5d:ac:da:ce:23:
03:df:b5:f9:e1:1a:a5:d7:18:ac:7c:d8:51:be:78:
46:13:15:75:e1:07:d8:59:45:f7:16:dc:bf:4a:26:
25:1e:54:0d:79:d8:8c:3f:7b:e4:f8:f8:9a:cc:c4:
c8:3a:3f:d4:a6:f9:82:93:a0:24:61:ca:9c:bf:ea:
19:a9:73:1c:54:cc:67:0b:44:8c:47:ee:a5:b1:b0:
01:18:ea:05:9e:dc:7f:d0:a7:0e:a7:6b:91:47:78:
99:ab:f0:26:2c:1d:1d:b7:23:4c:90:50:d8:90:fe:
e1:1c:03:6c:13:ce:75:dc:1c:11:36:7d:3f:94:8f:
22:3a:4e:fc:f0:f6:7e:87:fd:d4:89:1b:eb:c3:77:
d2:21:88:fd:b8:bf:86:be:34:e4:1c:35:c3:9b:85:
26:84:da:f7:2a:24:d2:f9:27:70:ab:25:17:0a:fa:
84:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:FA:BD:02:BF:5B:BD:5F:0D:23:75:C3:BE:EE:50:5E:AE:F4:B4:3F
X509v3 Authority Key Identifier:
keyid:EA:AF:14:D7:4C:27:E1:50:28:35:CC:F1:54:1D:5D:92:49:8C:84:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EAAF14D74C27E1502835CCF1541D5D92498C8427.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:4e:59:fd:34:d0:e6:57:39:58:aa:12:de:00:2e:10:8e:57:
07:7e:8b:21:0c:1c:be:0e:0c:07:50:2d:d3:fe:d9:24:1e:85:
98:7a:5c:42:03:c6:cb:ba:f4:1a:ff:a3:af:4d:61:3e:5d:51:
2d:35:f2:bc:ee:4c:0c:c5:ac:d2:58:cb:84:fd:ba:bf:b8:5e:
6b:a8:4a:c3:08:2c:c2:a1:4a:85:1a:7d:e5:c4:21:b0:0f:d3:
75:aa:85:37:a9:36:60:25:78:72:e1:78:10:a1:30:59:23:3d:
a4:b9:df:28:fa:5e:46:f9:27:c7:0f:38:a5:3e:67:cc:f7:ba:
fe:b7:be:cc:c0:00:53:25:47:b4:c1:17:0b:6d:4e:c6:bd:47:
5b:46:cf:b7:1b:db:cb:eb:44:7c:54:be:82:fe:80:f1:6f:81:
81:f3:b6:fa:f4:24:0a:75:43:a6:7a:d0:f1:b2:58:32:1a:b7:
0c:8c:53:c1:5a:41:59:43:34:9e:30:6d:6b:d7:ca:3b:61:8b:
f5:3c:f9:2a:ed:c7:8b:b3:23:99:9d:f9:26:d0:2b:1d:13:b5:
45:d3:1f:7b:ba:cb:cd:ee:50:c1:56:18:f0:56:27:9d:15:31:
52:0b:c4:e1:b0:13:0b:17:76:31:d0:6d:2d:bc:5c:ff:bd:20:
45:09:c8:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:42:47 2026 by rpki-client