
$ rpki-client -vvf repo-rpki.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E226B4FA842DCE6C386449F14F8C21CFD80CF977.mft
File: E226B4FA842DCE6C386449F14F8C21CFD80CF977.mft (raw, json)
Hash identifier: lkfSlUCjOKYtGJJsIPptswUAztjn2eEPM5nRBgzpt3g=
Subject key identifier: AC:BF:C5:46:0A:F4:2D:CB:DA:70:53:EA:6C:DA:46:5E:6F:78:A1:CF
Authority key identifier: E2:26:B4:FA:84:2D:CE:6C:38:64:49:F1:4F:8C:21:CF:D8:0C:F9:77
Certificate issuer: /CN=E226B4FA842DCE6C386449F14F8C21CFD80CF977
Certificate serial: 3002822276F9B2C2E41FE56EB4469E37CA8A590B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E226B4FA842DCE6C386449F14F8C21CFD80CF977.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E226B4FA842DCE6C386449F14F8C21CFD80CF977.mft
Manifest number: 051D
Signing time: Tue 04 Nov 2025 17:41:13 +0000
Manifest this update: Tue 04 Nov 2025 17:36:13 +0000
Manifest next update: Fri 07 Nov 2025 23:35:13 +0000
Files and hashes: 1: E226B4FA842DCE6C386449F14F8C21CFD80CF977.crl (hash: VqATNnVTqNW1zkR+QCQ8jEwoMGYIUiAyXK6Pbab8c5E=)
2: 3130332e3135332e322e302f32342d3234203d3e20313430333839.roa (hash: GxaX4eV/kFPfj8NmbOkhswC/G4Bnl9v3vVSuFyouusY=)
3: 3130332e3135332e332e302f32342d3234203d3e20313430333839.roa (hash: Od61s2CG7Pl8XbUZdUJwcwOoJ91FfP8RQCV9emNwZ0s=)
4: 3130332e3135332e322e302f32332d3233203d3e20313430333839.roa (hash: A1pg6GpZFjYyhGEeCVl6G4t4Mmj6bG3hF/2pgiRzD7c=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E226B4FA842DCE6C386449F14F8C21CFD80CF977.crl
rsync://repo-rpki.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E226B4FA842DCE6C386449F14F8C21CFD80CF977.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E226B4FA842DCE6C386449F14F8C21CFD80CF977.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 07 Nov 2025 13:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:02:82:22:76:f9:b2:c2:e4:1f:e5:6e:b4:46:9e:37:ca:8a:59:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E226B4FA842DCE6C386449F14F8C21CFD80CF977
Validity
Not Before: Nov 4 17:36:13 2025 GMT
Not After : Nov 7 23:35:13 2025 GMT
Subject: CN=ACBFC5460AF42DCBDA7053EA6CDA465E6F78A1CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:db:9b:03:18:c3:43:fc:2c:39:6a:7e:7d:64:
be:06:63:8c:fa:1d:b8:0f:9a:f6:e4:cb:3c:d3:ec:
a1:e9:dc:5b:9c:5c:36:27:cd:1d:83:fa:16:95:96:
2c:2d:07:a9:cc:20:7f:0e:69:ce:0b:b3:43:c1:57:
04:b2:f7:6b:22:3f:af:0c:fc:1f:86:44:af:2a:af:
fc:53:22:3b:04:11:de:1e:1b:8a:b3:dd:bc:ca:98:
98:00:2a:51:ee:e4:0e:c1:ec:2b:73:33:38:e3:04:
4a:c3:67:8c:16:44:00:39:61:44:83:b7:fc:ad:30:
ad:ce:8c:02:17:2a:73:8a:a4:f6:35:4a:c4:b7:05:
1b:f0:09:98:da:3a:dc:2c:5a:f6:71:7c:b8:7e:29:
e4:7e:a4:5e:15:f6:32:f7:1e:8e:b7:13:a9:43:42:
ae:da:af:79:b2:8c:63:be:d4:61:06:85:2d:27:dd:
df:37:73:70:ab:e7:24:19:c4:46:23:30:61:b2:65:
ef:d9:90:aa:61:05:98:c8:21:08:4d:77:57:0e:79:
a9:59:62:62:1f:da:96:a3:0a:7d:50:62:93:e6:10:
27:8c:f8:df:ca:a4:56:9d:5d:d3:31:32:2f:86:a2:
89:d1:6e:e1:8d:23:67:7a:72:90:cf:ae:5c:57:eb:
05:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:BF:C5:46:0A:F4:2D:CB:DA:70:53:EA:6C:DA:46:5E:6F:78:A1:CF
X509v3 Authority Key Identifier:
keyid:E2:26:B4:FA:84:2D:CE:6C:38:64:49:F1:4F:8C:21:CF:D8:0C:F9:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E226B4FA842DCE6C386449F14F8C21CFD80CF977.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E226B4FA842DCE6C386449F14F8C21CFD80CF977.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E226B4FA842DCE6C386449F14F8C21CFD80CF977.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:d4:d8:5a:55:fd:d7:1c:71:e2:62:2b:62:9b:93:4a:d7:9d:
8f:55:db:af:8c:18:98:38:59:70:d0:f0:78:4c:8d:fb:60:c5:
0c:df:b6:2e:b5:0a:38:93:bc:95:d3:b5:59:31:62:a6:38:e3:
a4:cf:63:47:17:f9:2b:ff:aa:43:55:ff:86:a3:e6:18:77:34:
ad:01:78:1f:5c:c8:ff:33:3f:6a:10:c8:b2:05:fe:a4:4b:e8:
7e:39:c1:19:0a:03:6e:d7:9a:00:72:b4:f2:60:56:16:02:ce:
45:82:da:61:3b:41:00:d8:0a:48:b4:87:0c:d0:cc:30:6f:a9:
57:a5:05:94:00:ec:d2:11:f5:f4:00:2a:5f:9f:75:83:d4:49:
c3:47:0b:98:0e:5d:7c:95:79:01:3a:42:8b:eb:3b:18:47:5e:
18:fc:32:99:29:4a:31:f6:b2:22:94:81:58:5d:6d:c1:19:88:
9a:37:4d:dc:07:20:4b:f5:21:8c:ac:d8:15:50:c5:cd:0b:e9:
1a:21:bd:60:b1:3e:b8:9b:95:70:81:50:c6:64:c1:fb:4b:42:
8c:32:81:b8:d5:52:98:b4:35:af:9c:48:a9:01:16:f4:31:9d:
ad:e8:19:9c:96:29:e9:c4:67:a5:03:07:f1:c9:a9:c9:ff:cd:
d4:13:52:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:29:08 2025 by rpki-client