
$ rpki-client -vvf repo-rpki.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.mft
File: EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.mft (raw, json)
Hash identifier: xytoDr9MDC0eWEhGdhIe9POJ33BhD18uut5zmN5Um7A=
Subject key identifier: C0:5B:CF:D1:19:CF:C0:C9:56:F3:7D:FC:BB:32:A3:A8:E7:6B:B6:8F
Authority key identifier: EB:17:E4:6A:BC:B7:8A:51:E4:C5:B9:A1:4B:D7:81:7F:CC:60:92:F9
Certificate issuer: /CN=EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9
Certificate serial: 08DBAA3331EDE8513840638270C51EE56D37A2E6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.mft
Manifest number: 051F
Signing time: Mon 03 Nov 2025 18:22:24 +0000
Manifest this update: Mon 03 Nov 2025 18:17:24 +0000
Manifest next update: Fri 07 Nov 2025 00:49:24 +0000
Files and hashes: 1: EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.crl (hash: 32fwdmARomdcde8tOg2gPti/iJPwnqlJkveohs5lmXc=)
2: 3130332e3134372e3231382e302f32342d3234203d3e20313336303831.roa (hash: 3V+KbbdMSsyWcppKJdE78z6t2xUFj1baxa/Y1TQkRqM=)
3: 3130332e38362e3130332e302f32342d3234203d3e20313336303831.roa (hash: FH/voLgmuZE3XbtxgnYOWLHEkRd7OKtR53sqhIsyCzA=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.crl
rsync://repo-rpki.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 07 Nov 2025 00:49:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:db:aa:33:31:ed:e8:51:38:40:63:82:70:c5:1e:e5:6d:37:a2:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9
Validity
Not Before: Nov 3 18:17:24 2025 GMT
Not After : Nov 7 00:49:24 2025 GMT
Subject: CN=C05BCFD119CFC0C956F37DFCBB32A3A8E76BB68F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:c1:ad:16:ca:c4:9d:96:a6:40:39:7f:db:f3:
3d:b4:03:ce:5d:0a:02:d1:a9:6a:f0:3b:43:1a:b2:
60:9d:93:5a:c5:e2:36:13:91:e6:9f:5a:17:d1:6c:
6f:0f:40:12:92:79:31:44:5d:4a:54:77:9e:83:7a:
e0:e7:a5:16:5a:9d:42:76:00:78:95:23:37:0a:af:
78:72:32:f8:f5:7a:9b:89:e1:36:20:a7:5c:02:46:
8b:ee:cf:2f:d3:37:7e:a6:fd:8a:75:6a:c2:20:17:
10:ff:1a:bc:a3:c9:38:56:ba:15:69:ce:5e:76:bf:
27:e3:2e:18:cf:75:f8:36:1c:26:92:a3:67:7c:96:
29:cb:8b:91:85:9b:11:f4:4d:fa:44:01:a9:54:63:
82:b0:6d:8e:10:28:7c:67:93:d3:ce:da:14:36:11:
4d:fb:75:27:8b:d9:67:99:12:9e:50:f3:ff:3e:6a:
e9:55:6a:6c:d8:08:17:eb:a1:a5:72:5a:e3:da:c8:
96:fd:92:d1:1d:78:b5:38:f7:d3:f8:c5:a2:df:5a:
7e:59:eb:8a:b0:2e:8c:75:11:f0:55:94:47:07:8f:
89:71:08:79:38:7a:db:f5:52:f6:8a:b8:f3:15:ee:
52:7b:e1:15:01:bd:43:29:7a:e8:a8:b9:f4:9b:8b:
27:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:5B:CF:D1:19:CF:C0:C9:56:F3:7D:FC:BB:32:A3:A8:E7:6B:B6:8F
X509v3 Authority Key Identifier:
keyid:EB:17:E4:6A:BC:B7:8A:51:E4:C5:B9:A1:4B:D7:81:7F:CC:60:92:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:1d:7f:e3:1b:fa:d4:80:98:b6:70:c4:6c:1e:8a:88:96:03:
4b:e9:75:30:c9:8b:f5:e5:29:58:a6:6b:27:13:aa:24:df:5c:
93:70:47:92:0b:27:81:b2:b7:1e:f9:38:7e:9e:c5:aa:aa:54:
9e:1e:b9:dd:af:c8:8a:bd:70:5f:03:b0:c9:37:70:34:ec:e7:
fa:7c:f4:8c:65:f0:da:55:78:27:fe:87:9e:43:d9:a5:cc:0f:
3f:ea:7d:a7:50:74:b4:42:34:32:97:e9:1b:9d:9b:1f:15:3f:
2a:51:d4:2f:97:74:05:35:ea:78:07:bd:ee:65:7c:f1:db:fd:
96:3f:cb:79:4e:a0:f8:67:f3:d7:6f:93:18:75:91:96:09:72:
1c:99:2f:09:0e:72:9e:74:73:5c:54:89:5c:a5:71:79:6b:a8:
a1:d2:c2:27:d7:38:1a:79:f5:8f:8a:16:16:cc:74:e6:d7:ba:
12:42:06:d2:2f:1e:49:0d:d7:5b:a2:3e:ab:bc:fe:5c:75:5a:
b2:15:d9:cb:f8:98:95:6d:a4:f9:13:46:94:6e:56:ca:c8:c6:
f9:04:4f:07:4e:88:8a:a3:2d:0e:31:67:21:2a:73:83:ce:27:
9d:d2:bc:7c:78:67:56:92:2d:1c:63:20:84:11:a0:34:37:f6:
c7:34:d3:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:18:44 2025 by rpki-client