
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/EA9248CB81F3EE7B4C9344FBE431252A1739FD6B.mft
File: EA9248CB81F3EE7B4C9344FBE431252A1739FD6B.mft (raw, json)
Hash identifier: rUrU+llsEWAI3wInsHRUZyKVx/1JFAZmZccHyHVR88s=
Subject key identifier: 4B:8A:A3:AE:FB:89:D4:E7:B3:05:11:F7:17:F8:5C:39:9D:A6:7E:E3
Authority key identifier: EA:92:48:CB:81:F3:EE:7B:4C:93:44:FB:E4:31:25:2A:17:39:FD:6B
Certificate issuer: /CN=EA9248CB81F3EE7B4C9344FBE431252A1739FD6B
Certificate serial: 1BCF6B6CEB681D389223FBFD8B7E29A7733FF36A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA9248CB81F3EE7B4C9344FBE431252A1739FD6B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/EA9248CB81F3EE7B4C9344FBE431252A1739FD6B.mft
Manifest number: BE
Signing time: Tue 22 Sep 2026 01:02:49 +0000
Manifest this update: Tue 22 Sep 2026 00:57:49 +0000
Manifest next update: Wed 23 Sep 2026 01:27:49 +0000
Files and hashes: 1: 3231302e38372e3132332e302f32342d3234203d3e20313532303634.roa (hash: ap3QpSwMafndkQYGTllRc8VLk6+JUlWDpLrHeilcohw=)
2: EA9248CB81F3EE7B4C9344FBE431252A1739FD6B.crl (hash: lEs5mymRXbDZhcQjgpePcyaWAHYTKET5QpMeP5cU8DU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/EA9248CB81F3EE7B4C9344FBE431252A1739FD6B.crl
rsync://rpki-rsync.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/EA9248CB81F3EE7B4C9344FBE431252A1739FD6B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA9248CB81F3EE7B4C9344FBE431252A1739FD6B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 23 Sep 2026 01:27:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:cf:6b:6c:eb:68:1d:38:92:23:fb:fd:8b:7e:29:a7:73:3f:f3:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EA9248CB81F3EE7B4C9344FBE431252A1739FD6B
Validity
Not Before: Sep 22 00:57:49 2026 GMT
Not After : Sep 23 01:27:49 2026 GMT
Subject: CN=4B8AA3AEFB89D4E7B30511F717F85C399DA67EE3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f7:d5:39:59:62:84:37:28:bd:49:e3:2a:6c:
b7:9a:ac:fd:a3:b8:d6:17:7d:e5:7f:f0:57:5e:0f:
c7:02:94:9c:4c:64:3f:b7:26:48:b8:ba:77:e7:4a:
10:43:48:0e:dc:18:da:3e:a2:e5:90:4f:bb:bf:df:
ef:58:a8:30:73:41:35:4c:48:72:fc:db:ce:97:bf:
e7:e6:09:ec:21:7f:e6:80:79:be:5b:80:3d:40:30:
6f:74:11:80:fc:df:63:81:a2:92:44:3a:fb:e8:06:
fe:e3:7e:9e:06:bf:33:bf:11:e4:f8:94:74:fd:8e:
c2:2a:aa:85:f0:7e:ce:e6:42:ad:55:d1:b2:6d:35:
22:7c:7c:22:f1:41:ce:15:bd:c7:5b:08:a7:00:12:
c1:01:f6:a1:21:e1:2a:bc:83:4c:f4:82:c5:96:51:
7d:42:ee:ae:d6:e3:66:c5:e2:06:aa:25:34:7f:8c:
7d:96:af:e4:6d:0d:e1:a4:17:cf:7b:b5:d2:08:78:
ac:5c:e4:4a:85:57:b0:a6:10:7e:66:b7:1b:41:15:
ca:97:aa:26:99:8c:e5:fa:46:07:bb:2f:a8:0f:62:
69:b0:62:6f:42:a0:0b:08:f5:b8:b2:3b:f1:c9:d8:
a8:26:ee:d3:6b:2b:81:1b:db:aa:1c:fe:05:38:0e:
77:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:8A:A3:AE:FB:89:D4:E7:B3:05:11:F7:17:F8:5C:39:9D:A6:7E:E3
X509v3 Authority Key Identifier:
keyid:EA:92:48:CB:81:F3:EE:7B:4C:93:44:FB:E4:31:25:2A:17:39:FD:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/EA9248CB81F3EE7B4C9344FBE431252A1739FD6B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA9248CB81F3EE7B4C9344FBE431252A1739FD6B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/EA9248CB81F3EE7B4C9344FBE431252A1739FD6B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:98:e8:af:73:a3:65:8c:12:0a:62:64:e7:9d:06:75:75:a0:
df:be:fc:ce:c3:aa:ec:bb:59:a3:1e:4e:d2:f6:6b:9f:96:25:
93:05:0f:04:34:96:70:a2:a2:fc:ef:3e:59:bd:c0:cc:18:6f:
73:51:71:09:1d:bf:ce:d1:3d:dd:a4:58:96:e4:ae:61:4d:5e:
16:ca:bb:81:0f:97:e3:f9:45:ee:c2:fd:0a:c9:c6:9d:06:02:
ba:6f:b5:68:da:e4:e8:29:13:10:ff:fe:1c:78:0c:70:d1:80:
98:96:bf:d5:96:6f:82:18:9e:f9:5a:50:07:6a:65:94:ad:cb:
55:eb:8c:25:a2:9a:6b:62:ab:33:90:e8:8e:51:53:e6:51:8b:
c7:c2:1f:b0:b5:75:fb:2d:fa:c2:3f:e2:d3:95:28:dc:b4:73:
b7:c4:b2:fe:4f:12:13:9e:c2:2b:72:d7:19:1e:87:c6:7c:40:
b5:13:e8:cc:2c:49:13:b3:6b:b8:e1:9b:fc:c2:25:ef:b4:e6:
4b:26:8d:a9:6e:57:61:c7:a9:9f:3a:e2:d7:92:db:c3:60:02:
ab:a6:05:35:a6:1f:2b:b9:4d:cb:31:fc:c3:7b:8a:d7:5c:6a:
d1:24:1b:74:ba:db:9f:2c:86:61:26:f3:76:89:8c:b3:c8:b3:
8d:61:93:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:25:18 2026 by rpki-client