
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/EB0A90C9D38126E4861B3243A60EFD2B08C19921.mft
File: EB0A90C9D38126E4861B3243A60EFD2B08C19921.mft (raw, json)
Hash identifier: +9BQqdh3zkSrN80+pSD6m/PpL1IgicaLO28H8Rt6VTk=
Subject key identifier: 28:88:3E:8E:84:D0:CA:6D:1F:81:9F:78:02:7A:F9:87:E9:68:77:83
Authority key identifier: EB:0A:90:C9:D3:81:26:E4:86:1B:32:43:A6:0E:FD:2B:08:C1:99:21
Certificate issuer: /CN=EB0A90C9D38126E4861B3243A60EFD2B08C19921
Certificate serial: 3160D77503EAB9F4FC5A6CB4F7A13AB8D55DDB97
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB0A90C9D38126E4861B3243A60EFD2B08C19921.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/EB0A90C9D38126E4861B3243A60EFD2B08C19921.mft
Manifest number: D4
Signing time: Thu 08 Oct 2026 03:57:16 +0000
Manifest this update: Thu 08 Oct 2026 03:52:16 +0000
Manifest next update: Fri 09 Oct 2026 07:33:16 +0000
Files and hashes: 1: EB0A90C9D38126E4861B3243A60EFD2B08C19921.crl (hash: GlGmebRPNBBllpB3jenX6hZhMCRnEPBlXxZ6PCBuzng=)
2: 3130332e38372e3230312e302f32342d3234203d3e203538333639.roa (hash: eyEG+YKfrAxVe/iff0IfSqMexA77iMkR7c8W/AMQ12c=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/EB0A90C9D38126E4861B3243A60EFD2B08C19921.crl
rsync://rpki-rsync.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/EB0A90C9D38126E4861B3243A60EFD2B08C19921.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB0A90C9D38126E4861B3243A60EFD2B08C19921.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 07:33:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:60:d7:75:03:ea:b9:f4:fc:5a:6c:b4:f7:a1:3a:b8:d5:5d:db:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB0A90C9D38126E4861B3243A60EFD2B08C19921
Validity
Not Before: Oct 8 03:52:16 2026 GMT
Not After : Oct 9 07:33:16 2026 GMT
Subject: CN=28883E8E84D0CA6D1F819F78027AF987E9687783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:38:ba:a2:d8:ad:11:1c:bd:bd:ed:06:c4:f0:
27:39:95:ba:a6:1f:1c:c9:af:56:33:9a:7a:53:d8:
d5:17:94:86:7c:4e:63:77:ef:66:b7:f0:41:dd:ee:
a4:0f:60:fd:37:8b:4d:6e:32:88:68:e6:bf:83:94:
5d:1e:fe:6f:82:36:14:62:07:ee:bc:37:65:e4:77:
72:1e:ca:4d:27:5b:af:6e:73:cd:ab:67:f5:3d:a3:
5c:1f:78:ef:96:9b:22:ba:6d:16:45:ba:18:a4:af:
f7:4b:a0:8b:81:4f:25:2e:88:89:65:c1:a7:f1:dd:
15:1a:da:63:48:b8:1f:eb:77:ad:9c:1b:e7:3a:42:
7d:a8:e7:33:53:63:2a:0e:a7:73:b6:18:61:da:e4:
1f:c0:ed:a0:93:0d:30:b1:bc:d8:5b:47:fb:d0:c6:
9e:ec:1f:9f:36:d6:5f:ca:ac:35:08:cf:aa:27:33:
cd:2a:ba:f4:c5:56:e9:90:03:cd:dd:ee:e9:a2:53:
f9:90:35:ba:61:4a:03:4c:5d:02:84:35:25:26:98:
8e:51:f1:14:0f:87:08:a7:02:54:2e:ca:59:bb:02:
bc:62:e1:53:e6:d4:49:aa:b2:d0:66:a3:c3:82:03:
9b:48:4b:1e:e3:a4:c3:92:02:89:8e:d0:95:5a:8b:
98:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:88:3E:8E:84:D0:CA:6D:1F:81:9F:78:02:7A:F9:87:E9:68:77:83
X509v3 Authority Key Identifier:
keyid:EB:0A:90:C9:D3:81:26:E4:86:1B:32:43:A6:0E:FD:2B:08:C1:99:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/EB0A90C9D38126E4861B3243A60EFD2B08C19921.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB0A90C9D38126E4861B3243A60EFD2B08C19921.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/EB0A90C9D38126E4861B3243A60EFD2B08C19921.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:df:2b:8c:68:0f:a3:33:eb:cb:d0:7e:76:d2:33:8f:2c:a4:
f9:40:3a:88:a0:62:0d:31:42:09:6b:73:ec:1c:0a:08:5f:de:
25:b6:37:f0:bd:0b:cd:6b:bc:f6:9d:8b:ab:d3:f2:d9:9e:c1:
cb:e8:45:36:32:9e:c9:8d:81:2f:34:96:8b:32:17:67:5a:fe:
e7:1a:7a:92:45:ed:c7:05:93:31:e1:ef:e2:a3:2e:62:3e:53:
13:fc:a4:62:66:c1:10:e2:93:f4:73:5c:03:da:15:cc:50:a5:
73:dc:a6:b0:33:2d:09:24:5c:0d:dd:a7:f7:a6:78:17:6d:92:
a4:c8:13:11:77:fb:a9:f0:53:ba:0d:0b:4f:ba:c5:5c:4b:94:
7f:bd:d9:56:37:94:ef:16:b4:bb:4d:dd:06:57:cd:c3:a6:fa:
56:13:b9:8c:2d:45:93:47:9e:27:c0:91:10:29:63:bd:cc:ad:
02:21:1c:45:5d:7b:5d:33:79:1d:d9:74:f5:86:a0:a0:0a:04:
6a:bb:24:43:ad:75:a6:fc:6a:ca:b9:1e:5b:89:6e:ea:38:44:
b5:11:41:0c:e7:7e:f4:f2:3f:12:a4:84:45:3b:3e:26:71:b5:
ab:97:b0:18:aa:3f:d3:aa:78:2a:b7:39:71:48:34:a6:bb:37:
5f:90:20:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 16:45:23 2026 by rpki-client