
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/ED174C0150D63525F5DB20F0992EDEECD70380E5.mft
File: ED174C0150D63525F5DB20F0992EDEECD70380E5.mft (raw, json)
Hash identifier: DadFFBXc/4VwSujgHfvg8rY7FFaxKLE6+5SNcNgWKkU=
Subject key identifier: B1:36:90:5E:C4:4E:F4:8D:E6:68:13:88:F6:EE:10:11:11:E2:D5:BF
Authority key identifier: ED:17:4C:01:50:D6:35:25:F5:DB:20:F0:99:2E:DE:EC:D7:03:80:E5
Certificate issuer: /CN=ED174C0150D63525F5DB20F0992EDEECD70380E5
Certificate serial: 2241DC899E52988845CECD5A138F8AE8EAAFF1B0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED174C0150D63525F5DB20F0992EDEECD70380E5.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/ED174C0150D63525F5DB20F0992EDEECD70380E5.mft
Manifest number: BF
Signing time: Tue 22 Sep 2026 01:48:41 +0000
Manifest this update: Tue 22 Sep 2026 01:43:41 +0000
Manifest next update: Wed 23 Sep 2026 05:31:41 +0000
Files and hashes: 1: 3130332e3131302e33352e302f32342d3234203d3e203438343635.roa (hash: bfhOCogzMUQqHoQaSn812eSk7yOuSzPxVDD+Nz5nDsc=)
2: 3130332e3131302e33342e302f32332d3234203d3e20313530393336.roa (hash: MaBel9u9pYezsd1ShGGBnY40dDIrzHcanWzm4FOSRAg=)
3: ED174C0150D63525F5DB20F0992EDEECD70380E5.crl (hash: 21SbBQ44vMmT3S4YGBXqYFiQWKK6HgRvugPGI2KdKOE=)
4: 3130332e3131302e33342e302f32342d3234203d3e203438343635.roa (hash: 3XmUzAiqVZaFyzkEVDaETxoV3L7puo8oceCYnEmmitg=)
5: 3130332e3131302e33342e302f32342d3234203d3e20313530393336.roa (hash: zmRnpGvMIJDXa5x4jILWd60y8Q5Ncg1iyAcAcxswFl4=)
6: 3130332e3131302e33352e302f32342d3234203d3e20313530393336.roa (hash: n4IkgoMW2u0zkFgXDHL0eZSUTKgr/z1ZRj5PZ9Dfmxk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/ED174C0150D63525F5DB20F0992EDEECD70380E5.crl
rsync://rpki-rsync.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/ED174C0150D63525F5DB20F0992EDEECD70380E5.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED174C0150D63525F5DB20F0992EDEECD70380E5.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 23 Sep 2026 03:47:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:41:dc:89:9e:52:98:88:45:ce:cd:5a:13:8f:8a:e8:ea:af:f1:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ED174C0150D63525F5DB20F0992EDEECD70380E5
Validity
Not Before: Sep 22 01:43:41 2026 GMT
Not After : Sep 23 05:31:41 2026 GMT
Subject: CN=B136905EC44EF48DE6681388F6EE101111E2D5BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f0:b6:f9:a9:05:bd:2e:8d:01:e3:7a:bb:8f:
cf:af:1f:a6:6a:76:10:d1:30:f5:6f:a2:d4:96:84:
72:2f:c9:0c:04:7b:d3:ef:50:05:d4:45:9e:30:8a:
a7:47:24:b6:84:bf:6f:41:09:3c:d6:81:63:74:9a:
fc:71:c6:1d:04:e1:2e:29:1e:c9:13:b3:d9:d1:d7:
9d:c6:e6:d5:56:5d:e9:20:5c:ba:62:93:46:b4:5c:
58:19:75:ef:7c:23:a0:5e:7e:af:ae:e8:7b:d5:9c:
58:4f:f8:00:74:90:7b:93:2e:60:c9:7d:40:aa:1c:
b8:2f:80:3c:30:f8:44:d9:e1:1d:5b:8d:24:3e:3f:
5b:d4:c6:2a:df:10:fd:62:8f:a1:fa:4d:2a:65:9b:
93:18:8a:c2:42:55:34:a7:c4:ec:56:a0:aa:ff:b0:
0b:eb:f7:4d:00:59:15:08:49:54:98:07:82:1d:e1:
9c:7c:21:3f:78:65:40:f0:2c:2c:eb:33:07:79:00:
c3:a8:1f:f8:62:1f:b8:e4:5f:d3:45:0e:55:dd:eb:
ce:72:99:78:65:d1:4c:b4:f5:53:12:bb:3d:fb:72:
f1:d6:cd:27:6f:2d:0e:26:10:3c:48:8f:86:cd:5f:
9d:ff:3f:e2:fb:11:a8:2f:d2:b9:b7:af:fd:ea:25:
47:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:36:90:5E:C4:4E:F4:8D:E6:68:13:88:F6:EE:10:11:11:E2:D5:BF
X509v3 Authority Key Identifier:
keyid:ED:17:4C:01:50:D6:35:25:F5:DB:20:F0:99:2E:DE:EC:D7:03:80:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/ED174C0150D63525F5DB20F0992EDEECD70380E5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED174C0150D63525F5DB20F0992EDEECD70380E5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/ED174C0150D63525F5DB20F0992EDEECD70380E5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:9b:f5:9c:3f:0f:fa:12:5d:89:50:32:ba:d6:01:77:3e:0f:
aa:14:8d:27:01:db:30:89:3e:d1:3b:1e:46:0c:d8:1a:05:94:
5e:17:ad:07:68:bd:61:8b:1d:61:55:c1:c1:44:61:91:04:7f:
ed:bb:4f:a8:d9:ea:34:f6:06:f1:21:f9:92:ea:82:57:81:1b:
c2:9f:db:d2:b1:4f:04:33:c4:9e:6b:eb:c1:47:c2:51:a9:c2:
e6:29:4e:c3:bc:c7:33:83:d9:89:8c:10:fd:ff:6d:85:c7:1b:
30:08:ba:8b:45:c9:f7:d8:78:56:54:49:09:ab:74:21:e7:a1:
7c:76:ec:24:34:e6:4e:7b:06:eb:72:a0:4d:8a:a5:25:33:e9:
92:3e:04:55:97:6c:95:d8:b7:fd:0c:b7:6b:26:c0:89:b7:2a:
2e:a9:aa:5c:15:81:7d:79:8a:5d:da:75:58:68:7f:5c:7e:96:
66:af:68:a2:08:58:6e:e4:3f:48:22:d0:55:0d:63:b0:0a:8c:
18:75:9f:a0:01:2a:13:c6:e7:0b:97:5e:72:4f:83:f4:6a:1b:
0a:30:7e:94:73:87:d9:6c:2e:d0:88:87:74:cb:14:5a:3f:e9:
bc:53:e5:fb:2c:07:ce:fd:6f:34:f5:42:76:aa:7a:73:fd:92:
47:b8:a6:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:47:29 2026 by rpki-client