
$ rpki-client -vvf rpki-rsync.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.mft
File: ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.mft (raw, json)
Hash identifier: KvbGvueL0HHJoz/ToFXmqNmXqWFlVWIIV/t5gg49mmc=
Subject key identifier: 61:53:7B:AD:7B:87:E9:54:72:67:24:19:70:98:6C:12:DA:EE:CB:8A
Authority key identifier: ED:7B:59:44:27:AC:B8:0A:1E:B2:E4:E9:2D:5E:6B:A6:86:3E:29:F4
Certificate issuer: /CN=ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4
Certificate serial: 14E2880CC62DC16A899977C1606BF30B0E2A7909
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.mft
Manifest number: 39
Signing time: Sat 13 Jun 2026 16:34:32 +0000
Manifest this update: Sat 13 Jun 2026 16:29:32 +0000
Manifest next update: Sun 14 Jun 2026 18:25:32 +0000
Files and hashes: 1: ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.crl (hash: tr7OESNGJ2aFFuuXDC+X96A1p8g7AHPt9fAGDZTXTBU=)
2: 3130332e3232302e34372e302f32342d3234203d3e20313431313037.roa (hash: rmdjm7QqoJ2GS17azzOS2oUqFKYvi6CMQRKzm3faQVA=)
3: 3130332e3231362e3138382e302f32342d3234203d3e20313431313037.roa (hash: GSlw3zzCCuqCV+/TWCeBscNvFDaa+2WNBQy+mh6Ibro=)
4: 323030313a6466313a666530303a3a2f34382d3438203d3e20313431313037.roa (hash: dibahg/ZGqEkwi1huDaO1AQr5xbgMUcTUuKbdZGTir8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.crl
rsync://rpki-rsync.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:e2:88:0c:c6:2d:c1:6a:89:99:77:c1:60:6b:f3:0b:0e:2a:79:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4
Validity
Not Before: Jun 13 16:29:32 2026 GMT
Not After : Jun 14 18:25:32 2026 GMT
Subject: CN=61537BAD7B87E9547267241970986C12DAEECB8A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:65:46:52:2c:34:c9:d7:a2:44:f1:87:d5:98:
e0:87:48:0c:e2:59:eb:21:df:14:6a:60:0e:a2:18:
bd:c7:f0:ef:f3:fd:af:5c:4b:2c:a1:e8:d9:f1:bf:
ef:d1:ae:4d:61:f9:cf:36:33:db:af:13:39:5c:54:
ca:73:83:f8:7f:18:94:3c:48:9a:9e:97:2b:9e:69:
60:ed:db:b1:9d:59:6d:cb:e6:ea:c5:a0:41:b8:01:
61:61:eb:0f:22:4e:48:b1:12:d4:92:bb:ed:0d:3a:
82:bc:52:2d:56:fd:c5:7e:26:7d:58:9c:cf:e0:80:
e4:1a:65:e9:51:aa:f4:19:1a:89:ee:56:b1:30:05:
c0:68:c2:d0:96:d7:c7:b4:79:6a:e5:02:61:71:30:
4b:dd:45:e9:1a:37:f1:51:4e:fb:30:06:4e:d2:e1:
08:7c:aa:87:59:61:b5:49:81:39:63:23:76:ca:eb:
78:97:06:df:08:77:21:b2:b5:e7:9b:27:72:6d:51:
87:0e:41:c9:a5:72:41:e8:e0:92:68:60:de:3e:91:
5e:44:e6:82:7f:78:d9:ba:81:cc:76:d0:5e:7d:37:
9e:b4:e3:a7:80:d6:19:59:1d:8d:c9:9d:9f:26:6f:
78:15:ed:60:39:5a:14:3a:dc:46:4a:cd:3d:1d:0b:
0a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:53:7B:AD:7B:87:E9:54:72:67:24:19:70:98:6C:12:DA:EE:CB:8A
X509v3 Authority Key Identifier:
keyid:ED:7B:59:44:27:AC:B8:0A:1E:B2:E4:E9:2D:5E:6B:A6:86:3E:29:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:94:ab:85:a4:a5:9a:1c:1c:ea:2e:ea:15:c7:39:9f:1a:1e:
51:a7:65:75:a9:f0:c7:7d:0d:60:9d:b6:fd:ef:05:6e:e6:26:
65:ff:8d:9d:e0:53:d5:02:64:d6:38:9a:94:39:ae:16:79:4b:
f3:89:6f:72:90:28:b8:8b:3c:36:f3:5b:30:79:97:36:f7:a4:
a0:c2:c0:40:ac:15:7d:52:e8:ba:0e:1f:2f:07:84:47:80:1d:
1c:2c:9c:0a:f2:81:08:64:53:bf:20:aa:ad:ea:12:b0:f4:e9:
6b:17:4b:04:4c:bc:ab:d9:57:57:83:eb:b0:f6:44:de:a0:b7:
0e:57:ad:e5:1e:6f:33:3b:d7:b0:b7:cd:15:a2:74:a4:f4:9d:
8e:32:a6:f5:32:fe:8c:66:91:46:28:53:16:e4:e9:0b:e4:57:
b9:1e:e5:7d:2e:bc:f4:60:e1:c2:a7:de:1c:7b:55:2b:15:f2:
29:d6:23:bf:21:41:70:59:d5:01:75:9c:03:07:3b:b7:12:72:
ba:f0:ae:4e:c4:b3:2a:f9:5d:fd:8a:e3:c2:b8:1e:ec:1b:01:
80:4e:be:d1:7d:b7:13:e7:86:7f:1c:b4:de:f2:10:ce:d5:05:
0a:84:1f:ac:92:bf:6f:2e:b1:b4:64:0d:19:17:6b:b9:15:9c:
62:d5:99:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:18:21 2026 by rpki-client