
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/2EAB22DEDA17C8633520C765C1BECE6852B8BD70.mft
File: 2EAB22DEDA17C8633520C765C1BECE6852B8BD70.mft (raw, json)
Hash identifier: IHeL6qHdF9D9xjCDpIsLeOEbw8F84zevxohq0e/Jac0=
Subject key identifier: 03:FA:85:0B:DE:DA:98:F4:0E:77:4B:6E:D9:90:B3:0E:1C:9E:ED:CA
Authority key identifier: 2E:AB:22:DE:DA:17:C8:63:35:20:C7:65:C1:BE:CE:68:52:B8:BD:70
Certificate issuer: /CN=2EAB22DEDA17C8633520C765C1BECE6852B8BD70
Certificate serial: 58099293FE895EF5A22DAB27A30D262D6D03F25F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2EAB22DEDA17C8633520C765C1BECE6852B8BD70.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/2EAB22DEDA17C8633520C765C1BECE6852B8BD70.mft
Manifest number: C1
Signing time: Thu 24 Sep 2026 00:36:28 +0000
Manifest this update: Thu 24 Sep 2026 00:31:28 +0000
Manifest next update: Fri 25 Sep 2026 04:35:28 +0000
Files and hashes: 1: 2EAB22DEDA17C8633520C765C1BECE6852B8BD70.crl (hash: bz0cQ7bsp9I3zkTVIF+BdEcNFIoP/Htn1e2LyDyvNIk=)
2: 323430343a326363303a34633a3a2f34362d3436203d3e20313331373336.roa (hash: cS+IrgZpY9aClZBoWCUDEv2Phmt7SwlOezLlcCoBSPI=)
3: 3130332e3133322e31342e302f32342d3234203d3e20313331373336.roa (hash: HJc5JvMy8GHohXvfOoaZGX6TD+10pfnhOdLgXA7YFDo=)
4: 3130332e3133322e31322e302f32342d3234203d3e20313331373336.roa (hash: VaVs+XiSWxs1hEguef/hHo/bNFA4CcDh7KZrSmxpBag=)
5: 323430343a326363303a32303a3a2f34332d3433203d3e20313331373336.roa (hash: fToGnwAHAJ5VtIANKumAt4uzlSvc7R1/Zv4oJQS4kF0=)
6: 3130332e3133322e31352e302f32342d3234203d3e20313331373336.roa (hash: dpRjxkyvMZSuMwoiOFiEbs0aVfBM9F5a6WoDjj2reGk=)
7: 3130332e3133322e31332e302f32342d3234203d3e20313331373336.roa (hash: NS29Duq3Ad0Oay5mRumCSue0EKVMXVW+d3uV6la1Mk4=)
8: 323430343a326363303a34343a3a2f34362d3436203d3e20313331373336.roa (hash: GR4L5FJqVS9TJ+dvaa8HynQA+y7YhiRBbKDogiUCsq4=)
9: 323430343a326363303a34383a3a2f34362d3436203d3e20313331373336.roa (hash: jZfpgRC0d5fkEjm8vD7qc9gZsnKZQYBh0EboO+Uho7s=)
10: 323430343a326363303a35343a3a2f34362d3436203d3e20313331373336.roa (hash: R7p8u3fUD9Q1PWm/nzBs05bZYIMNm4aJaBgF+3K7/6A=)
11: 323430343a326363303a34303a3a2f34362d3436203d3e20313331373336.roa (hash: xUpoxjFUHIIvNkT92mjiWI0plg15apjL+jPNvQQ2Uk8=)
12: 323430343a326363303a35383a3a2f34362d3436203d3e20313331373336.roa (hash: 2ePu3EHR90dClUt0r5HRZza+Dx4B+Kag1aBuSmuBj9s=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/2EAB22DEDA17C8633520C765C1BECE6852B8BD70.crl
rsync://rpki-rsync.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/2EAB22DEDA17C8633520C765C1BECE6852B8BD70.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2EAB22DEDA17C8633520C765C1BECE6852B8BD70.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 04:35:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:09:92:93:fe:89:5e:f5:a2:2d:ab:27:a3:0d:26:2d:6d:03:f2:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2EAB22DEDA17C8633520C765C1BECE6852B8BD70
Validity
Not Before: Sep 24 00:31:28 2026 GMT
Not After : Sep 25 04:35:28 2026 GMT
Subject: CN=03FA850BDEDA98F40E774B6ED990B30E1C9EEDCA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:66:dd:4e:0b:11:da:14:ff:36:94:11:f5:51:
3e:03:34:ff:ab:a0:99:d5:82:8f:66:7d:0a:54:29:
e9:bc:43:e4:bb:f1:2e:90:82:db:d4:19:b9:a8:aa:
19:1d:f4:2d:5c:9c:00:02:56:4a:5a:ab:2b:65:c4:
47:29:81:30:88:89:04:eb:b8:02:81:7e:cf:fc:1a:
07:d0:b4:5a:94:7a:07:00:ad:6c:a2:34:07:51:3f:
1e:aa:4a:81:da:8f:93:77:f4:82:41:98:80:ab:c7:
2b:aa:49:c4:ce:b8:e9:dc:75:5a:44:f5:e2:72:c0:
fc:42:ac:7a:3b:ab:3e:7b:4e:96:29:e6:19:f8:04:
32:35:f9:48:b2:d6:d7:92:f8:cd:53:c8:a6:23:f5:
01:7b:4f:3b:ec:ca:28:58:1e:95:56:e8:d4:99:b6:
2e:be:8a:12:96:46:ed:92:ff:6a:4f:eb:6e:5b:26:
d2:49:84:bd:fc:67:f1:77:48:e5:ff:f5:8e:9e:9a:
64:b0:f9:6f:38:85:f9:cf:d7:08:57:c6:08:0b:5a:
de:1a:3f:f0:96:f8:8e:bc:39:d3:f5:ee:93:75:31:
16:39:57:d1:9e:9b:a7:47:bd:d7:20:1c:d4:18:0a:
1f:64:2b:c6:bf:19:9b:7f:ee:e7:fa:67:f8:d9:55:
9d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:FA:85:0B:DE:DA:98:F4:0E:77:4B:6E:D9:90:B3:0E:1C:9E:ED:CA
X509v3 Authority Key Identifier:
keyid:2E:AB:22:DE:DA:17:C8:63:35:20:C7:65:C1:BE:CE:68:52:B8:BD:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/2EAB22DEDA17C8633520C765C1BECE6852B8BD70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2EAB22DEDA17C8633520C765C1BECE6852B8BD70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/2EAB22DEDA17C8633520C765C1BECE6852B8BD70.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:a2:a7:41:38:66:04:d0:ed:e9:7c:91:46:30:48:3c:32:93:
67:6c:d9:da:2e:b2:c5:fa:64:b3:5e:9d:9a:8c:58:49:0c:25:
46:f1:df:73:11:65:d2:e8:58:b6:da:41:77:49:51:42:fa:f5:
8d:4f:69:89:b0:22:bc:c9:60:00:94:89:7f:76:02:20:eb:51:
22:57:6e:9b:9a:ed:09:62:e2:23:a4:6f:29:a4:d6:75:90:5c:
6b:98:e7:e1:dd:9c:ae:84:08:9f:9f:62:dd:34:4e:80:4b:39:
dc:fc:36:b8:83:a9:a2:77:e5:5a:95:f9:ab:e9:7e:e5:ab:2d:
92:88:9e:fe:52:4a:9d:29:56:0c:de:f1:08:86:f8:9c:66:a0:
a0:19:23:23:1e:12:5b:b5:20:46:11:bb:c5:10:7b:16:f9:ad:
7b:46:93:20:3c:5f:11:8b:27:5d:fa:87:0d:e9:36:ff:87:c4:
bd:fa:b5:04:13:ef:72:0b:a7:52:ac:df:21:7f:1c:34:8e:67:
c2:7f:04:9f:33:21:d4:6f:bb:83:68:87:32:4a:aa:6c:48:b5:
8f:57:ad:09:1d:a5:3a:ed:6a:2a:4d:cf:05:b4:93:42:ce:dc:
4e:cb:bb:04:fc:ad:39:a1:32:fe:eb:a6:e3:08:3b:c4:80:9e:
41:7c:aa:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:07:50 2026 by rpki-client