
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/ED0555AA515B40985A93B902D748993DD2FE4B8F.mft
File: ED0555AA515B40985A93B902D748993DD2FE4B8F.mft (raw, json)
Hash identifier: egEkmUs0SjzimR4vhid9Dpm1sx+JGoxJUUcRNXdt8fw=
Subject key identifier: 48:2D:38:EC:8E:57:99:C0:A3:20:32:F3:43:F0:39:01:20:BE:00:36
Authority key identifier: ED:05:55:AA:51:5B:40:98:5A:93:B9:02:D7:48:99:3D:D2:FE:4B:8F
Certificate issuer: /CN=ED0555AA515B40985A93B902D748993DD2FE4B8F
Certificate serial: 4A66B3F7DEE1E6A3B82D3CD043143902017B8FB6
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED0555AA515B40985A93B902D748993DD2FE4B8F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/ED0555AA515B40985A93B902D748993DD2FE4B8F.mft
Manifest number: 3D
Signing time: Wed 17 Jun 2026 07:26:53 +0000
Manifest this update: Wed 17 Jun 2026 07:21:53 +0000
Manifest next update: Thu 18 Jun 2026 11:09:53 +0000
Files and hashes: 1: ED0555AA515B40985A93B902D748993DD2FE4B8F.crl (hash: DdEbVy2Fhjb2gZKbkMKKYkwLtfsKEwhOpIRyffdUM1A=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/ED0555AA515B40985A93B902D748993DD2FE4B8F.crl
rsync://rpki-rsync.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/ED0555AA515B40985A93B902D748993DD2FE4B8F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED0555AA515B40985A93B902D748993DD2FE4B8F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:66:b3:f7:de:e1:e6:a3:b8:2d:3c:d0:43:14:39:02:01:7b:8f:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ED0555AA515B40985A93B902D748993DD2FE4B8F
Validity
Not Before: Jun 17 07:21:53 2026 GMT
Not After : Jun 18 11:09:53 2026 GMT
Subject: CN=482D38EC8E5799C0A32032F343F0390120BE0036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e6:53:3e:19:09:86:7b:5b:64:5a:56:0c:50:
34:11:43:c6:90:fb:47:38:d6:78:17:f1:20:a8:80:
31:26:1d:4a:2d:2b:22:cb:7d:ba:f0:1e:cc:ca:df:
5f:88:27:70:09:1c:40:a9:77:ef:ee:d9:86:cc:d9:
fb:f7:43:81:e0:a4:88:bb:75:45:e9:c7:9e:cf:29:
c5:9e:99:cf:67:a6:d3:3e:e5:6e:e8:53:c9:78:66:
f8:76:76:be:3b:05:35:c4:a8:1a:01:8e:4f:e4:e6:
c8:70:a1:6a:9b:1f:30:6c:b9:fb:4b:0b:f6:31:30:
ce:ed:fc:25:9c:b8:35:ef:01:81:b7:ed:84:dc:d9:
77:f8:b3:1f:b3:5a:26:e3:21:29:4d:e0:39:99:e7:
0e:74:ba:a3:64:e9:29:17:21:4b:ad:c7:13:4a:df:
1a:8d:7c:85:8c:87:c4:4f:81:0d:85:2d:e0:07:eb:
75:ca:49:21:a6:4c:dd:ca:6d:bc:ee:80:f7:16:1d:
3b:69:9c:9f:fb:67:ad:f8:79:e4:b8:17:92:ab:98:
69:c0:0f:c8:86:0d:0a:4f:3e:fb:bd:08:71:6a:d2:
c2:be:a5:7d:1a:e7:d5:26:a6:00:c0:5d:dc:ba:e8:
6f:96:a5:5f:d2:3f:4e:91:25:89:84:1f:19:f9:ac:
cb:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:2D:38:EC:8E:57:99:C0:A3:20:32:F3:43:F0:39:01:20:BE:00:36
X509v3 Authority Key Identifier:
keyid:ED:05:55:AA:51:5B:40:98:5A:93:B9:02:D7:48:99:3D:D2:FE:4B:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/ED0555AA515B40985A93B902D748993DD2FE4B8F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED0555AA515B40985A93B902D748993DD2FE4B8F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/ED0555AA515B40985A93B902D748993DD2FE4B8F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:8a:1a:87:10:db:6f:55:5f:ef:bf:58:b8:9b:19:9c:89:3d:
7f:b8:03:c2:68:22:84:3a:14:0a:c2:d2:fc:22:9a:55:a3:47:
97:bd:b1:a0:02:88:2c:82:36:bb:9f:69:34:3f:d3:c4:aa:e1:
32:e5:79:c6:ce:6e:09:c5:0a:23:21:4a:e9:91:45:ac:4a:91:
a4:45:1c:3b:e2:cd:c1:63:6d:ba:fe:32:aa:ae:69:6b:a5:80:
3f:90:36:21:c5:bc:53:0f:db:2d:28:70:7e:4d:c2:97:18:6b:
f4:ff:5d:e7:8e:a7:fe:68:65:08:04:28:fc:dd:7b:3c:5f:32:
20:c1:a3:c4:fa:fc:b6:62:5b:db:74:04:44:1c:f3:b6:de:42:
56:1a:22:81:63:c8:36:71:59:02:bd:b5:f4:c9:7e:06:5f:61:
31:81:2e:61:d3:1c:45:b4:3a:57:f7:82:f1:5b:f0:e3:f3:92:
40:e0:70:6a:ba:68:2a:82:46:fb:c9:c8:cb:79:b8:d7:da:a4:
00:7d:08:5a:0c:49:c1:e3:02:17:6c:f1:93:af:0e:3e:fb:67:
c5:e4:29:c5:59:02:b6:0e:c4:6b:6f:4b:60:8d:0e:ff:51:2b:
30:13:b1:47:32:2a:14:b6:e8:70:79:6c:b2:cb:bf:d8:6f:5b:
29:62:b2:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 12:18:30 2026 by rpki-client