
$ rpki-client -vvf rpki-rsync.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/EDE74DB94791A93866EC7291214CFE17A2E8847C.mft
File: EDE74DB94791A93866EC7291214CFE17A2E8847C.mft (raw, json)
Hash identifier: XpboZcznmspEFunJa4qTdhfglbfrwQMd8z/Djuoyf4I=
Subject key identifier: 59:A3:37:8F:E2:76:86:3F:87:AA:E6:C2:C9:71:A7:BD:5C:BD:E7:6A
Authority key identifier: ED:E7:4D:B9:47:91:A9:38:66:EC:72:91:21:4C:FE:17:A2:E8:84:7C
Certificate issuer: /CN=EDE74DB94791A93866EC7291214CFE17A2E8847C
Certificate serial: 25C4362BFD9EA65A6093CD8BA8D4A4EEA35D5D38
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EDE74DB94791A93866EC7291214CFE17A2E8847C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/EDE74DB94791A93866EC7291214CFE17A2E8847C.mft
Manifest number: 75
Signing time: Wed 29 Jul 2026 10:28:27 +0000
Manifest this update: Wed 29 Jul 2026 10:23:27 +0000
Manifest next update: Thu 30 Jul 2026 12:08:27 +0000
Files and hashes: 1: 3132332e3235332e3235322e302f32322d3234203d3e20313339333937.roa (hash: 4l+iqPdBiSlCoKQVmREPhK2V683AQV+EJjvlxdf5bAw=)
2: 3130332e39312e33322e302f32322d3234203d3e203338343936.roa (hash: 8iN/CyAnWulsiAeIh9OXGEEjvzE7Yu0Mej0akYbb1wk=)
3: EDE74DB94791A93866EC7291214CFE17A2E8847C.crl (hash: 9e/mq6mLlqmGF3iuOfOs3VtnnszLtDCIO3/frm1dRmk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/EDE74DB94791A93866EC7291214CFE17A2E8847C.crl
rsync://rpki-rsync.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/EDE74DB94791A93866EC7291214CFE17A2E8847C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EDE74DB94791A93866EC7291214CFE17A2E8847C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 12:08:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:c4:36:2b:fd:9e:a6:5a:60:93:cd:8b:a8:d4:a4:ee:a3:5d:5d:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EDE74DB94791A93866EC7291214CFE17A2E8847C
Validity
Not Before: Jul 29 10:23:27 2026 GMT
Not After : Jul 30 12:08:27 2026 GMT
Subject: CN=59A3378FE276863F87AAE6C2C971A7BD5CBDE76A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:cf:2a:7d:fe:38:f6:ad:23:62:48:cb:ad:92:
aa:95:f4:71:f6:69:37:af:33:91:a6:1b:22:cf:df:
84:c1:b5:31:a1:cb:31:a4:d9:bd:83:a5:b6:1d:9f:
50:92:7a:10:37:b4:dd:a6:57:7d:9d:21:0a:30:8b:
17:b4:2d:b0:be:49:35:3b:63:05:0c:ae:c5:d8:dd:
23:cd:86:2c:d2:3e:97:e3:fe:b7:4e:f8:fb:a2:3f:
71:ff:18:f7:c2:88:e1:7b:e2:1e:83:e3:e0:87:bf:
7a:6d:d9:85:92:39:26:c5:03:c3:47:8b:bb:de:2c:
3c:29:d3:90:0e:79:49:8b:9f:ce:e1:76:00:3a:91:
91:7f:a3:ec:a9:24:5c:56:09:68:f2:39:d7:a4:91:
ca:16:6b:73:05:63:4a:d4:de:d3:e8:36:cf:a6:97:
bf:8e:b6:f3:4d:0a:45:b2:9e:3c:45:d1:57:3e:d9:
1d:b5:76:85:72:ea:14:32:7b:fe:af:0a:fd:72:18:
c6:83:7d:ea:e2:3d:fd:4e:ea:91:47:ba:78:46:4a:
8b:80:29:36:3c:39:ff:2a:ec:48:be:eb:3b:1a:14:
85:d4:d1:08:30:1b:9c:84:8d:35:37:e9:e0:65:4b:
82:89:0f:ae:d1:2e:8d:9e:75:e3:7a:f9:e0:e0:26:
45:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:A3:37:8F:E2:76:86:3F:87:AA:E6:C2:C9:71:A7:BD:5C:BD:E7:6A
X509v3 Authority Key Identifier:
keyid:ED:E7:4D:B9:47:91:A9:38:66:EC:72:91:21:4C:FE:17:A2:E8:84:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/EDE74DB94791A93866EC7291214CFE17A2E8847C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EDE74DB94791A93866EC7291214CFE17A2E8847C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/EDE74DB94791A93866EC7291214CFE17A2E8847C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:67:15:6c:70:3c:6a:31:f0:82:0c:70:db:d0:c5:7f:97:90:
79:b6:61:3e:85:e6:dc:49:28:f7:89:1e:ca:01:f7:33:d5:0c:
f9:fb:e0:fe:ce:d4:d2:82:da:f8:18:7b:29:8c:cb:fc:3c:a2:
3b:3d:aa:98:e7:d6:f5:2f:0e:fc:c7:01:6f:ff:b9:a3:8a:a0:
fa:22:7b:a6:e9:2f:ae:a6:cc:40:14:ed:e5:47:1b:1a:6d:c2:
65:72:25:5a:27:04:42:2a:c3:93:bf:17:79:19:aa:ac:69:b7:
84:cf:ee:b4:3f:92:42:5e:15:50:dc:34:18:41:94:ce:f9:dd:
7d:86:a9:06:f7:fd:8d:89:de:68:e1:29:79:ae:06:9a:09:cc:
37:82:cc:a6:0f:1e:08:c8:69:dc:17:50:36:fd:f0:f0:a6:54:
77:61:9b:8d:ab:e8:50:37:45:1a:3b:65:88:7f:e2:1c:eb:10:
f0:8b:71:63:e8:0c:39:85:1a:17:49:a1:3d:57:30:39:0c:bb:
bb:05:0d:3f:14:f1:27:cd:84:42:16:24:4a:ba:8f:a7:e4:1c:
0b:8d:0e:71:b4:1c:ea:12:ea:46:56:26:be:36:af:ee:73:ca:
78:eb:7a:99:29:8d:46:40:33:74:df:9b:51:55:3c:16:f7:bc:
fb:a7:d4:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 18:28:56 2026 by rpki-client