
$ rpki-client -vvf rpki-rsync.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/EA413FBCBE2BF73652D85102495ECE33E9330D0F.mft
File: EA413FBCBE2BF73652D85102495ECE33E9330D0F.mft (raw, json)
Hash identifier: EeuvcqbyMekKTYYM6IROgALC/JA714k8axbOD4XOoQ8=
Subject key identifier: 52:FE:6F:5D:3B:B3:D8:4A:FA:41:84:74:5D:2F:A3:25:4B:61:C1:F5
Authority key identifier: EA:41:3F:BC:BE:2B:F7:36:52:D8:51:02:49:5E:CE:33:E9:33:0D:0F
Certificate issuer: /CN=EA413FBCBE2BF73652D85102495ECE33E9330D0F
Certificate serial: 1E2EAAB0C98D08A552F889EB8EDC128604163BB7
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA413FBCBE2BF73652D85102495ECE33E9330D0F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/EA413FBCBE2BF73652D85102495ECE33E9330D0F.mft
Manifest number: 3E
Signing time: Tue 16 Jun 2026 21:50:41 +0000
Manifest this update: Tue 16 Jun 2026 21:45:41 +0000
Manifest next update: Thu 18 Jun 2026 00:30:41 +0000
Files and hashes: 1: 3130332e3135332e3133342e302f32332d3233203d3e20313430343634.roa (hash: wrEWuCEXvYyJtUKLCBlrSkqSpEscz1bfuLgaervIG1M=)
2: 3130332e3135332e3133352e302f32342d3234203d3e20313430343634.roa (hash: WSddUG6Ud+EGXAnyjU+LN6Z0WaSOYhJ8p87PY2mBdmk=)
3: EA413FBCBE2BF73652D85102495ECE33E9330D0F.crl (hash: GiYEBo1oE/CrJnI1NHIXPSvywzaHTOUs5wbxK7K+/CU=)
4: 323430363a343534303a3a2f33322d3332203d3e20313430343634.roa (hash: g38q9LaZAq4No+F6g8orw8HsN+5ba4Mi+pwZw+eZ3w8=)
5: 3130332e3135332e3133342e302f32342d3234203d3e20313430343634.roa (hash: PJ6SYnJsMTtu1EVv401gG2I/mMRasJM6zvehsyeEO6I=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/EA413FBCBE2BF73652D85102495ECE33E9330D0F.crl
rsync://rpki-rsync.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/EA413FBCBE2BF73652D85102495ECE33E9330D0F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA413FBCBE2BF73652D85102495ECE33E9330D0F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 00:30:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:2e:aa:b0:c9:8d:08:a5:52:f8:89:eb:8e:dc:12:86:04:16:3b:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EA413FBCBE2BF73652D85102495ECE33E9330D0F
Validity
Not Before: Jun 16 21:45:41 2026 GMT
Not After : Jun 18 00:30:41 2026 GMT
Subject: CN=52FE6F5D3BB3D84AFA4184745D2FA3254B61C1F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e5:92:8a:75:b1:b6:15:39:a0:f0:97:04:06:
07:3a:5c:1a:1f:a8:42:35:6b:9d:0f:cd:7d:b9:be:
df:22:84:e0:45:8c:0c:d4:19:bf:66:7b:ef:6b:59:
38:f7:ac:1c:16:50:ec:e8:6e:7f:80:47:a1:76:25:
58:1e:4d:71:6f:7f:66:a7:76:9f:b8:01:ce:c8:6c:
95:17:7d:ad:33:71:e5:bf:81:d1:4b:27:46:12:b7:
4d:61:66:74:6b:a1:64:c5:7d:b8:a1:e2:42:8b:97:
36:37:3d:dc:63:3d:b9:ba:36:ff:03:e4:15:31:17:
00:fc:68:a6:87:3c:45:8a:8b:bc:3a:23:00:a5:ac:
7e:af:24:ee:ba:ea:52:5e:5a:9a:c2:29:9b:46:c1:
83:a3:15:f6:6e:bb:42:06:aa:c2:65:88:6a:45:2c:
dc:49:ed:d8:ce:b6:2d:65:8c:0d:ce:f3:85:47:32:
de:12:3e:39:26:59:70:4e:33:f9:95:0b:ed:8d:e8:
00:0a:38:a9:e4:b3:c8:ed:5a:a2:33:55:11:c3:c1:
1d:0d:b8:86:4e:38:36:4b:09:09:9e:b1:13:ac:89:
e0:6e:26:a3:dd:92:e1:f3:21:e7:65:e6:cd:85:b0:
b2:70:b9:19:8a:22:04:82:20:7a:07:40:34:ac:a7:
46:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:FE:6F:5D:3B:B3:D8:4A:FA:41:84:74:5D:2F:A3:25:4B:61:C1:F5
X509v3 Authority Key Identifier:
keyid:EA:41:3F:BC:BE:2B:F7:36:52:D8:51:02:49:5E:CE:33:E9:33:0D:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/EA413FBCBE2BF73652D85102495ECE33E9330D0F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA413FBCBE2BF73652D85102495ECE33E9330D0F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/EA413FBCBE2BF73652D85102495ECE33E9330D0F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:54:ab:80:98:a2:5a:13:e6:6c:40:b0:39:80:fb:18:f3:f1:
ec:ee:e5:56:92:a9:c1:03:eb:d3:48:c1:fd:85:87:b0:bd:0e:
9c:05:ad:61:18:e4:91:58:d7:d5:26:5e:29:de:c8:67:c5:99:
ac:03:f1:92:69:31:a7:9b:c5:a8:7e:69:2a:90:8e:c5:e9:11:
91:0b:b2:2a:d2:c0:9d:e2:4c:d2:7d:49:9b:6d:f6:ff:15:e8:
0d:07:b0:b3:e5:f9:ff:74:4b:80:af:e0:22:79:8b:f5:f2:21:
cf:1f:3a:9d:06:c0:3e:fd:f7:51:0a:84:78:b6:81:0c:8f:67:
cf:0d:a9:86:2d:ae:dd:c6:a0:0e:87:70:ec:e5:23:a7:ff:b3:
d1:57:96:48:54:7b:b5:5a:44:d4:fe:d9:42:07:d3:3e:0c:85:
91:7a:56:eb:f6:bd:fb:5d:c4:40:ca:a2:ac:62:20:92:74:a8:
11:b4:14:50:d9:2b:55:44:d7:c1:48:60:35:19:70:a3:c2:ec:
04:b0:15:8d:68:11:71:07:20:b6:d3:0b:25:1d:04:4c:eb:1f:
0f:b5:5b:5d:62:62:af:39:b4:33:dd:b9:2a:6a:c4:1f:74:8e:
a9:0c:3d:18:36:89:98:63:ef:45:31:bf:c6:f8:cb:09:f5:87:
fd:e3:52:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:03:32 2026 by rpki-client