
$ rpki-client -vvf rpki-rsync.idnic.net/repo/360b9a87-8058-466f-b4a9-a777b4681ae1/0/EE63715AC09A5BF6E591CC15D636C202B7055A01.mft
File: EE63715AC09A5BF6E591CC15D636C202B7055A01.mft (raw, json)
Hash identifier: KBD8IFazt8N6WHL1F2tafLkKEwp06PnaBYXkCpxSv/c=
Subject key identifier: 2F:EA:8C:2A:72:43:32:30:57:49:D3:74:FA:BF:A4:8E:BC:73:7A:B6
Authority key identifier: EE:63:71:5A:C0:9A:5B:F6:E5:91:CC:15:D6:36:C2:02:B7:05:5A:01
Certificate issuer: /CN=EE63715AC09A5BF6E591CC15D636C202B7055A01
Certificate serial: 2141D6A217121C86F8AE616E0100BECD64D7F244
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE63715AC09A5BF6E591CC15D636C202B7055A01.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/360b9a87-8058-466f-b4a9-a777b4681ae1/0/EE63715AC09A5BF6E591CC15D636C202B7055A01.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 15:14:54 +0000
Manifest this update: Tue 12 May 2026 15:09:54 +0000
Manifest next update: Wed 13 May 2026 19:07:54 +0000
Files and hashes: 1: 3130332e31382e3131342e302f32332d3234203d3e203435323837.roa (hash: B4MJpy2WmXmWI2snPhvbbNGnwW8GYFx9bCPFTbBLiaQ=)
2: EE63715AC09A5BF6E591CC15D636C202B7055A01.crl (hash: 0oPOclDTSwK6DKfP0mY8YDYDS1OKjIvza1rmCIKUPMQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/360b9a87-8058-466f-b4a9-a777b4681ae1/0/EE63715AC09A5BF6E591CC15D636C202B7055A01.crl
rsync://rpki-rsync.idnic.net/repo/360b9a87-8058-466f-b4a9-a777b4681ae1/0/EE63715AC09A5BF6E591CC15D636C202B7055A01.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE63715AC09A5BF6E591CC15D636C202B7055A01.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 19:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:41:d6:a2:17:12:1c:86:f8:ae:61:6e:01:00:be:cd:64:d7:f2:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE63715AC09A5BF6E591CC15D636C202B7055A01
Validity
Not Before: May 12 15:09:54 2026 GMT
Not After : May 13 19:07:54 2026 GMT
Subject: CN=2FEA8C2A724332305749D374FABFA48EBC737AB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:22:54:6b:30:a4:20:e7:be:2d:8e:3d:25:f0:
bc:02:db:fc:92:24:53:16:23:a8:f4:97:f8:12:9f:
c9:e8:a0:87:2b:73:fa:e7:4f:fe:9e:13:2d:c5:5c:
35:b9:01:1a:77:d5:32:b4:9e:b7:99:f6:6d:22:28:
48:4c:8a:ca:9d:15:9a:97:ff:b9:e4:4d:12:bd:95:
a5:09:4a:d6:61:4a:da:7c:ae:6a:22:42:ae:25:aa:
81:ff:a8:67:24:93:b1:1d:b2:b1:34:66:18:a7:5a:
a4:50:9f:7b:45:f8:fc:71:95:62:a2:f7:e6:4f:cb:
fd:ea:f2:3d:1b:b7:10:8a:fd:62:27:69:f9:ad:53:
f2:fa:da:ee:41:40:f8:a2:f3:e6:cd:e8:9f:52:9c:
47:87:c5:73:68:9e:e3:7a:7c:f6:5a:ac:fd:28:a0:
98:3d:58:a8:8a:35:2a:d3:fe:ad:4b:7e:9a:f5:40:
13:0a:c0:77:d3:e4:26:44:c5:40:02:24:96:a8:43:
a5:06:2f:89:b3:1a:9a:d8:6a:98:49:2d:a3:b4:2d:
bd:cd:e6:17:01:9a:15:3d:b9:78:f3:1d:80:11:b1:
4b:5e:21:6e:b6:d7:d8:61:84:65:0f:61:77:ed:74:
91:6f:a2:a7:bc:61:5a:61:6a:d0:aa:08:4e:f4:16:
48:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:EA:8C:2A:72:43:32:30:57:49:D3:74:FA:BF:A4:8E:BC:73:7A:B6
X509v3 Authority Key Identifier:
keyid:EE:63:71:5A:C0:9A:5B:F6:E5:91:CC:15:D6:36:C2:02:B7:05:5A:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/360b9a87-8058-466f-b4a9-a777b4681ae1/0/EE63715AC09A5BF6E591CC15D636C202B7055A01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE63715AC09A5BF6E591CC15D636C202B7055A01.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/360b9a87-8058-466f-b4a9-a777b4681ae1/0/EE63715AC09A5BF6E591CC15D636C202B7055A01.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:92:cd:9c:8b:3c:77:40:b8:bf:02:4d:1e:1e:0e:7f:f0:92:
15:37:f9:66:f0:5c:24:1e:e8:f2:b4:bf:83:75:1f:dd:48:e6:
e3:dc:1b:34:07:b6:e2:43:05:94:8d:6d:a1:73:f9:5c:e4:70:
8a:3b:28:41:0f:70:be:84:55:12:cf:f1:9f:b2:65:36:12:45:
a3:69:a2:37:99:12:37:1c:29:e6:24:36:3b:c9:96:59:f7:2f:
85:13:91:9f:1f:2f:48:df:ab:5a:64:05:4d:07:4b:a5:51:c1:
03:91:1e:e2:a7:80:e5:6f:9c:f3:76:5d:69:51:e8:46:f0:a4:
d2:43:67:bc:19:d4:ef:a0:98:1a:50:38:ad:9b:53:a2:f1:8e:
6a:a2:ed:37:5f:40:54:ee:96:b0:a3:ef:bd:66:22:39:91:60:
38:a0:db:da:a9:19:95:dc:69:86:79:c7:f1:57:3d:3d:0e:f4:
3b:52:96:98:31:79:00:91:78:67:f6:8b:19:ca:45:f7:e8:c6:
15:6e:6a:1d:62:03:0c:38:7b:a8:77:fe:c9:12:e8:7c:b1:0e:
c5:76:9c:ba:c3:3a:da:c4:32:fe:de:ca:77:c1:50:b0:ba:91:
76:46:07:d9:54:ea:4b:ec:78:80:ea:d1:3c:70:6b:3f:45:60:
1a:7e:bb:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:23:37 2026 by rpki-client