
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/EECD640133988CFFC0BF1D58079BA5921C041DB9.mft
File: EECD640133988CFFC0BF1D58079BA5921C041DB9.mft (raw, json)
Hash identifier: 1IFC0ei205EntmSmOwrTMFIgGbG/Tnz70W7Twlg6VcA=
Subject key identifier: D0:5A:07:2C:A9:CE:EE:6B:27:55:8D:90:6F:A7:6B:46:A3:37:95:A1
Authority key identifier: EE:CD:64:01:33:98:8C:FF:C0:BF:1D:58:07:9B:A5:92:1C:04:1D:B9
Certificate issuer: /CN=EECD640133988CFFC0BF1D58079BA5921C041DB9
Certificate serial: 34C667D1BD096B054C61DEF1A3081CC58B92B7B5
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EECD640133988CFFC0BF1D58079BA5921C041DB9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/EECD640133988CFFC0BF1D58079BA5921C041DB9.mft
Manifest number: 6F
Signing time: Thu 23 Jul 2026 22:47:38 +0000
Manifest this update: Thu 23 Jul 2026 22:42:38 +0000
Manifest next update: Sat 25 Jul 2026 02:41:38 +0000
Files and hashes: 1: EECD640133988CFFC0BF1D58079BA5921C041DB9.crl (hash: aDd01D0wD21MVXDnDKjEjU+qQMT8f2qXv/18zOPqPsQ=)
2: 323030313a6466333a3738303a3a2f34382d3438203d3e20313430303235.roa (hash: eoYACoknq6vSui9USgokAQRX8xZkoLYZMEzPSOjPAZU=)
3: 3130332e3134392e32322e302f32342d3234203d3e20313430303235.roa (hash: PWHfuvJISm/0HGRYS1rgkQyVd8LnOVyJKU3uYwSY5nY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/EECD640133988CFFC0BF1D58079BA5921C041DB9.crl
rsync://rpki-rsync.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/EECD640133988CFFC0BF1D58079BA5921C041DB9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EECD640133988CFFC0BF1D58079BA5921C041DB9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 02:41:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:c6:67:d1:bd:09:6b:05:4c:61:de:f1:a3:08:1c:c5:8b:92:b7:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EECD640133988CFFC0BF1D58079BA5921C041DB9
Validity
Not Before: Jul 23 22:42:38 2026 GMT
Not After : Jul 25 02:41:38 2026 GMT
Subject: CN=D05A072CA9CEEE6B27558D906FA76B46A33795A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:af:18:c2:71:e6:d7:b5:e0:48:e3:43:ea:03:
eb:b1:be:c0:81:98:bd:88:9e:ab:d6:de:79:1c:dc:
2a:68:7a:7b:fe:4e:45:65:1b:d2:36:1d:3b:29:43:
19:d8:5c:4b:44:b1:a8:ce:10:d6:5d:86:2b:58:d2:
cc:bf:e7:c8:f3:21:65:b9:0e:54:d6:f4:f5:83:12:
16:25:50:3e:dc:b7:21:a9:2c:eb:19:57:b1:97:d2:
e2:12:9a:d1:8e:74:8c:cc:5f:4e:08:b1:06:0e:da:
f7:3c:94:c6:0f:53:94:11:72:bf:df:d2:79:88:14:
2f:d9:70:84:c2:8b:b7:a4:c8:b3:0a:c1:3a:d3:0d:
e1:7a:33:f0:e9:d9:54:2f:a2:85:8e:4e:65:cc:5c:
cf:9a:e2:c5:9a:2b:ae:3e:63:b9:5d:ac:e5:b6:3f:
be:2a:db:53:c6:5b:d0:5b:e9:c7:79:9d:21:6d:6c:
8e:91:f4:0c:99:e4:6d:45:07:38:8f:8d:ed:ed:e3:
a5:d9:ae:d8:ac:0e:73:4c:f1:3a:3f:20:e1:48:21:
6a:a5:61:ec:69:09:80:4c:54:00:ab:dd:30:7c:8f:
5f:c5:1b:64:c9:45:f4:26:e6:34:db:e9:f0:a9:05:
82:52:77:9e:e0:34:9c:f5:e4:e2:b8:7b:3e:e1:26:
57:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:5A:07:2C:A9:CE:EE:6B:27:55:8D:90:6F:A7:6B:46:A3:37:95:A1
X509v3 Authority Key Identifier:
keyid:EE:CD:64:01:33:98:8C:FF:C0:BF:1D:58:07:9B:A5:92:1C:04:1D:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/EECD640133988CFFC0BF1D58079BA5921C041DB9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EECD640133988CFFC0BF1D58079BA5921C041DB9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/EECD640133988CFFC0BF1D58079BA5921C041DB9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:2c:4c:88:7f:90:84:55:0b:c0:a8:44:c6:bc:91:47:ba:e9:
d7:db:34:e8:90:c6:f4:ec:52:18:06:db:6a:27:aa:65:52:5c:
26:c3:1b:32:c5:65:7f:59:90:14:2c:b0:d5:62:83:e1:50:2f:
0b:5b:a8:ec:49:15:89:90:1b:12:d2:16:a2:cd:d7:32:93:ca:
7e:39:e0:9d:e4:30:76:70:ee:5d:2f:3f:18:98:49:c7:8a:ba:
9a:0b:c2:22:43:b5:69:e6:a9:b7:32:89:75:43:34:fc:a1:92:
93:6e:34:c5:41:d7:21:3f:62:0b:ff:e0:70:9e:86:79:38:48:
2d:84:49:13:99:0c:4c:d0:81:0e:5c:ba:85:f1:02:a0:c1:3e:
c5:af:eb:64:1f:d1:86:2d:c7:6f:38:23:8f:0c:36:da:6d:91:
c3:a0:58:63:2e:9f:31:9a:3b:a6:ef:04:c7:47:6c:44:31:d7:
30:88:fd:5d:61:9d:58:7e:b7:60:c9:c9:fb:a1:49:a0:4e:b5:
b0:f5:b4:66:0e:6d:a5:ae:c4:9a:46:83:0c:ad:54:89:bd:bf:
f2:48:56:c4:b6:3d:a3:6f:69:45:5c:48:54:6b:ac:7a:33:ac:
4e:1b:a9:ac:28:8b:9d:b9:66:21:9c:b7:5d:8a:1d:e1:d7:7d:
ae:0a:46:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:02:51 2026 by rpki-client