
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/EB1DCD321031C0290E00088B308F6E37F658F0F0.mft
File: EB1DCD321031C0290E00088B308F6E37F658F0F0.mft (raw, json)
Hash identifier: xMmRwx68cd/w/3yaaXBXLZBmn5pS+Zudty/Uz7WfXxo=
Subject key identifier: 9B:23:F8:3F:1D:41:CC:84:38:CA:E7:AB:98:C4:1C:FE:08:2C:E5:1B
Authority key identifier: EB:1D:CD:32:10:31:C0:29:0E:00:08:8B:30:8F:6E:37:F6:58:F0:F0
Certificate issuer: /CN=EB1DCD321031C0290E00088B308F6E37F658F0F0
Certificate serial: 5E2BC5FB007F0B1D512387BCC3070A0CE2498550
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EB1DCD321031C0290E00088B308F6E37F658F0F0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/EB1DCD321031C0290E00088B308F6E37F658F0F0.mft
Manifest number: 0107
Signing time: Sat 14 Nov 2026 12:55:39 +0000
Manifest this update: Sat 14 Nov 2026 12:50:39 +0000
Manifest next update: Sun 15 Nov 2026 14:20:39 +0000
Files and hashes: 1: 3135372e36362e3132352e302f32342d3234203d3e20313532373732.roa (hash: 52gK1ZVXU5lx2N9LIOHuf1720HHZgYLR2YWvzcpZMqA=)
2: EB1DCD321031C0290E00088B308F6E37F658F0F0.crl (hash: 8381W+B0VTzOkvtl9QsKvYwL3Zm+Nm3RlgO0ugn1V0Y=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/EB1DCD321031C0290E00088B308F6E37F658F0F0.crl
rsync://rpki-rsync.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/EB1DCD321031C0290E00088B308F6E37F658F0F0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EB1DCD321031C0290E00088B308F6E37F658F0F0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 15 Nov 2026 14:20:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:2b:c5:fb:00:7f:0b:1d:51:23:87:bc:c3:07:0a:0c:e2:49:85:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB1DCD321031C0290E00088B308F6E37F658F0F0
Validity
Not Before: Nov 14 12:50:39 2026 GMT
Not After : Nov 15 14:20:39 2026 GMT
Subject: CN=9B23F83F1D41CC8438CAE7AB98C41CFE082CE51B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:bf:f0:6d:b9:5b:bc:f3:a6:8b:7f:0a:b8:85:
d0:9c:d1:0d:3d:bd:6d:a7:fe:b9:de:a4:69:20:7f:
84:14:a6:65:d1:e1:f2:21:e2:65:37:84:e0:d6:f3:
60:99:31:8f:66:e8:40:72:fb:74:d4:ef:de:3d:49:
ed:22:3c:16:cc:a3:35:3f:8a:70:ef:44:33:45:db:
0d:8f:d2:01:d1:e7:63:3d:e9:24:84:9b:5e:76:c2:
7d:0d:9a:8b:9c:78:00:d7:b7:ac:b1:f8:9f:b3:28:
a3:80:b1:e9:90:85:b5:c2:2b:9c:5c:2a:b2:a7:60:
32:a5:ce:c6:c3:1e:12:75:84:5b:34:8a:17:e3:d9:
af:d4:7d:5c:4e:7f:ab:a0:e8:58:63:ca:aa:da:aa:
18:2f:c9:91:7e:34:78:21:3e:20:ed:d7:e7:1a:12:
29:dc:3a:b6:2a:38:b9:8b:15:6f:02:fd:73:9d:6c:
fd:dc:07:7f:d1:4d:99:d3:98:12:d4:ac:82:b3:56:
6c:1a:0d:17:73:0c:c1:ad:29:e7:f3:12:cd:5f:44:
56:6d:d8:06:b4:5b:0a:2e:e1:2b:c1:23:66:c1:fb:
15:47:dc:7a:a1:4f:cc:9d:b0:22:b1:85:67:e6:20:
59:69:73:cd:5f:6d:0f:a0:2f:bb:9c:08:55:5b:ff:
05:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:23:F8:3F:1D:41:CC:84:38:CA:E7:AB:98:C4:1C:FE:08:2C:E5:1B
X509v3 Authority Key Identifier:
keyid:EB:1D:CD:32:10:31:C0:29:0E:00:08:8B:30:8F:6E:37:F6:58:F0:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/EB1DCD321031C0290E00088B308F6E37F658F0F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EB1DCD321031C0290E00088B308F6E37F658F0F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/EB1DCD321031C0290E00088B308F6E37F658F0F0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:8a:64:5d:69:54:ee:ab:e8:71:c2:dd:02:cf:ed:ae:89:0e:
bd:db:c8:00:e3:1d:83:b0:ee:c7:01:14:d8:24:3e:f6:eb:42:
80:13:3f:3d:7a:a5:91:7b:01:d0:8f:32:eb:2c:66:bd:a4:49:
b2:02:54:9a:79:9d:cb:76:df:98:5e:af:eb:87:86:d4:17:23:
cc:4f:70:c1:e3:a1:30:2b:28:de:42:a5:c6:b3:79:dc:4a:4f:
5f:2b:c6:b4:ac:66:b5:44:60:55:e3:45:99:5b:90:63:b6:8d:
94:93:d3:08:81:89:e2:97:fe:e0:fd:3a:1e:5d:f7:66:22:6e:
5e:a6:3f:ef:41:f9:28:21:b1:89:01:d9:c0:85:33:71:36:7d:
33:f8:96:f8:95:9b:59:5a:0e:f3:2e:40:02:1a:04:0b:7f:6f:
19:00:0e:4e:68:e5:22:5e:e5:73:f8:61:45:f5:bc:2b:aa:c3:
64:2e:83:22:8a:cb:da:a5:bf:68:5f:a9:e9:e9:c9:86:de:58:
7a:b5:8c:a6:d9:8e:b5:be:29:05:b7:09:31:85:14:89:cf:c7:
8b:92:e0:87:ed:ff:3c:b3:9c:93:3b:df:50:2e:d9:f5:52:2f:
08:87:66:da:f4:a2:58:be:4f:46:00:38:64:a2:20:cf:5d:7e:
f4:6e:b8:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:36:24 2026 by rpki-client