
$ rpki-client -vvf rpki-rsync.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/EB1DCD321031C0290E00088B308F6E37F658F0F0.mft
File: EB1DCD321031C0290E00088B308F6E37F658F0F0.mft (raw, json)
Hash identifier: NkXZGWTcGLJfqnfrfrXlbTtItsfBvcGmUjtBBf0LlI8=
Subject key identifier: A8:45:1F:B7:F9:0E:A2:04:F6:C5:7E:BC:BD:44:AD:03:BB:D5:DE:B6
Authority key identifier: EB:1D:CD:32:10:31:C0:29:0E:00:08:8B:30:8F:6E:37:F6:58:F0:F0
Certificate issuer: /CN=EB1DCD321031C0290E00088B308F6E37F658F0F0
Certificate serial: 144BCD8D9E7818478A8E8694B390B46DFE097210
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EB1DCD321031C0290E00088B308F6E37F658F0F0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/EB1DCD321031C0290E00088B308F6E37F658F0F0.mft
Manifest number: 6F
Signing time: Thu 23 Jul 2026 20:45:19 +0000
Manifest this update: Thu 23 Jul 2026 20:40:19 +0000
Manifest next update: Fri 24 Jul 2026 21:07:19 +0000
Files and hashes: 1: 3135372e36362e3132352e302f32342d3234203d3e20313532373732.roa (hash: 52gK1ZVXU5lx2N9LIOHuf1720HHZgYLR2YWvzcpZMqA=)
2: EB1DCD321031C0290E00088B308F6E37F658F0F0.crl (hash: DPNIPrb8uwvD+HMErrNFP0XBhhVAcPiDHoGYSADOA0M=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/EB1DCD321031C0290E00088B308F6E37F658F0F0.crl
rsync://rpki-rsync.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/EB1DCD321031C0290E00088B308F6E37F658F0F0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EB1DCD321031C0290E00088B308F6E37F658F0F0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 21:07:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:4b:cd:8d:9e:78:18:47:8a:8e:86:94:b3:90:b4:6d:fe:09:72:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB1DCD321031C0290E00088B308F6E37F658F0F0
Validity
Not Before: Jul 23 20:40:19 2026 GMT
Not After : Jul 24 21:07:19 2026 GMT
Subject: CN=A8451FB7F90EA204F6C57EBCBD44AD03BBD5DEB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:33:c6:3d:3c:ab:e0:5a:20:61:cd:b9:b5:5f:
37:0b:9c:1e:d0:12:03:d0:79:8c:3f:1e:6d:b3:cd:
94:aa:ed:71:71:5a:e5:e8:ce:89:51:a2:32:b8:9d:
ed:c7:b6:b7:ab:07:fe:b2:ce:8d:46:63:08:b6:9c:
72:aa:a5:34:c2:68:7e:97:08:df:70:c8:79:19:8c:
a4:58:d9:ab:b8:a4:71:4a:fa:fc:0f:4e:62:d0:94:
b2:25:6c:d5:03:20:73:5a:1e:9b:db:f5:89:3b:87:
b0:3d:62:5b:e2:5d:a5:e6:c0:90:2b:21:03:00:ea:
c3:3e:c8:49:16:66:32:8e:7d:5a:4b:38:df:ee:5e:
d3:99:c0:0f:0a:d9:d3:58:ba:e0:57:38:e4:c5:46:
22:34:6e:82:35:a2:86:d3:08:85:59:fd:8d:35:51:
f0:e8:84:8e:82:40:bd:05:2c:ad:3c:21:6b:72:9f:
89:96:df:a4:e5:a5:e3:f3:32:6f:e1:f2:0d:a7:4a:
52:09:3c:64:85:05:bb:09:b4:cf:df:21:7e:f9:d8:
fa:07:f4:60:6e:69:2f:df:72:b5:26:48:b9:53:8b:
3e:0b:1c:4d:1d:bf:ce:69:59:a9:b2:97:da:50:d4:
f6:0c:7a:1c:87:6c:5b:c9:16:96:e3:f1:1a:92:a9:
23:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:45:1F:B7:F9:0E:A2:04:F6:C5:7E:BC:BD:44:AD:03:BB:D5:DE:B6
X509v3 Authority Key Identifier:
keyid:EB:1D:CD:32:10:31:C0:29:0E:00:08:8B:30:8F:6E:37:F6:58:F0:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/EB1DCD321031C0290E00088B308F6E37F658F0F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EB1DCD321031C0290E00088B308F6E37F658F0F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/EB1DCD321031C0290E00088B308F6E37F658F0F0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:32:e1:92:69:d4:2b:39:e7:6b:a5:64:fd:70:23:53:bd:c5:
3e:b9:c9:d0:3e:18:a6:91:7f:47:a2:51:49:90:e7:c9:1c:7f:
4b:b6:78:af:5e:95:aa:9b:8a:54:74:5d:03:fd:36:e8:ef:a7:
44:28:11:d6:e4:58:59:33:7b:04:2b:83:39:af:4d:7c:46:1c:
e6:5b:99:51:c9:4a:c3:d5:02:89:e2:05:27:9a:7c:e6:d8:8b:
69:fb:7c:d8:83:f5:03:13:4e:9c:8b:bb:4c:03:8e:d0:40:9c:
77:f9:ba:1d:ff:ac:61:8b:0e:85:d2:0d:d1:91:2a:e8:be:c8:
ed:f3:23:72:c5:f5:ea:ad:8f:11:96:1d:e7:45:b8:bf:0d:be:
53:46:9f:8d:7a:e4:2f:7b:21:4c:eb:d6:fd:b1:bd:9e:5b:1a:
50:8e:c9:47:4e:8b:90:db:ba:ea:26:df:f8:63:4a:a3:32:75:
8e:63:6a:7c:58:69:ea:34:84:0d:3a:c9:d0:23:1a:79:92:73:
a8:b4:22:66:56:6e:6e:45:45:d7:14:23:7c:9c:f6:98:5a:17:
2e:24:b4:7c:a7:ba:1f:aa:be:34:8c:5d:3d:8e:af:7f:30:da:
4d:eb:d1:7d:dc:3c:a7:06:4d:c8:d6:6e:e4:7b:ad:4f:36:88:
12:75:03:77
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUFEvNjZ54GEeKjoaUs5C0bf4JchAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUIxRENEMzIxMDMxQzAyOTBFMDAwODhCMzA4RjZFMzdG
NjU4RjBGMDAeFw0yNjA3MjMyMDQwMTlaFw0yNjA3MjQyMTA3MTlaMDMxMTAvBgNV
BAMTKEE4NDUxRkI3RjkwRUEyMDRGNkM1N0VCQ0JENDRBRDAzQkJENURFQjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyM8Y9PKvgWiBhzbm1XzcLnB7Q
EgPQeYw/Hm2zzZSq7XFxWuXozolRojK4ne3HtrerB/6yzo1GYwi2nHKqpTTCaH6X
CN9wyHkZjKRY2au4pHFK+vwPTmLQlLIlbNUDIHNaHpvb9Yk7h7A9YlviXaXmwJAr
IQMA6sM+yEkWZjKOfVpLON/uXtOZwA8K2dNYuuBXOOTFRiI0boI1oobTCIVZ/Y01
UfDohI6CQL0FLK08IWtyn4mW36TlpePzMm/h8g2nSlIJPGSFBbsJtM/fIX752PoH
9GBuaS/fcrUmSLlTiz4LHE0dv85pWamyl9pQ1PYMehyHbFvJFpbj8RqSqSMPAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUqEUft/kOogT2xX68vUStA7vV3rYwHwYDVR0j
BBgwFoAU6x3NMhAxwCkOAAiLMI9uN/ZY8PAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
N2NmMDFlYzYtOGU4OS00MDJhLTkwYzctNTBjNmYxNGNkMjQyLzAvRUIxRENEMzIx
MDMxQzAyOTBFMDAwODhCMzA4RjZFMzdGNjU4RjBGMC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC9FQjFEQ0QzMjEwMzFDMDI5MEUwMDA4OEIzMDhGNkUzN0Y2NThG
MEYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2NmMDFlYzYtOGU4OS00MDJhLTkw
YzctNTBjNmYxNGNkMjQyLzAvRUIxRENEMzIxMDMxQzAyOTBFMDAwODhCMzA4RjZF
MzdGNjU4RjBGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAA4y4ZJp1Cs552ulZP1wI1O9xT65ydA+GKaR
f0eiUUmQ58kcf0u2eK9elaqbilR0XQP9Nujvp0QoEdbkWFkzewQrgzmvTXxGHOZb
mVHJSsPVAoniBSeafObYi2n7fNiD9QMTTpyLu0wDjtBAnHf5uh3/rGGLDoXSDdGR
Kui+yO3zI3LF9eqtjxGWHedFuL8NvlNGn4165C97IUzr1v2xvZ5bGlCOyUdOi5Db
uuom3/hjSqMydY5janxYaeo0hA06ydAjGnmSc6i0ImZWbm5FRdcUI3yc9phaFy4k
tHynuh+qvjSMXT2Or38w2k3r0X3cPKcGTcjWbuR7rU82iBJ1A3c=
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:37:38 2026 by rpki-client