
$ rpki-client -vvf rpki-rsync.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/EB1A7EE539E6F1EFA3D30C62149C265EBF30B537.mft
File: EB1A7EE539E6F1EFA3D30C62149C265EBF30B537.mft (raw, json)
Hash identifier: iHGCrqJ4KhmQiSNzmBMHBz2URPKHpFRQgrDntublgj0=
Subject key identifier: 10:FE:FA:C3:F0:56:BF:CC:37:6A:9D:14:1E:15:D8:7F:59:11:99:92
Authority key identifier: EB:1A:7E:E5:39:E6:F1:EF:A3:D3:0C:62:14:9C:26:5E:BF:30:B5:37
Certificate issuer: /CN=EB1A7EE539E6F1EFA3D30C62149C265EBF30B537
Certificate serial: 5FB9D530A2C07F6FF2E549D55E1B608652F45AE2
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB1A7EE539E6F1EFA3D30C62149C265EBF30B537.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/EB1A7EE539E6F1EFA3D30C62149C265EBF30B537.mft
Manifest number: 6F
Signing time: Fri 24 Jul 2026 02:27:14 +0000
Manifest this update: Fri 24 Jul 2026 02:22:14 +0000
Manifest next update: Sat 25 Jul 2026 05:30:14 +0000
Files and hashes: 1: 3130332e3235352e3130382e302f32342d3234203d3e20313437313530.roa (hash: ePjyykmLAPcuoIW4PxvnsIf6Mnk1VG8I5wQF6R8ChtM=)
2: EB1A7EE539E6F1EFA3D30C62149C265EBF30B537.crl (hash: opq76DWZBGMSuMGIwrQzLPM/cGTW8RKTEhwHwe4CIZA=)
3: 3130332e3235352e3130392e302f32342d3234203d3e20313530313931.roa (hash: BsPXa+UOut2Mbb+7M0ct2qI2C2+ME889eZGuggOi820=)
4: 3130332e3235352e3130382e302f32332d3233203d3e20313430343233.roa (hash: lD4ekQjYWJEX/+XteQDNEzLVrijnUKOpZR8eykHExcM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/EB1A7EE539E6F1EFA3D30C62149C265EBF30B537.crl
rsync://rpki-rsync.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/EB1A7EE539E6F1EFA3D30C62149C265EBF30B537.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB1A7EE539E6F1EFA3D30C62149C265EBF30B537.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 05:30:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:b9:d5:30:a2:c0:7f:6f:f2:e5:49:d5:5e:1b:60:86:52:f4:5a:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB1A7EE539E6F1EFA3D30C62149C265EBF30B537
Validity
Not Before: Jul 24 02:22:14 2026 GMT
Not After : Jul 25 05:30:14 2026 GMT
Subject: CN=10FEFAC3F056BFCC376A9D141E15D87F59119992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:55:6f:21:1e:aa:df:1e:f3:b6:5e:01:22:79:
a5:81:72:f0:06:bb:b1:20:38:d5:a8:28:fa:71:c8:
85:cf:21:fb:1a:fd:2e:a2:73:f3:16:54:1d:f9:45:
c2:d1:55:6d:f1:b2:2c:c2:1c:cb:a0:aa:5f:f6:7f:
d1:41:b4:13:7f:4d:cb:e8:e2:00:9d:23:bb:2d:83:
95:a0:d1:63:46:04:af:1f:fe:58:ac:18:9f:b6:24:
2b:13:02:5c:48:c0:eb:82:d9:85:7b:ea:7c:4a:ad:
68:e2:0c:23:6d:8d:c5:ff:01:9e:2b:cd:65:1a:8e:
96:17:36:2e:6b:e3:45:81:73:e8:13:75:ba:8a:1b:
00:a1:96:80:c4:96:9b:44:38:ef:7a:20:f5:98:e0:
4f:83:c3:5e:b5:f3:9a:d9:22:1a:5b:9a:e4:51:94:
2c:6e:a7:ed:5d:dd:d7:f5:eb:11:2e:44:b9:ed:5a:
e3:9b:f9:68:c9:2f:83:f4:91:a3:8c:b6:a3:1a:06:
89:06:23:3a:aa:d7:89:ee:90:38:c7:e9:39:0e:2f:
86:4c:92:f7:73:7a:30:92:c3:a3:f2:6e:39:b0:e4:
8d:5e:59:7c:73:20:9e:25:49:d5:7c:09:a8:ea:a9:
28:65:45:77:91:e1:91:5b:e8:79:91:7c:87:eb:e1:
40:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:FE:FA:C3:F0:56:BF:CC:37:6A:9D:14:1E:15:D8:7F:59:11:99:92
X509v3 Authority Key Identifier:
keyid:EB:1A:7E:E5:39:E6:F1:EF:A3:D3:0C:62:14:9C:26:5E:BF:30:B5:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/EB1A7EE539E6F1EFA3D30C62149C265EBF30B537.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB1A7EE539E6F1EFA3D30C62149C265EBF30B537.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/EB1A7EE539E6F1EFA3D30C62149C265EBF30B537.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:3d:63:7f:79:6a:49:d1:ad:dd:b6:35:ac:7b:b8:19:e9:cc:
bb:0f:91:ef:ae:71:23:6b:2d:34:23:4e:7f:75:b5:79:69:02:
fa:db:ef:7e:ec:bc:ae:e6:cb:60:34:7d:23:9d:ee:b4:2c:62:
f2:f1:36:e8:93:99:73:51:02:80:1c:66:e7:ac:de:33:86:67:
26:4f:c7:49:c8:66:21:4c:4e:8e:47:49:4c:d3:1a:f0:50:fa:
48:7f:ab:7f:35:a5:13:71:a4:18:92:af:7b:26:4e:b8:9e:1d:
f7:cd:06:77:13:91:59:23:99:08:a7:80:6e:24:36:e7:23:fb:
4a:f2:d1:51:8b:df:a5:7e:f2:53:48:4d:b2:67:e2:cb:cc:81:
20:b5:9b:70:9d:ff:c0:14:98:62:6f:d0:fb:46:7a:6b:46:96:
66:bd:d2:99:4a:c8:51:0d:b9:f8:09:a3:1c:9f:f9:ca:bf:c0:
96:c8:a4:68:45:14:0d:6d:84:ba:4f:ae:0b:9c:89:38:72:7c:
38:2f:84:de:41:cd:95:70:49:a3:dd:2d:ae:1b:bd:51:6b:71:
d1:e4:bb:70:ed:8e:90:31:db:7f:b2:51:11:f1:af:9e:e1:92:
a7:5c:5c:d8:4c:0e:7e:80:31:f0:69:26:d3:e0:b3:46:3a:cd:
2c:fc:49:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:12:02 2026 by rpki-client