
$ rpki-client -vvf rpki-rsync.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/EB1A7EE539E6F1EFA3D30C62149C265EBF30B537.mft
File: EB1A7EE539E6F1EFA3D30C62149C265EBF30B537.mft (raw, json)
Hash identifier: 9DW8I9Db/L3TK5hv6MFUobkW5AdO523/cTG7a6Epu7c=
Subject key identifier: FD:6D:6D:8E:02:52:EF:C0:8C:F4:EA:B9:0B:6D:FD:F4:AE:D0:A8:FD
Authority key identifier: EB:1A:7E:E5:39:E6:F1:EF:A3:D3:0C:62:14:9C:26:5E:BF:30:B5:37
Certificate issuer: /CN=EB1A7EE539E6F1EFA3D30C62149C265EBF30B537
Certificate serial: 1916C914F61DCE68D484B41DC4C2819266527B0D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB1A7EE539E6F1EFA3D30C62149C265EBF30B537.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/EB1A7EE539E6F1EFA3D30C62149C265EBF30B537.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 20:17:01 +0000
Manifest this update: Tue 12 May 2026 20:12:01 +0000
Manifest next update: Wed 13 May 2026 22:37:01 +0000
Files and hashes: 1: 3130332e3235352e3130382e302f32332d3233203d3e20313430343233.roa (hash: lD4ekQjYWJEX/+XteQDNEzLVrijnUKOpZR8eykHExcM=)
2: EB1A7EE539E6F1EFA3D30C62149C265EBF30B537.crl (hash: j7V48tw4plK4HloT5pwPExxK3f3QWnRyilZtJUUA4hE=)
3: 3130332e3235352e3130392e302f32342d3234203d3e20313530313931.roa (hash: BsPXa+UOut2Mbb+7M0ct2qI2C2+ME889eZGuggOi820=)
4: 3130332e3235352e3130382e302f32342d3234203d3e20313437313530.roa (hash: ePjyykmLAPcuoIW4PxvnsIf6Mnk1VG8I5wQF6R8ChtM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/EB1A7EE539E6F1EFA3D30C62149C265EBF30B537.crl
rsync://rpki-rsync.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/EB1A7EE539E6F1EFA3D30C62149C265EBF30B537.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB1A7EE539E6F1EFA3D30C62149C265EBF30B537.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 22:37:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:16:c9:14:f6:1d:ce:68:d4:84:b4:1d:c4:c2:81:92:66:52:7b:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB1A7EE539E6F1EFA3D30C62149C265EBF30B537
Validity
Not Before: May 12 20:12:01 2026 GMT
Not After : May 13 22:37:01 2026 GMT
Subject: CN=FD6D6D8E0252EFC08CF4EAB90B6DFDF4AED0A8FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c7:f1:ef:71:1d:2d:06:93:9f:7b:41:c3:f2:
09:0d:d6:a7:46:ef:54:42:b6:02:0c:d7:38:7a:4e:
17:18:4a:cb:e4:81:b4:a4:4b:fc:cf:5a:f1:76:38:
b6:83:93:15:58:3e:bf:48:df:19:94:2d:05:ed:ec:
7a:34:fe:3c:c0:3f:af:ce:14:dc:eb:4d:8a:40:05:
0b:e8:e9:48:ed:64:74:82:a1:98:c9:ad:95:7b:a3:
fe:9a:b0:18:e0:71:66:b3:dc:cd:4d:9e:f4:39:95:
06:40:37:0f:d7:73:ef:a8:a2:4e:f3:a7:af:d1:95:
cd:a4:b2:c9:64:21:f2:1c:87:b8:7b:d2:5d:be:38:
bd:ab:d9:c7:02:c5:f1:aa:40:08:6c:d0:e7:96:b4:
86:d0:35:07:60:8d:42:7d:3b:e7:27:1e:f0:7e:bf:
a0:98:04:43:56:32:fe:da:87:2a:b8:6b:e4:5f:05:
68:5e:b7:31:42:88:fe:38:03:fb:8b:24:bc:af:5a:
17:fe:f7:5f:18:91:1c:6f:fb:20:6c:25:fb:bf:fd:
31:8b:7a:a4:98:aa:5a:6e:a0:6e:54:a7:5c:40:6c:
15:2b:fc:f6:80:eb:60:8d:7d:fd:08:1e:00:13:b3:
f4:c9:de:29:19:89:d2:c1:17:f0:31:ff:7a:ad:b2:
bb:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:6D:6D:8E:02:52:EF:C0:8C:F4:EA:B9:0B:6D:FD:F4:AE:D0:A8:FD
X509v3 Authority Key Identifier:
keyid:EB:1A:7E:E5:39:E6:F1:EF:A3:D3:0C:62:14:9C:26:5E:BF:30:B5:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/EB1A7EE539E6F1EFA3D30C62149C265EBF30B537.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB1A7EE539E6F1EFA3D30C62149C265EBF30B537.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/EB1A7EE539E6F1EFA3D30C62149C265EBF30B537.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:e7:66:4c:5a:fc:ac:2e:5c:c6:c0:bb:4f:65:1a:3d:cf:69:
ea:1a:92:35:d0:79:ba:38:74:15:81:74:83:06:a1:55:37:8b:
4c:6f:d0:ad:55:ac:05:6c:05:1c:4f:4d:cb:43:bb:58:16:c2:
10:02:16:db:a9:cb:07:28:45:60:0a:51:f3:3a:3b:5b:db:a4:
ff:97:53:46:c4:9d:bb:7d:33:e1:6a:7d:5b:14:b0:58:8f:a2:
0d:9c:0e:64:42:e9:3f:54:a5:da:d7:b2:00:c8:4f:d4:be:d4:
26:2b:c6:54:a1:d0:fe:c4:6d:0a:16:9c:89:c2:af:fe:7f:b2:
1d:9c:10:96:d6:7b:6c:45:d7:32:a2:e1:cc:2f:d5:dd:d2:20:
21:0d:1f:02:c2:7d:c6:4b:5d:fd:50:5c:83:b7:9d:e6:4a:b5:
05:0d:44:09:44:b4:79:c2:c7:dd:f9:a6:ce:65:66:63:41:18:
21:84:d5:60:8a:88:90:a4:26:6b:8f:e4:32:4f:90:f3:df:1f:
db:c4:cf:8c:33:dd:eb:2a:53:d2:43:dd:fa:db:bd:ee:f3:01:
2b:6e:33:d3:96:a8:de:2a:4b:f0:68:a0:28:28:a5:3a:f0:a0:
2b:0a:25:dc:3c:9f:72:61:9f:6a:4e:92:59:28:f9:c9:40:a1:
a5:c0:6f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:54:00 2026 by rpki-client