
$ rpki-client -vvf rpki-rsync.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/EB57B4A8B7DB581F45D8854952928F5926755B5D.mft
File: EB57B4A8B7DB581F45D8854952928F5926755B5D.mft (raw, json)
Hash identifier: wsUQvE4RAZwmx11fYtrLdK17KevfJ8cMzN4yz7h1vhY=
Subject key identifier: EC:17:71:D0:DA:2B:F7:EB:32:F9:02:F1:19:90:B7:A0:82:8E:88:E7
Authority key identifier: EB:57:B4:A8:B7:DB:58:1F:45:D8:85:49:52:92:8F:59:26:75:5B:5D
Certificate issuer: /CN=EB57B4A8B7DB581F45D8854952928F5926755B5D
Certificate serial: 08D67CC12D32E7C525019FCD647A895893DA44D1
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB57B4A8B7DB581F45D8854952928F5926755B5D.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/EB57B4A8B7DB581F45D8854952928F5926755B5D.mft
Manifest number: 70
Signing time: Fri 24 Jul 2026 02:11:57 +0000
Manifest this update: Fri 24 Jul 2026 02:06:57 +0000
Manifest next update: Sat 25 Jul 2026 02:37:57 +0000
Files and hashes: 1: 323030313a6466333a636634303a3a2f34382d3438203d3e20313532373536.roa (hash: jRiKTU/j+tIlx8UR6dB8nvnEvGokztihjDnumCFG4MY=)
2: EB57B4A8B7DB581F45D8854952928F5926755B5D.crl (hash: cTvQ99QBaGJBf/t1rdDzorRYA7eQEVsk2W5BHwoFFog=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/EB57B4A8B7DB581F45D8854952928F5926755B5D.crl
rsync://rpki-rsync.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/EB57B4A8B7DB581F45D8854952928F5926755B5D.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB57B4A8B7DB581F45D8854952928F5926755B5D.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 02:37:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:d6:7c:c1:2d:32:e7:c5:25:01:9f:cd:64:7a:89:58:93:da:44:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB57B4A8B7DB581F45D8854952928F5926755B5D
Validity
Not Before: Jul 24 02:06:57 2026 GMT
Not After : Jul 25 02:37:57 2026 GMT
Subject: CN=EC1771D0DA2BF7EB32F902F11990B7A0828E88E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1a:d3:b1:f2:6a:0c:c8:7e:4f:2e:b8:be:6a:
da:80:b0:10:d9:7d:b0:66:56:82:2f:7e:3b:17:23:
41:f7:20:2a:9d:81:dd:45:b5:2e:7f:2f:03:e1:d8:
35:db:52:79:c1:7d:f6:57:ad:57:60:7a:e7:db:ef:
75:2b:b4:15:32:a6:6b:27:9c:0b:25:01:60:69:37:
e9:4c:9b:90:a2:b3:fc:b9:69:5a:56:98:b4:59:12:
7a:f1:48:2b:cf:89:54:98:a1:c1:a4:a8:07:ec:cb:
50:9d:20:a4:78:8d:0c:71:e1:e5:cb:9a:52:93:54:
c4:26:58:98:1e:7b:46:2d:08:10:7f:98:c7:d1:f3:
31:e2:d4:3c:0d:cf:67:e6:48:c1:a7:97:74:70:d0:
a2:37:50:55:10:74:51:1d:63:1e:f5:8c:6b:ab:51:
03:57:6a:93:01:ec:23:e3:40:c0:52:2b:b4:4c:e2:
b2:32:43:45:c6:4d:32:f9:cf:2d:90:24:3e:63:c3:
a7:47:25:ad:19:92:27:16:6d:de:a0:79:c1:30:8c:
f3:b4:59:a3:f0:5c:c6:b0:5d:2e:fc:b4:22:0c:c0:
17:19:c5:f3:cf:88:46:38:ac:5e:ea:8d:02:b9:b5:
34:a0:f5:8d:dc:79:26:dc:50:1c:2f:51:c0:ae:8f:
57:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:17:71:D0:DA:2B:F7:EB:32:F9:02:F1:19:90:B7:A0:82:8E:88:E7
X509v3 Authority Key Identifier:
keyid:EB:57:B4:A8:B7:DB:58:1F:45:D8:85:49:52:92:8F:59:26:75:5B:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/EB57B4A8B7DB581F45D8854952928F5926755B5D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB57B4A8B7DB581F45D8854952928F5926755B5D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/EB57B4A8B7DB581F45D8854952928F5926755B5D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:99:a1:d3:f1:ef:b6:6b:71:81:ab:ac:15:b6:48:0c:c0:71:
10:1d:52:44:36:c1:e6:22:70:2e:dd:e8:7f:21:66:9e:b5:46:
aa:ed:ce:9c:8b:d7:12:d7:30:e9:54:1b:fd:07:89:12:15:b3:
ca:fd:d8:ea:43:d5:f0:7c:e5:2b:13:01:b0:74:2e:82:b3:0f:
8f:57:1c:1e:ce:a6:17:b2:0f:39:ef:f4:d5:65:b7:20:ba:69:
6d:1a:f4:f6:6b:5d:77:0f:8c:d4:88:05:70:5c:f9:e8:60:0f:
24:87:00:76:ca:1f:bc:f7:a0:73:1b:5e:d0:a9:41:a5:a4:d9:
50:03:3b:30:eb:6f:c2:ca:29:20:a2:89:10:b8:3a:38:39:66:
4d:78:b1:23:29:0f:c7:35:82:d7:79:af:b6:f0:86:56:a6:a1:
b8:6b:7a:7b:71:2d:61:5f:fb:67:28:81:53:7c:d4:78:92:0b:
8b:95:af:ec:0f:68:ed:4d:bc:a2:0e:51:63:18:24:bb:7c:93:
a4:68:d0:43:cf:66:7d:ca:ee:7b:ff:22:f3:a4:b3:dd:39:3e:
97:ff:70:b3:94:d6:62:9f:a5:61:79:77:23:5e:39:50:34:5d:
62:c7:7e:c9:4e:e5:78:a7:5b:24:05:ba:08:27:34:72:41:95:
58:8f:94:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:02:21 2026 by rpki-client