
$ rpki-client -vvf rpki-rsync.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/EA69EE1870C74C4198176D679D2040962AA65EE5.mft
File: EA69EE1870C74C4198176D679D2040962AA65EE5.mft (raw, json)
Hash identifier: gnhO0rxISkQblxCWg8W2t3EZqick1ay2amg913x2Gxs=
Subject key identifier: 4F:B3:B8:36:B4:2D:67:52:86:5E:67:22:11:2A:23:11:5B:B6:E9:6C
Authority key identifier: EA:69:EE:18:70:C7:4C:41:98:17:6D:67:9D:20:40:96:2A:A6:5E:E5
Certificate issuer: /CN=EA69EE1870C74C4198176D679D2040962AA65EE5
Certificate serial: 024089CBA8EC9FA1E80F6F9885C3B78DA50AB110
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA69EE1870C74C4198176D679D2040962AA65EE5.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/EA69EE1870C74C4198176D679D2040962AA65EE5.mft
Manifest number: 6E
Signing time: Fri 24 Jul 2026 03:23:28 +0000
Manifest this update: Fri 24 Jul 2026 03:18:28 +0000
Manifest next update: Sat 25 Jul 2026 06:32:28 +0000
Files and hashes: 1: 3130332e3134362e3132382e302f32332d3233203d3e20313430303238.roa (hash: 27RMiTZ9x6jfj6rn7+g1KMgItqjflbCMRzo3ncDyIag=)
2: 3130332e3134362e3132382e302f32342d3234203d3e20313430303238.roa (hash: xmNTgE8NlEgdxtkyZzmV8vhuvBfxhNKdp0Qma8cQHQ4=)
3: EA69EE1870C74C4198176D679D2040962AA65EE5.crl (hash: Fw567DVOH5sWMlPyFkFR+4yIF6csZmv1Ys5UqiN7TPM=)
4: 3130332e3134362e3132392e302f32342d3234203d3e20313430303238.roa (hash: JdS3onh/UNwTa6fbUAQVIX7szlwvK4Q8vIPtVeKS+NU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/EA69EE1870C74C4198176D679D2040962AA65EE5.crl
rsync://rpki-rsync.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/EA69EE1870C74C4198176D679D2040962AA65EE5.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA69EE1870C74C4198176D679D2040962AA65EE5.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 06:32:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:40:89:cb:a8:ec:9f:a1:e8:0f:6f:98:85:c3:b7:8d:a5:0a:b1:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EA69EE1870C74C4198176D679D2040962AA65EE5
Validity
Not Before: Jul 24 03:18:28 2026 GMT
Not After : Jul 25 06:32:28 2026 GMT
Subject: CN=4FB3B836B42D6752865E6722112A23115BB6E96C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:63:16:a6:84:b0:a7:1a:95:5f:3f:de:22:5e:
4f:42:fe:92:ad:e9:43:15:9d:f0:60:a3:a6:93:70:
c6:bd:f3:43:c5:be:5e:af:f4:14:ea:0c:ad:5c:6c:
70:e1:c3:c7:4f:7a:f7:cc:b9:b5:ce:6e:93:09:1e:
7c:1f:1c:4c:a9:8b:92:0a:c2:38:81:6b:f4:93:f8:
89:a6:a9:6d:fd:98:59:c1:7c:d9:c5:c7:cc:95:c3:
ad:d0:31:f6:42:de:dc:79:93:c4:ac:50:ed:f6:a3:
6f:69:9d:4e:19:08:c8:fb:c6:c3:1e:43:3b:f7:c5:
0d:5e:86:01:09:a9:9c:63:3e:56:b7:30:d5:39:5d:
e5:44:40:39:ff:85:cd:58:90:ca:e1:7b:cb:ee:e2:
00:e3:65:f1:cd:75:11:90:7a:9c:45:51:61:8d:96:
22:98:81:ca:e3:34:82:68:9c:85:a3:3a:da:8a:c4:
8b:40:3e:fc:ef:cf:81:7d:c0:bb:2a:c4:9f:e8:dd:
1d:2b:d3:ad:84:4b:c5:5c:ab:59:97:6f:5b:5e:07:
ee:84:6d:15:b6:eb:9f:16:fe:71:34:00:38:c8:20:
f3:2c:22:19:84:11:f5:f0:3c:15:b8:a2:83:78:e9:
44:12:bd:8a:04:6b:49:ea:22:6d:44:30:0d:4a:f1:
fb:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:B3:B8:36:B4:2D:67:52:86:5E:67:22:11:2A:23:11:5B:B6:E9:6C
X509v3 Authority Key Identifier:
keyid:EA:69:EE:18:70:C7:4C:41:98:17:6D:67:9D:20:40:96:2A:A6:5E:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/EA69EE1870C74C4198176D679D2040962AA65EE5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA69EE1870C74C4198176D679D2040962AA65EE5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/EA69EE1870C74C4198176D679D2040962AA65EE5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:a2:86:c3:e0:84:d9:15:f7:4d:75:18:71:40:9d:d2:88:22:
27:20:06:17:60:7e:1b:06:e0:94:35:e2:01:17:1e:8b:63:32:
d2:28:50:11:f0:cf:83:ac:08:fe:c5:fd:51:02:a7:a7:0a:15:
bf:0d:2c:75:35:99:42:af:2b:98:52:dd:b5:ba:ae:a1:e3:46:
43:13:ef:6d:7c:20:ff:b9:1f:f9:72:46:1d:55:1a:17:b8:5b:
1a:6f:2d:8b:6f:5e:9d:b4:f0:b2:7b:25:d1:c6:11:2d:bb:d1:
11:f8:bb:7e:21:58:07:16:3e:e7:24:73:48:43:25:15:14:05:
e6:05:fc:bf:be:e9:be:76:a6:c5:0a:27:24:81:5a:f0:84:00:
44:91:14:39:1b:c4:40:25:15:66:5c:17:fa:4f:ab:cf:50:2e:
44:4a:a1:7e:cd:db:7a:77:3d:e3:b7:c8:c6:c6:10:36:b5:a8:
70:fa:44:63:1c:00:b7:49:55:f6:a0:22:38:dc:5c:d4:b2:fa:
67:55:fe:8c:05:4e:15:f0:43:29:1b:aa:f4:7f:d6:67:f0:86:
15:26:61:9f:97:30:4a:89:ff:4f:38:3c:62:2c:95:df:a2:06:
fe:a2:9d:ef:6d:a1:c9:b8:ec:88:ad:2e:16:12:0d:12:f3:a9:
92:4c:32:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:16:34 2026 by rpki-client