
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c76c7825-8b3d-466c-ba0c-99553c1d73ea/0/EEB70538199D447E9C92F6547EB45B40E5762DCF.mft
File: EEB70538199D447E9C92F6547EB45B40E5762DCF.mft (raw, json)
Hash identifier: 3RM6OQzntGdIBwVi3fthFeBjlnn+v6FHHvKrY6B5rgA=
Subject key identifier: 12:34:95:F3:B1:83:69:D4:A1:D4:0E:90:CF:02:D6:83:70:E0:81:1A
Authority key identifier: EE:B7:05:38:19:9D:44:7E:9C:92:F6:54:7E:B4:5B:40:E5:76:2D:CF
Certificate issuer: /CN=EEB70538199D447E9C92F6547EB45B40E5762DCF
Certificate serial: 09715B4603C100E94E4B907CF09366F405F6EC5D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EEB70538199D447E9C92F6547EB45B40E5762DCF.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c76c7825-8b3d-466c-ba0c-99553c1d73ea/0/EEB70538199D447E9C92F6547EB45B40E5762DCF.mft
Manifest number: 6E
Signing time: Thu 23 Jul 2026 14:27:40 +0000
Manifest this update: Thu 23 Jul 2026 14:22:40 +0000
Manifest next update: Fri 24 Jul 2026 18:04:40 +0000
Files and hashes: 1: 3130332e372e3130352e302f32342d3234203d3e20313531353933.roa (hash: dmYYEZ8QZwPKYE6vCrbxSUxZzCU8Re2LNJQ4nrlJQ94=)
2: 3130332e372e3130342e302f32342d3234203d3e20313531353933.roa (hash: B00llEOl+Xcrvf7jG7vXFkd1/vFdQcRM2H7X7JWrIjI=)
3: EEB70538199D447E9C92F6547EB45B40E5762DCF.crl (hash: tlyuASeEOqEIVShnozM68qw2cbjgCSHZo8MKmUmcKO0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c76c7825-8b3d-466c-ba0c-99553c1d73ea/0/EEB70538199D447E9C92F6547EB45B40E5762DCF.crl
rsync://rpki-rsync.idnic.net/repo/c76c7825-8b3d-466c-ba0c-99553c1d73ea/0/EEB70538199D447E9C92F6547EB45B40E5762DCF.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EEB70538199D447E9C92F6547EB45B40E5762DCF.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 18:04:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:71:5b:46:03:c1:00:e9:4e:4b:90:7c:f0:93:66:f4:05:f6:ec:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EEB70538199D447E9C92F6547EB45B40E5762DCF
Validity
Not Before: Jul 23 14:22:40 2026 GMT
Not After : Jul 24 18:04:40 2026 GMT
Subject: CN=123495F3B18369D4A1D40E90CF02D68370E0811A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:1b:7b:14:84:58:6b:04:55:c5:de:a2:cd:7f:
f8:0d:0d:96:be:6a:a0:df:c5:8d:28:64:7c:bb:38:
09:f4:09:ab:d7:06:56:b0:e3:7f:c8:09:c2:e2:c9:
16:cf:23:43:27:a0:f0:f4:ba:30:29:46:14:a2:11:
a3:84:43:1c:61:de:12:e6:32:8e:5f:44:10:2a:c0:
9f:15:f1:78:42:64:21:b9:c9:ed:20:d1:ef:ef:0a:
de:fe:49:23:f7:ab:4a:73:e8:33:30:da:83:67:b7:
27:fe:52:ad:81:7a:cc:23:17:d3:72:cf:76:f3:69:
8e:0e:54:7d:bf:d9:01:42:c7:76:30:57:3c:8e:0d:
7f:2f:4b:d2:6c:e7:5c:68:3d:c0:de:eb:41:92:ba:
5a:a3:49:47:52:74:e9:bf:c1:34:77:dc:24:2e:83:
e2:99:6d:d1:06:64:62:81:68:49:7d:9a:f6:a5:90:
af:2c:20:09:ce:cf:ae:d6:f2:15:0c:bd:c7:23:bd:
3f:75:41:eb:36:fb:6f:cd:15:46:0e:03:85:9a:4f:
a0:16:9b:f8:50:79:b7:70:04:db:10:76:89:4d:53:
bf:d8:09:db:83:b6:1a:02:c7:62:e3:bc:4f:f6:e2:
03:ea:5f:8c:00:0a:78:f8:d8:c7:5d:88:71:a1:7c:
e5:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:34:95:F3:B1:83:69:D4:A1:D4:0E:90:CF:02:D6:83:70:E0:81:1A
X509v3 Authority Key Identifier:
keyid:EE:B7:05:38:19:9D:44:7E:9C:92:F6:54:7E:B4:5B:40:E5:76:2D:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c76c7825-8b3d-466c-ba0c-99553c1d73ea/0/EEB70538199D447E9C92F6547EB45B40E5762DCF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EEB70538199D447E9C92F6547EB45B40E5762DCF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c76c7825-8b3d-466c-ba0c-99553c1d73ea/0/EEB70538199D447E9C92F6547EB45B40E5762DCF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:64:ee:8f:53:4d:1f:1c:9b:2c:4a:9f:86:44:be:ee:b5:cd:
03:88:70:07:bd:8b:34:1f:92:f7:b4:97:10:0f:96:92:f4:93:
d7:8f:6d:2a:2d:8b:b4:7f:12:6b:ef:00:b9:64:9c:e4:5b:15:
41:b2:55:50:78:d3:2e:6a:75:a1:74:64:f6:0d:13:10:b1:00:
27:df:f9:df:90:9c:d7:ef:80:3b:19:40:07:67:fc:53:f2:26:
df:aa:16:da:cc:68:fd:61:6e:42:a0:96:ec:fe:f1:ed:6e:9b:
63:a5:2b:5a:19:eb:1a:9a:38:2c:1c:71:3e:f3:8f:95:18:48:
10:d4:6e:33:30:eb:57:ec:09:8f:67:8c:71:98:46:4a:f6:6b:
41:e7:19:01:cb:cb:27:fd:ec:db:dc:b2:8e:0a:5f:cc:f6:6e:
bd:a9:fb:b1:b6:40:06:2d:9e:a2:ce:0b:2e:24:49:76:3a:fa:
c1:a3:52:bb:8a:2b:e4:4e:a4:a1:6a:35:27:e1:92:4f:0a:f4:
0b:74:c9:11:82:36:d5:36:7c:02:64:c0:43:f4:5e:4b:0a:31:
a6:fa:81:c7:00:d4:59:c3:45:3e:ad:4d:57:24:6e:9c:fe:e2:
c5:5d:cc:7b:ab:be:cb:da:05:47:71:e3:6d:b4:f9:a6:b3:a0:
a2:bc:b6:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:16:42 2026 by rpki-client