
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/EE751CDC39E47304C1EE51EDF5BC3FDAD0F09B86.mft
File: EE751CDC39E47304C1EE51EDF5BC3FDAD0F09B86.mft (raw, json)
Hash identifier: UEU1a2RGwpMDOiyU9aaJdHJDH3V7Zffc/rtbYcDkNkg=
Subject key identifier: F1:92:9D:B4:F2:06:D7:E6:35:EA:8B:0A:1E:6C:B5:CA:CB:4F:B4:CE
Authority key identifier: EE:75:1C:DC:39:E4:73:04:C1:EE:51:ED:F5:BC:3F:DA:D0:F0:9B:86
Certificate issuer: /CN=EE751CDC39E47304C1EE51EDF5BC3FDAD0F09B86
Certificate serial: 4B644C3A2C97B244C83F9B6E8EA1F430D7E29FE4
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE751CDC39E47304C1EE51EDF5BC3FDAD0F09B86.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/EE751CDC39E47304C1EE51EDF5BC3FDAD0F09B86.mft
Manifest number: 70
Signing time: Thu 23 Jul 2026 18:32:41 +0000
Manifest this update: Thu 23 Jul 2026 18:27:41 +0000
Manifest next update: Fri 24 Jul 2026 22:08:41 +0000
Files and hashes: 1: 3130332e3134342e3132382e302f32332d3233203d3e20313339343333.roa (hash: GBcRuzH/ztafVHYfLj8zgAdxKdzjxCNZd7fnXHiG9vg=)
2: 3130332e3134342e3132382e302f32342d3234203d3e20313339343333.roa (hash: eZi9ISEjkgP+V5NS/n2oQzmQLoX5n67xR1RnUMkogyM=)
3: EE751CDC39E47304C1EE51EDF5BC3FDAD0F09B86.crl (hash: pNTAlvZvEutmYOFE1Rl1tpDmQIPA/WffOGHR45NFXzU=)
4: 3130332e3134342e3132392e302f32342d3234203d3e20313339343333.roa (hash: k8ZBZmDfwahDdiPq/8ia7mwFYTF8XR9bC0fS3/OJdMM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/EE751CDC39E47304C1EE51EDF5BC3FDAD0F09B86.crl
rsync://rpki-rsync.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/EE751CDC39E47304C1EE51EDF5BC3FDAD0F09B86.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE751CDC39E47304C1EE51EDF5BC3FDAD0F09B86.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 22:08:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:64:4c:3a:2c:97:b2:44:c8:3f:9b:6e:8e:a1:f4:30:d7:e2:9f:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE751CDC39E47304C1EE51EDF5BC3FDAD0F09B86
Validity
Not Before: Jul 23 18:27:41 2026 GMT
Not After : Jul 24 22:08:41 2026 GMT
Subject: CN=F1929DB4F206D7E635EA8B0A1E6CB5CACB4FB4CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f1:3d:2e:bb:04:a7:54:fb:97:18:8f:2e:fe:
de:89:e7:7e:fe:e4:1a:8c:1b:2d:f7:8a:73:4c:ed:
a9:da:a8:31:99:60:a6:58:ec:1f:a1:56:50:11:ec:
93:23:73:95:da:75:90:5b:67:4d:57:51:4a:0e:d8:
50:63:e1:17:2c:ac:33:84:20:a7:df:b1:54:42:d7:
59:f2:a8:d7:36:47:2a:ba:6a:e0:5a:07:b6:12:d2:
af:68:f0:3a:c4:22:1a:63:5b:98:99:dc:f6:65:e6:
4a:4a:42:1b:49:9e:54:83:e0:96:96:7f:8c:f0:07:
9d:de:a4:63:2e:c8:dc:3f:c3:7a:cb:48:8e:25:ec:
59:6e:34:4d:05:a6:12:81:de:a9:2d:3b:81:ca:fd:
79:a7:3f:b2:6e:ba:e3:f2:0b:0d:5c:f2:4c:e9:75:
6d:f2:40:6a:cf:dd:0b:59:b1:91:56:de:a2:24:86:
0c:5d:90:1c:dd:23:a4:3e:91:5c:ed:04:0d:e7:22:
e3:b1:fc:4e:51:eb:7b:d9:86:dd:7f:5d:26:c8:51:
b9:6d:5f:50:a2:e6:b5:40:75:46:42:5d:b7:18:ce:
c0:24:f2:ba:aa:45:da:0b:60:08:68:f1:ca:b7:74:
c4:23:6d:32:9f:b9:7d:b2:62:b9:28:38:86:63:0f:
47:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:92:9D:B4:F2:06:D7:E6:35:EA:8B:0A:1E:6C:B5:CA:CB:4F:B4:CE
X509v3 Authority Key Identifier:
keyid:EE:75:1C:DC:39:E4:73:04:C1:EE:51:ED:F5:BC:3F:DA:D0:F0:9B:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/EE751CDC39E47304C1EE51EDF5BC3FDAD0F09B86.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE751CDC39E47304C1EE51EDF5BC3FDAD0F09B86.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/EE751CDC39E47304C1EE51EDF5BC3FDAD0F09B86.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:a4:70:8b:06:42:f3:ad:9a:f0:2e:fe:8b:30:c9:11:38:9b:
95:00:af:55:8c:50:35:e1:5b:cf:d0:09:83:bf:8c:d5:2b:40:
53:03:b4:81:de:55:4d:a1:90:61:2f:28:e1:cf:4a:c3:75:90:
32:22:ac:0b:14:d0:71:b2:2e:50:ba:6d:ea:6e:80:63:48:87:
4f:49:0e:37:81:a7:f8:3e:51:e5:17:ef:d6:0e:6b:cf:b9:46:
11:db:fe:69:81:0f:18:5b:a5:d8:c0:5f:24:be:b2:c4:a6:99:
08:23:54:7d:8e:74:7a:af:c8:0e:2e:f2:86:c4:90:bc:97:de:
c4:99:b5:9e:ff:62:18:0f:99:16:c3:81:a1:f1:7b:dd:48:00:
86:cb:80:41:b4:32:de:be:79:8a:6c:1a:36:e2:e2:48:34:53:
66:a8:6b:18:1c:06:9b:ec:1c:3b:cf:77:d9:ab:35:0a:57:49:
29:6b:c6:a8:e2:d2:2c:bf:7c:2c:e7:44:75:67:18:b2:ea:08:
65:07:a3:54:3a:79:72:de:5d:49:45:c7:b2:2d:7f:2b:62:a9:
7d:fc:8f:a3:3b:a7:f4:a2:f1:09:c1:ae:68:dd:4e:cf:70:10:
51:9d:91:55:33:63:71:d0:9d:50:49:73:4b:f7:1d:fe:10:58:
3b:3e:7f:75
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUS2RMOiyXskTIP5tujqH0MNfin+QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU3NTFDREMzOUU0NzMwNEMxRUU1MUVERjVCQzNGREFE
MEYwOUI4NjAeFw0yNjA3MjMxODI3NDFaFw0yNjA3MjQyMjA4NDFaMDMxMTAvBgNV
BAMTKEYxOTI5REI0RjIwNkQ3RTYzNUVBOEIwQTFFNkNCNUNBQ0I0RkI0Q0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh8T0uuwSnVPuXGI8u/t6J537+
5BqMGy33inNM7anaqDGZYKZY7B+hVlAR7JMjc5XadZBbZ01XUUoO2FBj4RcsrDOE
IKffsVRC11nyqNc2Ryq6auBaB7YS0q9o8DrEIhpjW5iZ3PZl5kpKQhtJnlSD4JaW
f4zwB53epGMuyNw/w3rLSI4l7FluNE0FphKB3qktO4HK/XmnP7JuuuPyCw1c8kzp
dW3yQGrP3QtZsZFW3qIkhgxdkBzdI6Q+kVztBA3nIuOx/E5R63vZht1/XSbIUblt
X1Ci5rVAdUZCXbcYzsAk8rqqRdoLYAho8cq3dMQjbTKfuX2yYrkoOIZjD0dPAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU8ZKdtPIG1+Y16osKHmy1ystPtM4wHwYDVR0j
BBgwFoAU7nUc3DnkcwTB7lHt9bw/2tDwm4YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
Y2E5NmY0NTgtY2U1ZS00MWEyLWEyMzItOTk2NGY0OTg4YTA2LzAvRUU3NTFDREMz
OUU0NzMwNEMxRUU1MUVERjVCQzNGREFEMEYwOUI4Ni5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FRTc1MUNEQzM5RTQ3MzA0QzFFRTUxRURGNUJDM0ZEQUQwRjA5
Qjg2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2E5NmY0NTgtY2U1ZS00MWEyLWEy
MzItOTk2NGY0OTg4YTA2LzAvRUU3NTFDREMzOUU0NzMwNEMxRUU1MUVERjVCQzNG
REFEMEYwOUI4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAG6kcIsGQvOtmvAu/oswyRE4m5UAr1WMUDXh
W8/QCYO/jNUrQFMDtIHeVU2hkGEvKOHPSsN1kDIirAsU0HGyLlC6bepugGNIh09J
DjeBp/g+UeUX79YOa8+5RhHb/mmBDxhbpdjAXyS+ssSmmQgjVH2OdHqvyA4u8obE
kLyX3sSZtZ7/YhgPmRbDgaHxe91IAIbLgEG0Mt6+eYpsGjbi4kg0U2aoaxgcBpvs
HDvPd9mrNQpXSSlrxqji0iy/fCznRHVnGLLqCGUHo1Q6eXLeXUlFx7ItfytiqX38
j6M7p/Si8QnBrmjdTs9wEFGdkVUzY3HQnVBJc0v3Hf4QWDs+f3U=
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:33:03 2026 by rpki-client