
$ rpki-client -vvf rpki-rsync.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/EBA1F4874C4867D2CAA214867052E9413088CD22.mft
File: EBA1F4874C4867D2CAA214867052E9413088CD22.mft (raw, json)
Hash identifier: EMZ50tsX8HZAxr1/4aDnGd8lIY/UtL1Qqp/gzwhEQM4=
Subject key identifier: E1:39:A1:3C:39:F6:6F:35:FB:BD:C0:BD:EC:BA:8D:67:6F:46:85:D6
Authority key identifier: EB:A1:F4:87:4C:48:67:D2:CA:A2:14:86:70:52:E9:41:30:88:CD:22
Certificate issuer: /CN=EBA1F4874C4867D2CAA214867052E9413088CD22
Certificate serial: 7A2486514FB12EFA6668872D7B7E29DE4AAE8617
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EBA1F4874C4867D2CAA214867052E9413088CD22.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/EBA1F4874C4867D2CAA214867052E9413088CD22.mft
Manifest number: 6F
Signing time: Thu 23 Jul 2026 23:38:41 +0000
Manifest this update: Thu 23 Jul 2026 23:33:41 +0000
Manifest next update: Sat 25 Jul 2026 02:48:41 +0000
Files and hashes: 1: 3136302e31392e3230372e302f32342d3234203d3e20313532373634.roa (hash: Rsj+zG8fTbANuQe+LowjpWqzpy4Nr2I6Rkz77sVkBRk=)
2: 3136302e31392e3230362e302f32342d3234203d3e20313532373634.roa (hash: rkfIQLZH91MBngOR2XF3JSvb0x7kp9rSE9FoBc2wVuU=)
3: EBA1F4874C4867D2CAA214867052E9413088CD22.crl (hash: LNBjPJfAnoUZRIo4AnAdvgFVFO1a/7EWjVbmcrBT7Us=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/EBA1F4874C4867D2CAA214867052E9413088CD22.crl
rsync://rpki-rsync.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/EBA1F4874C4867D2CAA214867052E9413088CD22.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EBA1F4874C4867D2CAA214867052E9413088CD22.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 02:48:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:24:86:51:4f:b1:2e:fa:66:68:87:2d:7b:7e:29:de:4a:ae:86:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EBA1F4874C4867D2CAA214867052E9413088CD22
Validity
Not Before: Jul 23 23:33:41 2026 GMT
Not After : Jul 25 02:48:41 2026 GMT
Subject: CN=E139A13C39F66F35FBBDC0BDECBA8D676F4685D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a3:13:9d:19:0a:b1:55:b4:99:b3:13:f5:0d:
ee:c6:54:26:ac:e9:ea:d5:aa:7e:30:53:e2:64:cc:
f1:11:4f:a2:aa:e2:59:97:42:b8:a1:92:2f:cc:9f:
73:d6:e8:f4:f0:ff:05:23:e0:88:c4:80:a9:75:87:
ac:cf:71:83:1e:2e:0a:35:43:8c:3b:b8:4a:96:88:
12:6e:ec:b2:14:ee:c2:27:41:79:cf:10:5f:fd:51:
88:39:7f:86:4c:64:34:f8:09:45:4d:2f:f3:ce:44:
0a:c0:f3:04:cb:dd:e6:ba:54:fb:cd:e8:a4:ee:56:
25:a2:02:6a:86:37:8e:72:f9:2e:f7:7f:99:80:42:
29:9d:90:66:12:ff:f0:0f:4b:01:b5:3a:18:31:19:
ca:66:47:f3:99:99:83:4b:28:92:eb:9a:5f:e5:b0:
a2:b3:2e:a3:24:01:c7:55:05:2e:68:c6:cf:c9:8a:
fe:df:cb:77:8c:7b:fd:b7:b7:5b:8c:e5:74:6d:b1:
4c:40:59:b5:f2:4b:29:c0:14:a1:8e:2a:67:e4:2b:
15:73:21:7f:d3:07:ed:3f:31:ae:8f:05:a3:3e:68:
92:58:c8:a0:f2:7a:5f:40:64:8e:7e:2e:90:39:7b:
64:12:01:20:d7:ab:f1:be:0d:1f:da:35:78:b2:95:
0a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:39:A1:3C:39:F6:6F:35:FB:BD:C0:BD:EC:BA:8D:67:6F:46:85:D6
X509v3 Authority Key Identifier:
keyid:EB:A1:F4:87:4C:48:67:D2:CA:A2:14:86:70:52:E9:41:30:88:CD:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/EBA1F4874C4867D2CAA214867052E9413088CD22.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EBA1F4874C4867D2CAA214867052E9413088CD22.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/EBA1F4874C4867D2CAA214867052E9413088CD22.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:84:25:93:7a:24:45:5d:4a:58:a2:1e:a3:0d:c5:58:f7:03:
da:26:b6:73:2e:39:96:c7:cf:48:b7:9c:de:c7:87:e7:d7:b3:
f1:bf:a8:24:bd:b6:14:0e:35:a7:b9:b7:e3:66:38:dc:44:b6:
bd:70:1c:1e:48:b8:5c:47:f0:4a:5e:96:c1:a3:7a:64:60:fb:
cf:1a:74:88:03:86:29:10:b8:fc:98:a9:53:94:83:c4:89:4d:
8d:7b:6f:4d:7a:49:95:5d:9f:dd:22:ed:8c:17:3a:57:83:6f:
1d:f2:8d:ec:25:89:09:8e:b6:9f:46:26:43:90:c4:51:5c:89:
37:c9:38:e4:1c:4d:69:24:d0:f6:0e:83:a8:b9:8d:45:b2:ee:
cf:5a:2d:c7:4b:ec:9e:fe:74:44:06:b4:9d:46:ea:95:56:f0:
e2:e4:94:3d:f6:6a:85:65:9b:e5:5a:0a:a6:0f:b0:0f:cf:68:
8c:62:03:e2:02:43:c5:96:e1:bd:ea:76:49:73:98:d7:cc:1d:
cd:5a:9d:62:25:2b:40:34:46:32:77:8b:84:74:67:8e:d6:01:
72:17:69:c1:74:c8:28:5b:eb:c7:71:e6:d1:e4:32:1b:cd:73:
90:dc:e6:97:48:0f:a2:9f:43:6d:f4:7e:b6:58:54:6b:33:b8:
af:a0:0b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:14:45 2026 by rpki-client