
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.mft
File: EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.mft (raw, json)
Hash identifier: 6koF0PhKpr7vaHEu1e87pjZu7PZUFxa+IdZWIleFPC0=
Subject key identifier: 0C:2E:F8:04:E8:DF:34:4D:5D:39:07:2E:1A:B2:B6:F4:2E:39:D0:FE
Authority key identifier: EE:FF:02:42:4D:8D:55:9C:41:36:A2:96:EB:DB:CF:6E:1A:6B:8D:0E
Certificate issuer: /CN=EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E
Certificate serial: 23399AF97FFD91F0978305B13F13B40D5C83F620
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.mft
Manifest number: 0F
Signing time: Wed 13 May 2026 01:45:39 +0000
Manifest this update: Wed 13 May 2026 01:40:39 +0000
Manifest next update: Thu 14 May 2026 05:09:39 +0000
Files and hashes: 1: EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.crl (hash: 6wRSlYKGP/0E/fQfXMojgrTZETL3a4waHOxOUDJ7Hww=)
2: 3135372e31352e34322e302f32332d3234203d3e20313532333635.roa (hash: UAqu6KyWKv+F+VKwb+aoEkxaz1wPo1XXzxeV01CTrgA=)
3: 3135372e31352e34322e302f32342d3234203d3e20313532333635.roa (hash: UkjYiLhxh0IWQ4FGEGIczENrBNKbcYu0qHwPzgbhKDA=)
4: 3135372e31352e34332e302f32342d3234203d3e20313532333635.roa (hash: aVxwuIGWn+Jb5KGrsTQwKAmXv03fAWvd+HD6KJE66iw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.crl
rsync://rpki-rsync.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:28:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:39:9a:f9:7f:fd:91:f0:97:83:05:b1:3f:13:b4:0d:5c:83:f6:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E
Validity
Not Before: May 13 01:40:39 2026 GMT
Not After : May 14 05:09:39 2026 GMT
Subject: CN=0C2EF804E8DF344D5D39072E1AB2B6F42E39D0FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:30:1a:e3:33:7d:c5:d1:a0:d4:de:e7:28:ef:
4a:fd:b5:bb:b1:82:c7:4d:33:56:54:af:f6:20:24:
41:10:d0:4e:7b:f0:90:42:51:52:ea:00:c1:c0:63:
87:78:66:04:08:4a:0e:51:db:c1:2f:c8:93:62:07:
93:21:24:79:40:6a:4d:05:a6:f4:44:b0:2b:61:45:
c6:d6:a7:28:90:2f:17:df:5e:98:e2:75:ac:43:bb:
2a:56:cc:10:f0:eb:3a:b9:63:eb:66:e9:84:9f:e5:
b4:7b:1f:ab:92:e0:80:6a:74:b9:b4:4b:0b:12:3f:
d1:ff:b4:bf:95:02:a7:cd:3b:a7:d0:09:b3:6b:0b:
57:4f:d8:de:53:b6:b8:6b:5d:0e:6e:2b:28:33:84:
d6:1f:bc:9a:bd:e0:8f:8d:57:39:42:3c:48:16:63:
42:92:c9:42:63:8e:17:fd:07:92:56:b2:30:47:2f:
55:34:30:9d:99:8f:76:e4:1a:d4:11:1b:71:bb:e3:
f8:74:45:e1:66:6a:1d:2e:0d:48:55:ca:42:8e:6c:
53:c4:4a:d5:1d:25:aa:b3:48:d4:c9:e0:69:db:67:
84:45:ed:ec:17:d7:4c:7d:33:6f:b0:1d:8f:42:a9:
14:ce:48:f2:3e:38:11:12:cd:f3:a4:8c:41:c3:c2:
9f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:2E:F8:04:E8:DF:34:4D:5D:39:07:2E:1A:B2:B6:F4:2E:39:D0:FE
X509v3 Authority Key Identifier:
keyid:EE:FF:02:42:4D:8D:55:9C:41:36:A2:96:EB:DB:CF:6E:1A:6B:8D:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:43:17:b6:dc:c8:f6:46:5f:2e:b6:ab:b9:be:1d:7e:a6:47:
97:2a:89:d4:c0:7d:77:d3:30:d0:62:2b:da:7e:b1:e3:ad:fe:
33:36:2f:93:42:34:dc:af:42:bd:4e:1d:8f:89:b8:0c:07:d7:
b4:81:97:66:6a:c6:09:e8:36:a5:8b:4c:0a:17:32:28:63:81:
36:5a:e3:b9:6a:ae:11:73:f0:95:8b:13:b5:b9:71:99:f7:f4:
3c:52:45:db:5b:7a:9a:0e:8d:ff:b1:c0:89:4f:75:da:8f:33:
73:87:cb:4e:03:ce:a5:e1:26:2a:47:9b:88:36:90:5e:8f:37:
31:70:bc:19:92:1c:cd:89:ab:de:0d:5c:53:cf:be:27:ad:44:
d1:84:a1:93:94:18:f0:18:23:ac:72:05:0a:27:35:b2:23:f5:
0e:28:79:ba:86:3b:7a:f6:cd:90:11:cc:d7:cd:a8:d0:0d:b3:
51:56:f5:02:18:79:15:2c:48:ae:f1:9a:19:19:62:47:f0:1e:
85:07:54:78:37:c9:aa:00:6e:7a:8a:8a:da:15:15:4e:f9:f0:
c2:03:e4:2a:34:87:68:90:4d:26:e7:d1:16:05:1c:d2:8c:64:
88:25:37:5a:59:54:b9:12:0c:a4:b1:67:b0:49:d8:5e:8e:76:
d1:4a:b7:e6
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUIzma+X/9kfCXgwWxPxO0DVyD9iAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUVGRjAyNDI0RDhENTU5QzQxMzZBMjk2RUJEQkNGNkUx
QTZCOEQwRTAeFw0yNjA1MTMwMTQwMzlaFw0yNjA1MTQwNTA5MzlaMDMxMTAvBgNV
BAMTKDBDMkVGODA0RThERjM0NEQ1RDM5MDcyRTFBQjJCNkY0MkUzOUQwRkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjMBrjM33F0aDU3uco70r9tbux
gsdNM1ZUr/YgJEEQ0E578JBCUVLqAMHAY4d4ZgQISg5R28EvyJNiB5MhJHlAak0F
pvREsCthRcbWpyiQLxffXpjidaxDuypWzBDw6zq5Y+tm6YSf5bR7H6uS4IBqdLm0
SwsSP9H/tL+VAqfNO6fQCbNrC1dP2N5TtrhrXQ5uKygzhNYfvJq94I+NVzlCPEgW
Y0KSyUJjjhf9B5JWsjBHL1U0MJ2Zj3bkGtQRG3G74/h0ReFmah0uDUhVykKObFPE
StUdJaqzSNTJ4GnbZ4RF7ewX10x9M2+wHY9CqRTOSPI+OBESzfOkjEHDwp/VAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUDC74BOjfNE1dOQcuGrK29C450P4wHwYDVR0j
BBgwFoAU7v8CQk2NVZxBNqKW69vPbhprjQ4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZTVkZTcxYWMtN2Y5Zi00N2Q0LTk1MzMtOWRmODJhZmM1OTczLzAvRUVGRjAyNDI0
RDhENTU5QzQxMzZBMjk2RUJEQkNGNkUxQTZCOEQwRS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC9FRUZGMDI0MjREOEQ1NTlDNDEzNkEyOTZFQkRCQ0Y2RTFBNkI4
RDBFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTVkZTcxYWMtN2Y5Zi00N2Q0LTk1
MzMtOWRmODJhZmM1OTczLzAvRUVGRjAyNDI0RDhENTU5QzQxMzZBMjk2RUJEQkNG
NkUxQTZCOEQwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAClDF7bcyPZGXy62q7m+HX6mR5cqidTAfXfT
MNBiK9p+seOt/jM2L5NCNNyvQr1OHY+JuAwH17SBl2ZqxgnoNqWLTAoXMihjgTZa
47lqrhFz8JWLE7W5cZn39DxSRdtbepoOjf+xwIlPddqPM3OHy04DzqXhJipHm4g2
kF6PNzFwvBmSHM2Jq94NXFPPvietRNGEoZOUGPAYI6xyBQonNbIj9Q4oebqGO3r2
zZARzNfNqNANs1FW9QIYeRUsSK7xmhkZYkfwHoUHVHg3yaoAbnqKitoVFU758MID
5Co0h2iQTSbn0RYFHNKMZIglN1pZVLkSDKSxZ7BJ2F6OdtFKt+Y=
-----END CERTIFICATE-----
Generated at Wed May 13 03:59:59 2026 by rpki-client