
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/EECD640133988CFFC0BF1D58079BA5921C041DB9.mft
File: EECD640133988CFFC0BF1D58079BA5921C041DB9.mft (raw, json)
Hash identifier: lFNAU4TdAK74tjDc8679YXuZ52Lpu9ZOBOe3iHCep6U=
Subject key identifier: A1:AB:AE:DE:D9:5D:EF:28:32:40:67:B5:77:26:17:1A:07:3E:F9:11
Authority key identifier: EE:CD:64:01:33:98:8C:FF:C0:BF:1D:58:07:9B:A5:92:1C:04:1D:B9
Certificate issuer: /CN=EECD640133988CFFC0BF1D58079BA5921C041DB9
Certificate serial: 0FC50DBEF1BE227A1DA97AEA3CC0BF1E5388B00F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EECD640133988CFFC0BF1D58079BA5921C041DB9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/EECD640133988CFFC0BF1D58079BA5921C041DB9.mft
Manifest number: F8
Signing time: Wed 04 Nov 2026 07:27:33 +0000
Manifest this update: Wed 04 Nov 2026 07:22:33 +0000
Manifest next update: Thu 05 Nov 2026 09:47:33 +0000
Files and hashes: 1: 323030313a6466333a3738303a3a2f34382d3438203d3e20313430303235.roa (hash: eoYACoknq6vSui9USgokAQRX8xZkoLYZMEzPSOjPAZU=)
2: 3130332e3134392e32322e302f32342d3234203d3e20313430303235.roa (hash: PWHfuvJISm/0HGRYS1rgkQyVd8LnOVyJKU3uYwSY5nY=)
3: EECD640133988CFFC0BF1D58079BA5921C041DB9.crl (hash: cDuDfO6I3dPoOcDOGqKPARYX2J8fVg/V1DqKS5WGk5w=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/EECD640133988CFFC0BF1D58079BA5921C041DB9.crl
rsync://rpki-rsync.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/EECD640133988CFFC0BF1D58079BA5921C041DB9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EECD640133988CFFC0BF1D58079BA5921C041DB9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Nov 2026 09:47:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:c5:0d:be:f1:be:22:7a:1d:a9:7a:ea:3c:c0:bf:1e:53:88:b0:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EECD640133988CFFC0BF1D58079BA5921C041DB9
Validity
Not Before: Nov 4 07:22:33 2026 GMT
Not After : Nov 5 09:47:33 2026 GMT
Subject: CN=A1ABAEDED95DEF28324067B57726171A073EF911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:ed:88:cb:71:cf:d2:e9:3b:5e:d8:c7:65:8a:
a4:92:ba:47:8a:e9:0f:f9:a1:dd:5b:f3:19:3f:a1:
5d:bc:b1:fa:47:d6:ac:8d:3f:0a:7c:47:fb:83:9e:
68:fe:fd:2a:5e:16:58:ec:59:13:1b:7b:c4:b9:a7:
db:a0:f5:5c:c4:66:80:d9:33:98:94:81:62:4f:d6:
35:cb:89:f1:42:22:62:7f:20:8b:81:65:61:86:97:
31:da:38:13:0f:0e:cf:c2:c0:c1:b9:29:95:ec:9d:
78:cf:c6:84:ea:0f:bc:98:cb:1a:2e:2f:a6:4a:a8:
5d:97:ac:88:ad:bf:42:d9:e6:f7:ca:55:4d:c8:71:
6d:f6:cb:ef:22:7b:a6:bf:1c:9c:34:fa:ec:e7:18:
c5:48:50:f8:fa:12:0a:41:60:33:b5:d8:3c:49:1d:
81:fc:62:50:db:70:69:16:fe:e0:d6:df:3f:0e:c8:
8a:05:ae:69:0a:7d:3b:7d:09:5a:78:da:6f:ce:5f:
80:7f:62:0e:8b:63:a8:aa:a4:be:e5:05:db:bd:c8:
da:6a:42:04:22:f4:80:35:28:01:c5:6c:42:7c:a3:
52:3c:51:c1:79:a1:c0:40:b4:ae:77:20:2e:a4:4c:
11:36:a3:41:7a:61:7a:0e:c5:83:31:f1:ac:89:cd:
48:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:AB:AE:DE:D9:5D:EF:28:32:40:67:B5:77:26:17:1A:07:3E:F9:11
X509v3 Authority Key Identifier:
keyid:EE:CD:64:01:33:98:8C:FF:C0:BF:1D:58:07:9B:A5:92:1C:04:1D:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/EECD640133988CFFC0BF1D58079BA5921C041DB9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EECD640133988CFFC0BF1D58079BA5921C041DB9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/EECD640133988CFFC0BF1D58079BA5921C041DB9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:7d:79:d7:7b:a8:d0:dc:34:2c:81:40:87:ce:8f:38:f9:99:
17:7e:00:a9:77:61:30:a6:d9:7f:1d:a6:17:16:c1:cd:38:c3:
fb:e9:e5:19:20:06:04:be:5b:c5:80:8b:bd:07:38:6b:0d:b2:
da:9f:ba:b8:0a:f6:32:94:ec:03:0d:c7:e2:01:46:1c:eb:02:
7e:5c:49:12:4c:f2:5b:e6:b3:7f:2b:1c:8c:82:b3:23:04:5c:
6d:4d:4d:51:f4:1c:ef:fd:b9:54:c1:95:1f:b8:ff:05:09:2e:
a5:60:5e:24:cf:9f:de:6a:76:1c:66:e7:96:b3:fa:75:64:0d:
f4:0f:f3:06:b7:a5:e3:52:91:38:3c:f7:56:63:c3:b5:78:ed:
90:a0:82:7d:76:03:81:20:bc:8f:29:ef:1d:6f:82:7c:c0:65:
39:90:f6:78:d2:24:b0:86:15:dc:87:7d:56:8c:2a:27:d1:62:
48:00:01:99:0b:b9:63:84:95:9d:e1:0b:fd:18:3b:a1:0b:56:
d7:cf:4f:3c:39:23:b0:91:00:7c:53:e9:b8:fe:4c:6d:62:8b:
87:5c:d3:8c:8f:b3:44:91:07:1a:ec:5b:ee:7e:89:54:0a:a0:
af:e6:b3:80:5b:ae:4d:18:b0:46:56:d0:82:5f:a1:b1:e3:12:
96:10:37:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 01:58:00 2026 by rpki-client