
$ rpki-client -vvf rpki-rsync.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/EEC8298F6351E0D1E9099D89D52C21BDF551073F.mft
File: EEC8298F6351E0D1E9099D89D52C21BDF551073F.mft (raw, json)
Hash identifier: Nwzhbz9CIuVg7/0KrPveFkdljt2sI7Kvgc0nhnEidik=
Subject key identifier: 7D:D1:BA:FA:D7:5A:FF:64:73:32:4F:12:EC:E3:57:54:12:70:C7:28
Authority key identifier: EE:C8:29:8F:63:51:E0:D1:E9:09:9D:89:D5:2C:21:BD:F5:51:07:3F
Certificate issuer: /CN=EEC8298F6351E0D1E9099D89D52C21BDF551073F
Certificate serial: 468B2D2196F8ED0EDC18C3370B4BFB5649A26164
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EEC8298F6351E0D1E9099D89D52C21BDF551073F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/EEC8298F6351E0D1E9099D89D52C21BDF551073F.mft
Manifest number: 6B
Signing time: Tue 21 Jul 2026 01:22:27 +0000
Manifest this update: Tue 21 Jul 2026 01:17:27 +0000
Manifest next update: Wed 22 Jul 2026 01:57:27 +0000
Files and hashes: 1: EEC8298F6351E0D1E9099D89D52C21BDF551073F.crl (hash: lul+KSMsCjxw/JRiZYfoulShHIC8hipYlWcXsPxJHJI=)
2: 3130332e3132352e3138342e302f32342d3234203d3e20313338313134.roa (hash: pj1vmNVgdJMcLPpwXDPbTSTqYs/nj1UjJZcEGgiuKJM=)
3: 323030313a6466373a326630303a3a2f34382d3438203d3e20313338313134.roa (hash: BdIV5PbAUlJnh4RApHNLwZ1Ca32+bF84gt8/bqThZfc=)
4: 3130332e3132352e3138352e302f32342d3234203d3e20313338313134.roa (hash: CZezg3V9YTA7rAg0HQHAWG4rHwKphI57kR4SMjyKwas=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/EEC8298F6351E0D1E9099D89D52C21BDF551073F.crl
rsync://rpki-rsync.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/EEC8298F6351E0D1E9099D89D52C21BDF551073F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EEC8298F6351E0D1E9099D89D52C21BDF551073F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Jul 2026 01:57:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:8b:2d:21:96:f8:ed:0e:dc:18:c3:37:0b:4b:fb:56:49:a2:61:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EEC8298F6351E0D1E9099D89D52C21BDF551073F
Validity
Not Before: Jul 21 01:17:27 2026 GMT
Not After : Jul 22 01:57:27 2026 GMT
Subject: CN=7DD1BAFAD75AFF6473324F12ECE357541270C728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:68:58:75:47:8c:f4:af:5f:73:24:36:65:ae:
fd:aa:5d:81:87:11:40:44:aa:cd:93:a9:6b:88:4b:
27:ec:6e:3a:04:f5:66:6c:a0:74:59:ca:12:1a:ea:
88:1d:72:df:7c:3b:51:d3:ab:6b:65:4c:35:a6:c2:
e5:af:38:82:67:b0:51:cb:7d:3c:63:34:e4:9d:81:
56:a0:5e:5e:73:1f:fb:7e:fc:67:fe:12:fa:5b:4d:
19:ba:39:8b:42:93:83:6f:61:55:3f:b7:9a:4f:82:
68:d1:71:54:b0:9e:19:95:0c:f4:b1:63:e8:88:c8:
8a:18:13:29:47:0c:3c:a8:1a:cc:e9:8d:e0:07:c1:
0a:13:13:d8:63:26:52:1a:88:08:c6:d4:d9:8d:06:
43:ac:24:c2:03:4c:d1:d0:f7:97:c1:3c:c2:66:f2:
61:ef:4e:46:2b:39:7e:ed:4b:29:a9:a9:ad:7d:5a:
87:f2:51:3f:4e:9c:a6:47:18:2e:37:13:5b:da:d5:
3c:0a:3d:dc:e0:2e:62:83:18:02:bb:54:52:6b:7a:
ca:d8:85:c2:69:11:6a:f1:6f:da:b6:cb:42:eb:e1:
c5:31:44:c7:ec:41:af:ba:c2:c8:ae:4a:b4:07:01:
54:a5:0e:73:2c:7a:5b:d0:a3:6b:ba:97:d9:82:c6:
e2:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:D1:BA:FA:D7:5A:FF:64:73:32:4F:12:EC:E3:57:54:12:70:C7:28
X509v3 Authority Key Identifier:
keyid:EE:C8:29:8F:63:51:E0:D1:E9:09:9D:89:D5:2C:21:BD:F5:51:07:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/EEC8298F6351E0D1E9099D89D52C21BDF551073F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EEC8298F6351E0D1E9099D89D52C21BDF551073F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/EEC8298F6351E0D1E9099D89D52C21BDF551073F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:75:82:1f:99:6b:ce:de:10:c1:9c:25:94:da:49:b5:df:27:
3a:87:e4:d9:44:1f:9f:8b:90:62:69:da:e0:b4:29:e8:fa:05:
99:93:c7:64:51:c2:6a:52:34:56:26:e5:ca:da:8c:cb:6c:b0:
b6:d1:53:a3:f7:99:4e:4b:9e:d9:10:94:b7:7d:9a:a5:70:16:
03:79:6b:c2:64:de:aa:8c:95:7d:d9:f0:76:a8:72:58:5f:fe:
39:25:c1:44:9f:46:e6:68:7c:a7:b8:bc:b8:03:4a:75:3c:f3:
b5:65:7b:4c:a2:70:dd:85:ec:05:9a:93:b5:d1:28:6e:bf:be:
5a:96:74:a8:58:9e:32:88:73:a1:65:6f:f0:30:9c:47:e8:2c:
39:de:20:59:32:83:37:06:7c:30:7b:6c:8d:07:31:52:59:4d:
ab:03:30:dd:53:c0:7f:29:f5:c7:c8:2d:86:26:cb:c4:0e:a7:
fb:17:2d:f2:95:fd:e5:3b:06:62:bb:1d:fc:d6:bb:3c:59:5a:
93:51:13:b3:69:1a:3d:ec:ca:e1:c3:eb:fe:61:e8:2e:70:ff:
06:e1:4e:98:b5:70:8e:9b:ac:3a:07:de:20:20:fd:91:2d:96:
0d:dd:67:45:58:ad:c4:7e:96:d0:7b:82:84:6a:70:d9:b9:bf:
bb:7c:a9:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 08:16:26 2026 by rpki-client