
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c76c7825-8b3d-466c-ba0c-99553c1d73ea/0/EEB70538199D447E9C92F6547EB45B40E5762DCF.mft
File: EEB70538199D447E9C92F6547EB45B40E5762DCF.mft (raw, json)
Hash identifier: ocS2uSwCgpBy0AoMj81PrcYknuizpYDgY/JuCdNtZc4=
Subject key identifier: 0D:26:A3:FE:EB:06:AA:8E:AC:78:E2:D9:2A:B1:6C:A6:9E:54:78:2E
Authority key identifier: EE:B7:05:38:19:9D:44:7E:9C:92:F6:54:7E:B4:5B:40:E5:76:2D:CF
Certificate issuer: /CN=EEB70538199D447E9C92F6547EB45B40E5762DCF
Certificate serial: 58D5F388CD45A4C15CCC9DF5E228819A40A2B0B3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EEB70538199D447E9C92F6547EB45B40E5762DCF.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c76c7825-8b3d-466c-ba0c-99553c1d73ea/0/EEB70538199D447E9C92F6547EB45B40E5762DCF.mft
Manifest number: 6A
Signing time: Mon 20 Jul 2026 16:16:41 +0000
Manifest this update: Mon 20 Jul 2026 16:11:41 +0000
Manifest next update: Tue 21 Jul 2026 17:38:41 +0000
Files and hashes: 1: EEB70538199D447E9C92F6547EB45B40E5762DCF.crl (hash: K0HdorrtFc9Peq0CwkSjokDASZeeIElBIZbrlTN2qhw=)
2: 3130332e372e3130352e302f32342d3234203d3e20313531353933.roa (hash: dmYYEZ8QZwPKYE6vCrbxSUxZzCU8Re2LNJQ4nrlJQ94=)
3: 3130332e372e3130342e302f32342d3234203d3e20313531353933.roa (hash: B00llEOl+Xcrvf7jG7vXFkd1/vFdQcRM2H7X7JWrIjI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c76c7825-8b3d-466c-ba0c-99553c1d73ea/0/EEB70538199D447E9C92F6547EB45B40E5762DCF.crl
rsync://rpki-rsync.idnic.net/repo/c76c7825-8b3d-466c-ba0c-99553c1d73ea/0/EEB70538199D447E9C92F6547EB45B40E5762DCF.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EEB70538199D447E9C92F6547EB45B40E5762DCF.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Jul 2026 17:38:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:d5:f3:88:cd:45:a4:c1:5c:cc:9d:f5:e2:28:81:9a:40:a2:b0:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EEB70538199D447E9C92F6547EB45B40E5762DCF
Validity
Not Before: Jul 20 16:11:41 2026 GMT
Not After : Jul 21 17:38:41 2026 GMT
Subject: CN=0D26A3FEEB06AA8EAC78E2D92AB16CA69E54782E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2b:4d:ef:ea:ac:6c:08:41:fe:a7:43:28:82:
8c:9d:7d:25:a2:3c:6f:78:f2:91:8d:94:bf:9a:c9:
3a:42:3d:0c:a1:9f:44:bd:81:44:89:53:7f:0e:58:
80:8f:8c:de:13:26:c7:16:e5:42:b5:98:30:0f:c7:
2d:14:1c:0f:3e:bb:6e:13:d7:85:75:6f:50:40:5f:
68:c0:b3:3d:df:e1:5f:3a:25:d4:86:1e:23:17:8d:
56:c5:52:48:37:bb:96:10:b2:a1:83:2b:83:06:5d:
34:b9:1b:2b:33:d0:1c:6c:3e:51:ac:39:4f:1c:c2:
8e:61:43:7e:5d:0e:6d:9a:aa:c3:ee:2b:8a:79:fd:
11:c0:e8:8a:5a:3c:b8:63:8f:92:99:dd:66:bc:a7:
04:14:5f:a4:ec:cb:dc:95:87:50:6c:8d:fd:64:da:
7e:1a:9c:7b:6e:e9:4b:c0:c8:98:56:7a:db:32:35:
ad:ce:f1:94:e9:44:5c:fc:96:e0:25:5d:83:d9:5f:
48:ad:37:4e:19:a8:3b:45:6d:b2:1e:a8:62:b2:6e:
6f:af:aa:ec:70:f0:fb:cd:df:d5:66:69:c9:f4:f1:
87:71:00:ab:87:c0:f6:b1:e8:f2:e7:b6:62:39:a5:
43:4b:d5:dd:08:1c:7c:20:d6:51:30:9a:40:2d:ee:
00:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:26:A3:FE:EB:06:AA:8E:AC:78:E2:D9:2A:B1:6C:A6:9E:54:78:2E
X509v3 Authority Key Identifier:
keyid:EE:B7:05:38:19:9D:44:7E:9C:92:F6:54:7E:B4:5B:40:E5:76:2D:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c76c7825-8b3d-466c-ba0c-99553c1d73ea/0/EEB70538199D447E9C92F6547EB45B40E5762DCF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EEB70538199D447E9C92F6547EB45B40E5762DCF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c76c7825-8b3d-466c-ba0c-99553c1d73ea/0/EEB70538199D447E9C92F6547EB45B40E5762DCF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:ef:cf:5f:aa:75:3d:13:5f:34:9d:93:82:e6:9f:3d:7d:eb:
c1:27:51:09:fc:99:d1:e3:27:85:88:8d:0c:15:3d:6a:bb:a1:
37:b1:b0:46:c5:02:af:b6:da:af:87:85:7c:9a:bc:ca:71:0d:
c6:8d:b0:cd:bc:24:57:af:69:c1:bd:1c:ef:fc:a3:4c:70:54:
83:41:46:aa:65:2f:1e:96:09:2e:43:ff:a6:67:dc:b8:8c:2e:
bd:67:5b:5f:62:16:95:bc:2b:4d:d0:aa:5a:30:cf:49:b5:9c:
d5:f3:d8:57:7d:60:eb:0b:7e:6d:ee:d3:8a:32:83:52:81:ae:
7d:f5:88:9b:ab:b0:99:21:12:df:4f:1a:01:5c:4b:3a:22:26:
13:f4:25:ee:b5:05:ea:8e:7a:d4:3a:8d:7d:58:c3:4d:0b:1e:
d7:b6:f3:4d:6a:96:c6:71:47:ea:9b:a3:a1:53:15:05:3e:ea:
84:c9:32:a9:2f:b7:bc:f5:cc:15:c5:ad:c5:29:27:55:b2:7e:
17:8c:97:89:39:dc:33:6f:76:0d:43:94:63:5a:83:bf:42:4b:
72:ed:dd:c2:b9:23:f2:c7:45:e9:a4:5b:b1:95:c8:8f:d3:fe:
fa:6f:e2:aa:d4:11:25:d0:02:0f:a4:1f:41:84:0c:13:77:a4:
cd:5f:77:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:52:35 2026 by rpki-client