
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/EAB7F888E6D8656A93A8E50773CF5352039E7B93.mft
File: EAB7F888E6D8656A93A8E50773CF5352039E7B93.mft (raw, json)
Hash identifier: hEe39Ajg/5YpCS4/hRgQ4CJLrCvUi289zBz3UbOydY8=
Subject key identifier: A3:1D:0B:69:63:38:DC:22:8B:A4:EA:B1:F8:1E:43:19:77:FA:57:58
Authority key identifier: EA:B7:F8:88:E6:D8:65:6A:93:A8:E5:07:73:CF:53:52:03:9E:7B:93
Certificate issuer: /CN=EAB7F888E6D8656A93A8E50773CF5352039E7B93
Certificate serial: 4F60F0DCF9A0809CC1256F733B6A2BC36F8D594F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAB7F888E6D8656A93A8E50773CF5352039E7B93.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/EAB7F888E6D8656A93A8E50773CF5352039E7B93.mft
Manifest number: A6
Signing time: Thu 03 Sep 2026 12:16:58 +0000
Manifest this update: Thu 03 Sep 2026 12:11:58 +0000
Manifest next update: Fri 04 Sep 2026 13:20:58 +0000
Files and hashes: 1: 3130332e3132322e36342e302f32322d3234203d3e20313338303634.roa (hash: mWQGvGpntA9+RoZ+2d/mg2UesRUFeODRtMWjWLsshoc=)
2: 323430333a386334303a3a2f33322d3438203d3e20313338303634.roa (hash: ltF4qAeqI9c/UFyvRzczrWncEgF/tAbn2DkZoTPs4Ww=)
3: EAB7F888E6D8656A93A8E50773CF5352039E7B93.crl (hash: RbQaPO0JUqB/q9TasGayRssVoAl9eDg+3kyvFs4dPcg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/EAB7F888E6D8656A93A8E50773CF5352039E7B93.crl
rsync://rpki-rsync.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/EAB7F888E6D8656A93A8E50773CF5352039E7B93.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAB7F888E6D8656A93A8E50773CF5352039E7B93.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 04 Sep 2026 12:22:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:60:f0:dc:f9:a0:80:9c:c1:25:6f:73:3b:6a:2b:c3:6f:8d:59:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EAB7F888E6D8656A93A8E50773CF5352039E7B93
Validity
Not Before: Sep 3 12:11:58 2026 GMT
Not After : Sep 4 13:20:58 2026 GMT
Subject: CN=A31D0B696338DC228BA4EAB1F81E431977FA5758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:fb:82:49:81:92:59:09:68:50:71:b1:02:c2:
41:90:99:0c:60:aa:df:5d:15:f7:06:99:75:3e:74:
63:3f:10:32:a9:b7:19:61:1b:40:a0:14:79:fd:73:
55:fe:10:ab:71:2f:fa:2a:8a:dc:1a:0d:ef:7b:1e:
29:7d:88:a0:f0:42:49:7f:5e:d3:6c:c6:2c:06:0b:
2c:d2:50:68:df:f7:87:c3:64:13:96:38:0f:95:57:
a7:73:39:d2:bc:c8:51:a6:90:a5:8d:08:29:ec:8c:
a0:8b:b4:96:c8:08:68:a3:31:1c:c3:ef:57:db:eb:
33:95:1d:42:26:c4:54:1c:02:54:c4:1e:67:43:e0:
31:c4:99:8b:ea:7d:e8:30:3e:6b:3e:2a:1d:96:b2:
c8:d3:4c:50:ce:aa:0f:74:3d:75:fe:48:d1:a6:a6:
09:05:ba:59:57:d8:2b:0c:a8:dc:3e:cf:a7:68:69:
74:80:25:e8:11:38:60:49:12:2d:69:a4:bd:8e:51:
12:ee:4e:e3:98:3c:0f:85:e3:bd:d0:dc:63:29:ff:
c2:df:5d:1d:55:55:79:00:a6:c6:0b:70:57:74:f4:
05:d0:17:22:28:17:9d:15:d8:3b:02:7a:09:57:d4:
f6:64:df:ef:ce:3a:d6:3f:9d:52:84:36:af:ab:8c:
0f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:1D:0B:69:63:38:DC:22:8B:A4:EA:B1:F8:1E:43:19:77:FA:57:58
X509v3 Authority Key Identifier:
keyid:EA:B7:F8:88:E6:D8:65:6A:93:A8:E5:07:73:CF:53:52:03:9E:7B:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/EAB7F888E6D8656A93A8E50773CF5352039E7B93.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAB7F888E6D8656A93A8E50773CF5352039E7B93.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/EAB7F888E6D8656A93A8E50773CF5352039E7B93.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:33:59:69:80:49:7d:89:dc:a7:77:99:29:f2:f0:2d:02:86:
af:40:a0:81:69:20:ae:09:45:4c:0c:9e:24:fd:25:88:b5:b2:
35:0e:7c:0e:40:a6:70:82:f1:01:ae:51:4f:29:e5:de:da:ca:
11:0e:d1:9e:05:1c:9c:7b:db:26:4c:12:2b:cd:97:48:bd:75:
41:30:8b:f8:a6:fd:09:d4:18:b7:95:1a:4f:e8:e1:51:fe:3a:
7d:02:6b:92:3d:f6:f0:8f:bd:47:90:26:45:58:31:b0:ab:fd:
cb:6e:6b:11:b4:eb:b7:5b:f5:7b:41:19:2c:c8:12:5d:ff:3a:
f1:2e:bc:19:d3:b8:e4:99:1b:8a:51:4d:0a:fa:4d:b9:1c:ba:
4f:c3:aa:47:3b:01:bd:91:3f:97:09:29:f5:07:3f:4a:a5:4a:
50:49:46:2a:f3:72:e4:c2:92:95:dc:5d:aa:c2:de:6d:92:fd:
df:dc:46:9b:c9:3c:73:9f:f8:d6:7e:7a:7e:09:b9:26:4f:00:
7c:2e:0c:e3:77:11:f8:d2:d6:1d:c0:4f:62:4e:54:80:d7:04:
cf:e8:7f:2c:ae:e7:20:9a:68:0f:65:4d:08:58:c5:30:27:eb:
a7:89:e9:f5:75:97:3e:2b:95:57:70:c1:05:25:a7:75:f4:af:
4d:0f:98:5c
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUT2Dw3PmggJzBJW9zO2orw2+NWU8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUFCN0Y4ODhFNkQ4NjU2QTkzQThFNTA3NzNDRjUzNTIw
MzlFN0I5MzAeFw0yNjA5MDMxMjExNThaFw0yNjA5MDQxMzIwNThaMDMxMTAvBgNV
BAMTKEEzMUQwQjY5NjMzOERDMjI4QkE0RUFCMUY4MUU0MzE5NzdGQTU3NTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV+4JJgZJZCWhQcbECwkGQmQxg
qt9dFfcGmXU+dGM/EDKptxlhG0CgFHn9c1X+EKtxL/oqitwaDe97Hil9iKDwQkl/
XtNsxiwGCyzSUGjf94fDZBOWOA+VV6dzOdK8yFGmkKWNCCnsjKCLtJbICGijMRzD
71fb6zOVHUImxFQcAlTEHmdD4DHEmYvqfegwPms+Kh2WssjTTFDOqg90PXX+SNGm
pgkFullX2CsMqNw+z6doaXSAJegROGBJEi1ppL2OURLuTuOYPA+F473Q3GMp/8Lf
XR1VVXkApsYLcFd09AXQFyIoF50V2DsCeglX1PZk3+/OOtY/nVKENq+rjA8bAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUox0LaWM43CKLpOqx+B5DGXf6V1gwHwYDVR0j
BBgwFoAU6rf4iObYZWqTqOUHc89TUgOee5MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZTBkOWEyOTYtODIyOC00Mzg2LThmZTktOTdhYTMwOTFkZTBkLzAvRUFCN0Y4ODhF
NkQ4NjU2QTkzQThFNTA3NzNDRjUzNTIwMzlFN0I5My5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FQUI3Rjg4OEU2RDg2NTZBOTNBOEU1MDc3M0NGNTM1MjAzOUU3
QjkzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTBkOWEyOTYtODIyOC00Mzg2LThm
ZTktOTdhYTMwOTFkZTBkLzAvRUFCN0Y4ODhFNkQ4NjU2QTkzQThFNTA3NzNDRjUz
NTIwMzlFN0I5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABUzWWmASX2J3Kd3mSny8C0Chq9AoIFpIK4J
RUwMniT9JYi1sjUOfA5ApnCC8QGuUU8p5d7ayhEO0Z4FHJx72yZMEivNl0i9dUEw
i/im/QnUGLeVGk/o4VH+On0Ca5I99vCPvUeQJkVYMbCr/ctuaxG067db9XtBGSzI
El3/OvEuvBnTuOSZG4pRTQr6Tbkcuk/Dqkc7Ab2RP5cJKfUHP0qlSlBJRirzcuTC
kpXcXarC3m2S/d/cRpvJPHOf+NZ+en4JuSZPAHwuDON3EfjS1h3AT2JOVIDXBM/o
fyyu5yCaaA9lTQhYxTAn66eJ6fV1lz4rlVdwwQUlp3X0r00PmFw=
-----END CERTIFICATE-----
Generated at Thu Sep 3 17:46:06 2026 by rpki-client