
$ rpki-client -vvf rpki-rsync.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/EEEEDDCDA44B0713B397D27040721EEC4848E5DC.mft
File: EEEEDDCDA44B0713B397D27040721EEC4848E5DC.mft (raw, json)
Hash identifier: KWR7v8FQGEE5JR4bAkh5JtyQ/Ub/M14qEDcgv6ebvhc=
Subject key identifier: C5:F0:37:D9:1E:51:BB:2A:15:03:B8:3D:7B:FC:00:6C:3F:F6:F9:00
Authority key identifier: EE:EE:DD:CD:A4:4B:07:13:B3:97:D2:70:40:72:1E:EC:48:48:E5:DC
Certificate issuer: /CN=EEEEDDCDA44B0713B397D27040721EEC4848E5DC
Certificate serial: 6E1CB0B6B652CB03B577154EE76B7D0708FA80AA
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EEEEDDCDA44B0713B397D27040721EEC4848E5DC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/EEEEDDCDA44B0713B397D27040721EEC4848E5DC.mft
Manifest number: 6B
Signing time: Tue 21 Jul 2026 03:40:27 +0000
Manifest this update: Tue 21 Jul 2026 03:35:27 +0000
Manifest next update: Wed 22 Jul 2026 06:13:27 +0000
Files and hashes: 1: EEEEDDCDA44B0713B397D27040721EEC4848E5DC.crl (hash: mYCFR30jWeRz4i3iDWW7rSNx0AWskPnXNCKo+VjgqSs=)
2: 3130332e32312e3232342e302f32342d3234203d3e20313331373430.roa (hash: M8k9bViShtt4AmWU/AyDsamC5/RbL8EE0iMthIH76R4=)
3: 34332e3234352e3234392e302f32342d3234203d3e20313331373430.roa (hash: oAmiFNqM3oX4aTDAmFzq05nIHAcLXlnLDdNWSaF00HQ=)
4: 34332e3234352e3234382e302f32342d3234203d3e20313331373430.roa (hash: 1kRWH/01ZY8vcD8ZJ7NSjogRu3r8TcailYL1T9WDQmE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/EEEEDDCDA44B0713B397D27040721EEC4848E5DC.crl
rsync://rpki-rsync.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/EEEEDDCDA44B0713B397D27040721EEC4848E5DC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EEEEDDCDA44B0713B397D27040721EEC4848E5DC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Jul 2026 02:08:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:1c:b0:b6:b6:52:cb:03:b5:77:15:4e:e7:6b:7d:07:08:fa:80:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EEEEDDCDA44B0713B397D27040721EEC4848E5DC
Validity
Not Before: Jul 21 03:35:27 2026 GMT
Not After : Jul 22 06:13:27 2026 GMT
Subject: CN=C5F037D91E51BB2A1503B83D7BFC006C3FF6F900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9d:76:ed:69:23:72:f7:78:a2:de:8d:9f:b3:
52:b3:5b:9b:90:e6:85:09:5b:3c:3c:23:45:11:df:
52:e9:8d:98:dd:dd:7c:81:db:4e:17:a8:bc:3a:e3:
dd:7e:84:5a:22:fe:4b:63:ba:73:f4:89:b5:fe:a6:
b3:64:9f:b9:98:50:36:94:ec:5c:80:18:78:23:df:
f8:d8:fa:04:9b:7f:e8:9b:40:b3:36:c0:77:a4:50:
6e:5d:90:e8:25:10:ee:98:77:37:08:9c:3a:6b:a3:
a6:a5:e6:c2:42:79:51:08:6d:bd:a2:33:61:dc:dc:
36:b5:db:f7:46:38:53:df:58:b4:85:62:4c:40:80:
ed:a9:a8:dc:28:06:03:94:68:b9:8f:a6:41:4d:69:
98:98:25:11:d2:c1:12:3e:77:57:b7:94:dd:7a:01:
d1:e0:cb:02:97:97:85:6c:17:92:d0:3f:3b:ee:a0:
42:a5:f4:27:2e:ed:dd:7c:46:24:f8:e0:e5:28:16:
e0:47:02:28:3d:53:0a:51:9c:95:f5:b4:4b:b9:ac:
ab:48:f9:0b:b7:54:de:65:fb:98:14:8d:4b:61:c0:
85:25:66:8f:6a:a5:94:c8:41:18:13:54:64:d0:4f:
71:c0:98:7c:9b:1b:2a:0a:6f:93:e7:02:a8:ec:f3:
72:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:F0:37:D9:1E:51:BB:2A:15:03:B8:3D:7B:FC:00:6C:3F:F6:F9:00
X509v3 Authority Key Identifier:
keyid:EE:EE:DD:CD:A4:4B:07:13:B3:97:D2:70:40:72:1E:EC:48:48:E5:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/EEEEDDCDA44B0713B397D27040721EEC4848E5DC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EEEEDDCDA44B0713B397D27040721EEC4848E5DC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/EEEEDDCDA44B0713B397D27040721EEC4848E5DC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:eb:df:30:cd:54:34:a7:b6:87:53:f5:75:1a:6e:f3:2c:60:
93:fd:c3:b4:e9:93:25:c5:d3:c9:d9:15:c8:a0:14:4a:0c:74:
22:89:67:dc:fc:ac:83:f5:15:07:47:ae:c1:fb:a2:53:e3:18:
56:78:77:9d:db:22:55:78:69:f7:0d:a9:36:85:44:14:6c:1f:
3c:d0:43:50:27:05:84:0f:4d:cc:3b:d1:da:76:da:91:3c:ed:
fe:e3:1f:a0:13:3e:67:0d:a0:d1:59:8a:8a:8a:77:54:5d:e3:
97:f1:b7:f2:a6:d0:81:a0:e6:ad:cc:cd:ba:90:5b:9b:e0:1c:
9e:c8:6b:42:22:f8:dc:8f:63:72:49:6e:24:c6:fe:f0:dd:6d:
ae:c9:b2:da:d5:5f:56:45:73:04:e0:a8:98:88:16:70:6e:60:
5a:78:ca:04:12:e1:0d:8a:ce:03:e1:f0:a8:d6:9b:f3:c2:ff:
cd:96:f6:7c:60:b9:c4:d7:be:7c:74:47:09:fc:54:5a:e2:42:
a3:91:fb:2f:8a:21:c4:74:22:6b:bb:88:30:67:f3:7e:b3:75:
df:c4:2b:ef:ff:de:5b:72:83:0a:a0:47:1d:d8:34:c9:b9:d7:
ed:54:cc:b9:db:b1:10:07:16:29:62:92:48:a0:69:e5:28:b7:
b6:c7:e7:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:28:43 2026 by rpki-client