
$ rpki-client -vvf rpki-rsync.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/EBA9D784E9CC3F2A70EB526976A01F48F5F52951.mft
File: EBA9D784E9CC3F2A70EB526976A01F48F5F52951.mft (raw, json)
Hash identifier: 7w9urBF6YEn6XOXtle9h7cebjHJ8O3AyB7HWz3DI6RE=
Subject key identifier: 23:0D:3A:F3:76:29:33:E0:C8:4A:09:D8:8E:AC:2F:FF:E6:E7:56:F6
Authority key identifier: EB:A9:D7:84:E9:CC:3F:2A:70:EB:52:69:76:A0:1F:48:F5:F5:29:51
Certificate issuer: /CN=EBA9D784E9CC3F2A70EB526976A01F48F5F52951
Certificate serial: 7045571E79A5E209201D00027C7516722DDBF245
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EBA9D784E9CC3F2A70EB526976A01F48F5F52951.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/EBA9D784E9CC3F2A70EB526976A01F48F5F52951.mft
Manifest number: 75
Signing time: Sun 26 Jul 2026 23:57:43 +0000
Manifest this update: Sun 26 Jul 2026 23:52:43 +0000
Manifest next update: Tue 28 Jul 2026 03:05:43 +0000
Files and hashes: 1: EBA9D784E9CC3F2A70EB526976A01F48F5F52951.crl (hash: ENL6ByToHe2bvOcckM4JerxU4k0MBLS8OHeGfOzK3d8=)
2: 323430353a633963303a3a2f33322d3438203d3e20313338383233.roa (hash: v/BF9ieKxX28NjyPdn3fATuRAfuqobz/pNI/KB0vc9o=)
3: 3230332e3136312e32342e302f32312d3234203d3e20313338383233.roa (hash: YX70OIsu7iTqiI3a5soFelDVlujYH0j+VtFdThdooz4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/EBA9D784E9CC3F2A70EB526976A01F48F5F52951.crl
rsync://rpki-rsync.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/EBA9D784E9CC3F2A70EB526976A01F48F5F52951.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EBA9D784E9CC3F2A70EB526976A01F48F5F52951.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 03:05:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:45:57:1e:79:a5:e2:09:20:1d:00:02:7c:75:16:72:2d:db:f2:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EBA9D784E9CC3F2A70EB526976A01F48F5F52951
Validity
Not Before: Jul 26 23:52:43 2026 GMT
Not After : Jul 28 03:05:43 2026 GMT
Subject: CN=230D3AF3762933E0C84A09D88EAC2FFFE6E756F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4f:fc:72:54:56:91:04:b0:26:e2:97:63:03:
81:ca:00:ea:32:06:9f:4f:dd:b7:c0:1a:0a:f8:ec:
7c:3b:39:41:4d:ba:b4:03:22:bd:41:6c:52:5f:f2:
49:be:91:77:9e:ce:86:9d:92:b6:db:1a:b1:8d:ea:
47:38:04:d2:5b:c3:3e:16:55:e8:68:81:f7:c4:92:
49:42:f6:31:e6:a2:1c:99:85:38:6b:ac:c8:34:ca:
75:61:65:7d:70:a8:da:2e:e6:0b:d8:b2:ba:d2:fb:
47:4c:eb:a0:68:81:44:6e:42:78:79:c1:12:37:66:
e5:16:2c:bd:a1:c5:99:07:57:c2:7c:86:36:f3:97:
99:2b:d3:8f:4d:7f:1c:8f:8c:b8:c4:e2:66:06:50:
c8:1d:da:6f:a3:a6:23:6f:5a:25:eb:5a:cd:4f:01:
61:6f:49:b2:f2:dc:35:06:f4:88:b9:31:f2:33:93:
bb:49:b4:e6:e5:db:4d:ae:a6:63:b8:48:f8:98:20:
10:36:cf:bd:42:12:03:42:f3:b3:2b:a6:f6:3e:22:
ed:8e:b7:ed:25:9b:5d:a4:af:0b:a4:f9:e7:67:9b:
d6:21:56:90:19:84:c7:69:29:44:79:5c:fc:97:30:
90:ad:95:7c:00:28:62:75:d6:57:5c:e9:fd:e4:5b:
d2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:0D:3A:F3:76:29:33:E0:C8:4A:09:D8:8E:AC:2F:FF:E6:E7:56:F6
X509v3 Authority Key Identifier:
keyid:EB:A9:D7:84:E9:CC:3F:2A:70:EB:52:69:76:A0:1F:48:F5:F5:29:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/EBA9D784E9CC3F2A70EB526976A01F48F5F52951.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EBA9D784E9CC3F2A70EB526976A01F48F5F52951.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/EBA9D784E9CC3F2A70EB526976A01F48F5F52951.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:cf:ce:15:d7:19:ca:11:10:85:db:83:e4:e4:e5:cf:0c:e5:
ee:55:9a:4e:22:fc:50:b4:ac:99:3f:62:ce:0e:c0:07:7e:9b:
1e:2e:09:be:6d:26:a6:97:18:f1:76:55:49:ca:e6:6a:03:b8:
2b:62:f3:0e:4e:8a:38:b9:38:a1:52:e8:0c:04:50:d9:6a:52:
72:a6:34:8e:e9:d8:eb:f1:a8:0e:d4:b1:33:96:6f:78:e0:6f:
c7:a8:5a:26:80:d4:80:81:13:9a:9d:2a:eb:2f:b1:1e:d4:ae:
5f:66:bf:c4:65:08:e3:22:67:1b:00:bc:f2:26:dd:42:88:21:
33:9d:36:c0:dd:fc:9b:56:c6:0c:f0:86:9e:6f:78:a0:3c:30:
5a:79:b8:6d:05:b2:65:88:c1:f4:23:e8:5d:df:84:10:35:a2:
68:c4:1e:7e:15:4c:fc:af:7b:fd:c2:a7:1a:0d:32:30:f7:d5:
ba:44:90:24:fe:ed:66:d0:49:e0:c8:76:84:1e:8f:a1:e9:30:
9e:8a:06:65:ff:aa:77:79:88:0a:3d:52:c4:8a:b8:09:1e:94:
fd:dc:a2:ae:18:56:81:b3:d9:06:68:df:3e:7f:29:34:08:f9:
b2:01:3c:39:42:8c:5f:7e:63:32:aa:ed:e0:3b:3c:1e:de:6a:
8e:dc:6e:87
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUcEVXHnml4gkgHQACfHUWci3b8kUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUJBOUQ3ODRFOUNDM0YyQTcwRUI1MjY5NzZBMDFGNDhG
NUY1Mjk1MTAeFw0yNjA3MjYyMzUyNDNaFw0yNjA3MjgwMzA1NDNaMDMxMTAvBgNV
BAMTKDIzMEQzQUYzNzYyOTMzRTBDODRBMDlEODhFQUMyRkZGRTZFNzU2RjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdT/xyVFaRBLAm4pdjA4HKAOoy
Bp9P3bfAGgr47Hw7OUFNurQDIr1BbFJf8km+kXeezoadkrbbGrGN6kc4BNJbwz4W
VehogffEkklC9jHmohyZhThrrMg0ynVhZX1wqNou5gvYsrrS+0dM66BogURuQnh5
wRI3ZuUWLL2hxZkHV8J8hjbzl5kr049NfxyPjLjE4mYGUMgd2m+jpiNvWiXrWs1P
AWFvSbLy3DUG9Ii5MfIzk7tJtObl202upmO4SPiYIBA2z71CEgNC87MrpvY+Iu2O
t+0lm12krwuk+ednm9YhVpAZhMdpKUR5XPyXMJCtlXwAKGJ11ldc6f3kW9IlAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUIw0683YpM+DISgnYjqwv/+bnVvYwHwYDVR0j
BBgwFoAU66nXhOnMPypw61JpdqAfSPX1KVEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MDIxNThhZWMtNTI4MS00MmU2LTk3OWItZmNhNjFkNDdjODQ1LzAvRUJBOUQ3ODRF
OUNDM0YyQTcwRUI1MjY5NzZBMDFGNDhGNUY1Mjk1MS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FQkE5RDc4NEU5Q0MzRjJBNzBFQjUyNjk3NkEwMUY0OEY1RjUy
OTUxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDIxNThhZWMtNTI4MS00MmU2LTk3
OWItZmNhNjFkNDdjODQ1LzAvRUJBOUQ3ODRFOUNDM0YyQTcwRUI1MjY5NzZBMDFG
NDhGNUY1Mjk1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAIPPzhXXGcoREIXbg+Tk5c8M5e5Vmk4i/FC0
rJk/Ys4OwAd+mx4uCb5tJqaXGPF2VUnK5moDuCti8w5Oiji5OKFS6AwEUNlqUnKm
NI7p2OvxqA7UsTOWb3jgb8eoWiaA1ICBE5qdKusvsR7Url9mv8RlCOMiZxsAvPIm
3UKIITOdNsDd/JtWxgzwhp5veKA8MFp5uG0FsmWIwfQj6F3fhBA1omjEHn4VTPyv
e/3CpxoNMjD31bpEkCT+7WbQSeDIdoQej6HpMJ6KBmX/qnd5iAo9UsSKuAkelP3c
oq4YVoGz2QZo3z5/KTQI+bIBPDlCjF9+YzKq7eA7PB7eao7cboc=
-----END CERTIFICATE-----
Generated at Mon Jul 27 09:40:08 2026 by rpki-client