
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/EB84D1FD50105DB5E145FF5740362A466529E4BC.mft
File: EB84D1FD50105DB5E145FF5740362A466529E4BC.mft (raw, json)
Hash identifier: wW+bKQb/uSpIK0M6bYtGf+uKGssajJGJyQ4tIuHI3w0=
Subject key identifier: BA:AD:9D:1B:6B:5D:4A:5C:CC:E6:21:1E:A9:AD:C5:BB:DA:CE:67:86
Authority key identifier: EB:84:D1:FD:50:10:5D:B5:E1:45:FF:57:40:36:2A:46:65:29:E4:BC
Certificate issuer: /CN=EB84D1FD50105DB5E145FF5740362A466529E4BC
Certificate serial: 6B0028D896BD2C45CF5C80205E384C16D1E0DADF
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB84D1FD50105DB5E145FF5740362A466529E4BC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/EB84D1FD50105DB5E145FF5740362A466529E4BC.mft
Manifest number: BB
Signing time: Thu 17 Sep 2026 03:48:10 +0000
Manifest this update: Thu 17 Sep 2026 03:43:10 +0000
Manifest next update: Fri 18 Sep 2026 04:27:10 +0000
Files and hashes: 1: 3130332e38302e3233302e302f32342d3234203d3e20313531353832.roa (hash: 8eXmIfa2WKiyCToWNIZ0+G7GoNuy3hDgnxZJe2S+QFo=)
2: 3130332e38302e3233312e302f32342d3234203d3e20313531353832.roa (hash: v91Yrdr8uFMWDW7PghDA31MNllOzjDzQevPYWa9AiiM=)
3: EB84D1FD50105DB5E145FF5740362A466529E4BC.crl (hash: Rs6HzmF2zt9awalOYn1mQIeB3n/gwLFpqOs3hQMf3T8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/EB84D1FD50105DB5E145FF5740362A466529E4BC.crl
rsync://rpki-rsync.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/EB84D1FD50105DB5E145FF5740362A466529E4BC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB84D1FD50105DB5E145FF5740362A466529E4BC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 04:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:00:28:d8:96:bd:2c:45:cf:5c:80:20:5e:38:4c:16:d1:e0:da:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB84D1FD50105DB5E145FF5740362A466529E4BC
Validity
Not Before: Sep 17 03:43:10 2026 GMT
Not After : Sep 18 04:27:10 2026 GMT
Subject: CN=BAAD9D1B6B5D4A5CCCE6211EA9ADC5BBDACE6786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:76:ba:03:a7:b7:62:ff:b4:09:0a:5e:d5:13:
f9:af:ed:de:38:2f:b4:69:a7:c7:fd:96:f9:d7:b8:
17:e2:8b:6f:a9:e5:a0:ef:95:59:b4:66:79:d3:fc:
67:dd:11:be:9d:67:e2:4a:a3:a5:e0:88:13:4e:dc:
8d:06:af:f4:77:d5:6f:47:f5:04:b8:8d:04:d4:45:
d2:3f:3c:8a:db:d6:39:30:a7:ec:da:3e:75:60:15:
28:f3:a9:c8:e4:50:b0:dd:cb:96:f5:f9:5c:cd:bc:
d9:f5:cf:e5:4b:47:2a:ed:7b:84:63:27:b7:24:9f:
d8:61:f3:ed:77:e7:02:b0:c7:21:db:e4:80:6a:5b:
f2:0e:f3:7f:ad:32:6c:86:3d:3d:90:14:97:5e:f9:
96:5f:64:a7:ea:f2:7b:71:f2:05:d9:7d:51:55:6c:
bc:2d:03:89:f4:fb:70:02:74:01:9d:f6:af:be:de:
8c:4b:4a:2d:6b:e0:f6:04:b0:a2:cf:86:c5:9a:0a:
5a:f4:64:4f:2b:e0:87:1b:a1:7b:57:f0:f8:5a:6d:
ef:a3:ee:2e:0c:15:0c:17:36:23:7c:63:c3:da:4a:
93:a4:68:7e:63:75:d5:88:b5:3b:15:ef:df:2d:79:
d5:84:d3:a3:d7:73:fc:13:86:c2:69:3e:af:ad:a5:
8e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:AD:9D:1B:6B:5D:4A:5C:CC:E6:21:1E:A9:AD:C5:BB:DA:CE:67:86
X509v3 Authority Key Identifier:
keyid:EB:84:D1:FD:50:10:5D:B5:E1:45:FF:57:40:36:2A:46:65:29:E4:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/EB84D1FD50105DB5E145FF5740362A466529E4BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB84D1FD50105DB5E145FF5740362A466529E4BC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/EB84D1FD50105DB5E145FF5740362A466529E4BC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:ce:fd:03:cf:16:d4:c6:d0:1d:11:6c:31:df:60:ec:57:18:
74:2e:77:96:5d:8d:e8:af:3c:79:39:ec:4e:d2:9b:30:72:90:
ae:b4:c2:94:eb:8b:a9:b6:d3:07:6c:3c:0b:fd:8b:e2:34:6c:
84:1b:9c:93:c2:4f:90:fa:22:1e:35:e9:9a:cb:3a:d6:2c:97:
ae:2a:05:78:a1:06:8e:3c:b9:2b:9a:c9:b2:a6:96:f0:c2:23:
30:8c:57:b7:5f:ef:a0:a7:1b:83:2c:fa:5d:d3:31:03:da:d0:
1e:8c:49:d7:59:96:b6:63:c1:69:9d:71:56:ba:8f:81:db:44:
ae:26:7b:af:b7:95:5d:17:3c:e9:b9:27:74:02:33:60:8e:83:
f8:97:9d:28:b2:f7:17:71:84:4e:02:b5:3b:53:12:6d:55:6e:
92:43:32:e8:e0:33:3a:73:6d:46:6c:6f:dc:dc:99:08:2e:10:
c3:c6:a0:13:3e:d1:4a:b0:11:11:16:66:5f:67:6c:79:72:d3:
1b:18:cf:70:25:a4:b4:bc:30:2e:f5:6b:b9:c7:fa:10:56:2b:
3a:88:f5:44:71:b3:74:f3:2a:49:ec:0f:b5:d5:45:b3:ff:6a:
29:41:30:c7:a1:0d:4a:4f:bf:ae:7d:7c:da:e5:40:19:13:e0:
32:45:68:4d
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUawAo2Ja9LEXPXIAgXjhMFtHg2t8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUI4NEQxRkQ1MDEwNURCNUUxNDVGRjU3NDAzNjJBNDY2
NTI5RTRCQzAeFw0yNjA5MTcwMzQzMTBaFw0yNjA5MTgwNDI3MTBaMDMxMTAvBgNV
BAMTKEJBQUQ5RDFCNkI1RDRBNUNDQ0U2MjExRUE5QURDNUJCREFDRTY3ODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLdroDp7di/7QJCl7VE/mv7d44
L7Rpp8f9lvnXuBfii2+p5aDvlVm0ZnnT/GfdEb6dZ+JKo6XgiBNO3I0Gr/R31W9H
9QS4jQTURdI/PIrb1jkwp+zaPnVgFSjzqcjkULDdy5b1+VzNvNn1z+VLRyrte4Rj
J7ckn9hh8+135wKwxyHb5IBqW/IO83+tMmyGPT2QFJde+ZZfZKfq8ntx8gXZfVFV
bLwtA4n0+3ACdAGd9q++3oxLSi1r4PYEsKLPhsWaClr0ZE8r4IcboXtX8Phabe+j
7i4MFQwXNiN8Y8PaSpOkaH5jddWItTsV798tedWE06PXc/wThsJpPq+tpY6rAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUuq2dG2tdSlzM5iEeqa3Fu9rOZ4YwHwYDVR0j
BBgwFoAU64TR/VAQXbXhRf9XQDYqRmUp5LwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NzQxZTgyMjMtY2M2OC00MTBlLWI2N2ItOWI4ODI1YjVjZDVmLzAvRUI4NEQxRkQ1
MDEwNURCNUUxNDVGRjU3NDAzNjJBNDY2NTI5RTRCQy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FQjg0RDFGRDUwMTA1REI1RTE0NUZGNTc0MDM2MkE0NjY1MjlF
NEJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzQxZTgyMjMtY2M2OC00MTBlLWI2
N2ItOWI4ODI1YjVjZDVmLzAvRUI4NEQxRkQ1MDEwNURCNUUxNDVGRjU3NDAzNjJB
NDY2NTI5RTRCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBANHO/QPPFtTG0B0RbDHfYOxXGHQud5Zdjeiv
PHk57E7SmzBykK60wpTri6m20wdsPAv9i+I0bIQbnJPCT5D6Ih416ZrLOtYsl64q
BXihBo48uSuaybKmlvDCIzCMV7df76CnG4Ms+l3TMQPa0B6MSddZlrZjwWmdcVa6
j4HbRK4me6+3lV0XPOm5J3QCM2COg/iXnSiy9xdxhE4CtTtTEm1VbpJDMujgMzpz
bUZsb9zcmQguEMPGoBM+0UqwEREWZl9nbHly0xsYz3AlpLS8MC71a7nH+hBWKzqI
9URxs3TzKknsD7XVRbP/ailBMMehDUpPv659fNrlQBkT4DJFaE0=
-----END CERTIFICATE-----
Generated at Thu Sep 17 09:21:11 2026 by rpki-client