
$ rpki-client -vvf rpki-rsync.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/EB1DCD321031C0290E00088B308F6E37F658F0F0.mft
File: EB1DCD321031C0290E00088B308F6E37F658F0F0.mft (raw, json)
Hash identifier: ITBY2YiuHdKhNgCvxJy6K0KjZyxSMOxrnLzvea0DMyU=
Subject key identifier: 3B:16:3F:55:0E:8A:A4:B1:E5:40:1D:D1:20:F7:CD:E2:7F:87:E9:22
Authority key identifier: EB:1D:CD:32:10:31:C0:29:0E:00:08:8B:30:8F:6E:37:F6:58:F0:F0
Certificate issuer: /CN=EB1DCD321031C0290E00088B308F6E37F658F0F0
Certificate serial: 28400540193F0ABC0BCC96C2E44B86574A884BE9
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EB1DCD321031C0290E00088B308F6E37F658F0F0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/EB1DCD321031C0290E00088B308F6E37F658F0F0.mft
Manifest number: 40
Signing time: Thu 18 Jun 2026 11:56:32 +0000
Manifest this update: Thu 18 Jun 2026 11:51:32 +0000
Manifest next update: Fri 19 Jun 2026 12:04:32 +0000
Files and hashes: 1: 3135372e36362e3132352e302f32342d3234203d3e20313532373732.roa (hash: 52gK1ZVXU5lx2N9LIOHuf1720HHZgYLR2YWvzcpZMqA=)
2: EB1DCD321031C0290E00088B308F6E37F658F0F0.crl (hash: JZT0ER4qJXeO3PCVAQX4B5h/VWJdFp+U8iA0Sq1G3pU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/EB1DCD321031C0290E00088B308F6E37F658F0F0.crl
rsync://rpki-rsync.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/EB1DCD321031C0290E00088B308F6E37F658F0F0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EB1DCD321031C0290E00088B308F6E37F658F0F0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 08:44:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:40:05:40:19:3f:0a:bc:0b:cc:96:c2:e4:4b:86:57:4a:88:4b:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB1DCD321031C0290E00088B308F6E37F658F0F0
Validity
Not Before: Jun 18 11:51:32 2026 GMT
Not After : Jun 19 12:04:32 2026 GMT
Subject: CN=3B163F550E8AA4B1E5401DD120F7CDE27F87E922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c6:96:43:41:bc:7a:ce:f8:1e:d4:05:97:d1:
86:84:98:c6:ac:05:46:be:66:05:55:a1:e2:cb:87:
e0:eb:c5:eb:37:ea:4a:8d:9f:b1:cd:4e:49:8e:34:
c5:04:03:5f:ee:cd:e8:e5:f6:b4:8d:af:75:c5:31:
3c:6b:35:c0:2a:67:d0:67:bb:da:b1:f4:76:30:ac:
dd:d6:b8:05:3a:ed:a6:39:b9:b4:bf:b2:9f:83:26:
bd:64:05:44:76:10:25:98:16:fb:7c:ef:3b:08:77:
8b:d9:83:f9:ee:dd:34:f9:4f:d2:8e:fa:52:5d:44:
14:ae:c2:b0:fc:cf:78:51:0d:62:ec:74:0b:79:65:
65:39:b8:7c:0c:94:36:83:86:ac:29:5d:9b:15:9a:
24:fa:09:52:c1:32:10:66:ab:9f:c9:3d:6b:38:28:
24:18:17:fd:5d:76:b7:6c:96:37:19:85:5d:96:6d:
b0:1b:61:0f:fa:b9:48:ea:84:4e:f3:9d:d2:c3:e2:
1a:d2:74:d4:4d:eb:38:2d:2e:b5:07:d0:e8:9d:0c:
e4:80:de:3b:2c:af:83:7c:c8:8c:cb:68:38:8a:4d:
f2:46:16:cb:83:20:a2:92:02:39:e6:f9:c9:33:31:
c8:fa:46:67:29:bf:fa:db:72:ff:bd:87:f9:4c:5d:
0d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:16:3F:55:0E:8A:A4:B1:E5:40:1D:D1:20:F7:CD:E2:7F:87:E9:22
X509v3 Authority Key Identifier:
keyid:EB:1D:CD:32:10:31:C0:29:0E:00:08:8B:30:8F:6E:37:F6:58:F0:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/EB1DCD321031C0290E00088B308F6E37F658F0F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EB1DCD321031C0290E00088B308F6E37F658F0F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/EB1DCD321031C0290E00088B308F6E37F658F0F0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:04:4a:c0:3c:a7:c5:41:08:e3:02:c3:03:46:10:78:2e:98:
fb:e9:7b:b4:65:e7:0d:5c:36:bb:18:ae:50:03:4f:a3:da:dd:
44:67:55:69:2a:53:63:03:d4:92:58:a2:c2:08:8c:0e:a9:85:
50:d8:c5:45:a8:2c:8a:ad:0e:2c:2c:09:65:7c:db:27:68:aa:
f4:2e:03:d0:0c:68:07:b8:02:35:63:a8:a2:95:fc:85:bb:b3:
df:4e:fd:0f:c4:a6:9c:11:2d:4d:c3:46:ff:6d:ba:f2:c6:b8:
6f:34:85:ff:2a:f2:33:36:12:2d:7d:52:df:21:01:1b:38:9d:
51:f5:f8:02:53:e6:0e:df:4b:7e:e3:8d:b6:17:8e:8d:e6:fe:
b3:37:97:b8:8f:c9:08:cf:24:d6:5d:f0:70:3d:51:7b:f5:68:
f3:90:2a:78:80:f5:fa:fb:3a:32:34:5d:d7:f4:40:8d:37:f7:
1c:b6:ef:ee:81:f8:f0:38:5e:5a:91:ee:21:c5:2d:14:ca:81:
8d:45:0c:30:f9:62:d4:30:26:e6:d5:5c:64:56:54:c8:6b:1a:
08:0f:3d:d6:99:c4:47:60:d9:fd:0d:50:f5:2f:a9:51:d6:40:
68:3a:f0:6e:28:33:55:ec:c7:99:e4:c8:73:06:9f:e4:62:23:
c4:a9:09:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 18 17:13:55 2026 by rpki-client