
$ rpki-client -vvf rpki-rsync.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/EB1DCD321031C0290E00088B308F6E37F658F0F0.mft
File: EB1DCD321031C0290E00088B308F6E37F658F0F0.mft (raw, json)
Hash identifier: wrGTCIQCinX5yHd47qp3LIn/7GC2PJ8POHuGyySMTV0=
Subject key identifier: C8:BB:3B:54:E0:0F:5A:56:49:FB:70:3D:B2:C1:9F:6B:72:B3:24:BD
Authority key identifier: EB:1D:CD:32:10:31:C0:29:0E:00:08:8B:30:8F:6E:37:F6:58:F0:F0
Certificate issuer: /CN=EB1DCD321031C0290E00088B308F6E37F658F0F0
Certificate serial: 19BF5ABCE2557F4AB7026A523634ABA86A3C09F9
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EB1DCD321031C0290E00088B308F6E37F658F0F0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/EB1DCD321031C0290E00088B308F6E37F658F0F0.mft
Manifest number: 7C
Signing time: Sun 02 Aug 2026 13:18:48 +0000
Manifest this update: Sun 02 Aug 2026 13:13:48 +0000
Manifest next update: Mon 03 Aug 2026 15:13:48 +0000
Files and hashes: 1: 3135372e36362e3132352e302f32342d3234203d3e20313532373732.roa (hash: 52gK1ZVXU5lx2N9LIOHuf1720HHZgYLR2YWvzcpZMqA=)
2: EB1DCD321031C0290E00088B308F6E37F658F0F0.crl (hash: vKPYlDYjkJFTuEhxsE71a9yRFvb/fCrjevUdN/YkeUI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/EB1DCD321031C0290E00088B308F6E37F658F0F0.crl
rsync://rpki-rsync.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/EB1DCD321031C0290E00088B308F6E37F658F0F0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EB1DCD321031C0290E00088B308F6E37F658F0F0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 15:13:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:bf:5a:bc:e2:55:7f:4a:b7:02:6a:52:36:34:ab:a8:6a:3c:09:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB1DCD321031C0290E00088B308F6E37F658F0F0
Validity
Not Before: Aug 2 13:13:48 2026 GMT
Not After : Aug 3 15:13:48 2026 GMT
Subject: CN=C8BB3B54E00F5A5649FB703DB2C19F6B72B324BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8e:80:2c:33:95:09:00:9e:3c:41:1e:34:f1:
9c:11:fa:b2:a1:41:1d:a5:bf:62:8f:0f:aa:37:09:
78:b2:bf:c8:98:28:55:2f:40:6f:ca:0c:90:a1:6f:
11:08:e4:ec:72:54:95:70:90:13:99:76:2b:61:c5:
77:44:56:c3:2d:0c:b2:31:7e:df:a4:6c:7e:d4:5b:
40:8d:11:b2:13:61:08:67:29:a9:04:49:f3:6c:fc:
77:e5:09:6f:05:3d:b9:33:3f:e7:35:09:49:3e:d7:
9c:86:0d:e3:9f:f9:ca:43:d0:32:54:2d:32:6e:2d:
f0:21:f5:0d:cd:93:77:4f:9d:01:0f:73:18:28:1d:
aa:5e:53:1c:e2:fb:b9:ff:11:79:a6:89:3f:f5:0b:
e2:de:d5:6d:cf:de:49:b1:0a:c8:d4:41:73:bc:ad:
9c:35:02:75:28:15:62:4e:bd:47:96:e3:35:8f:70:
7b:e3:a9:d6:d6:e1:d7:72:f9:11:12:3f:cb:ba:a9:
9d:2d:af:6a:63:f2:98:58:1c:81:d9:02:60:e7:d8:
71:7e:30:84:c8:f6:09:a3:75:93:cb:dc:d0:9c:d8:
2a:81:c1:c0:26:10:0a:02:69:81:13:c4:db:59:14:
68:35:e6:ee:80:cb:b4:24:a6:38:14:2c:15:70:fd:
04:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:BB:3B:54:E0:0F:5A:56:49:FB:70:3D:B2:C1:9F:6B:72:B3:24:BD
X509v3 Authority Key Identifier:
keyid:EB:1D:CD:32:10:31:C0:29:0E:00:08:8B:30:8F:6E:37:F6:58:F0:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/EB1DCD321031C0290E00088B308F6E37F658F0F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EB1DCD321031C0290E00088B308F6E37F658F0F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/EB1DCD321031C0290E00088B308F6E37F658F0F0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:f9:00:22:af:b7:1e:16:53:5d:9f:cd:b2:bc:dd:1c:17:85:
9a:00:e6:d9:e3:24:e4:57:4b:69:3f:d1:07:8c:6f:53:f7:a5:
b6:dd:b8:25:1d:8a:bf:12:76:5d:0e:93:5f:e2:9d:f7:38:f3:
6c:91:5a:0c:fc:d8:c3:69:38:a7:6d:1a:7c:fe:33:95:e5:e3:
43:ba:77:e8:7a:93:06:ef:f3:b0:7b:8e:9c:b2:f9:3b:d9:a4:
95:7f:96:a7:6b:4d:5c:95:dd:b2:c8:d9:cc:14:d7:b7:9c:93:
70:68:e1:67:a4:4b:d8:29:21:9e:d5:0b:f5:47:1d:0e:79:18:
60:cb:7c:52:11:1f:e3:46:88:2c:5c:6e:f1:9b:f7:7f:e6:2c:
20:06:60:86:f4:02:32:e0:fd:02:f6:96:6b:05:7f:88:16:47:
78:70:10:fc:27:02:36:88:91:b5:13:9c:fa:3f:ca:7c:6c:22:
15:4a:ad:0e:19:5e:fd:73:35:b4:30:01:6a:19:2b:a9:60:94:
a6:2a:2b:dc:82:33:d0:b9:10:e1:51:a3:50:0a:92:a0:88:53:
e3:f9:56:bd:8d:4e:ac:f6:a8:8c:f7:38:65:f5:0f:27:c8:b1:
88:ea:9a:56:fb:4d:d8:2b:15:8b:43:09:3a:0f:11:5e:ef:e3:
5c:7a:c3:1f
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUGb9avOJVf0q3AmpSNjSrqGo8CfkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUIxRENEMzIxMDMxQzAyOTBFMDAwODhCMzA4RjZFMzdG
NjU4RjBGMDAeFw0yNjA4MDIxMzEzNDhaFw0yNjA4MDMxNTEzNDhaMDMxMTAvBgNV
BAMTKEM4QkIzQjU0RTAwRjVBNTY0OUZCNzAzREIyQzE5RjZCNzJCMzI0QkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcjoAsM5UJAJ48QR408ZwR+rKh
QR2lv2KPD6o3CXiyv8iYKFUvQG/KDJChbxEI5OxyVJVwkBOZdithxXdEVsMtDLIx
ft+kbH7UW0CNEbITYQhnKakESfNs/HflCW8FPbkzP+c1CUk+15yGDeOf+cpD0DJU
LTJuLfAh9Q3Nk3dPnQEPcxgoHapeUxzi+7n/EXmmiT/1C+Le1W3P3kmxCsjUQXO8
rZw1AnUoFWJOvUeW4zWPcHvjqdbW4ddy+RESP8u6qZ0tr2pj8phYHIHZAmDn2HF+
MITI9gmjdZPL3NCc2CqBwcAmEAoCaYETxNtZFGg15u6Ay7QkpjgULBVw/QQ/AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUyLs7VOAPWlZJ+3A9ssGfa3KzJL0wHwYDVR0j
BBgwFoAU6x3NMhAxwCkOAAiLMI9uN/ZY8PAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
N2NmMDFlYzYtOGU4OS00MDJhLTkwYzctNTBjNmYxNGNkMjQyLzAvRUIxRENEMzIx
MDMxQzAyOTBFMDAwODhCMzA4RjZFMzdGNjU4RjBGMC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC9FQjFEQ0QzMjEwMzFDMDI5MEUwMDA4OEIzMDhGNkUzN0Y2NThG
MEYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2NmMDFlYzYtOGU4OS00MDJhLTkw
YzctNTBjNmYxNGNkMjQyLzAvRUIxRENEMzIxMDMxQzAyOTBFMDAwODhCMzA4RjZF
MzdGNjU4RjBGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAID5ACKvtx4WU12fzbK83RwXhZoA5tnjJORX
S2k/0QeMb1P3pbbduCUdir8Sdl0Ok1/infc482yRWgz82MNpOKdtGnz+M5Xl40O6
d+h6kwbv87B7jpyy+TvZpJV/lqdrTVyV3bLI2cwU17eck3Bo4WekS9gpIZ7VC/VH
HQ55GGDLfFIRH+NGiCxcbvGb93/mLCAGYIb0AjLg/QL2lmsFf4gWR3hwEPwnAjaI
kbUTnPo/ynxsIhVKrQ4ZXv1zNbQwAWoZK6lglKYqK9yCM9C5EOFRo1AKkqCIU+P5
Vr2NTqz2qIz3OGX1DyfIsYjqmlb7TdgrFYtDCToPEV7v41x6wx8=
-----END CERTIFICATE-----
Generated at Sun Aug 2 20:34:55 2026 by rpki-client