
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/EEC8298F6351E0D1E9099D89D52C21BDF551073F.mft
File: EEC8298F6351E0D1E9099D89D52C21BDF551073F.mft (raw, json)
Hash identifier: CV04YC04J0O+giEN6xzT8saIoZnEfY6BAXAKnVDARQs=
Subject key identifier: 7B:2B:F5:56:07:A8:35:66:4B:C5:94:9A:0D:67:35:FE:29:7E:B4:9A
Authority key identifier: EE:C8:29:8F:63:51:E0:D1:E9:09:9D:89:D5:2C:21:BD:F5:51:07:3F
Certificate issuer: /CN=EEC8298F6351E0D1E9099D89D52C21BDF551073F
Certificate serial: 33EA96479F2A86CF93E1B7E4A7EB39CC956E1100
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EEC8298F6351E0D1E9099D89D52C21BDF551073F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/EEC8298F6351E0D1E9099D89D52C21BDF551073F.mft
Manifest number: B9
Signing time: Thu 17 Sep 2026 11:58:30 +0000
Manifest this update: Thu 17 Sep 2026 11:53:30 +0000
Manifest next update: Fri 18 Sep 2026 14:52:30 +0000
Files and hashes: 1: 3130332e3132352e3138352e302f32342d3234203d3e20313338313134.roa (hash: CZezg3V9YTA7rAg0HQHAWG4rHwKphI57kR4SMjyKwas=)
2: 323030313a6466373a326630303a3a2f34382d3438203d3e20313338313134.roa (hash: BdIV5PbAUlJnh4RApHNLwZ1Ca32+bF84gt8/bqThZfc=)
3: EEC8298F6351E0D1E9099D89D52C21BDF551073F.crl (hash: RABt9tUbCusWV17mzhxIZrXyMKNm6lMmQQCc/zE2RO4=)
4: 3130332e3132352e3138342e302f32342d3234203d3e20313338313134.roa (hash: pj1vmNVgdJMcLPpwXDPbTSTqYs/nj1UjJZcEGgiuKJM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/EEC8298F6351E0D1E9099D89D52C21BDF551073F.crl
rsync://rpki-rsync.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/EEC8298F6351E0D1E9099D89D52C21BDF551073F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EEC8298F6351E0D1E9099D89D52C21BDF551073F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 09:57:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:ea:96:47:9f:2a:86:cf:93:e1:b7:e4:a7:eb:39:cc:95:6e:11:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EEC8298F6351E0D1E9099D89D52C21BDF551073F
Validity
Not Before: Sep 17 11:53:30 2026 GMT
Not After : Sep 18 14:52:30 2026 GMT
Subject: CN=7B2BF55607A835664BC5949A0D6735FE297EB49A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ca:b5:cf:0f:6f:fc:95:b0:f8:cf:ca:2f:da:
99:1a:bf:6e:d2:04:fb:82:9d:d4:ec:1c:28:48:bf:
d5:13:c1:39:bf:2e:67:1e:3a:16:0e:8e:e6:7a:0a:
1a:ec:03:65:f1:aa:65:13:cc:fc:42:bc:f6:b5:6c:
08:5c:a1:15:c1:ee:1b:37:e9:da:53:7f:f7:5d:78:
7b:74:f7:57:d3:3e:d9:2f:46:a0:3e:a8:20:fb:05:
34:b7:5a:c4:c4:35:67:84:77:b8:5d:90:b3:89:1b:
ba:42:05:84:ba:b0:ba:98:6e:cc:42:59:9b:c8:78:
63:e7:2f:29:c9:46:6c:35:c8:dc:1c:aa:1b:3f:16:
94:5d:d6:ec:0c:d7:8c:e4:bb:87:30:f7:db:9b:e9:
84:6d:58:98:3d:21:34:82:05:c2:a3:80:4b:58:ad:
d1:52:0a:30:1c:94:1d:a8:14:54:4a:5d:96:54:43:
b0:9f:20:b0:08:ac:08:2e:df:70:66:b6:88:b2:7a:
7c:91:02:4f:5f:5b:b3:7e:e3:38:d3:46:f0:22:c2:
35:d7:6f:36:51:f5:08:da:7a:fb:ac:85:00:d8:21:
47:c5:96:a6:5d:6e:cc:ad:35:6f:88:4d:44:6d:11:
db:60:0d:14:d3:07:85:10:81:77:eb:f2:02:01:c8:
3c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:2B:F5:56:07:A8:35:66:4B:C5:94:9A:0D:67:35:FE:29:7E:B4:9A
X509v3 Authority Key Identifier:
keyid:EE:C8:29:8F:63:51:E0:D1:E9:09:9D:89:D5:2C:21:BD:F5:51:07:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/EEC8298F6351E0D1E9099D89D52C21BDF551073F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EEC8298F6351E0D1E9099D89D52C21BDF551073F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/EEC8298F6351E0D1E9099D89D52C21BDF551073F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:92:57:0c:dc:cb:f7:45:d2:73:a4:f7:85:a7:af:ac:ef:b4:
34:15:04:17:91:fa:49:07:50:de:b8:e1:be:0f:3a:33:70:51:
6d:7a:de:0c:4e:79:3e:dc:fb:03:dd:ce:2d:fe:c6:45:07:28:
49:a4:2a:0b:c2:ac:80:1e:a1:88:f5:83:0d:8e:31:3c:96:83:
8b:c3:3b:12:2e:49:06:8b:66:df:ca:cc:f0:c1:59:83:79:86:
d7:38:45:35:e3:9b:7c:a2:5e:81:66:c0:90:34:62:23:2c:96:
9b:d6:6f:f4:52:02:61:48:57:dd:c1:a7:6b:ac:dc:72:1c:1d:
94:8e:bc:f2:5f:f0:2f:95:a9:62:0a:7c:9f:13:a2:e2:4e:08:
79:70:ae:cb:94:d3:b0:bb:b1:e6:29:0d:24:27:da:79:a8:2b:
30:81:cf:ef:34:89:c3:d4:56:92:9c:68:7c:8c:de:cc:1f:fa:
d9:47:c8:a4:b3:b6:e6:d0:a9:cd:0f:ca:44:ba:54:4c:6f:8a:
e1:fb:bf:c3:8a:2b:04:04:9c:0e:e9:58:b1:5a:56:c8:99:f3:
e8:df:28:c6:a0:32:fa:d7:e8:68:dd:cf:30:c7:b0:fc:62:e9:
36:82:e2:1a:54:03:92:fe:f8:92:2a:2c:0f:44:47:18:35:9f:
7e:0b:16:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 15:08:43 2026 by rpki-client