
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.mft
File: EAF1BBC2E7852A08EC9726DF037B7A90020F613C.mft (raw, json)
Hash identifier: mPVXxGyTbd0Fg2XuEw6n+LP6+SpH6ogy8lac8lqW8bA=
Subject key identifier: 61:6E:0F:A5:55:B8:63:6B:D0:2E:2C:42:06:87:DB:FE:EB:E5:CC:53
Authority key identifier: EA:F1:BB:C2:E7:85:2A:08:EC:97:26:DF:03:7B:7A:90:02:0F:61:3C
Certificate issuer: /CN=EAF1BBC2E7852A08EC9726DF037B7A90020F613C
Certificate serial: 10CC8393FE063F550C1EA5E1A93B547CED26502A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.mft
Manifest number: EB
Signing time: Sun 25 Oct 2026 05:02:34 +0000
Manifest this update: Sun 25 Oct 2026 04:57:34 +0000
Manifest next update: Mon 26 Oct 2026 08:42:34 +0000
Files and hashes: 1: 3130332e37362e3135302e302f32342d3234203d3e20313335343737.roa (hash: xYxE6IzCdxb+aq4Kkm/AnjYa+vu3xdG+mLXx5vkCP/U=)
2: 3130332e37362e3134382e302f32342d3234203d3e20313335343737.roa (hash: Tsm6R3Ykoq+qGUHJdq4ks8X4b5Uy0ypiE0/txgdjmm4=)
3: 3130332e37362e3135312e302f32342d3234203d3e20313335343737.roa (hash: qw6OlEu48FrPsEmKgwHPSjOidfOJLUIet7s/2iStFrA=)
4: 3132302e38392e39302e302f32332d3234203d3e20313335343737.roa (hash: L8OlDd+zcMlp2nj6z/A4ihQhVRTYQCBk+qSvJaFpcus=)
5: 3130332e332e35382e302f32342d3234203d3e20313335343737.roa (hash: 2zqd8AgBddwBm4KIXvjiblLxU15/BrCCnreac7skVlA=)
6: 323430373a366638303a3a2f33322d3438203d3e20313335343737.roa (hash: P366bIkTOlc69Ppfa9a3mTWNreZ6tb8vIXj7vOkMLBM=)
7: EAF1BBC2E7852A08EC9726DF037B7A90020F613C.crl (hash: 4LC2ben+vTodollCWbi/37P3zjMVPcKkshHm9iNefkc=)
8: 3230332e32392e32362e302f32342d3234203d3e20313335343737.roa (hash: 5DkSgMYDvgEBxCCplmwfDoevI8VI5H/bGiFDzCRHnts=)
9: 3130332e37362e3134392e302f32342d3234203d3e20313335343737.roa (hash: f59rz1HETJlgvZwIKtKFdh5XtKqyQqDaf24eWmjJW6o=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.crl
rsync://rpki-rsync.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Oct 2026 19:21:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:cc:83:93:fe:06:3f:55:0c:1e:a5:e1:a9:3b:54:7c:ed:26:50:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EAF1BBC2E7852A08EC9726DF037B7A90020F613C
Validity
Not Before: Oct 25 04:57:34 2026 GMT
Not After : Oct 26 08:42:34 2026 GMT
Subject: CN=616E0FA555B8636BD02E2C420687DBFEEBE5CC53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:a8:8a:5d:25:21:88:75:a1:15:89:49:fa:b8:
20:a8:6a:ed:4a:6d:dc:c4:13:b3:e0:99:a8:ea:97:
58:85:77:af:9e:43:12:e1:61:29:01:b2:35:ac:fb:
ed:d9:82:c0:25:e8:8c:d9:e7:d6:ae:ff:09:e8:b2:
2b:c7:ce:88:59:bb:79:16:64:27:5c:e3:47:bd:7d:
39:dd:86:9c:f2:35:5e:95:2c:03:98:02:02:37:9e:
4e:c1:40:6b:07:1b:f7:08:4e:91:23:99:da:75:a2:
d7:13:2d:6e:01:75:85:49:a0:86:4b:ba:ca:e1:91:
5e:35:f5:57:ed:91:6a:d3:26:1c:bc:9a:b7:82:94:
5d:ae:5d:e3:bb:12:f2:41:ad:37:ca:68:9f:63:a8:
2b:e3:47:a1:bf:d9:f2:d9:3b:aa:7d:c0:ac:fe:d1:
92:56:ea:63:a3:07:35:b4:1a:c9:c5:36:17:71:10:
ef:00:01:e1:78:e2:0f:0d:00:d9:8e:50:6d:6c:30:
13:35:97:0b:2c:a7:88:76:85:80:62:76:1d:03:af:
76:9c:b2:65:c5:56:32:b0:2a:02:84:44:c5:07:ae:
d4:91:7e:64:01:3f:04:81:59:0c:cc:93:34:eb:0d:
de:9d:ab:eb:e2:eb:be:c1:fc:d1:65:f1:20:a7:19:
4d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:6E:0F:A5:55:B8:63:6B:D0:2E:2C:42:06:87:DB:FE:EB:E5:CC:53
X509v3 Authority Key Identifier:
keyid:EA:F1:BB:C2:E7:85:2A:08:EC:97:26:DF:03:7B:7A:90:02:0F:61:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:63:f2:70:a6:65:00:d4:2d:ff:ea:ce:43:9b:3a:bc:f0:87:
4c:e5:6f:4c:2d:4d:2b:b9:20:54:bc:4a:17:d7:1a:2d:c8:b1:
a4:c2:53:c1:ba:85:f0:28:9c:32:80:28:e5:2d:c5:f4:a2:77:
25:83:45:46:a1:a5:5b:22:e4:c2:7d:0f:42:63:5f:8d:73:0f:
e9:38:44:09:e7:76:a5:6a:72:51:41:02:a3:37:e3:c8:81:cb:
52:1e:c4:87:e1:a1:1d:fd:8c:c2:0f:4a:f1:1f:87:30:2a:21:
a4:9d:1f:cc:5d:31:96:c6:06:b2:61:18:4b:34:0f:d8:bc:63:
14:4e:99:7a:33:70:19:ee:6f:4d:c4:94:b9:23:b1:29:41:23:
67:16:e3:79:54:05:1e:37:43:3e:9f:1f:b1:53:36:20:9c:79:
a1:42:b3:f0:d5:aa:5a:65:ad:be:eb:6a:f0:5b:ba:d7:68:32:
24:57:7a:b4:8a:0b:b9:70:25:bf:47:09:79:35:2d:1a:6f:30:
a5:d1:24:f3:96:e8:b2:40:d6:9a:98:93:18:b3:b8:4d:e6:ae:
f1:82:8c:52:88:ac:9a:91:a2:52:ea:99:e7:57:04:34:50:e0:
4e:67:3b:8b:1e:9c:08:71:81:97:c7:d4:43:f3:b5:40:33:1a:
a5:d2:78:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 08:02:52 2026 by rpki-client