
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.mft
File: EAF1BBC2E7852A08EC9726DF037B7A90020F613C.mft (raw, json)
Hash identifier: KwcgoCkp9pQiBft0/L5y64XiDrvouiADUKG+JonbZoI=
Subject key identifier: CB:FE:87:1F:D3:00:26:06:E1:39:DA:AD:43:8E:16:42:25:EE:43:6F
Authority key identifier: EA:F1:BB:C2:E7:85:2A:08:EC:97:26:DF:03:7B:7A:90:02:0F:61:3C
Certificate issuer: /CN=EAF1BBC2E7852A08EC9726DF037B7A90020F613C
Certificate serial: 6A636BC8B7ED4A0F3E68DF61228751BEA490ED6D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.mft
Manifest number: 42
Signing time: Sat 20 Jun 2026 02:22:41 +0000
Manifest this update: Sat 20 Jun 2026 02:17:41 +0000
Manifest next update: Sun 21 Jun 2026 05:53:41 +0000
Files and hashes: 1: 3130332e37362e3135302e302f32342d3234203d3e20313335343737.roa (hash: xYxE6IzCdxb+aq4Kkm/AnjYa+vu3xdG+mLXx5vkCP/U=)
2: 3130332e37362e3135312e302f32342d3234203d3e20313335343737.roa (hash: qw6OlEu48FrPsEmKgwHPSjOidfOJLUIet7s/2iStFrA=)
3: EAF1BBC2E7852A08EC9726DF037B7A90020F613C.crl (hash: LvbUvxGTc00ZoTQtflP5wAoldwDHFx+t9l2A0bxQMH8=)
4: 3230332e32392e32362e302f32342d3234203d3e20313335343737.roa (hash: 5DkSgMYDvgEBxCCplmwfDoevI8VI5H/bGiFDzCRHnts=)
5: 3132302e38392e39302e302f32332d3234203d3e20313335343737.roa (hash: L8OlDd+zcMlp2nj6z/A4ihQhVRTYQCBk+qSvJaFpcus=)
6: 323430373a366638303a3a2f33322d3438203d3e20313335343737.roa (hash: P366bIkTOlc69Ppfa9a3mTWNreZ6tb8vIXj7vOkMLBM=)
7: 3130332e332e35382e302f32342d3234203d3e20313335343737.roa (hash: 2zqd8AgBddwBm4KIXvjiblLxU15/BrCCnreac7skVlA=)
8: 3130332e37362e3134382e302f32342d3234203d3e20313335343737.roa (hash: Tsm6R3Ykoq+qGUHJdq4ks8X4b5Uy0ypiE0/txgdjmm4=)
9: 3130332e37362e3134392e302f32342d3234203d3e20313335343737.roa (hash: f59rz1HETJlgvZwIKtKFdh5XtKqyQqDaf24eWmjJW6o=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.crl
rsync://rpki-rsync.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 21 Jun 2026 05:53:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:63:6b:c8:b7:ed:4a:0f:3e:68:df:61:22:87:51:be:a4:90:ed:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EAF1BBC2E7852A08EC9726DF037B7A90020F613C
Validity
Not Before: Jun 20 02:17:41 2026 GMT
Not After : Jun 21 05:53:41 2026 GMT
Subject: CN=CBFE871FD3002606E139DAAD438E164225EE436F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1b:d1:5f:be:1b:0c:77:8d:54:9b:78:07:62:
74:7e:86:3a:30:c1:66:ce:be:c9:bc:92:48:f6:54:
c5:bc:72:14:b2:9f:05:93:0d:3f:a2:0e:2c:d5:81:
b8:6b:00:38:45:13:14:99:0a:d8:8c:0a:21:d5:c0:
1c:17:8d:5d:16:f9:14:b2:1a:33:12:8f:24:39:48:
d4:60:db:fa:9d:22:e9:42:32:18:8a:61:1b:b9:65:
7c:80:45:c5:f1:09:fa:90:15:b0:92:5c:7a:69:9a:
6c:63:cf:7f:2b:ca:03:fd:cd:94:b9:ac:90:11:a9:
9e:0a:a7:ab:85:85:8e:54:75:4f:9d:48:0c:66:6a:
09:98:8f:42:1c:6c:b7:2a:c4:af:a2:5a:65:2b:95:
0e:3d:99:32:0c:36:97:44:77:c7:b3:be:75:cf:f6:
64:bd:b1:7e:52:9d:9a:c3:76:c9:8b:0f:8b:a1:b3:
9c:62:2a:6d:b2:c8:05:f8:4c:2a:17:91:70:2b:2b:
8b:54:57:11:cd:a3:fd:0f:c8:c2:88:e2:87:39:46:
0b:d8:e8:2c:7b:2d:3b:c8:72:09:f2:c4:a1:01:b1:
d6:2a:c4:07:b1:e0:ab:6c:31:36:a9:04:70:8d:82:
f8:b4:3a:26:17:3a:43:00:b9:5f:2b:f7:57:3c:d8:
83:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:FE:87:1F:D3:00:26:06:E1:39:DA:AD:43:8E:16:42:25:EE:43:6F
X509v3 Authority Key Identifier:
keyid:EA:F1:BB:C2:E7:85:2A:08:EC:97:26:DF:03:7B:7A:90:02:0F:61:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:c2:8e:46:20:1b:7f:1c:70:2e:a5:38:b2:7e:cf:a4:8e:63:
76:d0:1a:fd:2d:0d:c2:7d:59:26:20:c8:fb:44:4b:dc:25:bc:
c3:76:44:44:08:1a:3c:17:d4:69:c4:1f:d0:58:44:48:96:a3:
c2:98:19:fb:c9:66:54:9b:11:9f:ee:d9:c1:4d:d5:91:6a:b4:
b7:16:17:6a:e0:25:a2:70:b6:21:fc:b4:34:92:5f:9f:fe:bc:
b8:48:aa:d7:a8:15:69:d3:74:f8:8b:b2:a7:d0:e2:a8:6d:6f:
4f:03:9e:e5:55:73:10:4a:94:60:b9:31:c4:36:b4:e3:c1:47:
f1:d6:77:fe:a6:96:b4:82:6b:da:2c:0e:b5:80:e0:8e:75:5c:
54:ce:30:5f:e2:e2:c4:9a:d6:94:26:0d:0d:6a:46:39:2b:0e:
3b:e5:96:f0:26:f1:8e:dc:be:29:61:25:3f:1d:f4:4e:20:70:
33:51:c2:37:d7:c0:fa:7e:90:3d:4e:75:d5:3b:6b:6c:89:f7:
c1:d2:09:a1:2e:9d:d3:2f:f3:ab:51:87:9f:cb:a0:e7:8e:4c:
5a:94:5c:1a:ce:4b:e5:d9:86:1e:a3:fb:e9:af:24:57:cc:4d:
65:fb:b5:3b:79:b9:29:c1:c8:64:ec:ae:45:6e:84:41:5c:a0:
c8:09:52:aa
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUamNryLftSg8+aN9hIodRvqSQ7W0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUFGMUJCQzJFNzg1MkEwOEVDOTcyNkRGMDM3QjdBOTAw
MjBGNjEzQzAeFw0yNjA2MjAwMjE3NDFaFw0yNjA2MjEwNTUzNDFaMDMxMTAvBgNV
BAMTKENCRkU4NzFGRDMwMDI2MDZFMTM5REFBRDQzOEUxNjQyMjVFRTQzNkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEG9FfvhsMd41Um3gHYnR+hjow
wWbOvsm8kkj2VMW8chSynwWTDT+iDizVgbhrADhFExSZCtiMCiHVwBwXjV0W+RSy
GjMSjyQ5SNRg2/qdIulCMhiKYRu5ZXyARcXxCfqQFbCSXHppmmxjz38rygP9zZS5
rJARqZ4Kp6uFhY5UdU+dSAxmagmYj0IcbLcqxK+iWmUrlQ49mTIMNpdEd8ezvnXP
9mS9sX5SnZrDdsmLD4uhs5xiKm2yyAX4TCoXkXArK4tUVxHNo/0PyMKI4oc5RgvY
6Cx7LTvIcgnyxKEBsdYqxAex4KtsMTapBHCNgvi0OiYXOkMAuV8r91c82INbAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUy/6HH9MAJgbhOdqtQ44WQiXuQ28wHwYDVR0j
BBgwFoAU6vG7wueFKgjslybfA3t6kAIPYTwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YTdmZGY0M2UtNGE0Yy00ZGJjLWI3ODUtZGQ3Y2JmMWE2N2I3LzAvRUFGMUJCQzJF
Nzg1MkEwOEVDOTcyNkRGMDM3QjdBOTAwMjBGNjEzQy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FQUYxQkJDMkU3ODUyQTA4RUM5NzI2REYwMzdCN0E5MDAyMEY2
MTNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTdmZGY0M2UtNGE0Yy00ZGJjLWI3
ODUtZGQ3Y2JmMWE2N2I3LzAvRUFGMUJCQzJFNzg1MkEwOEVDOTcyNkRGMDM3QjdB
OTAwMjBGNjEzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJ3CjkYgG38ccC6lOLJ+z6SOY3bQGv0tDcJ9
WSYgyPtES9wlvMN2REQIGjwX1GnEH9BYREiWo8KYGfvJZlSbEZ/u2cFN1ZFqtLcW
F2rgJaJwtiH8tDSSX5/+vLhIqteoFWnTdPiLsqfQ4qhtb08DnuVVcxBKlGC5McQ2
tOPBR/HWd/6mlrSCa9osDrWA4I51XFTOMF/i4sSa1pQmDQ1qRjkrDjvllvAm8Y7c
vilhJT8d9E4gcDNRwjfXwPp+kD1OddU7a2yJ98HSCaEundMv86tRh5/LoOeOTFqU
XBrOS+XZhh6j++mvJFfMTWX7tTt5uSnByGTsrkVuhEFcoMgJUqo=
-----END CERTIFICATE-----
Generated at Sat Jun 20 09:14:06 2026 by rpki-client