
$ rpki-client -vvf rpki-rsync.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/EB57B4A8B7DB581F45D8854952928F5926755B5D.mft
File: EB57B4A8B7DB581F45D8854952928F5926755B5D.mft (raw, json)
Hash identifier: 6gKkKKcj/ue1MY6caFQbvQCE+p8VHWf219AW3eGpQRs=
Subject key identifier: 86:F3:9A:82:D7:71:D2:79:D4:8E:1F:D2:57:3F:81:91:5D:F3:AB:B2
Authority key identifier: EB:57:B4:A8:B7:DB:58:1F:45:D8:85:49:52:92:8F:59:26:75:5B:5D
Certificate issuer: /CN=EB57B4A8B7DB581F45D8854952928F5926755B5D
Certificate serial: 3B1BA5E2485F90FD41A35F6593F17B8B15B9FFFA
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB57B4A8B7DB581F45D8854952928F5926755B5D.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/EB57B4A8B7DB581F45D8854952928F5926755B5D.mft
Manifest number: 40
Signing time: Thu 18 Jun 2026 11:00:29 +0000
Manifest this update: Thu 18 Jun 2026 10:55:29 +0000
Manifest next update: Fri 19 Jun 2026 14:17:29 +0000
Files and hashes: 1: EB57B4A8B7DB581F45D8854952928F5926755B5D.crl (hash: LJrMoChi2M2zzn9nP/wRSJdkxEZ9zQ8jkxkEZljKPdI=)
2: 323030313a6466333a636634303a3a2f34382d3438203d3e20313532373536.roa (hash: jRiKTU/j+tIlx8UR6dB8nvnEvGokztihjDnumCFG4MY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/EB57B4A8B7DB581F45D8854952928F5926755B5D.crl
rsync://rpki-rsync.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/EB57B4A8B7DB581F45D8854952928F5926755B5D.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB57B4A8B7DB581F45D8854952928F5926755B5D.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 12:15:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:1b:a5:e2:48:5f:90:fd:41:a3:5f:65:93:f1:7b:8b:15:b9:ff:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB57B4A8B7DB581F45D8854952928F5926755B5D
Validity
Not Before: Jun 18 10:55:29 2026 GMT
Not After : Jun 19 14:17:29 2026 GMT
Subject: CN=86F39A82D771D279D48E1FD2573F81915DF3ABB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e1:14:96:dd:13:a6:bc:42:74:61:61:92:b3:
b4:a2:31:0b:86:1c:74:2c:ef:f6:16:c6:ea:1f:5c:
bd:b4:de:c2:d6:18:9a:60:e1:1f:8c:a1:08:ef:4d:
76:e6:f9:09:77:7f:23:be:c6:20:e5:e6:bc:e7:d4:
19:02:c0:79:f6:24:db:75:22:11:80:f8:66:d2:1d:
78:8f:ef:a3:16:7d:09:97:a0:3f:a3:4f:7d:f2:96:
dd:ae:6d:2e:f8:fe:83:53:7e:9e:89:fb:95:54:b5:
a6:a4:85:60:b3:e1:5e:7d:6a:80:f7:22:64:9a:4b:
b4:d9:3f:56:cd:87:78:85:69:b8:b1:62:32:21:8d:
11:55:c5:84:18:9d:11:61:fd:46:1c:88:3f:a3:8c:
99:20:4b:27:6e:52:f7:a0:05:82:22:9a:bd:27:cd:
8d:44:d6:37:4c:91:17:4e:97:69:d7:8e:e7:21:59:
55:10:3b:c3:36:92:01:6a:47:4e:74:5b:90:1b:b6:
2d:6a:cb:05:0c:88:de:16:43:d9:92:aa:01:e1:08:
74:d3:d5:de:3e:94:b8:f0:3c:ee:b0:90:ee:76:a5:
1c:ef:8f:51:ac:df:29:89:fd:48:a6:ef:f4:70:d3:
10:a9:7f:8d:6a:ac:b5:8e:fd:b1:81:6a:b4:81:ca:
ed:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:F3:9A:82:D7:71:D2:79:D4:8E:1F:D2:57:3F:81:91:5D:F3:AB:B2
X509v3 Authority Key Identifier:
keyid:EB:57:B4:A8:B7:DB:58:1F:45:D8:85:49:52:92:8F:59:26:75:5B:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/EB57B4A8B7DB581F45D8854952928F5926755B5D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB57B4A8B7DB581F45D8854952928F5926755B5D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/EB57B4A8B7DB581F45D8854952928F5926755B5D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:54:d7:fb:ad:86:21:83:ff:7b:d7:9d:b3:cf:a2:c0:37:4d:
52:a9:e0:14:a0:36:cb:f6:ae:3f:7a:25:b0:03:e0:80:57:ad:
cc:f4:e2:cb:92:4b:62:9a:32:98:ab:41:11:cc:7d:c4:a6:44:
ab:a9:ff:5c:f8:2e:aa:bc:f3:82:da:72:c2:d1:62:b4:d9:1d:
fc:02:ca:85:c5:61:94:25:70:27:2f:3a:1f:5c:b0:74:ac:4b:
39:21:cd:7a:85:b8:2d:43:77:0d:e1:07:bf:fa:64:ed:5b:d2:
7c:f0:b5:c9:d4:b9:25:ec:c1:c3:69:53:fc:86:5d:b0:4f:b3:
eb:46:63:0b:7e:79:d4:5b:59:ce:ce:81:33:72:2b:89:c3:a8:
71:9c:15:5e:7e:07:2e:d7:70:bb:d6:4b:5e:5c:27:de:c6:78:
66:de:68:b9:15:24:a7:19:4d:96:d6:04:c6:28:b3:05:bb:01:
88:12:ac:c9:d1:b3:a5:35:5c:74:83:e7:9e:9a:f6:13:44:ca:
3b:e0:c1:4d:8d:e3:22:0f:fc:ec:44:0c:7a:ed:b8:3d:a2:4a:
dd:09:42:61:25:b1:72:f1:22:9d:56:9e:36:36:dd:34:f0:2f:
5c:e4:b4:fa:14:7f:aa:12:f4:60:66:21:20:1d:67:e5:6f:ea:
eb:4a:48:dd
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUOxul4khfkP1Bo19lk/F7ixW5//owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUI1N0I0QThCN0RCNTgxRjQ1RDg4NTQ5NTI5MjhGNTky
Njc1NUI1RDAeFw0yNjA2MTgxMDU1MjlaFw0yNjA2MTkxNDE3MjlaMDMxMTAvBgNV
BAMTKDg2RjM5QTgyRDc3MUQyNzlENDhFMUZEMjU3M0Y4MTkxNURGM0FCQjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCT4RSW3ROmvEJ0YWGSs7SiMQuG
HHQs7/YWxuofXL203sLWGJpg4R+MoQjvTXbm+Ql3fyO+xiDl5rzn1BkCwHn2JNt1
IhGA+GbSHXiP76MWfQmXoD+jT33ylt2ubS74/oNTfp6J+5VUtaakhWCz4V59aoD3
ImSaS7TZP1bNh3iFabixYjIhjRFVxYQYnRFh/UYciD+jjJkgSyduUvegBYIimr0n
zY1E1jdMkRdOl2nXjuchWVUQO8M2kgFqR050W5Abti1qywUMiN4WQ9mSqgHhCHTT
1d4+lLjwPO6wkO52pRzvj1Gs3ymJ/Uim7/Rw0xCpf41qrLWO/bGBarSByu1tAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUhvOagtdx0nnUjh/SVz+BkV3zq7IwHwYDVR0j
BBgwFoAU61e0qLfbWB9F2IVJUpKPWSZ1W10wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YWFiNGUxNGQtMDIxZC00MGRjLTkyM2EtYzEyZDFhZjQ0M2I1LzEvRUI1N0I0QThC
N0RCNTgxRjQ1RDg4NTQ5NTI5MjhGNTkyNjc1NUI1RC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FQjU3QjRBOEI3REI1ODFGNDVEODg1NDk1MjkyOEY1OTI2NzU1
QjVELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWFiNGUxNGQtMDIxZC00MGRjLTky
M2EtYzEyZDFhZjQ0M2I1LzEvRUI1N0I0QThCN0RCNTgxRjQ1RDg4NTQ5NTI5MjhG
NTkyNjc1NUI1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAAtU1/uthiGD/3vXnbPPosA3TVKp4BSgNsv2
rj96JbAD4IBXrcz04suSS2KaMpirQRHMfcSmRKup/1z4Lqq884LacsLRYrTZHfwC
yoXFYZQlcCcvOh9csHSsSzkhzXqFuC1Ddw3hB7/6ZO1b0nzwtcnUuSXswcNpU/yG
XbBPs+tGYwt+edRbWc7OgTNyK4nDqHGcFV5+By7XcLvWS15cJ97GeGbeaLkVJKcZ
TZbWBMYoswW7AYgSrMnRs6U1XHSD556a9hNEyjvgwU2N4yIP/OxEDHrtuD2iSt0J
QmElsXLxIp1WnjY23TTwL1zktPoUf6oS9GBmISAdZ+Vv6utKSN0=
-----END CERTIFICATE-----
Generated at Thu Jun 18 21:11:00 2026 by rpki-client