
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/EA69EE1870C74C4198176D679D2040962AA65EE5.mft
File: EA69EE1870C74C4198176D679D2040962AA65EE5.mft (raw, json)
Hash identifier: AiMs1dIKi7hY/4mTiJHsn5sk5sr51noZVr3JTg4gSxE=
Subject key identifier: 5D:44:66:59:2D:0B:51:9D:F7:1F:D8:28:F4:3E:3B:C6:C6:04:70:F7
Authority key identifier: EA:69:EE:18:70:C7:4C:41:98:17:6D:67:9D:20:40:96:2A:A6:5E:E5
Certificate issuer: /CN=EA69EE1870C74C4198176D679D2040962AA65EE5
Certificate serial: 162B6A0D5B3E559242588C781F10AF5618A8BE0D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA69EE1870C74C4198176D679D2040962AA65EE5.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/EA69EE1870C74C4198176D679D2040962AA65EE5.mft
Manifest number: B8
Signing time: Thu 17 Sep 2026 18:41:30 +0000
Manifest this update: Thu 17 Sep 2026 18:36:30 +0000
Manifest next update: Fri 18 Sep 2026 21:03:30 +0000
Files and hashes: 1: 3130332e3134362e3132382e302f32342d3234203d3e20313430303238.roa (hash: xmNTgE8NlEgdxtkyZzmV8vhuvBfxhNKdp0Qma8cQHQ4=)
2: EA69EE1870C74C4198176D679D2040962AA65EE5.crl (hash: xxfJS/76AGImNXQASzLVsS0I875Fza11P56H5ffRteU=)
3: 3130332e3134362e3132382e302f32332d3233203d3e20313430303238.roa (hash: 27RMiTZ9x6jfj6rn7+g1KMgItqjflbCMRzo3ncDyIag=)
4: 3130332e3134362e3132392e302f32342d3234203d3e20313430303238.roa (hash: JdS3onh/UNwTa6fbUAQVIX7szlwvK4Q8vIPtVeKS+NU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/EA69EE1870C74C4198176D679D2040962AA65EE5.crl
rsync://rpki-rsync.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/EA69EE1870C74C4198176D679D2040962AA65EE5.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA69EE1870C74C4198176D679D2040962AA65EE5.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 21:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:2b:6a:0d:5b:3e:55:92:42:58:8c:78:1f:10:af:56:18:a8:be:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EA69EE1870C74C4198176D679D2040962AA65EE5
Validity
Not Before: Sep 17 18:36:30 2026 GMT
Not After : Sep 18 21:03:30 2026 GMT
Subject: CN=5D4466592D0B519DF71FD828F43E3BC6C60470F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f7:ab:6e:4b:ea:58:5c:69:1e:4a:cb:3b:36:
67:4f:51:31:bb:cc:99:65:f6:3d:f9:b6:b2:c1:f8:
c2:b9:bd:cf:0f:30:25:61:40:f9:35:1f:d6:d3:8a:
ee:37:c4:ec:a6:41:a8:f3:52:78:04:15:68:9a:d3:
ce:1e:1d:11:ee:73:8d:1a:3a:2d:3e:8c:b3:bc:b0:
8e:ba:be:96:fa:d7:71:b1:5d:cf:e0:90:e0:92:b3:
b1:5a:6a:f1:4b:a3:87:39:8b:7b:d1:be:e4:2d:3c:
f6:da:52:f7:95:a9:44:3b:1d:95:73:0d:8c:0a:f2:
5b:9d:e5:f6:79:65:2f:42:40:a9:c0:a6:30:e2:63:
a4:ab:70:8b:1d:88:a3:ae:db:64:53:b2:7f:ed:55:
9d:59:9d:f6:a9:ca:da:bc:84:32:ea:4f:fb:21:9a:
10:1d:bc:78:fa:fb:67:d6:8c:9e:ff:f9:c0:ea:f1:
4e:b5:37:49:36:de:f3:20:87:df:15:e6:35:1e:68:
79:6f:5b:55:9b:b2:2e:6e:c5:d0:6d:fb:f1:03:2d:
0c:20:be:b8:d8:7f:ba:9d:61:eb:50:f2:4c:df:7f:
62:f2:51:43:5b:65:60:b6:30:d8:f5:09:cc:a0:31:
08:77:c0:dd:28:28:68:e2:b4:32:ac:fb:a4:ca:fe:
18:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:44:66:59:2D:0B:51:9D:F7:1F:D8:28:F4:3E:3B:C6:C6:04:70:F7
X509v3 Authority Key Identifier:
keyid:EA:69:EE:18:70:C7:4C:41:98:17:6D:67:9D:20:40:96:2A:A6:5E:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/EA69EE1870C74C4198176D679D2040962AA65EE5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA69EE1870C74C4198176D679D2040962AA65EE5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/EA69EE1870C74C4198176D679D2040962AA65EE5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:69:cc:32:bb:79:a4:f0:01:29:5c:2b:48:68:af:8f:80:76:
9e:4e:80:b6:8c:99:bb:f9:b2:e7:d8:e1:66:bc:3d:94:65:dd:
c4:cc:dc:dc:7f:fd:c7:c0:92:13:34:d7:dd:50:95:3e:80:92:
93:49:a6:d6:60:58:a3:41:a1:27:26:9f:ca:15:14:ea:86:85:
38:a8:c5:1d:f8:29:0a:01:f8:ea:0b:d9:d0:71:02:72:f4:5f:
a2:c5:1a:17:d3:a6:c5:32:27:46:0c:cd:27:18:94:27:3f:d1:
3e:a2:3d:1d:da:55:84:a8:89:8a:99:bb:4c:4c:e4:52:15:76:
5a:8a:9e:b4:5f:5c:94:a6:99:69:7e:73:5a:66:38:91:81:ff:
0d:8e:b7:18:83:70:93:f0:9a:30:1a:1f:2c:a1:cb:94:7b:ce:
30:56:79:96:2d:ff:4f:95:c9:28:59:f5:10:76:01:ee:85:97:
f2:61:3e:29:a9:2a:a9:e4:44:dc:65:60:0e:b0:d7:c2:80:c6:
a2:96:86:18:0d:ef:ee:28:99:92:e4:ae:d8:75:47:41:bd:43:
c3:1b:37:38:53:39:0d:37:77:da:9d:4d:32:6e:7e:f5:3c:95:
d2:b2:d2:0e:72:83:7d:84:fa:8f:f1:03:6d:1b:a7:fa:5c:d2:
74:8e:45:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 14:05:04 2026 by rpki-client