
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB.mft
File: EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB.mft (raw, json)
Hash identifier: raXofsrt6Yq58dl60tvffPIfU31pw7IuvTiFPnNEvMM=
Subject key identifier: D0:3F:22:D9:E7:5D:E3:38:85:FB:10:19:E8:16:14:EF:5E:3F:33:A1
Authority key identifier: EE:F2:3D:C7:BC:70:C4:8E:C5:F4:67:FE:44:DE:5B:B2:B3:E6:E1:EB
Certificate issuer: /CN=EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB
Certificate serial: 62441D06236A5D9F3E67FE27EBC9B02F8ADC7707
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB.mft
Manifest number: 7C
Signing time: Sun 02 Aug 2026 20:21:52 +0000
Manifest this update: Sun 02 Aug 2026 20:16:52 +0000
Manifest next update: Mon 03 Aug 2026 23:02:52 +0000
Files and hashes: 1: EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB.crl (hash: klbP7kGxSrudSH3tgCcKi5/fM9SbwoQTRUsWDywSWQQ=)
2: 323030313a6466343a353663303a3a2f34382d3438203d3e20313533313231.roa (hash: 4kBrY3m/YUmUepWlqfPB38SwXp7zMRirxL+70ddYk80=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB.crl
rsync://rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 08:45:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:44:1d:06:23:6a:5d:9f:3e:67:fe:27:eb:c9:b0:2f:8a:dc:77:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB
Validity
Not Before: Aug 2 20:16:52 2026 GMT
Not After : Aug 3 23:02:52 2026 GMT
Subject: CN=D03F22D9E75DE33885FB1019E81614EF5E3F33A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:73:f3:18:4c:ba:cf:8a:cb:b6:79:bf:e5:4a:
af:0d:9d:18:df:5d:18:03:82:cd:5f:03:00:bb:9c:
1f:8c:ba:89:76:fb:43:8a:90:a7:3f:fb:96:d9:c5:
e2:3e:41:52:9d:ca:7c:79:c3:87:d4:f0:ec:a8:73:
79:cb:50:c9:64:72:02:95:9e:84:3d:cd:a1:fa:df:
ff:ce:ef:f1:3c:d2:51:41:0b:0f:ee:c9:1c:58:eb:
f3:a3:87:6d:65:06:f3:10:ea:d9:d2:19:1a:6e:db:
f1:4e:95:21:be:96:49:ca:88:38:13:82:42:91:68:
5c:f3:51:af:2b:07:e0:9a:42:ea:d4:5f:eb:54:82:
04:fd:4f:5a:19:e1:20:01:99:44:3f:99:cb:df:eb:
13:a2:3d:57:f3:16:4f:87:5d:3e:72:d4:15:7b:b3:
07:e2:f5:3b:b4:8c:52:4a:e7:7e:20:79:d0:3e:e7:
d7:31:90:88:e2:8c:9e:d0:90:17:2c:1d:ab:2a:37:
17:f1:a3:e7:c9:85:1b:e4:a8:e9:2a:7f:c2:e3:84:
69:f6:e3:da:c2:7d:7f:b1:02:e1:81:0d:25:4e:33:
09:b5:c5:8a:90:5e:7f:61:af:be:4a:de:d3:66:c6:
63:fc:51:d6:dc:e1:d4:cb:4a:b0:0c:cc:4d:39:69:
78:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:3F:22:D9:E7:5D:E3:38:85:FB:10:19:E8:16:14:EF:5E:3F:33:A1
X509v3 Authority Key Identifier:
keyid:EE:F2:3D:C7:BC:70:C4:8E:C5:F4:67:FE:44:DE:5B:B2:B3:E6:E1:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:16:79:eb:0b:5d:6b:d4:78:a7:0f:cd:31:06:0a:24:98:eb:
ef:43:20:34:6a:36:7a:e3:d3:95:41:3f:74:42:f6:d7:6a:7e:
7c:3b:fe:b2:ca:04:6e:27:d0:1d:14:fe:8d:0b:4d:bd:1b:91:
4f:40:7f:00:74:5f:41:44:a6:a0:65:f8:07:56:f3:e8:e6:33:
44:aa:b5:af:8e:e7:22:ef:68:1f:0e:bb:0d:1c:80:63:fd:21:
f9:8a:7e:cb:1f:18:2d:dc:e7:dc:a9:0e:3e:31:f9:bc:2f:b3:
3c:b9:c6:20:09:c5:37:b1:f7:e8:8e:c0:d2:36:59:eb:0f:03:
df:8c:a8:c1:f4:37:47:cb:3a:5d:51:94:25:cf:13:7b:e6:a4:
d1:dd:8c:9e:06:17:bb:c5:d1:c0:33:9e:44:c6:ce:f2:c5:51:
e9:75:c4:f7:30:2b:b2:57:3b:c9:a1:54:98:72:4c:d9:18:0a:
19:89:e0:84:0d:b0:e9:fa:34:1b:95:70:b6:c3:df:60:cc:ad:
52:a0:8c:d7:ff:97:9d:e8:dd:c8:7b:4b:ea:74:14:2e:88:fe:
d9:bf:99:06:ad:e6:da:4a:56:32:cd:97:b3:5e:4b:f4:bd:94:
66:6d:8a:a7:0c:35:d7:e8:20:95:20:5d:11:c8:7c:ca:25:91:
35:d0:a6:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 3 01:45:59 2026 by rpki-client