
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/EE751CDC39E47304C1EE51EDF5BC3FDAD0F09B86.mft
File: EE751CDC39E47304C1EE51EDF5BC3FDAD0F09B86.mft (raw, json)
Hash identifier: q7hot35HsC7CTRgGOMIkR7IXSYVteFCDesMm8WbTOII=
Subject key identifier: 7C:AA:BE:4F:10:B7:F4:AB:7F:BD:08:14:BA:C0:5E:50:2C:86:78:E5
Authority key identifier: EE:75:1C:DC:39:E4:73:04:C1:EE:51:ED:F5:BC:3F:DA:D0:F0:9B:86
Certificate issuer: /CN=EE751CDC39E47304C1EE51EDF5BC3FDAD0F09B86
Certificate serial: 11A4AE20D7E7A1536233AE79A15DFE026FCF4AFF
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE751CDC39E47304C1EE51EDF5BC3FDAD0F09B86.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/EE751CDC39E47304C1EE51EDF5BC3FDAD0F09B86.mft
Manifest number: 42
Signing time: Fri 19 Jun 2026 18:33:11 +0000
Manifest this update: Fri 19 Jun 2026 18:28:11 +0000
Manifest next update: Sat 20 Jun 2026 22:29:11 +0000
Files and hashes: 1: 3130332e3134342e3132392e302f32342d3234203d3e20313339343333.roa (hash: k8ZBZmDfwahDdiPq/8ia7mwFYTF8XR9bC0fS3/OJdMM=)
2: 3130332e3134342e3132382e302f32332d3233203d3e20313339343333.roa (hash: GBcRuzH/ztafVHYfLj8zgAdxKdzjxCNZd7fnXHiG9vg=)
3: 3130332e3134342e3132382e302f32342d3234203d3e20313339343333.roa (hash: eZi9ISEjkgP+V5NS/n2oQzmQLoX5n67xR1RnUMkogyM=)
4: EE751CDC39E47304C1EE51EDF5BC3FDAD0F09B86.crl (hash: ZXo8ZRl9jGyBz6PGUXNlRLo6n5nfR7UKwajBTlLdpEc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/EE751CDC39E47304C1EE51EDF5BC3FDAD0F09B86.crl
rsync://rpki-rsync.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/EE751CDC39E47304C1EE51EDF5BC3FDAD0F09B86.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE751CDC39E47304C1EE51EDF5BC3FDAD0F09B86.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 22:29:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:a4:ae:20:d7:e7:a1:53:62:33:ae:79:a1:5d:fe:02:6f:cf:4a:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE751CDC39E47304C1EE51EDF5BC3FDAD0F09B86
Validity
Not Before: Jun 19 18:28:11 2026 GMT
Not After : Jun 20 22:29:11 2026 GMT
Subject: CN=7CAABE4F10B7F4AB7FBD0814BAC05E502C8678E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f6:30:5e:eb:bf:cc:d1:0f:3b:8a:2b:a9:5b:
95:92:e5:a5:22:bf:2a:09:6a:ea:62:93:ef:52:25:
ae:f0:87:d8:41:79:6f:0d:16:a2:d1:b5:ea:38:6c:
6a:cb:ff:49:76:21:a7:2e:e5:e5:7f:f7:ef:ee:f2:
db:f6:53:1c:bb:4a:83:47:9e:aa:56:39:a3:dc:00:
4d:f5:6b:47:5e:d1:5c:0b:62:cc:0e:e3:5c:1a:c5:
ad:b7:ec:a1:77:75:43:8b:de:66:bc:c2:fd:69:3a:
fd:11:b6:73:af:9a:f1:48:a2:5f:54:f1:83:ef:e2:
fd:4b:3d:d5:95:46:a6:21:56:30:b5:ac:ec:58:87:
63:b5:84:8f:44:ca:a2:d7:50:6d:78:0f:00:d4:06:
1a:8d:5f:44:ae:49:bf:59:eb:29:75:11:b2:7b:1e:
33:c0:de:13:24:f5:26:18:87:ec:50:ef:86:e0:a3:
21:a4:38:60:75:17:aa:8c:54:72:80:85:df:f5:6c:
6c:60:09:1c:7f:01:12:df:1a:76:77:c8:6a:23:03:
77:4e:d0:02:e0:c1:17:bd:18:f2:41:b9:c5:ee:53:
6a:d8:8d:12:03:50:ff:6c:28:6b:c9:04:cb:1c:cc:
13:64:75:17:73:85:fc:a3:c1:c6:24:05:f5:1f:e9:
25:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:AA:BE:4F:10:B7:F4:AB:7F:BD:08:14:BA:C0:5E:50:2C:86:78:E5
X509v3 Authority Key Identifier:
keyid:EE:75:1C:DC:39:E4:73:04:C1:EE:51:ED:F5:BC:3F:DA:D0:F0:9B:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/EE751CDC39E47304C1EE51EDF5BC3FDAD0F09B86.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE751CDC39E47304C1EE51EDF5BC3FDAD0F09B86.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/EE751CDC39E47304C1EE51EDF5BC3FDAD0F09B86.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:cb:30:bf:f4:02:a4:68:86:71:72:e8:19:5a:f4:7a:c9:d8:
2b:55:1c:0c:c0:f1:07:97:57:6f:85:44:c4:18:e8:04:a7:0a:
d8:c0:9d:8f:ed:eb:c6:a4:83:17:ba:bb:58:51:11:7b:a2:6d:
98:0a:4d:62:05:0a:b4:e4:0b:e5:92:a5:dc:43:ad:3e:18:b7:
fb:b1:03:23:71:51:f3:5a:59:2c:67:ec:fa:3d:39:68:e7:62:
fd:c0:d3:92:19:da:e3:00:c2:eb:78:93:41:cf:88:42:87:e5:
05:ca:86:c9:e4:67:59:b3:82:69:df:3f:24:25:c5:eb:6c:6f:
49:4e:e4:cc:50:c8:4e:70:5b:1d:5d:a5:46:66:2f:5e:fb:87:
1b:5d:47:65:17:fe:d4:92:74:43:21:b9:0b:3f:d3:ff:f2:dd:
7c:ac:11:59:05:f0:b0:32:b7:d5:3d:5d:5b:9a:6e:a1:91:4a:
1e:7b:2a:e5:87:08:6a:30:25:dd:a5:21:1b:0e:b7:ba:e0:e0:
e3:7b:1e:5c:88:5a:5a:51:e1:3f:ed:41:28:e5:cf:22:71:57:
35:81:16:08:e9:1e:34:6b:8e:af:c6:94:a9:74:0c:94:b1:b4:
6a:d8:b1:3a:12:ae:16:10:db:ed:cb:50:79:57:f9:da:6b:f6:
d4:a1:56:9a
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUEaSuINfnoVNiM655oV3+Am/PSv8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU3NTFDREMzOUU0NzMwNEMxRUU1MUVERjVCQzNGREFE
MEYwOUI4NjAeFw0yNjA2MTkxODI4MTFaFw0yNjA2MjAyMjI5MTFaMDMxMTAvBgNV
BAMTKDdDQUFCRTRGMTBCN0Y0QUI3RkJEMDgxNEJBQzA1RTUwMkM4Njc4RTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCU9jBe67/M0Q87iiupW5WS5aUi
vyoJaupik+9SJa7wh9hBeW8NFqLRteo4bGrL/0l2Iacu5eV/9+/u8tv2Uxy7SoNH
nqpWOaPcAE31a0de0VwLYswO41waxa237KF3dUOL3ma8wv1pOv0RtnOvmvFIol9U
8YPv4v1LPdWVRqYhVjC1rOxYh2O1hI9EyqLXUG14DwDUBhqNX0SuSb9Z6yl1EbJ7
HjPA3hMk9SYYh+xQ74bgoyGkOGB1F6qMVHKAhd/1bGxgCRx/ARLfGnZ3yGojA3dO
0ALgwRe9GPJBucXuU2rYjRIDUP9sKGvJBMsczBNkdRdzhfyjwcYkBfUf6SUtAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUfKq+TxC39Kt/vQgUusBeUCyGeOUwHwYDVR0j
BBgwFoAU7nUc3DnkcwTB7lHt9bw/2tDwm4YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
Y2E5NmY0NTgtY2U1ZS00MWEyLWEyMzItOTk2NGY0OTg4YTA2LzAvRUU3NTFDREMz
OUU0NzMwNEMxRUU1MUVERjVCQzNGREFEMEYwOUI4Ni5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FRTc1MUNEQzM5RTQ3MzA0QzFFRTUxRURGNUJDM0ZEQUQwRjA5
Qjg2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2E5NmY0NTgtY2U1ZS00MWEyLWEy
MzItOTk2NGY0OTg4YTA2LzAvRUU3NTFDREMzOUU0NzMwNEMxRUU1MUVERjVCQzNG
REFEMEYwOUI4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABrLML/0AqRohnFy6Bla9HrJ2CtVHAzA8QeX
V2+FRMQY6ASnCtjAnY/t68akgxe6u1hREXuibZgKTWIFCrTkC+WSpdxDrT4Yt/ux
AyNxUfNaWSxn7Po9OWjnYv3A05IZ2uMAwut4k0HPiEKH5QXKhsnkZ1mzgmnfPyQl
xetsb0lO5MxQyE5wWx1dpUZmL177hxtdR2UX/tSSdEMhuQs/0//y3XysEVkF8LAy
t9U9XVuabqGRSh57KuWHCGowJd2lIRsOt7rg4ON7HlyIWlpR4T/tQSjlzyJxVzWB
FgjpHjRrjq/GlKl0DJSxtGrYsToSrhYQ2+3LUHlX+dpr9tShVpo=
-----END CERTIFICATE-----
Generated at Sat Jun 20 09:32:46 2026 by rpki-client