
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/1EBB232203FD5432F4FF5F50C7CA7F672552ED3F.mft
File: 1EBB232203FD5432F4FF5F50C7CA7F672552ED3F.mft (raw, json)
Hash identifier: v7VbSqwSS2X4iUV4pW0ndw675YiepsEtPn7e3mJG+mE=
Subject key identifier: DC:A3:3D:EB:F8:E0:D1:A4:F1:42:EC:05:D4:2E:25:95:2F:63:F2:72
Authority key identifier: 1E:BB:23:22:03:FD:54:32:F4:FF:5F:50:C7:CA:7F:67:25:52:ED:3F
Certificate issuer: /CN=1EBB232203FD5432F4FF5F50C7CA7F672552ED3F
Certificate serial: 6F4C6DF9DDDD7BCD1984AEBDE401FA853BBFCAED
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EBB232203FD5432F4FF5F50C7CA7F672552ED3F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/1EBB232203FD5432F4FF5F50C7CA7F672552ED3F.mft
Manifest number: 41
Signing time: Fri 19 Jun 2026 22:58:42 +0000
Manifest this update: Fri 19 Jun 2026 22:53:42 +0000
Manifest next update: Sun 21 Jun 2026 01:53:42 +0000
Files and hashes: 1: 3130332e31302e3134342e302f32342d3234203d3e203436303537.roa (hash: jBCASy1F6Hwq7/RSM0DnwGAyM9nsMAfX8PewBvtkG60=)
2: 1EBB232203FD5432F4FF5F50C7CA7F672552ED3F.crl (hash: mOAO6OoTI7ZUg9xPlgshsx79hZs9nT2odHzER4x8jeI=)
3: 3230322e35322e35322e302f32342d3234203d3e203436303537.roa (hash: B12SJCFtXXNNoUXjwCcqgBMFjVn7huHWD2lTe7WyRQA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/1EBB232203FD5432F4FF5F50C7CA7F672552ED3F.crl
rsync://rpki-rsync.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/1EBB232203FD5432F4FF5F50C7CA7F672552ED3F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EBB232203FD5432F4FF5F50C7CA7F672552ED3F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 21 Jun 2026 01:53:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:4c:6d:f9:dd:dd:7b:cd:19:84:ae:bd:e4:01:fa:85:3b:bf:ca:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1EBB232203FD5432F4FF5F50C7CA7F672552ED3F
Validity
Not Before: Jun 19 22:53:42 2026 GMT
Not After : Jun 21 01:53:42 2026 GMT
Subject: CN=DCA33DEBF8E0D1A4F142EC05D42E25952F63F272
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:2d:7f:5f:65:fa:b5:5d:c0:1d:2e:0b:0f:76:
ca:a4:4b:bd:e1:ea:5a:19:d5:7a:b7:da:b6:b8:67:
d0:65:57:9a:64:b3:46:4d:98:0b:e0:f1:24:db:da:
f4:bb:96:f9:55:33:77:b8:25:3e:68:df:4b:3b:f5:
0b:69:50:7c:73:da:b2:3e:05:d7:46:ba:78:94:33:
b7:3a:dc:f7:0d:d8:3b:f9:b1:44:11:5a:50:75:76:
8f:49:c9:2c:21:b8:c2:a6:19:5b:4b:8a:ce:b2:3c:
a8:7c:ea:4f:1c:cb:ed:67:e3:34:8c:9c:0c:4a:69:
f8:06:57:4e:4d:31:ba:fa:ba:3f:14:88:b0:84:a7:
eb:c4:09:a4:3e:e3:6f:2e:dd:fc:f9:69:02:b9:34:
fc:4b:c8:ea:8d:7d:1f:da:a2:4c:ed:20:f0:e8:3b:
34:f7:5a:94:fb:54:ee:66:d6:6c:e4:a0:f5:8c:82:
6c:bc:b2:45:ec:45:c6:0e:b6:f4:9d:a1:bd:28:82:
88:77:31:67:8d:35:33:da:5d:b3:32:ad:d4:41:7c:
4d:bf:8f:5e:31:c5:c0:00:26:fc:41:1d:42:01:10:
49:82:21:56:aa:cb:38:77:1b:16:ce:6d:05:04:04:
f9:51:b5:53:96:ad:64:17:1e:de:d9:c9:4d:72:49:
43:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:A3:3D:EB:F8:E0:D1:A4:F1:42:EC:05:D4:2E:25:95:2F:63:F2:72
X509v3 Authority Key Identifier:
keyid:1E:BB:23:22:03:FD:54:32:F4:FF:5F:50:C7:CA:7F:67:25:52:ED:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/1EBB232203FD5432F4FF5F50C7CA7F672552ED3F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EBB232203FD5432F4FF5F50C7CA7F672552ED3F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/1EBB232203FD5432F4FF5F50C7CA7F672552ED3F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:0c:3c:69:d1:cc:0a:62:a8:d7:8e:3b:7f:c7:0c:fd:34:2b:
20:0e:24:77:5a:24:c0:e7:b8:d8:fa:62:56:f6:51:f7:6b:a6:
9b:42:59:13:9f:7b:d4:2f:75:c8:78:91:60:ad:5e:34:71:90:
f0:e0:6e:71:87:cc:76:ee:88:b0:ab:87:e7:d8:54:e5:00:71:
ee:32:17:b5:04:b5:c0:ad:44:d7:e2:be:b3:b0:d0:62:f1:80:
4a:11:76:07:9b:d0:d3:6a:e7:8b:b6:6b:6b:0a:73:84:d2:d9:
0b:3a:97:b3:32:fc:05:d9:d9:ae:b9:4c:82:b1:f4:63:c3:92:
7a:72:1b:5b:c1:dc:fe:24:36:6a:48:2f:50:1c:ad:40:74:16:
35:95:04:f7:d0:1a:24:5d:49:ee:2e:38:fa:49:54:35:8a:88:
e5:ca:73:7a:1e:57:b8:cf:1b:2c:af:0e:40:83:bd:bd:cd:68:
ea:c6:a3:50:db:3e:c3:67:5b:31:22:7d:30:cd:99:e2:a8:96:
58:82:28:07:55:51:bf:1d:54:b6:79:96:a4:58:ed:dc:5e:b7:
f4:eb:59:d3:30:b1:21:c1:d4:79:a8:05:d8:cd:0f:11:ce:1a:
45:f0:3d:33:0b:7c:ff:50:64:27:41:c3:73:98:9b:5c:30:55:
a6:16:2d:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 09:16:52 2026 by rpki-client