
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/EEEEDDCDA44B0713B397D27040721EEC4848E5DC.mft
File: EEEEDDCDA44B0713B397D27040721EEC4848E5DC.mft (raw, json)
Hash identifier: imcLKyq7BwbC/o75uv5e4N7KvEcz7ps1XPUVdC/SBOA=
Subject key identifier: 2E:37:E9:ED:75:1F:A2:5E:DB:85:3E:67:BF:9F:F4:FA:54:51:AB:E2
Authority key identifier: EE:EE:DD:CD:A4:4B:07:13:B3:97:D2:70:40:72:1E:EC:48:48:E5:DC
Certificate issuer: /CN=EEEEDDCDA44B0713B397D27040721EEC4848E5DC
Certificate serial: 0673D9826E13D59EF88A2D40F475C67731B06C7C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EEEEDDCDA44B0713B397D27040721EEC4848E5DC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/EEEEDDCDA44B0713B397D27040721EEC4848E5DC.mft
Manifest number: B8
Signing time: Wed 16 Sep 2026 22:06:17 +0000
Manifest this update: Wed 16 Sep 2026 22:01:17 +0000
Manifest next update: Thu 17 Sep 2026 22:42:17 +0000
Files and hashes: 1: 34332e3234352e3234382e302f32342d3234203d3e20313331373430.roa (hash: 1kRWH/01ZY8vcD8ZJ7NSjogRu3r8TcailYL1T9WDQmE=)
2: EEEEDDCDA44B0713B397D27040721EEC4848E5DC.crl (hash: qhQak74FqjMDxInt2BeMibZ1Dn0WXcVBve0rRY+vCPo=)
3: 3130332e32312e3232342e302f32342d3234203d3e20313331373430.roa (hash: M8k9bViShtt4AmWU/AyDsamC5/RbL8EE0iMthIH76R4=)
4: 34332e3234352e3234392e302f32342d3234203d3e20313331373430.roa (hash: oAmiFNqM3oX4aTDAmFzq05nIHAcLXlnLDdNWSaF00HQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/EEEEDDCDA44B0713B397D27040721EEC4848E5DC.crl
rsync://rpki-rsync.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/EEEEDDCDA44B0713B397D27040721EEC4848E5DC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EEEEDDCDA44B0713B397D27040721EEC4848E5DC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 22:42:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:73:d9:82:6e:13:d5:9e:f8:8a:2d:40:f4:75:c6:77:31:b0:6c:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EEEEDDCDA44B0713B397D27040721EEC4848E5DC
Validity
Not Before: Sep 16 22:01:17 2026 GMT
Not After : Sep 17 22:42:17 2026 GMT
Subject: CN=2E37E9ED751FA25EDB853E67BF9FF4FA5451ABE2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:54:3d:71:6d:cd:95:b6:4d:f0:d2:73:29:ad:
d8:35:b7:f7:d6:ba:2e:b2:20:e1:64:e8:a5:54:f4:
d9:1b:5d:57:cc:4a:d2:8f:94:33:27:5a:2a:9b:aa:
6b:dd:6c:35:9b:34:7e:10:13:76:f4:f5:87:ea:21:
e6:34:b0:60:58:56:52:29:03:7d:e0:b7:65:3a:40:
ce:c7:5e:09:a7:75:1b:4b:13:70:4d:73:ea:fe:d5:
1c:3a:a5:b8:9d:e5:c4:38:ef:40:77:2a:9d:9d:47:
e3:fa:26:0b:d9:4a:d5:f4:ad:8a:ec:88:09:7f:92:
22:2c:2b:24:81:1d:b3:bc:b2:d1:c9:57:d4:fb:8f:
74:58:ec:ce:92:a2:bf:9b:3f:35:e9:c8:76:c4:f5:
6b:e8:46:c1:4c:6f:6d:4c:11:d5:d8:99:9a:23:84:
e1:63:d1:b6:92:0f:49:04:a8:19:52:81:7c:0a:58:
21:0f:8f:99:02:58:f1:20:f9:72:0f:fb:05:70:61:
4d:6f:f1:62:02:a4:d7:5c:4d:9d:b8:39:f2:c3:7e:
d0:70:96:6e:dd:7b:60:c7:18:e8:d7:39:12:b0:eb:
dd:00:74:ab:9f:57:4c:19:49:91:a8:cb:e3:0d:90:
5a:92:05:ff:d6:65:5c:6d:11:4a:d4:86:83:36:04:
77:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:37:E9:ED:75:1F:A2:5E:DB:85:3E:67:BF:9F:F4:FA:54:51:AB:E2
X509v3 Authority Key Identifier:
keyid:EE:EE:DD:CD:A4:4B:07:13:B3:97:D2:70:40:72:1E:EC:48:48:E5:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/EEEEDDCDA44B0713B397D27040721EEC4848E5DC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EEEEDDCDA44B0713B397D27040721EEC4848E5DC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/EEEEDDCDA44B0713B397D27040721EEC4848E5DC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:3f:f9:84:ae:8b:17:1c:d2:dc:38:bc:d7:02:6f:00:1c:06:
5c:21:de:f3:87:4a:31:b6:ca:b1:a2:7d:4f:5b:a8:e0:1f:1e:
33:9a:0b:55:0a:63:16:8f:3e:62:d2:dd:ab:65:79:95:bd:db:
a1:2e:81:72:c6:4f:0b:02:0a:3a:bf:a2:18:44:f1:22:59:4d:
e4:13:73:d7:fc:fb:be:d2:9a:b9:da:b8:6e:18:ac:b4:da:95:
5d:24:51:2a:d2:a0:fd:8d:7a:fd:87:70:0b:8c:b0:ba:30:a2:
a1:89:5d:d8:dc:45:0d:96:10:8a:2b:da:49:5e:25:2d:e6:0e:
d6:35:4f:44:1a:7b:5e:65:a9:c2:0d:c3:2f:33:e7:b8:c4:e2:
72:5b:b4:f5:54:65:60:c9:15:16:76:e5:1a:30:09:71:f7:1c:
e1:f6:7d:15:85:b7:af:05:91:12:4d:a1:2d:f5:21:ed:6d:26:
a7:3c:8a:8f:b3:fe:61:55:e4:cf:73:f2:df:bd:a8:f7:71:93:
8f:5e:88:8c:9d:66:6d:34:6a:5e:ef:89:78:14:0c:32:c4:28:
8f:cc:67:04:20:d3:ad:f1:b5:51:91:b0:d0:ad:76:e2:1f:a0:
b6:f8:6f:69:73:20:7e:bd:7a:6f:c0:8f:dd:0b:54:c7:23:15:
75:a0:7e:f7
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUBnPZgm4T1Z74ii1A9HXGdzGwbHwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUVFRUREQ0RBNDRCMDcxM0IzOTdEMjcwNDA3MjFFRUM0
ODQ4RTVEQzAeFw0yNjA5MTYyMjAxMTdaFw0yNjA5MTcyMjQyMTdaMDMxMTAvBgNV
BAMTKDJFMzdFOUVENzUxRkEyNUVEQjg1M0U2N0JGOUZGNEZBNTQ1MUFCRTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzVD1xbc2Vtk3w0nMprdg1t/fW
ui6yIOFk6KVU9NkbXVfMStKPlDMnWiqbqmvdbDWbNH4QE3b09YfqIeY0sGBYVlIp
A33gt2U6QM7HXgmndRtLE3BNc+r+1Rw6pbid5cQ470B3Kp2dR+P6JgvZStX0rYrs
iAl/kiIsKySBHbO8stHJV9T7j3RY7M6Sor+bPzXpyHbE9WvoRsFMb21MEdXYmZoj
hOFj0baSD0kEqBlSgXwKWCEPj5kCWPEg+XIP+wVwYU1v8WICpNdcTZ24OfLDftBw
lm7de2DHGOjXORKw690AdKufV0wZSZGoy+MNkFqSBf/WZVxtEUrUhoM2BHepAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQULjfp7XUfol7bhT5nv5/0+lRRq+IwHwYDVR0j
BBgwFoAU7u7dzaRLBxOzl9JwQHIe7EhI5dwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZmM2ZjgzMmItNWE5ZS00Y2FhLWJkZDQtMjYzNDcyN2E5ZWQ0LzAvRUVFRUREQ0RB
NDRCMDcxM0IzOTdEMjcwNDA3MjFFRUM0ODQ4RTVEQy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FRUVFRERDREE0NEIwNzEzQjM5N0QyNzA0MDcyMUVFQzQ4NDhF
NURDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmM2ZjgzMmItNWE5ZS00Y2FhLWJk
ZDQtMjYzNDcyN2E5ZWQ0LzAvRUVFRUREQ0RBNDRCMDcxM0IzOTdEMjcwNDA3MjFF
RUM0ODQ4RTVEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABQ/+YSuixcc0tw4vNcCbwAcBlwh3vOHSjG2
yrGifU9bqOAfHjOaC1UKYxaPPmLS3atleZW926EugXLGTwsCCjq/ohhE8SJZTeQT
c9f8+77SmrnauG4YrLTalV0kUSrSoP2Nev2HcAuMsLowoqGJXdjcRQ2WEIor2kle
JS3mDtY1T0Qae15lqcINwy8z57jE4nJbtPVUZWDJFRZ25RowCXH3HOH2fRWFt68F
kRJNoS31Ie1tJqc8io+z/mFV5M9z8t+9qPdxk49eiIydZm00al7viXgUDDLEKI/M
ZwQg063xtVGRsNCtduIfoLb4b2lzIH69em/Aj90LVMcjFXWgfvc=
-----END CERTIFICATE-----
Generated at Thu Sep 17 12:19:44 2026 by rpki-client