
$ rpki-client -vvf repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.mft
File: EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.mft (raw, json)
Hash identifier: V8RALcx5sa/E4hmB4vRZr+0TflpExZKR+4FeUknb0go=
Subject key identifier: 23:B1:78:F4:49:5B:57:ED:93:73:6B:D9:5A:0A:45:9B:5B:6E:1C:A2
Authority key identifier: EE:C1:A7:BF:2D:95:D0:BA:FE:37:10:5E:4B:B1:BB:23:60:1D:D1:DB
Certificate issuer: /CN=EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB
Certificate serial: 7FE1510A963CE164F1BB57F36640E1B0D67764BB
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.mft
Manifest number: 010A
Signing time: Sat 28 Feb 2026 08:42:23 +0000
Manifest this update: Sat 28 Feb 2026 08:37:23 +0000
Manifest next update: Tue 03 Mar 2026 11:26:23 +0000
Files and hashes: 1: 3136302e32352e34352e302f32342d3234203d3e20313533303639.roa (hash: pjrXRUj5r2IszWCXojX+FWGkandw2VMiyslpGWMGbUA=)
2: EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.crl (hash: 1zoRxn320AQYawNKQ4LgUBgvUh9vcrOHPJ2lna/0ny4=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.crl
rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 11:26:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:e1:51:0a:96:3c:e1:64:f1:bb:57:f3:66:40:e1:b0:d6:77:64:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB
Validity
Not Before: Feb 28 08:37:23 2026 GMT
Not After : Mar 3 11:26:23 2026 GMT
Subject: CN=23B178F4495B57ED93736BD95A0A459B5B6E1CA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e6:cb:f8:0c:31:aa:59:75:7c:06:de:63:47:
e8:27:64:bb:82:e7:70:39:87:c8:8b:99:fe:c4:41:
96:d7:ca:ad:15:57:e6:88:44:5b:ba:5a:a2:fa:cd:
92:d0:01:be:4e:fd:ad:e8:5d:30:8e:77:a8:dd:7a:
a4:fa:00:64:37:62:06:c7:ab:2a:f6:cf:22:a3:0e:
ea:19:cf:06:a8:0e:88:51:a3:65:7d:f3:8f:84:5b:
70:fe:e3:c0:25:6c:2e:64:97:36:9b:b4:b6:38:0d:
37:49:e7:03:84:df:8d:24:70:39:69:fa:2b:c4:fc:
ba:fb:7d:fd:43:f9:6f:dd:3f:84:82:ca:27:17:71:
ea:42:6d:4b:10:1c:17:02:d8:ef:5a:5e:16:c3:7d:
65:8b:11:af:33:b9:e4:07:3d:7a:89:35:e4:ba:d7:
fe:04:a1:65:b2:59:20:51:bd:81:44:16:6e:8f:8a:
f1:e4:62:f9:a5:2d:ce:cc:63:9c:fb:fb:79:6e:c3:
d1:52:82:0e:43:dd:1c:93:c1:a6:6d:28:be:0d:ab:
6e:dd:28:e4:7c:62:c7:96:02:3e:49:17:00:84:91:
08:cc:3a:10:4e:79:d6:c9:79:65:f7:5d:ca:fc:a9:
d9:68:43:78:57:cf:9d:63:6e:66:cf:35:0a:3d:40:
8a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:B1:78:F4:49:5B:57:ED:93:73:6B:D9:5A:0A:45:9B:5B:6E:1C:A2
X509v3 Authority Key Identifier:
keyid:EE:C1:A7:BF:2D:95:D0:BA:FE:37:10:5E:4B:B1:BB:23:60:1D:D1:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:be:8c:6a:eb:4a:b4:a3:53:3e:44:dd:16:c1:cd:53:77:60:
cf:8a:0a:9d:21:20:f4:1c:af:a1:32:03:46:e4:2e:02:ea:8c:
8a:4c:e9:40:da:a4:8d:68:0e:c6:af:2e:b4:c6:58:c3:21:29:
5b:2c:a0:0b:a7:b3:3c:3f:89:0b:b2:df:5e:03:6d:af:99:36:
9d:ec:30:56:17:4a:a1:d8:b2:b0:31:66:0a:3f:a9:a7:1b:a5:
68:c9:51:74:76:4d:e6:cd:56:c9:82:22:75:29:98:38:09:6e:
e2:4d:b1:08:76:35:bc:3e:28:a7:87:8d:94:6c:dd:97:06:b7:
8c:b2:c4:37:22:ed:25:bb:a1:80:5e:ec:60:89:b0:ad:0f:b8:
be:dd:bb:55:1b:d8:f4:83:9d:ad:59:f3:e1:df:e7:bc:ca:7f:
2d:fd:97:18:a3:9d:cc:4b:84:f2:a2:9a:1b:04:7d:e6:44:5a:
f1:77:de:63:9c:cc:ab:8d:70:74:64:3f:d8:a2:c6:e3:79:9b:
71:d9:65:21:03:3c:ad:05:9a:a3:02:e2:a3:f0:65:09:63:a8:
fa:64:01:be:a4:d2:8b:cf:23:6b:8f:9b:32:4a:94:14:f8:34:
0f:16:b8:61:7c:5a:ad:a3:86:76:45:46:3b:27:68:aa:a6:db:
81:99:75:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:20:40 2026 by rpki-client