
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1a3cc2c1-146c-48a9-b003-7bd83822084d/0/EE6D4D4B3B79AA5AB8BEED983C15503C9A343663.mft
File: EE6D4D4B3B79AA5AB8BEED983C15503C9A343663.mft (raw, json)
Hash identifier: /mYZTIv3pbCTzUjBkwGohHNNUl9RUNav/61FrEUI0Z0=
Subject key identifier: 07:4F:B8:1D:77:AD:76:87:13:AD:46:23:48:96:07:7D:6F:C6:69:13
Authority key identifier: EE:6D:4D:4B:3B:79:AA:5A:B8:BE:ED:98:3C:15:50:3C:9A:34:36:63
Certificate issuer: /CN=EE6D4D4B3B79AA5AB8BEED983C15503C9A343663
Certificate serial: 1F2DF080B5206BB130DAC5B7822418D39F5CDF0E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE6D4D4B3B79AA5AB8BEED983C15503C9A343663.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/1a3cc2c1-146c-48a9-b003-7bd83822084d/0/EE6D4D4B3B79AA5AB8BEED983C15503C9A343663.mft
Manifest number: FF
Signing time: Tue 10 Nov 2026 16:42:08 +0000
Manifest this update: Tue 10 Nov 2026 16:37:08 +0000
Manifest next update: Wed 11 Nov 2026 19:03:08 +0000
Files and hashes: 1: EE6D4D4B3B79AA5AB8BEED983C15503C9A343663.crl (hash: qfezFld1LFGi8t9ljk/u4MzK++/PefwOfvno17xHVrU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/1a3cc2c1-146c-48a9-b003-7bd83822084d/0/EE6D4D4B3B79AA5AB8BEED983C15503C9A343663.crl
rsync://rpki-rsync.idnic.net/repo/1a3cc2c1-146c-48a9-b003-7bd83822084d/0/EE6D4D4B3B79AA5AB8BEED983C15503C9A343663.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE6D4D4B3B79AA5AB8BEED983C15503C9A343663.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 11 Nov 2026 08:21:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:2d:f0:80:b5:20:6b:b1:30:da:c5:b7:82:24:18:d3:9f:5c:df:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE6D4D4B3B79AA5AB8BEED983C15503C9A343663
Validity
Not Before: Nov 10 16:37:08 2026 GMT
Not After : Nov 11 19:03:08 2026 GMT
Subject: CN=074FB81D77AD768713AD46234896077D6FC66913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:05:36:61:48:79:9a:40:22:7e:ef:f8:db:cb:
d7:79:8d:85:d2:50:96:54:06:0f:0c:eb:38:f8:72:
f5:7b:f2:8d:ed:e9:a8:bf:3f:b7:c3:43:2c:af:70:
cd:dc:8c:35:f9:b4:f4:16:9e:45:82:ef:92:94:6f:
93:b9:51:64:43:af:87:b9:eb:08:dc:06:51:2d:07:
4e:e6:7d:1b:28:c3:48:e7:30:b5:56:50:47:3d:08:
28:ab:59:6e:32:d8:eb:ff:23:f6:f6:fe:c8:f9:6b:
42:ca:50:de:af:46:f3:eb:0b:7d:e9:63:8b:8d:72:
26:27:96:b6:ce:75:87:9e:bd:75:81:8f:5c:32:ce:
03:a4:b3:60:15:08:18:65:f5:c8:90:63:da:08:0f:
bd:2f:ca:d4:cd:e6:de:2f:cb:03:11:8c:60:34:7a:
cb:55:66:98:b8:f9:41:02:19:13:19:ae:17:ad:47:
b6:65:a2:a4:8e:11:e2:9c:55:17:f4:5d:a5:ad:5e:
82:dc:2a:4d:8a:83:24:ad:71:1e:00:dc:ce:9c:e8:
8c:e3:89:19:3b:5b:cc:64:fa:33:4f:2e:b9:8b:b3:
1d:76:9e:06:42:45:02:f6:9d:68:c7:43:d3:24:bb:
22:f3:87:1e:93:00:c8:3c:61:4d:e4:ae:b2:0b:67:
9b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:4F:B8:1D:77:AD:76:87:13:AD:46:23:48:96:07:7D:6F:C6:69:13
X509v3 Authority Key Identifier:
keyid:EE:6D:4D:4B:3B:79:AA:5A:B8:BE:ED:98:3C:15:50:3C:9A:34:36:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/1a3cc2c1-146c-48a9-b003-7bd83822084d/0/EE6D4D4B3B79AA5AB8BEED983C15503C9A343663.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE6D4D4B3B79AA5AB8BEED983C15503C9A343663.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1a3cc2c1-146c-48a9-b003-7bd83822084d/0/EE6D4D4B3B79AA5AB8BEED983C15503C9A343663.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:14:c2:22:f0:87:38:b2:57:ca:bb:81:17:d3:ca:f8:f3:64:
a7:a3:e9:67:15:ba:56:ef:b3:1a:e2:42:c7:9a:32:45:91:30:
ce:39:d4:17:77:32:a0:34:59:e1:66:b6:c6:8f:92:9f:0d:6f:
28:12:ec:b5:54:f2:9a:73:f9:04:11:d5:ec:58:9a:3a:d5:ca:
81:80:bc:a2:52:ed:13:a9:dd:62:35:53:92:c4:42:10:cb:69:
32:34:5b:48:8a:f9:a2:a6:9f:a7:e2:2f:f9:f6:37:55:4a:eb:
d8:1b:10:07:d7:cd:b2:34:2b:93:e9:98:90:f0:89:ba:ec:9d:
35:a5:d3:26:e3:c5:0d:54:09:fc:90:47:14:a9:3f:e1:f1:8b:
d5:6f:95:08:80:d4:bf:2a:2c:b1:04:8e:05:cc:8f:69:77:2e:
77:8c:57:ec:5b:b6:89:49:48:9d:f6:8f:ea:25:14:ff:d5:dd:
53:81:24:51:e7:a2:13:05:62:6b:6e:bb:72:f0:d5:4d:0c:42:
01:b4:26:dc:7c:cb:e9:5c:d0:21:3d:3e:26:4b:3c:91:e2:10:
14:f7:a3:f7:52:d8:60:54:0f:76:22:8c:d9:aa:d6:61:0a:6f:
0b:67:ca:f6:90:ff:e4:8c:d3:9d:4c:f9:f6:cf:62:4d:84:d0:
78:2c:6c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 03:55:26 2026 by rpki-client