
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/EED73C939D7979D02D1E9983FE62CFB74B68D85A.mft
File: EED73C939D7979D02D1E9983FE62CFB74B68D85A.mft (raw, json)
Hash identifier: 6qdaTef6puXvF1b9x7UNZpFj8DFeBv79+QJ902aOkRs=
Subject key identifier: 83:0C:F8:FD:B7:F1:C7:33:D9:27:40:13:FD:60:84:E8:45:C6:7D:93
Authority key identifier: EE:D7:3C:93:9D:79:79:D0:2D:1E:99:83:FE:62:CF:B7:4B:68:D8:5A
Certificate issuer: /CN=EED73C939D7979D02D1E9983FE62CFB74B68D85A
Certificate serial: 2A9018BC47194FF3196C3F4F1F85D85AEAB44704
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EED73C939D7979D02D1E9983FE62CFB74B68D85A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/EED73C939D7979D02D1E9983FE62CFB74B68D85A.mft
Manifest number: BB
Signing time: Sun 20 Sep 2026 11:00:45 +0000
Manifest this update: Sun 20 Sep 2026 10:55:45 +0000
Manifest next update: Mon 21 Sep 2026 12:26:45 +0000
Files and hashes: 1: EED73C939D7979D02D1E9983FE62CFB74B68D85A.crl (hash: 6J0wlxE3E9sSum7VGHheHrn2NsnJTR6wfCpGKc1Hw+Y=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/EED73C939D7979D02D1E9983FE62CFB74B68D85A.crl
rsync://rpki-rsync.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/EED73C939D7979D02D1E9983FE62CFB74B68D85A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EED73C939D7979D02D1E9983FE62CFB74B68D85A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 21 Sep 2026 12:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:90:18:bc:47:19:4f:f3:19:6c:3f:4f:1f:85:d8:5a:ea:b4:47:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EED73C939D7979D02D1E9983FE62CFB74B68D85A
Validity
Not Before: Sep 20 10:55:45 2026 GMT
Not After : Sep 21 12:26:45 2026 GMT
Subject: CN=830CF8FDB7F1C733D9274013FD6084E845C67D93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5a:5e:bd:bd:aa:a6:a4:6e:f8:ac:9e:72:1f:
79:71:41:22:cc:3b:75:7e:b6:46:f3:0b:93:13:b8:
92:fa:0c:85:e2:4a:1b:2a:ea:b2:28:11:97:69:50:
26:8b:cf:23:78:ac:0d:6c:7d:9d:92:58:30:0d:eb:
09:71:a5:a4:59:55:ce:d7:10:a6:0c:4d:c1:63:08:
b1:b7:72:62:87:99:b7:22:8a:27:19:30:a6:0c:9a:
eb:19:4f:21:b5:4e:ad:89:e9:99:c7:85:f3:48:88:
68:e8:24:65:85:1b:4a:2e:7f:4f:e6:ba:e3:f0:98:
f4:eb:eb:8a:8a:85:0b:19:87:22:b0:3c:b1:56:11:
62:c6:1e:34:f0:52:38:25:49:d0:31:ee:19:43:da:
a6:50:46:06:87:42:6f:57:15:e5:0c:5f:98:c5:eb:
53:08:13:b6:1c:50:2c:21:36:87:88:96:6a:30:27:
bd:6f:97:98:bf:53:f4:28:e8:7d:84:21:75:5c:e4:
94:b8:a5:59:38:17:27:39:e2:b9:a9:37:ff:fc:83:
a6:ea:f2:c5:85:77:54:24:84:d7:6f:8f:1a:63:a7:
c9:02:05:6d:32:9b:cb:52:81:ec:d5:6e:8b:a9:f7:
b7:0f:f8:39:bb:08:cb:35:aa:0a:73:0d:b6:8a:1c:
9e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:0C:F8:FD:B7:F1:C7:33:D9:27:40:13:FD:60:84:E8:45:C6:7D:93
X509v3 Authority Key Identifier:
keyid:EE:D7:3C:93:9D:79:79:D0:2D:1E:99:83:FE:62:CF:B7:4B:68:D8:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/EED73C939D7979D02D1E9983FE62CFB74B68D85A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EED73C939D7979D02D1E9983FE62CFB74B68D85A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/EED73C939D7979D02D1E9983FE62CFB74B68D85A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:8d:82:77:5d:6d:18:2a:bd:fa:f3:ae:e8:e9:86:91:d1:5d:
38:47:a5:54:e4:3c:fa:4d:85:27:29:36:d1:c4:4b:76:60:74:
7f:bc:d0:4d:9a:88:2b:03:0d:10:7f:67:8b:22:dc:13:ed:e4:
3c:69:80:5d:05:f2:43:0f:27:bf:98:8b:d0:22:d2:08:be:5b:
06:f7:8e:17:e4:1e:07:59:b0:ef:c2:ea:69:3d:10:a1:5f:a4:
c0:c5:9d:4a:d4:38:12:c5:b0:21:b8:f6:69:68:59:2a:ea:7f:
c7:74:2e:7e:94:a1:28:a3:8f:6a:7b:5d:68:2d:33:56:f1:10:
38:3d:4f:2c:f1:9e:c5:4e:ee:42:12:86:99:00:4c:9d:2c:32:
2c:5a:c4:81:77:1f:4c:26:cd:d4:a2:b5:82:fe:29:27:60:8b:
c2:6c:b6:d4:3d:97:66:c4:79:48:04:59:37:0a:1c:89:d0:c7:
f9:aa:8d:8d:7b:27:28:a7:1a:65:86:dc:57:cf:0f:31:c1:b4:
d6:82:1d:f3:68:1f:2a:81:8b:58:9d:8a:29:98:ef:3b:93:b5:
d8:20:6a:02:49:01:d3:32:78:ca:7b:41:5c:68:98:29:04:1b:
ff:17:50:c5:66:b5:fc:b1:5c:d2:49:38:48:3a:02:bb:49:66:
57:09:57:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 03:36:38 2026 by rpki-client