
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/EECD640133988CFFC0BF1D58079BA5921C041DB9.mft
File: EECD640133988CFFC0BF1D58079BA5921C041DB9.mft (raw, json)
Hash identifier: f32m7PKFOyqR1Fcv2Kefu7bNxwjqmUix5ElRPhs6W+E=
Subject key identifier: 8E:15:57:66:F1:51:E1:90:CE:7B:94:04:78:8B:91:2B:BE:E8:19:4A
Authority key identifier: EE:CD:64:01:33:98:8C:FF:C0:BF:1D:58:07:9B:A5:92:1C:04:1D:B9
Certificate issuer: /CN=EECD640133988CFFC0BF1D58079BA5921C041DB9
Certificate serial: 33EA0469DD9D1EE72C73E28CF205124F67E54D43
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EECD640133988CFFC0BF1D58079BA5921C041DB9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/EECD640133988CFFC0BF1D58079BA5921C041DB9.mft
Manifest number: 3F
Signing time: Wed 17 Jun 2026 03:47:23 +0000
Manifest this update: Wed 17 Jun 2026 03:42:23 +0000
Manifest next update: Thu 18 Jun 2026 07:07:23 +0000
Files and hashes: 1: 323030313a6466333a3738303a3a2f34382d3438203d3e20313430303235.roa (hash: eoYACoknq6vSui9USgokAQRX8xZkoLYZMEzPSOjPAZU=)
2: EECD640133988CFFC0BF1D58079BA5921C041DB9.crl (hash: qo8RMg8kPMwlQkke0qWDCxYzHLgEv/GN0y66Orudvu0=)
3: 3130332e3134392e32322e302f32342d3234203d3e20313430303235.roa (hash: PWHfuvJISm/0HGRYS1rgkQyVd8LnOVyJKU3uYwSY5nY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/EECD640133988CFFC0BF1D58079BA5921C041DB9.crl
rsync://rpki-rsync.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/EECD640133988CFFC0BF1D58079BA5921C041DB9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EECD640133988CFFC0BF1D58079BA5921C041DB9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:ea:04:69:dd:9d:1e:e7:2c:73:e2:8c:f2:05:12:4f:67:e5:4d:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EECD640133988CFFC0BF1D58079BA5921C041DB9
Validity
Not Before: Jun 17 03:42:23 2026 GMT
Not After : Jun 18 07:07:23 2026 GMT
Subject: CN=8E155766F151E190CE7B9404788B912BBEE8194A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:2a:a9:7c:a6:d8:da:7c:74:6d:bb:d7:d1:02:
59:b5:09:86:8e:d9:87:d5:7f:58:ca:0b:76:c7:9a:
e1:b6:fa:86:9f:ff:48:93:7c:5e:d0:70:56:6d:aa:
9a:ed:e2:9e:3b:56:a9:c4:d0:0f:3c:be:2c:bb:a2:
4d:03:8e:6e:24:5e:c9:2d:52:e5:ea:69:be:8f:36:
e7:b1:92:5a:29:7f:60:3b:47:b8:0d:2e:9a:6d:85:
af:12:be:64:8f:41:84:6f:dc:5d:85:15:b5:01:5e:
7e:9f:fe:57:84:c0:96:0b:fe:1a:50:58:b7:49:2d:
fa:09:0c:dc:8e:a1:74:e7:06:a9:c6:43:d9:17:01:
f3:1e:a8:01:94:ce:3d:66:db:2d:53:76:ad:52:94:
64:a5:c2:0b:7d:f4:f3:88:eb:10:d6:bd:c9:be:46:
28:d1:4a:cc:21:9c:b0:6d:fd:fd:30:e1:be:39:ef:
6d:80:6b:37:a9:69:55:48:23:0d:dd:f7:4b:90:9e:
01:b9:09:90:87:65:a5:6c:f5:77:0e:57:03:46:1e:
4b:9f:65:92:42:7b:61:4c:30:08:4a:5a:3c:67:b4:
b0:c9:43:a4:62:12:df:d5:5c:b2:ab:29:66:c6:35:
b8:df:49:c3:98:a7:3b:ad:c3:d9:7e:67:c5:24:9a:
c6:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:15:57:66:F1:51:E1:90:CE:7B:94:04:78:8B:91:2B:BE:E8:19:4A
X509v3 Authority Key Identifier:
keyid:EE:CD:64:01:33:98:8C:FF:C0:BF:1D:58:07:9B:A5:92:1C:04:1D:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/EECD640133988CFFC0BF1D58079BA5921C041DB9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EECD640133988CFFC0BF1D58079BA5921C041DB9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/EECD640133988CFFC0BF1D58079BA5921C041DB9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:97:15:19:3f:74:bd:aa:38:4f:e4:3d:14:35:5d:e3:99:f9:
a1:47:98:94:b4:3b:b4:d6:4f:00:07:e8:56:86:76:84:fb:f9:
32:93:33:e0:1a:ad:1c:bc:d6:b2:2b:13:7d:90:8a:78:9f:db:
15:5e:98:2e:f3:8b:85:6f:77:3c:6a:69:30:cd:b9:20:39:de:
ea:ee:69:91:92:26:f3:38:70:72:71:bd:44:f8:f6:bb:8f:c8:
bb:12:51:5d:2e:8e:7a:c0:50:7b:02:0d:6d:7d:a6:67:0d:c7:
12:89:fe:d5:35:98:8f:56:b0:02:8b:09:a5:f5:a6:68:77:51:
a5:f4:a7:4e:9d:78:47:0e:30:a0:ad:8e:4d:31:c8:52:93:23:
b4:d8:01:6e:e0:56:12:63:06:6b:ff:68:ad:07:49:1f:e7:62:
7f:18:6a:b5:f1:7a:b5:ea:c9:a1:93:bc:e0:ec:78:02:3c:02:
5b:fc:40:5f:88:a6:8c:5f:c7:20:6c:39:c3:4b:ea:4b:e5:9c:
29:e0:33:63:a1:e9:38:56:ed:5a:82:c5:fe:8a:84:24:24:9a:
2b:ba:cc:2a:01:02:4e:0a:4a:da:e0:32:79:30:8c:ce:80:a9:
82:cc:9d:5f:f2:4a:bb:c5:f1:1c:e0:31:72:0f:d1:6e:4f:52:
89:0f:b3:d3
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUM+oEad2dHucsc+KM8gUST2flTUMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUVDRDY0MDEzMzk4OENGRkMwQkYxRDU4MDc5QkE1OTIx
QzA0MURCOTAeFw0yNjA2MTcwMzQyMjNaFw0yNjA2MTgwNzA3MjNaMDMxMTAvBgNV
BAMTKDhFMTU1NzY2RjE1MUUxOTBDRTdCOTQwNDc4OEI5MTJCQkVFODE5NEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTKql8ptjafHRtu9fRAlm1CYaO
2YfVf1jKC3bHmuG2+oaf/0iTfF7QcFZtqprt4p47VqnE0A88viy7ok0Djm4kXskt
UuXqab6PNuexklopf2A7R7gNLpptha8SvmSPQYRv3F2FFbUBXn6f/leEwJYL/hpQ
WLdJLfoJDNyOoXTnBqnGQ9kXAfMeqAGUzj1m2y1Tdq1SlGSlwgt99POI6xDWvcm+
RijRSswhnLBt/f0w4b45722AazepaVVIIw3d90uQngG5CZCHZaVs9XcOVwNGHkuf
ZZJCe2FMMAhKWjxntLDJQ6RiEt/VXLKrKWbGNbjfScOYpzutw9l+Z8UkmsapAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUjhVXZvFR4ZDOe5QEeIuRK77oGUowHwYDVR0j
BBgwFoAU7s1kATOYjP/Avx1YB5ulkhwEHbkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
M2M5M2MyNWMtY2U1NS00ODcwLTgxNjktNWVhZThkOWRmYmMxLzAvRUVDRDY0MDEz
Mzk4OENGRkMwQkYxRDU4MDc5QkE1OTIxQzA0MURCOS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FRUNENjQwMTMzOTg4Q0ZGQzBCRjFENTgwNzlCQTU5MjFDMDQx
REI5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2M5M2MyNWMtY2U1NS00ODcwLTgx
NjktNWVhZThkOWRmYmMxLzAvRUVDRDY0MDEzMzk4OENGRkMwQkYxRDU4MDc5QkE1
OTIxQzA0MURCOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAI+XFRk/dL2qOE/kPRQ1XeOZ+aFHmJS0O7TW
TwAH6FaGdoT7+TKTM+AarRy81rIrE32Qinif2xVemC7zi4VvdzxqaTDNuSA53uru
aZGSJvM4cHJxvUT49ruPyLsSUV0ujnrAUHsCDW19pmcNxxKJ/tU1mI9WsAKLCaX1
pmh3UaX0p06deEcOMKCtjk0xyFKTI7TYAW7gVhJjBmv/aK0HSR/nYn8YarXxerXq
yaGTvODseAI8Alv8QF+IpoxfxyBsOcNL6kvlnCngM2Oh6ThW7VqCxf6KhCQkmiu6
zCoBAk4KStrgMnkwjM6AqYLMnV/ySrvF8RzgMXIP0W5PUokPs9M=
-----END CERTIFICATE-----
Generated at Wed Jun 17 13:15:15 2026 by rpki-client