
$ rpki-client -vvf rpki-rsync.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/EB84D1FD50105DB5E145FF5740362A466529E4BC.mft
File: EB84D1FD50105DB5E145FF5740362A466529E4BC.mft (raw, json)
Hash identifier: YNgm+HAXfX7Yxu7BBcz/RexLPKKRc/5npM1rKB5/Low=
Subject key identifier: 16:1C:CA:8C:51:79:4C:DF:68:56:53:BB:22:36:5D:5C:A2:18:DA:8B
Authority key identifier: EB:84:D1:FD:50:10:5D:B5:E1:45:FF:57:40:36:2A:46:65:29:E4:BC
Certificate issuer: /CN=EB84D1FD50105DB5E145FF5740362A466529E4BC
Certificate serial: 435A2E31ED5F52FDA8A01715AA8E8DF8FC93585A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB84D1FD50105DB5E145FF5740362A466529E4BC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/EB84D1FD50105DB5E145FF5740362A466529E4BC.mft
Manifest number: 3F
Signing time: Wed 17 Jun 2026 07:52:21 +0000
Manifest this update: Wed 17 Jun 2026 07:47:21 +0000
Manifest next update: Thu 18 Jun 2026 11:27:21 +0000
Files and hashes: 1: 3130332e38302e3233312e302f32342d3234203d3e20313336313331.roa (hash: cGzvaj9/zTJbkYQ8b8vE7NL98CoIDTFEZgZCkjh3eTE=)
2: 3130332e38302e3233302e302f32342d3234203d3e20313531353832.roa (hash: 8eXmIfa2WKiyCToWNIZ0+G7GoNuy3hDgnxZJe2S+QFo=)
3: EB84D1FD50105DB5E145FF5740362A466529E4BC.crl (hash: iu5xsKB3C60ZvKnCoGqOQnporzcE/6hunHy0yJxCc/I=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/EB84D1FD50105DB5E145FF5740362A466529E4BC.crl
rsync://rpki-rsync.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/EB84D1FD50105DB5E145FF5740362A466529E4BC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB84D1FD50105DB5E145FF5740362A466529E4BC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:5a:2e:31:ed:5f:52:fd:a8:a0:17:15:aa:8e:8d:f8:fc:93:58:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB84D1FD50105DB5E145FF5740362A466529E4BC
Validity
Not Before: Jun 17 07:47:21 2026 GMT
Not After : Jun 18 11:27:21 2026 GMT
Subject: CN=161CCA8C51794CDF685653BB22365D5CA218DA8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:52:0a:15:2d:8f:97:5c:29:5f:96:90:b6:0f:
90:db:7b:77:c4:16:35:c5:5a:c0:54:c4:80:e9:c5:
79:3d:db:ba:dc:bc:9d:50:41:bb:f6:17:d8:91:53:
b2:e9:0c:ab:a9:b2:e4:a2:b8:b2:d8:02:6a:24:88:
dd:b1:20:59:7c:b8:ba:84:7c:72:38:8b:80:88:68:
3d:a7:87:dd:93:26:f4:28:d3:cb:e0:f4:37:05:19:
e6:47:0e:b8:e3:a9:31:c2:cf:74:b9:a8:d4:bb:e4:
ca:f3:ac:5c:53:f3:de:83:b1:88:6c:82:d0:79:2f:
64:77:98:90:2e:7c:6c:2f:b8:8a:b2:25:9d:09:8d:
a3:2a:f1:8e:24:ad:c4:e2:e1:15:f8:06:f0:89:92:
4b:e7:dd:a6:13:47:5e:cd:00:d2:53:2d:27:59:10:
55:a1:87:c4:2d:f3:43:57:09:8d:9b:a0:08:35:8e:
64:bc:8d:34:fa:2a:f4:a9:75:cc:1e:7d:b7:53:a8:
e5:21:a4:ea:14:32:f5:63:e9:27:83:15:d3:ea:f8:
29:b1:76:c9:fa:73:b4:62:df:ec:28:0e:4a:e0:b0:
39:4f:69:fd:85:33:58:ef:79:e3:93:ee:f9:d7:1d:
df:5f:c2:35:6a:a4:62:8a:da:1b:a7:18:74:97:0c:
79:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:1C:CA:8C:51:79:4C:DF:68:56:53:BB:22:36:5D:5C:A2:18:DA:8B
X509v3 Authority Key Identifier:
keyid:EB:84:D1:FD:50:10:5D:B5:E1:45:FF:57:40:36:2A:46:65:29:E4:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/EB84D1FD50105DB5E145FF5740362A466529E4BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB84D1FD50105DB5E145FF5740362A466529E4BC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/EB84D1FD50105DB5E145FF5740362A466529E4BC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:ae:4d:be:9a:c4:12:21:90:cb:0b:fa:cf:62:e8:2e:23:9b:
7a:f9:28:3c:53:59:54:b3:56:d5:04:80:41:61:36:42:08:51:
5f:3e:e8:80:fd:26:c5:6f:a0:1c:c0:e8:5a:df:17:33:3d:fe:
3e:45:25:ac:30:00:3d:a9:a0:19:63:e8:10:fb:29:f8:3e:a3:
58:bd:f5:b0:2d:fc:1f:66:d3:5b:36:a2:c1:60:b1:8b:21:fc:
7c:31:a3:c8:78:69:dc:9d:7e:91:9e:6b:e3:78:19:38:5b:94:
12:00:e7:f6:8c:28:12:bb:d0:be:b8:47:4d:b0:41:f3:b4:8c:
b3:df:cd:f4:13:ac:38:7e:7a:9e:9f:49:11:f6:70:ec:48:7d:
4d:33:60:ea:03:4e:d7:7e:91:b6:82:78:7a:08:bb:dc:11:4b:
d7:76:06:65:8d:a1:90:d8:19:29:8e:da:b5:8f:bc:23:48:22:
23:34:df:85:47:13:4d:ef:40:52:28:f4:1f:c4:db:99:af:6b:
ed:2b:da:29:b4:e1:c9:26:6f:a3:e0:bc:f0:c1:dc:48:7f:a3:
ab:10:68:f2:dc:40:e4:d2:9a:53:b1:34:76:d5:de:4c:14:80:
db:61:30:ed:7b:63:c6:89:3b:46:49:f6:46:1c:bf:55:45:09:
e0:18:3b:7b
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUQ1ouMe1fUv2ooBcVqo6N+PyTWFowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUI4NEQxRkQ1MDEwNURCNUUxNDVGRjU3NDAzNjJBNDY2
NTI5RTRCQzAeFw0yNjA2MTcwNzQ3MjFaFw0yNjA2MTgxMTI3MjFaMDMxMTAvBgNV
BAMTKDE2MUNDQThDNTE3OTRDREY2ODU2NTNCQjIyMzY1RDVDQTIxOERBOEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgUgoVLY+XXClflpC2D5Dbe3fE
FjXFWsBUxIDpxXk927rcvJ1QQbv2F9iRU7LpDKupsuSiuLLYAmokiN2xIFl8uLqE
fHI4i4CIaD2nh92TJvQo08vg9DcFGeZHDrjjqTHCz3S5qNS75MrzrFxT896DsYhs
gtB5L2R3mJAufGwvuIqyJZ0JjaMq8Y4krcTi4RX4BvCJkkvn3aYTR17NANJTLSdZ
EFWhh8Qt80NXCY2boAg1jmS8jTT6KvSpdcwefbdTqOUhpOoUMvVj6SeDFdPq+Cmx
dsn6c7Ri3+woDkrgsDlPaf2FM1jveeOT7vnXHd9fwjVqpGKK2hunGHSXDHnzAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUFhzKjFF5TN9oVlO7IjZdXKIY2oswHwYDVR0j
BBgwFoAU64TR/VAQXbXhRf9XQDYqRmUp5LwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NzQxZTgyMjMtY2M2OC00MTBlLWI2N2ItOWI4ODI1YjVjZDVmLzAvRUI4NEQxRkQ1
MDEwNURCNUUxNDVGRjU3NDAzNjJBNDY2NTI5RTRCQy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FQjg0RDFGRDUwMTA1REI1RTE0NUZGNTc0MDM2MkE0NjY1MjlF
NEJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzQxZTgyMjMtY2M2OC00MTBlLWI2
N2ItOWI4ODI1YjVjZDVmLzAvRUI4NEQxRkQ1MDEwNURCNUUxNDVGRjU3NDAzNjJB
NDY2NTI5RTRCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAIyuTb6axBIhkMsL+s9i6C4jm3r5KDxTWVSz
VtUEgEFhNkIIUV8+6ID9JsVvoBzA6FrfFzM9/j5FJawwAD2poBlj6BD7Kfg+o1i9
9bAt/B9m01s2osFgsYsh/Hwxo8h4adydfpGea+N4GThblBIA5/aMKBK70L64R02w
QfO0jLPfzfQTrDh+ep6fSRH2cOxIfU0zYOoDTtd+kbaCeHoIu9wRS9d2BmWNoZDY
GSmO2rWPvCNIIiM034VHE03vQFIo9B/E25mva+0r2im04ckmb6PgvPDB3Eh/o6sQ
aPLcQOTSmlOxNHbV3kwUgNthMO17Y8aJO0ZJ9kYcv1VFCeAYO3s=
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:20:40 2026 by rpki-client