
$ rpki-client -vvf rpki-rsync.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/EE2943438815BD3AA204737348DB6D3884516325.mft
File: EE2943438815BD3AA204737348DB6D3884516325.mft (raw, json)
Hash identifier: R0uQeu3uNdkUMrMRJJsRcvRZTtQ2QGxDDV6iqChUe8c=
Subject key identifier: 82:46:C2:6D:35:A6:6C:20:2B:D0:21:40:48:7A:14:FB:C4:9C:63:6C
Authority key identifier: EE:29:43:43:88:15:BD:3A:A2:04:73:73:48:DB:6D:38:84:51:63:25
Certificate issuer: /CN=EE2943438815BD3AA204737348DB6D3884516325
Certificate serial: 5F846796A1720DF58149F3E292209A8F7E59AC86
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE2943438815BD3AA204737348DB6D3884516325.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/EE2943438815BD3AA204737348DB6D3884516325.mft
Manifest number: 3E
Signing time: Wed 17 Jun 2026 00:59:12 +0000
Manifest this update: Wed 17 Jun 2026 00:54:12 +0000
Manifest next update: Thu 18 Jun 2026 02:14:12 +0000
Files and hashes: 1: 3130332e35352e33312e302f32342d3234203d3e20313530343834.roa (hash: fq5M+dx6USCMFcMueBlB0OlQMgC40bRFl66f36qCgPM=)
2: 3130332e35352e33302e302f32342d3234203d3e20313530343834.roa (hash: QxVgQbc9bJ28BSqw5k+C3GSuIOfZW0NlgNTshO2WruQ=)
3: 3130332e35352e33302e302f32332d3233203d3e20313530343834.roa (hash: G3KzWHfdyRcChB//+h8vgfZ65TxUJCZuJOLl/yrV7ac=)
4: EE2943438815BD3AA204737348DB6D3884516325.crl (hash: Fq9FmMKy66o/X3F+ltn7rGJqeZLsopQCUCGVBR07fA4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/EE2943438815BD3AA204737348DB6D3884516325.crl
rsync://rpki-rsync.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/EE2943438815BD3AA204737348DB6D3884516325.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE2943438815BD3AA204737348DB6D3884516325.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 02:14:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:84:67:96:a1:72:0d:f5:81:49:f3:e2:92:20:9a:8f:7e:59:ac:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE2943438815BD3AA204737348DB6D3884516325
Validity
Not Before: Jun 17 00:54:12 2026 GMT
Not After : Jun 18 02:14:12 2026 GMT
Subject: CN=8246C26D35A66C202BD02140487A14FBC49C636C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:a3:39:74:00:dd:46:7d:6d:1b:61:4f:2f:76:
c4:8f:07:58:eb:e6:af:a4:d5:6c:1f:87:a7:37:c0:
5b:bc:41:29:c6:47:88:38:12:91:b0:50:4b:64:9f:
07:d4:a0:d2:75:61:52:c5:60:21:5a:7c:8b:27:d1:
a5:91:da:ff:c7:41:38:2b:8f:2d:91:c4:5a:29:15:
57:41:9e:bf:54:6d:e6:b8:19:f2:bb:c8:c8:7b:f0:
25:2d:a2:18:8a:6b:80:d7:52:6f:b3:94:56:be:2d:
66:b6:dc:67:72:c6:af:0f:de:94:4f:be:66:52:ac:
b3:86:69:49:01:9e:ec:1e:4e:f6:5d:9a:bc:23:fa:
41:08:c5:33:6e:3a:b9:7b:83:43:db:f8:25:8b:31:
b1:71:d0:28:f0:39:c5:66:55:2b:69:64:52:fc:cd:
7d:95:15:31:2b:15:29:6b:11:6d:72:a3:fd:be:a6:
88:bb:8d:c0:c1:cd:bb:0f:59:f3:e7:30:2f:b5:6a:
26:b7:bc:b7:8d:2c:97:0b:5f:0a:4f:7b:a6:41:f4:
65:bc:fd:8e:6d:9c:97:07:55:8e:71:a8:87:90:e0:
bd:41:fe:59:23:6b:4f:09:30:a7:ff:b4:46:87:ab:
9c:8c:f7:47:7b:6b:9c:6d:b6:93:1c:d3:32:ab:1e:
0f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:46:C2:6D:35:A6:6C:20:2B:D0:21:40:48:7A:14:FB:C4:9C:63:6C
X509v3 Authority Key Identifier:
keyid:EE:29:43:43:88:15:BD:3A:A2:04:73:73:48:DB:6D:38:84:51:63:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/EE2943438815BD3AA204737348DB6D3884516325.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE2943438815BD3AA204737348DB6D3884516325.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/EE2943438815BD3AA204737348DB6D3884516325.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:33:af:f2:89:ff:98:6a:23:e4:31:d4:bc:73:b8:c9:6b:a2:
1f:c6:29:fc:e2:49:7e:9e:d9:34:ea:12:ee:b0:1a:e9:3b:24:
51:76:02:cc:cf:bd:56:19:45:5a:4f:1d:57:96:67:25:53:bb:
a5:3a:08:29:82:fd:60:f9:2d:9e:ee:4d:80:23:16:16:a0:f8:
4d:c2:10:5c:14:68:81:fa:64:46:72:fc:a8:c3:18:fa:04:96:
be:85:fc:7a:81:a4:eb:64:7d:ac:d8:5d:5f:45:01:03:82:bb:
5f:5f:32:7d:a6:05:ff:24:a6:0f:ea:59:d3:c8:32:04:09:9f:
f5:45:7a:e8:8c:fd:7d:24:a5:e4:53:47:b0:db:db:a7:54:00:
99:29:66:8e:58:49:e1:18:e5:f5:1d:e5:60:c4:df:32:a2:fe:
c0:41:53:dc:1a:b7:05:86:f9:f1:7d:3d:8b:e7:64:b6:0d:b8:
6e:aa:99:c5:d3:b6:f2:bb:b5:d2:8a:00:f2:5a:05:ae:3e:07:
20:30:f0:e3:9c:9b:26:68:1f:1b:08:b3:c9:8a:2e:97:5d:1b:
54:74:c1:79:2e:59:d5:41:d0:31:e4:71:82:6b:0d:5d:7e:8c:
7d:60:7c:59:4e:74:c3:52:95:4c:70:ed:a0:7b:43:1f:cc:58:
ef:5b:a2:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:31:33 2026 by rpki-client