
$ rpki-client -vvf rpki-rsync.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/EEC8298F6351E0D1E9099D89D52C21BDF551073F.mft
File: EEC8298F6351E0D1E9099D89D52C21BDF551073F.mft (raw, json)
Hash identifier: i1mMuszMzyamJzcFoGSuQk/o/+VZbuBoWVSTZA1z0rU=
Subject key identifier: D5:BB:F9:93:9F:57:5D:0A:8E:CD:7B:59:4E:CE:1D:EF:28:7F:C4:13
Authority key identifier: EE:C8:29:8F:63:51:E0:D1:E9:09:9D:89:D5:2C:21:BD:F5:51:07:3F
Certificate issuer: /CN=EEC8298F6351E0D1E9099D89D52C21BDF551073F
Certificate serial: 0D6B6392DA002D8C0113DCE6B7BE25C197437323
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EEC8298F6351E0D1E9099D89D52C21BDF551073F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/EEC8298F6351E0D1E9099D89D52C21BDF551073F.mft
Manifest number: 3D
Signing time: Tue 16 Jun 2026 18:51:56 +0000
Manifest this update: Tue 16 Jun 2026 18:46:56 +0000
Manifest next update: Wed 17 Jun 2026 19:21:56 +0000
Files and hashes: 1: 3130332e3132352e3138342e302f32342d3234203d3e20313338313134.roa (hash: pj1vmNVgdJMcLPpwXDPbTSTqYs/nj1UjJZcEGgiuKJM=)
2: EEC8298F6351E0D1E9099D89D52C21BDF551073F.crl (hash: Hcy+/zKZuC+jkhnRsWMt/d3KbNhIueY7XVRcDlzrc5s=)
3: 3130332e3132352e3138352e302f32342d3234203d3e20313338313134.roa (hash: CZezg3V9YTA7rAg0HQHAWG4rHwKphI57kR4SMjyKwas=)
4: 323030313a6466373a326630303a3a2f34382d3438203d3e20313338313134.roa (hash: BdIV5PbAUlJnh4RApHNLwZ1Ca32+bF84gt8/bqThZfc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/EEC8298F6351E0D1E9099D89D52C21BDF551073F.crl
rsync://rpki-rsync.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/EEC8298F6351E0D1E9099D89D52C21BDF551073F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EEC8298F6351E0D1E9099D89D52C21BDF551073F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 19:21:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:6b:63:92:da:00:2d:8c:01:13:dc:e6:b7:be:25:c1:97:43:73:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EEC8298F6351E0D1E9099D89D52C21BDF551073F
Validity
Not Before: Jun 16 18:46:56 2026 GMT
Not After : Jun 17 19:21:56 2026 GMT
Subject: CN=D5BBF9939F575D0A8ECD7B594ECE1DEF287FC413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:82:e3:eb:6b:7e:2d:01:f1:55:10:16:62:ec:
e1:a2:99:18:0d:78:54:3b:90:18:9d:98:67:5a:51:
a4:c9:6f:e2:4f:e4:df:b8:cd:ba:d0:ad:84:d3:29:
cd:76:1d:78:85:83:ff:4d:14:8a:38:ad:69:c1:15:
95:fb:cd:97:8e:57:60:14:26:41:01:ff:84:68:cb:
2c:fc:33:47:8a:c9:ff:47:4b:f6:68:48:79:11:35:
88:6a:d9:81:61:bd:91:e2:56:7d:a7:35:d5:c1:c7:
32:e8:0d:02:a7:41:f1:5e:71:d5:4e:32:0f:94:23:
5a:69:8d:53:69:02:2e:a6:9c:2c:1a:e7:3c:7d:23:
70:d2:ad:73:e3:a8:b7:88:c1:39:29:31:9d:e0:a3:
01:6a:b3:f5:06:21:a0:d0:31:3e:bb:55:51:02:31:
df:2f:8b:4e:94:11:bc:8c:81:a8:80:3a:89:84:9c:
ae:2d:d1:aa:78:64:85:5d:d7:9b:0a:6b:ca:1e:73:
5d:90:e4:98:37:4b:3b:78:8b:78:f1:8b:54:1c:ce:
33:18:99:24:0c:e1:37:87:44:13:c8:64:19:17:2c:
d6:48:24:e3:8a:32:37:5d:20:44:c2:ae:de:ad:a5:
ce:0e:1c:83:df:1c:d8:f3:c2:32:d4:cf:91:f3:de:
d0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:BB:F9:93:9F:57:5D:0A:8E:CD:7B:59:4E:CE:1D:EF:28:7F:C4:13
X509v3 Authority Key Identifier:
keyid:EE:C8:29:8F:63:51:E0:D1:E9:09:9D:89:D5:2C:21:BD:F5:51:07:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/EEC8298F6351E0D1E9099D89D52C21BDF551073F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EEC8298F6351E0D1E9099D89D52C21BDF551073F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/EEC8298F6351E0D1E9099D89D52C21BDF551073F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:8d:84:bd:16:4f:b8:90:7a:eb:9f:7c:b5:23:f4:28:9a:31:
85:31:f3:c6:d4:d6:71:dc:17:a4:e5:62:0f:2a:4e:a2:84:56:
5c:8d:b3:9e:ac:9b:d5:c2:ae:04:00:34:fe:d8:ed:88:8c:56:
df:a5:69:86:6e:9a:f3:cc:68:2a:6c:79:aa:22:c7:a0:10:e6:
2e:e0:6b:40:81:19:95:8d:9f:18:54:ac:94:7e:b6:12:51:68:
92:64:b4:11:e9:c5:fb:4f:6f:e7:17:f5:46:2f:52:ea:e5:52:
0a:13:ec:08:f5:9c:1c:00:35:76:69:3b:aa:ab:b2:08:13:06:
3a:a5:47:39:46:92:9c:88:c8:b4:93:c2:17:2d:6b:34:24:ce:
70:97:e2:07:89:e5:da:88:b6:ee:2b:39:51:ff:94:8a:72:36:
ba:ff:a9:a3:14:5c:32:31:39:fc:f2:e5:da:2b:34:98:e6:88:
6e:1a:80:1c:d1:42:86:83:13:78:51:15:0c:13:25:fb:16:e5:
22:bb:7d:40:ca:25:ad:a2:22:6b:ba:99:7b:93:be:06:ac:30:
09:6e:6c:39:0d:90:27:61:dc:11:bf:32:a9:f6:cb:eb:e8:96:
7d:eb:4a:06:0a:33:d7:23:42:53:31:93:ea:dd:58:66:e3:c9:
e9:22:62:2d
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUDWtjktoALYwBE9zmt74lwZdDcyMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUVDODI5OEY2MzUxRTBEMUU5MDk5RDg5RDUyQzIxQkRG
NTUxMDczRjAeFw0yNjA2MTYxODQ2NTZaFw0yNjA2MTcxOTIxNTZaMDMxMTAvBgNV
BAMTKEQ1QkJGOTkzOUY1NzVEMEE4RUNEN0I1OTRFQ0UxREVGMjg3RkM0MTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7guPra34tAfFVEBZi7OGimRgN
eFQ7kBidmGdaUaTJb+JP5N+4zbrQrYTTKc12HXiFg/9NFIo4rWnBFZX7zZeOV2AU
JkEB/4Royyz8M0eKyf9HS/ZoSHkRNYhq2YFhvZHiVn2nNdXBxzLoDQKnQfFecdVO
Mg+UI1ppjVNpAi6mnCwa5zx9I3DSrXPjqLeIwTkpMZ3gowFqs/UGIaDQMT67VVEC
Md8vi06UEbyMgaiAOomEnK4t0ap4ZIVd15sKa8oec12Q5Jg3Szt4i3jxi1QczjMY
mSQM4TeHRBPIZBkXLNZIJOOKMjddIETCrt6tpc4OHIPfHNjzwjLUz5Hz3tAzAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU1bv5k59XXQqOzXtZTs4d7yh/xBMwHwYDVR0j
BBgwFoAU7sgpj2NR4NHpCZ2J1SwhvfVRBz8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OTNkOTI2OGItNWU2MS00M2IyLWE2MjQtNDFiMDFkN2Q3NmIyLzAvRUVDODI5OEY2
MzUxRTBEMUU5MDk5RDg5RDUyQzIxQkRGNTUxMDczRi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FRUM4Mjk4RjYzNTFFMEQxRTkwOTlEODlENTJDMjFCREY1NTEw
NzNGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTNkOTI2OGItNWU2MS00M2IyLWE2
MjQtNDFiMDFkN2Q3NmIyLzAvRUVDODI5OEY2MzUxRTBEMUU5MDk5RDg5RDUyQzIx
QkRGNTUxMDczRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBACONhL0WT7iQeuuffLUj9CiaMYUx88bU1nHc
F6TlYg8qTqKEVlyNs56sm9XCrgQANP7Y7YiMVt+laYZumvPMaCpseaoix6AQ5i7g
a0CBGZWNnxhUrJR+thJRaJJktBHpxftPb+cX9UYvUurlUgoT7Aj1nBwANXZpO6qr
sggTBjqlRzlGkpyIyLSTwhctazQkznCX4geJ5dqItu4rOVH/lIpyNrr/qaMUXDIx
Ofzy5dorNJjmiG4agBzRQoaDE3hRFQwTJfsW5SK7fUDKJa2iImu6mXuTvgasMAlu
bDkNkCdh3BG/Mqn2y+voln3rSgYKM9cjQlMxk+rdWGbjyekiYi0=
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:42:55 2026 by rpki-client