
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.mft
File: EAF1BBC2E7852A08EC9726DF037B7A90020F613C.mft (raw, json)
Hash identifier: 1+E+b3L6yPF5rOChNepcWeGZVX4Gd51fu4mIHY8APuI=
Subject key identifier: 90:F9:4C:8C:C9:B3:ED:FB:40:1E:C0:AD:A6:1A:51:90:5F:88:79:CE
Authority key identifier: EA:F1:BB:C2:E7:85:2A:08:EC:97:26:DF:03:7B:7A:90:02:0F:61:3C
Certificate issuer: /CN=EAF1BBC2E7852A08EC9726DF037B7A90020F613C
Certificate serial: 60BED3F16D0213DA3E73BF78557DA8B0C207E59D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.mft
Manifest number: BE
Signing time: Mon 21 Sep 2026 13:23:08 +0000
Manifest this update: Mon 21 Sep 2026 13:18:08 +0000
Manifest next update: Tue 22 Sep 2026 16:38:08 +0000
Files and hashes: 1: 3130332e332e35382e302f32342d3234203d3e20313335343737.roa (hash: 2zqd8AgBddwBm4KIXvjiblLxU15/BrCCnreac7skVlA=)
2: 3130332e37362e3135312e302f32342d3234203d3e20313335343737.roa (hash: qw6OlEu48FrPsEmKgwHPSjOidfOJLUIet7s/2iStFrA=)
3: 3230332e32392e32362e302f32342d3234203d3e20313335343737.roa (hash: 5DkSgMYDvgEBxCCplmwfDoevI8VI5H/bGiFDzCRHnts=)
4: 3130332e37362e3135302e302f32342d3234203d3e20313335343737.roa (hash: xYxE6IzCdxb+aq4Kkm/AnjYa+vu3xdG+mLXx5vkCP/U=)
5: 323430373a366638303a3a2f33322d3438203d3e20313335343737.roa (hash: P366bIkTOlc69Ppfa9a3mTWNreZ6tb8vIXj7vOkMLBM=)
6: 3132302e38392e39302e302f32332d3234203d3e20313335343737.roa (hash: L8OlDd+zcMlp2nj6z/A4ihQhVRTYQCBk+qSvJaFpcus=)
7: 3130332e37362e3134382e302f32342d3234203d3e20313335343737.roa (hash: Tsm6R3Ykoq+qGUHJdq4ks8X4b5Uy0ypiE0/txgdjmm4=)
8: EAF1BBC2E7852A08EC9726DF037B7A90020F613C.crl (hash: BjBPcSQfQKO4+gWZJ2NuqrT5NR1jj8QYEAmfO0TOQYo=)
9: 3130332e37362e3134392e302f32342d3234203d3e20313335343737.roa (hash: f59rz1HETJlgvZwIKtKFdh5XtKqyQqDaf24eWmjJW6o=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.crl
rsync://rpki-rsync.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 05:24:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:be:d3:f1:6d:02:13:da:3e:73:bf:78:55:7d:a8:b0:c2:07:e5:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EAF1BBC2E7852A08EC9726DF037B7A90020F613C
Validity
Not Before: Sep 21 13:18:08 2026 GMT
Not After : Sep 22 16:38:08 2026 GMT
Subject: CN=90F94C8CC9B3EDFB401EC0ADA61A51905F8879CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:68:38:dc:3e:5b:40:27:86:bc:11:bc:0b:72:
eb:ac:4b:f0:55:b5:46:56:fd:1c:44:7d:60:ef:af:
9b:b2:e2:d5:6d:57:ab:1a:9c:be:5a:9d:0a:66:ba:
e6:f6:f0:a0:14:32:4e:d3:8b:11:eb:ad:51:8c:90:
18:db:83:69:a9:30:be:16:e4:59:7a:74:65:cd:23:
cb:a8:a0:bf:b8:a6:d9:b0:12:53:19:51:a4:f2:99:
cb:ec:89:f7:29:14:52:33:b4:e2:7d:49:b1:9d:3e:
37:96:7b:58:de:e2:1f:a8:fa:92:dd:1f:f6:74:4a:
6f:2b:0f:7d:36:8a:f7:aa:1a:d2:65:68:c2:f0:e0:
e8:1a:da:32:d5:90:d2:bb:d2:4c:cc:6e:a5:b0:5b:
30:d2:62:26:cc:91:47:cc:3b:7b:1a:92:5b:40:93:
55:4f:a6:81:9a:ab:7e:8a:c4:82:01:7e:83:ed:29:
bb:07:9c:2c:7a:43:57:f8:23:d8:b8:59:e6:46:1e:
e4:c8:23:27:11:7a:a1:6c:f8:cc:24:37:52:8d:2f:
14:78:f1:cf:d2:88:d0:ef:e4:5d:2e:9b:a6:2e:64:
30:fd:67:24:90:5c:85:ed:c0:d0:81:de:12:0f:51:
b6:68:13:11:34:83:f4:a4:db:71:7b:8b:ff:ee:60:
36:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:F9:4C:8C:C9:B3:ED:FB:40:1E:C0:AD:A6:1A:51:90:5F:88:79:CE
X509v3 Authority Key Identifier:
keyid:EA:F1:BB:C2:E7:85:2A:08:EC:97:26:DF:03:7B:7A:90:02:0F:61:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:48:4c:27:8c:2d:03:09:5c:47:16:8c:a4:14:a1:cf:e1:a6:
e4:b8:3c:40:af:0f:21:ce:7e:75:d5:6e:84:7a:80:96:fe:cb:
05:8f:1c:c6:53:14:5e:93:77:5e:62:2e:45:ab:cb:a7:40:d2:
9b:86:90:69:1e:5f:f6:80:b0:6d:93:fc:99:c4:04:42:3d:42:
a5:ff:45:8e:0d:d7:0c:bb:07:bc:d6:71:78:bf:67:64:96:5c:
f4:85:eb:2e:b2:90:a8:06:d9:28:3c:87:d5:37:ea:0a:7a:73:
c4:1c:f5:d0:cc:4c:f4:f6:69:67:b5:09:55:6d:5e:34:99:ce:
8e:04:df:e7:b8:5f:0d:8f:90:bc:86:c3:07:a7:19:c5:93:02:
c4:65:79:aa:3d:37:fb:c5:19:8d:ae:91:3a:08:47:be:d0:6e:
e5:2e:ac:5b:39:7b:b2:ee:d4:da:9e:9b:e4:fc:12:9e:74:7d:
28:93:7b:41:2f:a5:7a:c5:16:db:d7:6d:5d:d1:c0:c9:d3:a9:
6b:ae:4a:84:ec:ee:a8:ce:c5:fe:fa:6e:4c:c6:5d:a0:30:cc:
04:0d:20:a9:00:3c:cc:67:cf:51:3b:c7:13:d9:73:25:43:67:
35:39:91:02:1a:9a:dc:55:61:36:ba:a7:e4:10:8f:f3:79:06:
29:20:36:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:03:35 2026 by rpki-client