
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/EB1A7EE539E6F1EFA3D30C62149C265EBF30B537.mft
File: EB1A7EE539E6F1EFA3D30C62149C265EBF30B537.mft (raw, json)
Hash identifier: jn1cYtn5G1SJBhdnfCSYRHDqV1giAO4+8Nsmk0qHJEY=
Subject key identifier: 61:AD:76:B2:94:9D:9C:51:DF:0B:B3:40:B5:4A:48:5A:4C:3F:37:EE
Authority key identifier: EB:1A:7E:E5:39:E6:F1:EF:A3:D3:0C:62:14:9C:26:5E:BF:30:B5:37
Certificate issuer: /CN=EB1A7EE539E6F1EFA3D30C62149C265EBF30B537
Certificate serial: 7DF3F41031382A0957BA0B1902AD513FFEEA305F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB1A7EE539E6F1EFA3D30C62149C265EBF30B537.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/EB1A7EE539E6F1EFA3D30C62149C265EBF30B537.mft
Manifest number: C5
Signing time: Sat 26 Sep 2026 12:40:25 +0000
Manifest this update: Sat 26 Sep 2026 12:35:25 +0000
Manifest next update: Sun 27 Sep 2026 16:39:25 +0000
Files and hashes: 1: EB1A7EE539E6F1EFA3D30C62149C265EBF30B537.crl (hash: 3yVs7CQP3s6zsAM1TNEHMVnyRk1utEnmBf4bcspB0n0=)
2: 3130332e3235352e3130382e302f32342d3234203d3e20313437313530.roa (hash: ePjyykmLAPcuoIW4PxvnsIf6Mnk1VG8I5wQF6R8ChtM=)
3: 3130332e3235352e3130392e302f32342d3234203d3e20313530313931.roa (hash: BsPXa+UOut2Mbb+7M0ct2qI2C2+ME889eZGuggOi820=)
4: 3130332e3235352e3130382e302f32332d3233203d3e20313430343233.roa (hash: lD4ekQjYWJEX/+XteQDNEzLVrijnUKOpZR8eykHExcM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/EB1A7EE539E6F1EFA3D30C62149C265EBF30B537.crl
rsync://rpki-rsync.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/EB1A7EE539E6F1EFA3D30C62149C265EBF30B537.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB1A7EE539E6F1EFA3D30C62149C265EBF30B537.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 12:52:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:f3:f4:10:31:38:2a:09:57:ba:0b:19:02:ad:51:3f:fe:ea:30:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB1A7EE539E6F1EFA3D30C62149C265EBF30B537
Validity
Not Before: Sep 26 12:35:25 2026 GMT
Not After : Sep 27 16:39:25 2026 GMT
Subject: CN=61AD76B2949D9C51DF0BB340B54A485A4C3F37EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4d:57:75:ff:57:d8:fa:34:7a:39:80:72:40:
44:1b:16:1c:a8:d1:12:fa:46:88:82:42:66:ac:11:
d2:03:07:0b:75:1f:1c:62:d6:78:6c:53:0a:02:43:
48:2f:b3:c9:bd:22:fd:57:4b:1c:43:b7:14:28:c5:
a4:c1:2f:ba:77:5e:5b:b3:70:72:9a:f8:f4:ca:d2:
c3:6c:04:a1:7f:ba:1e:4c:af:8a:6b:4c:bb:3b:ce:
3c:69:d8:bc:16:0c:9f:c9:45:0b:1a:c0:62:ff:f2:
32:d6:d3:6d:9a:4a:fd:16:58:a2:48:01:b2:98:35:
5b:14:76:2b:be:47:55:ac:06:1f:5e:0c:49:df:7c:
7e:2f:a0:12:31:8a:f2:b6:5e:27:d8:ee:3b:aa:a9:
cd:ac:90:56:57:1f:29:d0:60:ad:e3:88:fd:53:48:
6e:04:4d:23:59:d3:82:c7:ec:e0:71:e9:46:88:a1:
8a:de:05:35:ce:ea:fb:5d:21:0b:6f:5f:17:41:c5:
f7:03:0a:4f:fe:37:e5:af:55:53:ba:4e:f7:60:af:
2e:a7:3a:8c:4c:02:89:26:36:d3:b7:70:89:34:42:
ca:07:be:20:50:4a:77:15:cb:68:b2:86:7d:0f:97:
6f:d3:72:4c:a4:44:89:1b:0a:e5:a6:b4:76:09:b7:
6b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:AD:76:B2:94:9D:9C:51:DF:0B:B3:40:B5:4A:48:5A:4C:3F:37:EE
X509v3 Authority Key Identifier:
keyid:EB:1A:7E:E5:39:E6:F1:EF:A3:D3:0C:62:14:9C:26:5E:BF:30:B5:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/EB1A7EE539E6F1EFA3D30C62149C265EBF30B537.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB1A7EE539E6F1EFA3D30C62149C265EBF30B537.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/EB1A7EE539E6F1EFA3D30C62149C265EBF30B537.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:b0:a4:97:c3:7e:c2:ad:43:ed:cd:c9:0b:56:ef:d5:3a:db:
cd:00:dc:c1:cc:aa:0e:fc:a3:a2:82:d9:b3:6b:be:ea:b2:d0:
e4:fe:88:6e:5d:ef:23:5a:04:a5:1a:69:ff:2a:81:a7:a8:e1:
6c:e7:cd:78:72:59:45:50:36:6f:9a:23:5f:56:6c:66:fd:5f:
97:a7:47:1a:6d:ad:33:b9:5a:1e:18:21:ac:84:21:36:b8:90:
dd:5a:27:26:1f:96:86:1e:66:c3:37:59:d5:a8:89:d8:2c:82:
aa:e3:bd:ff:f8:14:dd:bb:cb:dc:81:aa:cc:3e:73:79:44:97:
6e:83:c7:fc:ed:e9:7a:0d:c7:c2:f9:0a:84:fe:0a:8a:e4:dd:
2c:ce:d0:60:91:40:18:22:14:36:0b:d1:5d:69:64:61:6f:39:
07:60:e0:e5:6f:b5:cd:4d:db:8b:c3:85:46:58:50:5d:35:2d:
51:1c:25:6d:15:f5:80:a0:3e:c1:57:7e:23:f7:80:b6:74:59:
0a:e2:df:27:2c:89:62:da:46:73:89:2c:25:c0:55:a0:1d:c2:
cc:11:62:88:51:9e:63:dc:9e:3e:a5:9b:32:99:a5:5e:7c:31:
e9:02:75:7e:c0:ed:e1:bb:42:44:08:3d:19:f3:30:8f:06:d9:
5c:ba:2e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 19:08:29 2026 by rpki-client