
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/EA69EE1870C74C4198176D679D2040962AA65EE5.mft
File: EA69EE1870C74C4198176D679D2040962AA65EE5.mft (raw, json)
Hash identifier: G77up2k+LNc8M2mAFYw0pS3HUhgVA7pEgulrwuEmbTo=
Subject key identifier: A4:48:3A:42:6B:E4:B4:50:45:21:A9:FC:06:46:78:1E:1B:AD:75:3F
Authority key identifier: EA:69:EE:18:70:C7:4C:41:98:17:6D:67:9D:20:40:96:2A:A6:5E:E5
Certificate issuer: /CN=EA69EE1870C74C4198176D679D2040962AA65EE5
Certificate serial: 01CCF4E7FCFCDD0883B7B02AE4ADF5C7977A60AD
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA69EE1870C74C4198176D679D2040962AA65EE5.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/EA69EE1870C74C4198176D679D2040962AA65EE5.mft
Manifest number: D6
Signing time: Sat 10 Oct 2026 07:35:57 +0000
Manifest this update: Sat 10 Oct 2026 07:30:57 +0000
Manifest next update: Sun 11 Oct 2026 10:10:57 +0000
Files and hashes: 1: 3130332e3134362e3132382e302f32332d3233203d3e20313430303238.roa (hash: 27RMiTZ9x6jfj6rn7+g1KMgItqjflbCMRzo3ncDyIag=)
2: 3130332e3134362e3132382e302f32342d3234203d3e20313430303238.roa (hash: xmNTgE8NlEgdxtkyZzmV8vhuvBfxhNKdp0Qma8cQHQ4=)
3: EA69EE1870C74C4198176D679D2040962AA65EE5.crl (hash: yIY8z1fDdyO8gn+I/PawUYxZEd+DRQA8M+/SEixpWg8=)
4: 3130332e3134362e3132392e302f32342d3234203d3e20313430303238.roa (hash: JdS3onh/UNwTa6fbUAQVIX7szlwvK4Q8vIPtVeKS+NU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/EA69EE1870C74C4198176D679D2040962AA65EE5.crl
rsync://rpki-rsync.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/EA69EE1870C74C4198176D679D2040962AA65EE5.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA69EE1870C74C4198176D679D2040962AA65EE5.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 10:10:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:cc:f4:e7:fc:fc:dd:08:83:b7:b0:2a:e4:ad:f5:c7:97:7a:60:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EA69EE1870C74C4198176D679D2040962AA65EE5
Validity
Not Before: Oct 10 07:30:57 2026 GMT
Not After : Oct 11 10:10:57 2026 GMT
Subject: CN=A4483A426BE4B4504521A9FC0646781E1BAD753F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b1:60:e9:a6:9c:02:85:fe:a7:99:fd:a9:10:
06:0e:16:68:55:e0:8b:51:fd:63:20:e3:01:17:35:
ba:59:b1:36:ce:fb:92:8e:00:2e:19:a9:b2:07:47:
b0:d9:16:82:8a:65:ee:08:84:b0:06:ff:b9:5e:88:
c9:9e:b5:bb:3e:66:80:d9:a7:8a:97:60:b9:f8:87:
1d:3e:cc:e7:63:69:df:4e:41:67:a4:1a:1b:e8:dc:
a8:b1:a7:c9:32:93:db:1e:ae:b1:45:db:fb:d1:b3:
62:8a:5e:53:89:ff:d4:50:12:0b:4c:94:a2:ec:06:
a3:b8:97:dd:95:30:f2:6c:a4:ea:dc:77:84:a8:5a:
a4:6b:94:30:c2:fb:57:60:c1:20:31:48:f4:00:1d:
a0:67:a5:0f:ad:d7:fc:6f:f3:d9:62:21:ae:96:01:
0a:d1:f0:60:a6:44:8c:23:b5:2a:b4:54:30:65:5c:
63:66:d9:4f:ba:66:c6:bb:1c:0d:8c:8b:ba:e5:5a:
80:68:bc:a5:87:0b:f2:23:00:04:b7:dc:06:dc:fc:
d7:09:15:1f:c5:cf:f5:77:19:8f:10:7a:06:90:0b:
6a:9d:21:4a:a2:e8:74:4a:d1:6c:1c:80:79:1b:61:
09:b6:35:56:87:e5:77:44:f3:b7:0e:10:9c:b4:e5:
2d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:48:3A:42:6B:E4:B4:50:45:21:A9:FC:06:46:78:1E:1B:AD:75:3F
X509v3 Authority Key Identifier:
keyid:EA:69:EE:18:70:C7:4C:41:98:17:6D:67:9D:20:40:96:2A:A6:5E:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/EA69EE1870C74C4198176D679D2040962AA65EE5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA69EE1870C74C4198176D679D2040962AA65EE5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/EA69EE1870C74C4198176D679D2040962AA65EE5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:71:e9:01:87:c6:5b:00:7f:c2:e6:16:34:99:b5:88:18:da:
43:29:8b:fb:cc:30:a9:9b:ff:34:78:df:da:6e:1f:5d:02:4e:
a8:95:c7:cd:48:9c:78:bc:bc:48:65:74:91:8a:12:1a:1c:85:
14:a6:a3:d7:b7:5b:cf:85:eb:19:16:67:27:28:1a:56:80:fe:
58:31:b9:d7:98:c3:1e:28:a8:ef:fd:39:45:3e:d8:6b:73:e8:
eb:1a:e4:f7:62:ae:ed:1a:88:0f:d0:07:c8:54:3c:a9:64:b4:
7c:cc:ef:fc:80:8d:a7:8d:a3:85:0a:45:6e:21:5d:c1:41:9c:
44:11:7d:34:ca:1d:8f:70:85:fe:9d:8e:54:c4:09:b2:c6:29:
fc:0f:6f:27:a2:33:13:a7:df:9c:db:13:71:ce:82:fa:16:56:
68:ab:79:75:b2:6c:12:28:3f:4b:7f:94:b5:40:04:2a:c5:b9:
80:bb:e5:8f:53:62:35:e7:bf:b3:3e:b8:df:41:24:ae:aa:36:
46:a9:2a:d7:e9:a6:49:e9:86:d0:22:1b:98:4c:62:54:98:b1:
a7:cf:aa:bf:e2:64:44:52:97:2a:90:d9:c7:e4:80:57:ab:59:
d5:f9:7a:89:79:d1:62:f3:80:91:6a:34:93:f1:94:c6:2e:01:
a9:6c:2f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 23:17:13 2026 by rpki-client