
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c76c7825-8b3d-466c-ba0c-99553c1d73ea/0/EEB70538199D447E9C92F6547EB45B40E5762DCF.mft
File: EEB70538199D447E9C92F6547EB45B40E5762DCF.mft (raw, json)
Hash identifier: UFihfGGb9fJSqaW9q4f+Gw0Zfsi+u6bFg+808Lx3I3s=
Subject key identifier: 59:DE:5C:84:3F:3D:05:33:C2:21:0A:CD:12:40:99:98:FE:37:4D:49
Authority key identifier: EE:B7:05:38:19:9D:44:7E:9C:92:F6:54:7E:B4:5B:40:E5:76:2D:CF
Certificate issuer: /CN=EEB70538199D447E9C92F6547EB45B40E5762DCF
Certificate serial: 69D72FF0D621681440B59DD9610BA5DA5EB13414
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EEB70538199D447E9C92F6547EB45B40E5762DCF.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c76c7825-8b3d-466c-ba0c-99553c1d73ea/0/EEB70538199D447E9C92F6547EB45B40E5762DCF.mft
Manifest number: 3D
Signing time: Tue 16 Jun 2026 20:49:23 +0000
Manifest this update: Tue 16 Jun 2026 20:44:23 +0000
Manifest next update: Wed 17 Jun 2026 22:17:23 +0000
Files and hashes: 1: 3130332e372e3130342e302f32342d3234203d3e20313531353933.roa (hash: B00llEOl+Xcrvf7jG7vXFkd1/vFdQcRM2H7X7JWrIjI=)
2: EEB70538199D447E9C92F6547EB45B40E5762DCF.crl (hash: +v6gnmhR4FRQWHBTn10cqiw4sqsX4+vaTTJ7p2biuGw=)
3: 3130332e372e3130352e302f32342d3234203d3e20313531353933.roa (hash: dmYYEZ8QZwPKYE6vCrbxSUxZzCU8Re2LNJQ4nrlJQ94=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c76c7825-8b3d-466c-ba0c-99553c1d73ea/0/EEB70538199D447E9C92F6547EB45B40E5762DCF.crl
rsync://rpki-rsync.idnic.net/repo/c76c7825-8b3d-466c-ba0c-99553c1d73ea/0/EEB70538199D447E9C92F6547EB45B40E5762DCF.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EEB70538199D447E9C92F6547EB45B40E5762DCF.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 22:17:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:d7:2f:f0:d6:21:68:14:40:b5:9d:d9:61:0b:a5:da:5e:b1:34:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EEB70538199D447E9C92F6547EB45B40E5762DCF
Validity
Not Before: Jun 16 20:44:23 2026 GMT
Not After : Jun 17 22:17:23 2026 GMT
Subject: CN=59DE5C843F3D0533C2210ACD12409998FE374D49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:14:b5:e4:70:12:20:01:7b:0f:77:fc:ce:d2:
d2:0c:77:4b:8b:71:fc:55:a7:fd:11:26:b3:eb:89:
b7:1b:22:2c:88:0d:92:7a:29:67:6f:c4:e2:cb:b2:
ac:40:a1:37:d8:37:02:76:7f:82:05:e0:e2:1e:c6:
5f:5f:99:1d:a2:f2:c6:4f:aa:f7:c5:1b:e0:d2:7e:
de:26:5e:4a:85:bf:84:c4:8a:2d:58:d9:40:31:c3:
cd:e3:50:6c:4b:84:0c:95:4c:87:b8:bf:a3:ea:63:
48:a2:5c:85:01:37:66:f7:df:58:91:af:8f:dc:aa:
22:2d:73:da:7c:be:dc:d0:1a:0f:fb:e0:ee:fa:e4:
ce:e6:a5:51:95:44:16:0d:f9:08:42:b8:3f:a3:cc:
d9:4e:cf:2f:d1:d3:5b:3e:e6:62:f1:70:43:96:bf:
ca:00:e3:f2:4b:87:37:db:ba:bb:06:a1:c3:c1:f7:
dc:a1:be:4c:92:fc:6b:1d:90:cc:ed:1b:b3:9a:a8:
2e:d7:bb:10:05:cf:f7:8c:dc:75:55:c9:f8:4a:5b:
20:a6:16:f8:ac:e6:a2:d1:7d:7e:98:56:42:0a:3c:
7b:b3:a6:37:01:cc:70:fa:bb:5b:55:d0:89:f4:91:
33:af:81:82:a6:2c:f6:d5:02:31:22:51:ac:76:5f:
69:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:DE:5C:84:3F:3D:05:33:C2:21:0A:CD:12:40:99:98:FE:37:4D:49
X509v3 Authority Key Identifier:
keyid:EE:B7:05:38:19:9D:44:7E:9C:92:F6:54:7E:B4:5B:40:E5:76:2D:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c76c7825-8b3d-466c-ba0c-99553c1d73ea/0/EEB70538199D447E9C92F6547EB45B40E5762DCF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EEB70538199D447E9C92F6547EB45B40E5762DCF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c76c7825-8b3d-466c-ba0c-99553c1d73ea/0/EEB70538199D447E9C92F6547EB45B40E5762DCF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:c7:d0:c2:f6:de:ba:f4:67:bf:0b:40:3f:54:28:d2:bc:ee:
8f:68:20:bc:89:6f:45:b3:26:3e:12:71:17:33:e9:c6:55:03:
61:05:d3:77:29:f0:1f:bd:22:44:71:56:1a:4c:47:6c:5a:21:
83:19:4f:35:f6:13:8d:6c:91:49:94:38:45:c9:70:81:38:36:
27:6d:8f:db:1b:f0:15:49:5a:b2:19:25:30:77:0c:1f:94:a6:
c7:82:98:c2:61:6a:d6:63:c0:ab:9e:93:a9:af:99:d8:4f:e0:
07:ee:25:04:fa:28:26:2b:8b:9f:d2:1b:b0:d6:49:bc:97:3e:
e0:14:0b:fc:da:3d:c8:9b:a4:92:88:bc:4d:61:ca:c1:9b:83:
63:fa:b7:8b:0d:0f:cf:3c:3d:2c:30:7e:13:e4:83:71:46:f0:
be:bf:4e:cf:aa:1f:8b:9d:e5:f4:30:b4:77:79:f9:de:48:ef:
e2:5e:2a:21:6c:4f:7b:58:09:96:46:da:66:91:3d:cb:a8:69:
62:17:5f:54:99:12:6d:72:16:92:21:86:66:26:20:bf:2d:f9:
12:df:f0:8f:0d:93:77:4e:22:87:7a:a9:4c:9c:ce:2b:8b:47:
88:85:0b:a5:37:d1:a9:a0:e5:f9:21:ee:54:93:c0:d7:78:86:
d7:92:9f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:44:56 2026 by rpki-client