
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/EE751CDC39E47304C1EE51EDF5BC3FDAD0F09B86.mft
File: EE751CDC39E47304C1EE51EDF5BC3FDAD0F09B86.mft (raw, json)
Hash identifier: zwpqDOosS+DS+0E6bNwF2upfkQ4Q3FPEvbtgCUW/PMo=
Subject key identifier: 47:3F:22:03:27:9A:BB:C2:09:EE:DC:63:2D:5D:91:75:DD:74:47:01
Authority key identifier: EE:75:1C:DC:39:E4:73:04:C1:EE:51:ED:F5:BC:3F:DA:D0:F0:9B:86
Certificate issuer: /CN=EE751CDC39E47304C1EE51EDF5BC3FDAD0F09B86
Certificate serial: 77242CC51CB90048C3E659CB01A7F5C5FFEDDB70
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE751CDC39E47304C1EE51EDF5BC3FDAD0F09B86.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/EE751CDC39E47304C1EE51EDF5BC3FDAD0F09B86.mft
Manifest number: 3E
Signing time: Tue 16 Jun 2026 21:20:01 +0000
Manifest this update: Tue 16 Jun 2026 21:15:01 +0000
Manifest next update: Wed 17 Jun 2026 23:36:01 +0000
Files and hashes: 1: 3130332e3134342e3132382e302f32342d3234203d3e20313339343333.roa (hash: eZi9ISEjkgP+V5NS/n2oQzmQLoX5n67xR1RnUMkogyM=)
2: EE751CDC39E47304C1EE51EDF5BC3FDAD0F09B86.crl (hash: 7V9bQH0jSXpffjGbixAahn5NHCoWkOflYzA5xZF8CbU=)
3: 3130332e3134342e3132382e302f32332d3233203d3e20313339343333.roa (hash: GBcRuzH/ztafVHYfLj8zgAdxKdzjxCNZd7fnXHiG9vg=)
4: 3130332e3134342e3132392e302f32342d3234203d3e20313339343333.roa (hash: k8ZBZmDfwahDdiPq/8ia7mwFYTF8XR9bC0fS3/OJdMM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/EE751CDC39E47304C1EE51EDF5BC3FDAD0F09B86.crl
rsync://rpki-rsync.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/EE751CDC39E47304C1EE51EDF5BC3FDAD0F09B86.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE751CDC39E47304C1EE51EDF5BC3FDAD0F09B86.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 23:36:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:24:2c:c5:1c:b9:00:48:c3:e6:59:cb:01:a7:f5:c5:ff:ed:db:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE751CDC39E47304C1EE51EDF5BC3FDAD0F09B86
Validity
Not Before: Jun 16 21:15:01 2026 GMT
Not After : Jun 17 23:36:01 2026 GMT
Subject: CN=473F2203279ABBC209EEDC632D5D9175DD744701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:eb:c7:73:20:ad:b8:f8:46:8b:0d:e2:dd:c0:
ff:b6:55:c3:d1:29:d9:9e:92:ca:79:0e:3e:71:bc:
89:40:d2:f7:9f:4b:14:69:9c:ec:ba:4f:17:04:6b:
06:7d:ba:81:7c:af:7c:05:a3:5f:2f:e8:43:3d:31:
5d:cc:7f:5c:67:6a:7a:cb:54:d3:d4:f0:86:31:6e:
6f:a3:bd:31:dc:20:92:ce:41:30:ba:d2:56:32:8a:
e5:9f:85:d9:3e:c7:f5:12:3d:bf:6d:f3:1b:65:0d:
9d:89:ac:c1:43:e9:0c:88:e4:28:45:0f:5a:cc:fb:
b6:5d:d0:b6:9a:a7:af:71:96:50:f4:c4:39:03:7b:
c8:c1:61:fc:50:97:1a:15:1c:37:fe:17:c7:03:3f:
1c:5f:5b:0e:8b:ab:72:ad:46:d8:bb:cf:16:2e:a0:
73:99:f6:34:54:20:b5:0f:60:8a:42:d8:a5:b1:3b:
65:1b:d3:68:73:98:27:fb:26:ec:34:de:39:32:89:
36:5a:08:33:ae:a4:1a:95:5c:d7:6b:e7:3d:10:ae:
f4:4e:79:2d:25:ae:3d:98:d1:8b:62:67:97:58:d0:
c2:75:d3:88:4c:5a:c3:a3:f2:79:26:1f:1d:97:5d:
6e:bd:c2:47:4b:1e:8e:26:c0:bd:ae:96:68:f0:21:
12:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:3F:22:03:27:9A:BB:C2:09:EE:DC:63:2D:5D:91:75:DD:74:47:01
X509v3 Authority Key Identifier:
keyid:EE:75:1C:DC:39:E4:73:04:C1:EE:51:ED:F5:BC:3F:DA:D0:F0:9B:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/EE751CDC39E47304C1EE51EDF5BC3FDAD0F09B86.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE751CDC39E47304C1EE51EDF5BC3FDAD0F09B86.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/EE751CDC39E47304C1EE51EDF5BC3FDAD0F09B86.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:c6:51:44:f6:8e:26:5c:e8:f7:57:76:0c:f5:42:b1:21:29:
40:00:1d:9e:3c:c7:58:be:76:41:d6:af:4c:26:02:09:f3:c8:
ca:f0:0c:f5:fa:36:f3:ad:26:bf:d3:f1:ba:54:b1:96:9b:9d:
99:3a:b1:bd:8b:53:82:71:d8:df:57:b7:ad:91:33:df:04:53:
76:2e:0a:43:98:ea:df:f1:2b:bf:1c:3a:d6:46:19:56:7e:28:
a5:55:f1:92:75:2e:54:ff:68:40:5b:a7:42:5c:98:ed:29:e4:
1c:0e:e8:ed:fc:a9:5c:ae:a2:a0:0e:68:6d:a2:24:37:5d:cf:
8d:4c:bc:60:db:de:94:ad:95:7e:19:1f:ad:c6:b7:f2:88:02:
ef:d2:ee:a5:4b:42:e3:7b:8f:cc:86:4a:1c:81:3d:9b:16:97:
0b:2d:9a:5b:66:82:b2:4f:5e:37:cb:44:e7:f4:29:70:96:57:
de:72:ac:df:6f:6b:93:09:c8:be:29:c2:81:1f:82:50:7b:29:
cb:c8:82:ab:61:a5:f2:c5:bd:84:6a:88:e3:60:0b:bd:21:be:
c4:3a:59:c8:d3:42:3f:21:4c:2d:d6:04:e9:34:ca:7c:39:69:
14:a0:93:1c:c7:d9:d8:ed:82:80:bf:cd:6f:05:f9:32:e6:fa:
14:7f:7f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:20:24 2026 by rpki-client