
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/EE751CDC39E47304C1EE51EDF5BC3FDAD0F09B86.mft
File: EE751CDC39E47304C1EE51EDF5BC3FDAD0F09B86.mft (raw, json)
Hash identifier: c2yRsfJ3f4SvS2f6SBmQGZJ640ChjGzd3shNr91/7jg=
Subject key identifier: 4C:AD:78:7A:70:45:FD:A2:4A:05:B3:60:D8:69:B9:63:4D:DC:5F:DD
Authority key identifier: EE:75:1C:DC:39:E4:73:04:C1:EE:51:ED:F5:BC:3F:DA:D0:F0:9B:86
Certificate issuer: /CN=EE751CDC39E47304C1EE51EDF5BC3FDAD0F09B86
Certificate serial: 3862AEB103551FC59485CC6F20207F96F9595276
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE751CDC39E47304C1EE51EDF5BC3FDAD0F09B86.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/EE751CDC39E47304C1EE51EDF5BC3FDAD0F09B86.mft
Manifest number: 0101
Signing time: Mon 09 Nov 2026 19:40:17 +0000
Manifest this update: Mon 09 Nov 2026 19:35:17 +0000
Manifest next update: Tue 10 Nov 2026 20:01:17 +0000
Files and hashes: 1: EE751CDC39E47304C1EE51EDF5BC3FDAD0F09B86.crl (hash: g9SQye51WTb3xZw2DatAf1G+LMgRT4Zy1tlVW/zx8Hc=)
2: 3130332e3134342e3132392e302f32342d3234203d3e20313339343333.roa (hash: k8ZBZmDfwahDdiPq/8ia7mwFYTF8XR9bC0fS3/OJdMM=)
3: 3130332e3134342e3132382e302f32342d3234203d3e20313339343333.roa (hash: eZi9ISEjkgP+V5NS/n2oQzmQLoX5n67xR1RnUMkogyM=)
4: 3130332e3134342e3132382e302f32332d3233203d3e20313339343333.roa (hash: GBcRuzH/ztafVHYfLj8zgAdxKdzjxCNZd7fnXHiG9vg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/EE751CDC39E47304C1EE51EDF5BC3FDAD0F09B86.crl
rsync://rpki-rsync.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/EE751CDC39E47304C1EE51EDF5BC3FDAD0F09B86.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE751CDC39E47304C1EE51EDF5BC3FDAD0F09B86.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Nov 2026 08:27:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:62:ae:b1:03:55:1f:c5:94:85:cc:6f:20:20:7f:96:f9:59:52:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE751CDC39E47304C1EE51EDF5BC3FDAD0F09B86
Validity
Not Before: Nov 9 19:35:17 2026 GMT
Not After : Nov 10 20:01:17 2026 GMT
Subject: CN=4CAD787A7045FDA24A05B360D869B9634DDC5FDD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:93:83:01:30:43:03:22:77:42:4b:b9:93:ec:
76:4c:a8:c7:83:23:24:4e:75:b6:44:b2:91:a7:56:
ff:94:db:7e:9e:2f:f7:23:54:f4:9d:86:f4:05:16:
58:a2:55:c5:51:bb:88:e9:02:9b:60:0d:d0:e3:3d:
cb:b8:0e:22:7d:e8:92:e6:f7:eb:43:91:e3:87:b7:
a7:ec:92:67:a3:09:f9:0d:ee:e9:8e:98:33:c2:40:
56:ba:98:39:fc:bd:60:58:30:ed:c2:d9:f7:5e:63:
c1:34:90:bc:ec:ff:7a:70:2c:c0:6a:8d:98:95:c2:
28:f8:3a:6a:73:2e:c6:bb:6f:30:cb:76:67:e3:a4:
c2:6f:94:05:46:74:71:de:9a:e1:6b:71:84:d4:92:
7d:37:a3:9d:bf:24:2a:a1:4c:12:c7:b9:14:40:1f:
54:28:d9:3d:3e:50:44:ff:65:70:3c:e2:2e:d0:3f:
62:2a:09:99:b7:c0:8e:06:bd:a3:76:75:d4:ed:c1:
3f:47:6d:5e:36:db:6e:cb:a8:e1:51:79:13:6a:9e:
8f:fd:a6:9d:ce:0f:7d:42:ed:ec:7f:6e:4c:4e:3f:
62:b9:34:ad:e7:20:2d:7f:a0:a3:2c:bb:0c:5c:34:
a0:d1:ff:65:c1:b5:cf:09:66:64:42:ad:2d:ba:1e:
98:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:AD:78:7A:70:45:FD:A2:4A:05:B3:60:D8:69:B9:63:4D:DC:5F:DD
X509v3 Authority Key Identifier:
keyid:EE:75:1C:DC:39:E4:73:04:C1:EE:51:ED:F5:BC:3F:DA:D0:F0:9B:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/EE751CDC39E47304C1EE51EDF5BC3FDAD0F09B86.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE751CDC39E47304C1EE51EDF5BC3FDAD0F09B86.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/EE751CDC39E47304C1EE51EDF5BC3FDAD0F09B86.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:c8:c1:f7:83:00:08:a9:89:e4:e4:69:7a:1a:4b:d8:2a:8d:
7e:c1:0a:c1:8d:e1:b6:fa:31:9e:fd:69:fa:50:70:ae:d4:4b:
d3:92:aa:96:da:77:0c:2b:b2:11:b8:4d:d2:c2:35:48:08:12:
12:e1:27:17:5e:b2:e8:b0:12:9c:d0:a3:ef:e8:cf:90:97:65:
3d:5e:72:e9:6b:79:26:29:ef:27:42:08:79:42:99:1f:55:c5:
8d:bd:64:b7:08:97:04:9f:d8:17:fe:05:27:a9:88:cc:80:df:
26:30:a2:ff:f1:89:45:f1:a7:40:ac:11:7e:05:dd:af:2f:79:
78:71:d8:2c:04:c6:66:12:c5:78:16:c7:10:20:c2:8e:73:07:
ec:44:8b:c0:20:6e:d0:30:db:6e:2c:9e:2f:c2:6b:c7:a0:69:
f0:b6:77:8f:20:2f:7b:b2:de:c7:f9:9f:a8:ad:ca:8d:2d:80:
18:7c:95:1c:d2:10:f6:6a:d8:04:0d:db:ea:df:57:b4:74:51:
8b:06:18:86:f0:68:1d:ee:a1:9b:b0:82:cd:42:20:17:04:6f:
79:9e:87:83:8b:78:58:3c:2a:87:69:36:4e:2c:ea:d6:38:75:
b0:f6:4d:c0:3b:e9:24:20:36:34:60:d2:11:10:c8:b6:b4:ac:
89:58:f6:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 01:42:09 2026 by rpki-client