
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.mft
File: EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.mft (raw, json)
Hash identifier: iQC4wyXypiNp/YiWTGLSC2qPLT2gUEsgXyF0FREIqo0=
Subject key identifier: 2C:52:14:44:67:4F:CC:04:71:71:37:D6:18:1D:95:EC:FC:0B:AB:69
Authority key identifier: EE:FF:02:42:4D:8D:55:9C:41:36:A2:96:EB:DB:CF:6E:1A:6B:8D:0E
Certificate issuer: /CN=EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E
Certificate serial: 5CC0BF42B85BA2A82C7557BF28E3A18DBD4720BA
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.mft
Manifest number: 39
Signing time: Sat 13 Jun 2026 08:49:31 +0000
Manifest this update: Sat 13 Jun 2026 08:44:31 +0000
Manifest next update: Sun 14 Jun 2026 11:59:31 +0000
Files and hashes: 1: EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.crl (hash: mkQfW3bDZmabCsRG7nywued9Nf3HQzi7A3fUvNdTq4w=)
2: 3135372e31352e34332e302f32342d3234203d3e20313532333635.roa (hash: aVxwuIGWn+Jb5KGrsTQwKAmXv03fAWvd+HD6KJE66iw=)
3: 3135372e31352e34322e302f32342d3234203d3e20313532333635.roa (hash: UkjYiLhxh0IWQ4FGEGIczENrBNKbcYu0qHwPzgbhKDA=)
4: 3135372e31352e34322e302f32332d3234203d3e20313532333635.roa (hash: UAqu6KyWKv+F+VKwb+aoEkxaz1wPo1XXzxeV01CTrgA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.crl
rsync://rpki-rsync.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 11:59:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:c0:bf:42:b8:5b:a2:a8:2c:75:57:bf:28:e3:a1:8d:bd:47:20:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E
Validity
Not Before: Jun 13 08:44:31 2026 GMT
Not After : Jun 14 11:59:31 2026 GMT
Subject: CN=2C521444674FCC04717137D6181D95ECFC0BAB69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:37:30:9a:02:9b:67:24:fd:a8:b0:30:8b:dc:
94:cb:e6:69:0e:a7:e8:f4:20:fb:f3:fd:16:40:4c:
3a:3d:9f:85:a5:08:e0:bd:6c:50:15:fe:32:f4:17:
e5:42:44:de:38:6a:23:d3:79:04:c8:85:6c:77:e2:
cf:c6:aa:82:44:49:96:07:0e:02:0f:20:8d:38:34:
75:6d:bc:dc:e4:0a:60:b4:00:69:07:8d:6b:3a:0b:
c5:3f:e9:87:ea:65:8a:87:6f:34:48:d9:86:0d:84:
99:f1:96:6f:7e:b5:67:32:c7:97:61:dc:3e:da:de:
25:8d:d0:a1:d6:b7:36:4b:97:31:26:bf:c8:f1:37:
73:a3:52:b0:57:f3:73:68:35:bb:18:0f:b7:4a:46:
6e:5e:e7:54:1c:36:77:fa:c8:b6:07:af:fc:b2:95:
48:09:10:9c:de:ed:d5:6e:bd:e8:27:06:81:dd:c1:
ae:f2:38:a7:1f:8f:db:91:01:db:45:b1:36:05:c3:
30:3b:40:f5:eb:de:62:15:da:28:e8:bb:1d:c1:2f:
31:20:1b:64:f9:b7:ab:91:ab:d3:6c:fa:51:0e:a4:
46:85:bd:b4:db:30:1b:d9:5b:b0:60:e1:86:d1:00:
68:d5:81:78:f3:1b:40:ef:63:42:e9:48:63:ee:eb:
87:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:52:14:44:67:4F:CC:04:71:71:37:D6:18:1D:95:EC:FC:0B:AB:69
X509v3 Authority Key Identifier:
keyid:EE:FF:02:42:4D:8D:55:9C:41:36:A2:96:EB:DB:CF:6E:1A:6B:8D:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:20:9c:75:f0:f7:2d:d2:07:2b:23:91:ae:ce:3d:ae:ab:16:
32:64:2d:8c:e4:5f:a0:6b:47:9d:6f:32:09:90:5d:0a:3d:3d:
45:e0:42:31:07:8f:32:62:37:c4:58:b5:80:f0:01:8b:76:ac:
29:a6:cd:37:53:79:25:56:b4:16:54:ff:3c:e2:34:2d:96:04:
ff:40:17:1c:54:79:d4:b5:d8:dc:95:06:f6:6a:f9:a9:fa:57:
b7:6d:26:de:89:20:cf:1e:38:a8:5f:c6:da:0a:f9:99:10:31:
66:72:82:32:9e:a2:c9:1c:12:cd:6a:5c:f6:fc:73:fa:1b:8c:
9c:93:5f:6a:4f:09:0f:64:15:f9:5d:ce:0f:48:e5:81:71:08:
cc:bb:d8:ce:2d:d9:70:62:3e:df:f7:78:b5:ea:df:73:76:60:
43:26:6e:36:0e:11:a7:23:8b:c4:b9:04:31:fe:9a:57:3e:fe:
81:1e:15:2a:87:54:6d:f4:bc:fa:9b:84:55:65:7e:bc:01:d1:
b6:2a:3f:43:48:de:8f:45:8f:53:18:0c:eb:51:2b:4f:c8:5d:
6b:5c:4f:43:c4:96:95:b9:90:4c:d5:74:e9:28:9f:26:fa:1a:
65:4f:58:07:c0:b4:6e:c7:0a:2a:0c:54:c2:3c:40:a0:3e:38:
a2:bf:c3:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:36:46 2026 by rpki-client