
$ rpki-client -vvf rpki-rsync.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/EFFB61EDA88A3976415A737CCC5A79284C873C9A.mft
File: EFFB61EDA88A3976415A737CCC5A79284C873C9A.mft (raw, json)
Hash identifier: BanrajB+GF9STzq2hJTHIRAuhnKTfP7diPg6wyMwdqI=
Subject key identifier: 98:E2:C9:22:C0:E4:5C:DC:87:29:8C:93:32:94:25:71:A6:2C:7D:B8
Authority key identifier: EF:FB:61:ED:A8:8A:39:76:41:5A:73:7C:CC:5A:79:28:4C:87:3C:9A
Certificate issuer: /CN=EFFB61EDA88A3976415A737CCC5A79284C873C9A
Certificate serial: 337AFF2D7B74356D7362C99FFFF942D1DDEADB5C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFFB61EDA88A3976415A737CCC5A79284C873C9A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/EFFB61EDA88A3976415A737CCC5A79284C873C9A.mft
Manifest number: 6B
Signing time: Tue 21 Jul 2026 02:33:53 +0000
Manifest this update: Tue 21 Jul 2026 02:28:53 +0000
Manifest next update: Wed 22 Jul 2026 05:58:53 +0000
Files and hashes: 1: 3130332e3138302e3235302e302f32332d3233203d3e20313439333733.roa (hash: sUl2bhI+otw0/fJ4SBeJRv38sPuRgClkXdfSCpnmx2w=)
2: EFFB61EDA88A3976415A737CCC5A79284C873C9A.crl (hash: b0fLcmrosmFhi2UE3/HEKOJYc37vPhiMg8KXdBCbmzg=)
3: 3130332e3138302e3235302e302f32332d3234203d3e20313439333733.roa (hash: vH86OJq5h4E6zeVZwHKL6SywoMe0OW/Y/A2U521Svpk=)
4: 3130332e3138302e3235302e302f32342d3234203d3e20313439333733.roa (hash: nufJv2+uWrvJ0SWNkLs+ilFdAkkva6iaz1eW145f0T4=)
5: 3130332e3138302e3235312e302f32342d3234203d3e20313439333733.roa (hash: 5roj2kNLZ/Aw2sfH4UoUgbfgaCTs5klpBUiJr4UV8hE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/EFFB61EDA88A3976415A737CCC5A79284C873C9A.crl
rsync://rpki-rsync.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/EFFB61EDA88A3976415A737CCC5A79284C873C9A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFFB61EDA88A3976415A737CCC5A79284C873C9A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Jul 2026 02:08:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:7a:ff:2d:7b:74:35:6d:73:62:c9:9f:ff:f9:42:d1:dd:ea:db:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFFB61EDA88A3976415A737CCC5A79284C873C9A
Validity
Not Before: Jul 21 02:28:53 2026 GMT
Not After : Jul 22 05:58:53 2026 GMT
Subject: CN=98E2C922C0E45CDC87298C9332942571A62C7DB8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0e:17:1e:d7:0f:2a:2a:41:d2:cd:2e:f1:5a:
27:2f:c5:0f:83:79:3b:d8:ad:15:fc:ab:65:ba:0d:
bb:40:6a:12:2f:45:d4:9f:e7:46:7d:e6:f4:4f:af:
70:89:e9:10:a4:0f:b8:6f:8e:a2:0a:a7:0d:b8:f3:
22:c0:6a:76:25:da:08:96:18:b4:f6:d3:c1:ee:80:
2b:16:77:ea:88:8d:00:a2:ac:9d:c6:2b:2f:f0:75:
3a:ec:d0:67:e9:94:af:84:97:54:40:26:5a:e1:9f:
b9:55:58:4d:22:16:ea:fd:cd:e3:78:94:98:20:e3:
9f:41:1c:33:da:ab:28:28:81:55:d6:9d:37:96:a7:
59:1e:0d:e3:32:33:93:1f:3d:91:eb:d0:45:c6:0f:
ca:5a:ef:7c:69:2f:86:c4:20:5f:d0:85:55:0a:59:
46:47:ab:4d:a2:c7:d3:89:f3:28:a6:bf:a5:9a:e8:
f3:27:2b:b9:6d:1a:32:61:a6:bd:6f:53:1c:f3:2e:
35:b2:e2:6a:df:e7:bf:3c:24:34:d9:93:36:94:f9:
ee:fa:59:be:29:d6:7a:2f:92:a5:68:1e:f9:c4:f0:
a2:62:f6:f5:79:e0:4c:61:0b:86:3d:37:8c:b0:52:
50:0a:4f:d4:6e:4d:e5:7a:6e:e4:eb:74:79:21:e9:
f2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:E2:C9:22:C0:E4:5C:DC:87:29:8C:93:32:94:25:71:A6:2C:7D:B8
X509v3 Authority Key Identifier:
keyid:EF:FB:61:ED:A8:8A:39:76:41:5A:73:7C:CC:5A:79:28:4C:87:3C:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/EFFB61EDA88A3976415A737CCC5A79284C873C9A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFFB61EDA88A3976415A737CCC5A79284C873C9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/EFFB61EDA88A3976415A737CCC5A79284C873C9A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:97:82:1b:49:b7:5a:6d:fe:dd:63:11:12:66:23:8d:d9:8c:
f6:79:07:2b:de:a2:22:5c:c4:77:1d:f7:27:16:5b:54:28:5a:
40:0a:50:58:91:9d:60:5b:30:37:19:44:dc:0f:ba:9e:1c:41:
38:1d:c7:31:9e:2d:17:58:50:31:91:6b:1f:8d:03:49:6e:e4:
a5:7f:5e:15:63:79:e4:38:9b:66:cf:8f:7a:23:9c:3f:77:7c:
9a:80:1d:11:fb:7f:3d:0e:10:80:4d:d0:84:d9:87:19:4b:55:
4d:cb:d1:e4:87:5d:77:5b:90:91:41:68:44:9e:31:8a:55:05:
e8:27:0f:8f:2a:59:7f:c6:e1:3c:26:25:30:94:9b:bc:a1:e1:
b9:fd:f8:c4:be:b8:c7:5b:30:ef:53:e4:0b:9a:85:f1:09:c3:
a3:5a:c8:06:18:be:d6:35:1e:6b:23:f6:4e:ba:f0:9f:9d:c8:
7d:8b:07:3d:13:c0:4a:35:8a:8b:77:4a:b8:0b:27:3b:32:b1:
4e:ff:51:85:6f:fd:4b:84:11:31:8a:84:70:db:ac:47:5e:86:
d4:5d:16:a7:cf:f8:f0:f8:30:a0:0a:ef:e3:0e:03:68:d6:73:
bf:1a:88:90:d5:7a:01:c3:f3:6a:71:0c:c1:ce:41:c4:5a:fb:
b1:15:4d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:44:00 2026 by rpki-client