
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/EF44D1A95206A20CB3AB52607DC981EEC1AA8744.mft
File: EF44D1A95206A20CB3AB52607DC981EEC1AA8744.mft (raw, json)
Hash identifier: 4V/LOSzzZii5RVqZtmrZja0p2ZbHT0sKFf/qPM0Qw6E=
Subject key identifier: 97:B5:59:BC:64:03:DB:26:FC:AD:EC:AE:5A:19:31:31:25:46:E9:A5
Authority key identifier: EF:44:D1:A9:52:06:A2:0C:B3:AB:52:60:7D:C9:81:EE:C1:AA:87:44
Certificate issuer: /CN=EF44D1A95206A20CB3AB52607DC981EEC1AA8744
Certificate serial: 4668B64F39D13F56B77F31FCBB4AAF5056031A5D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF44D1A95206A20CB3AB52607DC981EEC1AA8744.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/EF44D1A95206A20CB3AB52607DC981EEC1AA8744.mft
Manifest number: 05
Signing time: Tue 05 May 2026 06:29:40 +0000
Manifest this update: Tue 05 May 2026 06:24:40 +0000
Manifest next update: Wed 06 May 2026 08:47:40 +0000
Files and hashes: 1: EF44D1A95206A20CB3AB52607DC981EEC1AA8744.crl (hash: OIRkGaqhmGj3EeB6rlrk8CcRaAYgo0Luev4eFWzSZkw=)
2: 3130332e33392e37342e302f32332d3234203d3e20313530323732.roa (hash: BnM/pd6T0nNd5d7QI+jI59NRWk0b0EsbuiWKkA+Hh+0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/EF44D1A95206A20CB3AB52607DC981EEC1AA8744.crl
rsync://rpki-rsync.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/EF44D1A95206A20CB3AB52607DC981EEC1AA8744.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF44D1A95206A20CB3AB52607DC981EEC1AA8744.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 06 May 2026 08:47:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:68:b6:4f:39:d1:3f:56:b7:7f:31:fc:bb:4a:af:50:56:03:1a:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EF44D1A95206A20CB3AB52607DC981EEC1AA8744
Validity
Not Before: May 5 06:24:40 2026 GMT
Not After : May 6 08:47:40 2026 GMT
Subject: CN=97B559BC6403DB26FCADECAE5A1931312546E9A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:9e:d7:5a:65:15:68:17:14:86:4c:00:a7:1e:
71:2a:60:34:bf:bf:c4:b2:df:c0:e6:f7:04:9c:f7:
59:3e:d3:ba:cd:3b:99:1f:49:16:60:ff:e4:3b:63:
da:33:84:31:24:4b:62:7f:d4:e6:dd:16:8d:ab:18:
69:b6:d9:95:b7:35:ca:b2:10:1c:cc:80:d7:7b:db:
b8:66:43:80:aa:9e:e0:d2:23:57:f3:1a:f4:c1:52:
53:69:b6:61:8a:9d:18:ad:4b:a5:44:47:f4:17:2c:
c5:a5:1f:9c:d6:91:9f:6e:fa:c5:53:81:e8:60:62:
93:ab:72:96:6f:d3:35:a5:24:b0:5d:6a:a1:8c:ed:
92:3d:db:ca:17:9b:80:31:92:b7:66:40:7b:d2:8f:
97:7c:10:b8:a4:a5:0c:ce:8f:98:26:54:e8:40:0e:
61:eb:5d:2e:dc:2d:d7:ba:a3:1d:55:f2:27:f9:54:
11:c1:ce:07:44:05:be:92:e6:2c:f4:ab:56:c6:f5:
95:05:70:7e:ee:de:b0:fa:b5:ad:4e:63:f6:91:b6:
7c:e9:ff:76:58:0f:0b:b4:b3:f0:38:9b:6e:c4:dd:
95:37:ef:16:55:47:c1:50:9e:e4:2d:bc:46:a4:a6:
52:4e:37:a7:25:a0:50:e8:8b:50:32:92:a2:12:cb:
e3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:B5:59:BC:64:03:DB:26:FC:AD:EC:AE:5A:19:31:31:25:46:E9:A5
X509v3 Authority Key Identifier:
keyid:EF:44:D1:A9:52:06:A2:0C:B3:AB:52:60:7D:C9:81:EE:C1:AA:87:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/EF44D1A95206A20CB3AB52607DC981EEC1AA8744.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF44D1A95206A20CB3AB52607DC981EEC1AA8744.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/EF44D1A95206A20CB3AB52607DC981EEC1AA8744.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:12:bd:02:5e:04:6f:28:fb:f6:93:7f:0c:d8:42:97:a0:97:
e7:85:4a:06:dd:6a:e2:d4:56:a5:af:21:23:4c:dc:64:3b:13:
9c:07:fc:fd:1c:2b:f7:5e:ff:02:c2:16:e1:8f:6e:fc:7a:0d:
fc:5e:6e:5f:34:15:12:0c:05:03:06:b4:ec:02:3a:43:a7:25:
1e:11:09:4e:ca:28:fd:60:01:78:34:01:49:87:20:78:f4:f6:
38:c4:53:b6:7a:9d:d6:a9:66:8c:5a:17:fb:8a:1d:a7:2f:28:
01:81:50:67:12:47:2b:3e:a0:b4:76:e4:e8:82:f0:0b:b6:9b:
48:d0:ac:4a:64:e6:0e:e6:52:9f:29:6f:34:59:c9:ca:de:ba:
44:46:af:9b:f5:7e:d1:15:03:96:95:f8:9f:ad:89:6f:a4:bb:
85:22:b9:cb:90:ad:1f:fd:e6:3b:7a:86:c5:5c:ea:9e:00:7c:
fc:e9:46:f6:e6:9f:47:b8:b3:57:0a:27:d5:31:76:84:cc:1a:
45:09:83:3d:e2:d3:01:20:87:fb:b1:1b:8c:50:a4:a1:a5:dc:
0b:89:2f:4a:a7:4e:ec:27:a5:39:25:94:6e:b5:12:c1:21:2a:
09:86:dd:61:6b:d3:10:8f:e5:0c:18:a2:22:42:a9:22:92:82:
df:54:72:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 10:44:05 2026 by rpki-client