
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.mft
File: EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.mft (raw, json)
Hash identifier: 4AkTVofiMQ2Evnp0nYyNFVH2xRue0PNc5XU1bhBeR5c=
Subject key identifier: 4D:08:2B:95:57:6B:2C:1B:FC:33:54:80:FB:BA:6F:BC:66:21:1E:75
Authority key identifier: EF:D4:29:07:B2:81:E7:9D:93:B3:A5:5B:E7:7E:69:57:B1:B4:BC:A9
Certificate issuer: /CN=EFD42907B281E79D93B3A55BE77E6957B1B4BCA9
Certificate serial: 57AD8198704045F0EC7760D2DEE299E458469292
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.mft
Manifest number: EC
Signing time: Fri 23 Oct 2026 20:44:58 +0000
Manifest this update: Fri 23 Oct 2026 20:39:58 +0000
Manifest next update: Sat 24 Oct 2026 23:58:58 +0000
Files and hashes: 1: 3130332e3136372e3133322e302f32342d3234203d3e20313339343536.roa (hash: pKyTnDy4jjm+bK/0uv1ZCFmZNnZvfEkd2gMR4Mti5xA=)
2: 3130332e3136372e3133322e302f32332d3233203d3e203538383230.roa (hash: MzMoXvwp2stngvRucIeMRj/ZickQ1zvi8Fxd3aMU4jw=)
3: EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.crl (hash: pcnbcQJsqkqVPjIRm7wt8gS6oCVvnjO6/Vi793hanuo=)
4: 323430373a366634303a3a2f33322d3438203d3e203538383230.roa (hash: uLpfvmOWPLMtCPKe67fDfTWwMZzd/ScnogVVWTCv8e4=)
5: 323430373a366634303a3a2f33322d3332203d3e203538383230.roa (hash: pbMg7J7P4kS8Sxdzt0uwVKMCDecvHVa7e/rU45LkW3I=)
6: 3130332e3136372e3133332e302f32342d3234203d3e20313339343536.roa (hash: 1J0/I4tqmUll60RJxwp6bFaa6UPkoQKQXxUGs5DsE7s=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.crl
rsync://rpki-rsync.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Oct 2026 23:58:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:ad:81:98:70:40:45:f0:ec:77:60:d2:de:e2:99:e4:58:46:92:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFD42907B281E79D93B3A55BE77E6957B1B4BCA9
Validity
Not Before: Oct 23 20:39:58 2026 GMT
Not After : Oct 24 23:58:58 2026 GMT
Subject: CN=4D082B95576B2C1BFC335480FBBA6FBC66211E75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6e:33:55:b8:1e:44:74:f8:b1:77:55:18:a6:
86:4b:ca:e3:24:d5:d4:a0:4f:10:78:52:5b:5b:8f:
8a:d2:ff:a7:1e:2b:41:ef:bb:76:f4:5d:70:ba:ae:
a6:9c:7d:fd:f2:b2:9b:96:18:75:2b:c6:dd:55:49:
ff:62:dd:74:cb:77:53:07:46:22:bc:b8:d7:c0:bc:
bd:cf:ab:6f:53:f0:c4:39:97:fb:c6:a0:ee:dd:53:
d4:a9:48:40:69:4f:1d:28:9f:b2:c8:d7:fa:ef:4c:
c2:7d:14:77:14:77:8d:68:41:94:8a:29:80:4b:15:
50:f2:07:71:eb:97:fa:9b:ba:cc:19:3f:fb:52:80:
4c:1b:97:7a:80:cf:3a:67:a2:73:24:1e:c6:d3:de:
c6:9e:0c:02:2c:21:a3:44:9b:41:99:72:88:a9:8b:
fc:7e:0a:64:03:75:55:be:51:7c:fc:42:ff:a2:2f:
2b:50:8a:d4:79:ce:c3:43:5d:ea:13:2c:47:e0:49:
b4:39:96:32:2e:c6:52:c7:d6:b4:4a:65:f5:e8:2d:
ed:cc:12:ca:d9:ba:29:c0:e7:a3:9a:cf:28:41:d5:
2b:91:f5:c3:9c:0a:2c:39:50:08:80:c3:2c:91:34:
3c:d5:fe:85:77:fb:7b:01:4e:b2:f7:99:10:0d:ad:
98:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:08:2B:95:57:6B:2C:1B:FC:33:54:80:FB:BA:6F:BC:66:21:1E:75
X509v3 Authority Key Identifier:
keyid:EF:D4:29:07:B2:81:E7:9D:93:B3:A5:5B:E7:7E:69:57:B1:B4:BC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:c3:1f:b2:7c:cc:c0:c1:7e:14:61:76:73:c2:66:ac:16:f8:
49:60:56:9d:e9:3e:a5:e5:fe:8d:ff:7b:e3:a1:8c:96:1b:5d:
6e:3f:0c:95:ea:72:78:c8:a0:ac:f3:c9:7d:19:73:1a:27:28:
da:ca:f6:37:c8:3c:fe:ca:99:b7:21:af:2d:6e:bb:25:a3:9f:
8b:92:4b:a3:bd:90:ba:50:03:07:b5:5d:44:69:2e:af:8a:f4:
f5:c4:95:88:63:0e:97:c2:7d:d4:c8:ad:b9:b1:55:ab:1d:4f:
aa:11:0b:bf:de:8c:ee:da:8e:50:be:4f:09:99:3d:e6:af:a4:
cf:80:0c:b7:cd:51:ed:00:9f:0b:9a:40:3a:8e:93:fc:91:dc:
28:07:8b:d6:7d:d8:92:a9:1d:c6:86:6b:36:00:7e:88:26:bc:
74:e1:e2:5d:70:9a:06:59:26:45:44:8b:4c:07:61:b5:de:30:
bd:10:43:2d:f2:64:34:f1:05:3b:69:10:75:34:23:f9:57:59:
a0:53:6d:cd:69:53:1f:37:62:cf:aa:73:06:8f:59:aa:9f:b7:
e2:a4:12:cc:ed:35:1c:df:05:b1:a6:14:03:07:88:00:65:6c:
34:cd:29:d8:e1:bc:a7:28:6b:d4:f7:27:e7:35:8a:78:aa:78:
78:f6:49:73
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUV62BmHBARfDsd2DS3uKZ5FhGkpIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUZENDI5MDdCMjgxRTc5RDkzQjNBNTVCRTc3RTY5NTdC
MUI0QkNBOTAeFw0yNjEwMjMyMDM5NThaFw0yNjEwMjQyMzU4NThaMDMxMTAvBgNV
BAMTKDREMDgyQjk1NTc2QjJDMUJGQzMzNTQ4MEZCQkE2RkJDNjYyMTFFNzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUbjNVuB5EdPixd1UYpoZLyuMk
1dSgTxB4Ultbj4rS/6ceK0Hvu3b0XXC6rqacff3yspuWGHUrxt1VSf9i3XTLd1MH
RiK8uNfAvL3Pq29T8MQ5l/vGoO7dU9SpSEBpTx0on7LI1/rvTMJ9FHcUd41oQZSK
KYBLFVDyB3Hrl/qbuswZP/tSgEwbl3qAzzpnonMkHsbT3saeDAIsIaNEm0GZcoip
i/x+CmQDdVW+UXz8Qv+iLytQitR5zsNDXeoTLEfgSbQ5ljIuxlLH1rRKZfXoLe3M
EsrZuinA56OazyhB1SuR9cOcCiw5UAiAwyyRNDzV/oV3+3sBTrL3mRANrZivAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUTQgrlVdrLBv8M1SA+7pvvGYhHnUwHwYDVR0j
BBgwFoAU79QpB7KB552Ts6Vb535pV7G0vKkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NmVkNDcyMDItZGU2MC00N2YzLWEyYTctNjA4YTc0YTFlODc0LzAvRUZENDI5MDdC
MjgxRTc5RDkzQjNBNTVCRTc3RTY5NTdCMUI0QkNBOS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FRkQ0MjkwN0IyODFFNzlEOTNCM0E1NUJFNzdFNjk1N0IxQjRC
Q0E5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmVkNDcyMDItZGU2MC00N2YzLWEy
YTctNjA4YTc0YTFlODc0LzAvRUZENDI5MDdCMjgxRTc5RDkzQjNBNTVCRTc3RTY5
NTdCMUI0QkNBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHbDH7J8zMDBfhRhdnPCZqwW+ElgVp3pPqXl
/o3/e+OhjJYbXW4/DJXqcnjIoKzzyX0ZcxonKNrK9jfIPP7Kmbchry1uuyWjn4uS
S6O9kLpQAwe1XURpLq+K9PXElYhjDpfCfdTIrbmxVasdT6oRC7/ejO7ajlC+TwmZ
PeavpM+ADLfNUe0AnwuaQDqOk/yR3CgHi9Z92JKpHcaGazYAfogmvHTh4l1wmgZZ
JkVEi0wHYbXeML0QQy3yZDTxBTtpEHU0I/lXWaBTbc1pUx83Ys+qcwaPWaqft+Kk
EsztNRzfBbGmFAMHiABlbDTNKdjhvKcoa9T3J+c1iniqeHj2SXM=
-----END CERTIFICATE-----
Generated at Sat Oct 24 08:27:42 2026 by rpki-client