
$ rpki-client -vvf rpki-rsync.idnic.net/repo/6f6440f6-6f5a-4f4b-a597-e74b543e785b/0/EFDB094B3A4BDDFFAE7A31184633B6D14D8E5F5E.mft
File: EFDB094B3A4BDDFFAE7A31184633B6D14D8E5F5E.mft (raw, json)
Hash identifier: 5m8Q+hwNS5z7kZMNus+cCyPOF9NpFaTDWJqU/0DH7co=
Subject key identifier: EF:AE:65:4E:B8:31:B8:A6:BA:B1:EA:94:AB:CE:86:97:93:94:0E:26
Authority key identifier: EF:DB:09:4B:3A:4B:DD:FF:AE:7A:31:18:46:33:B6:D1:4D:8E:5F:5E
Certificate issuer: /CN=EFDB094B3A4BDDFFAE7A31184633B6D14D8E5F5E
Certificate serial: 7A88239151C3F028658FDE3E9204243A400383F1
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFDB094B3A4BDDFFAE7A31184633B6D14D8E5F5E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6f6440f6-6f5a-4f4b-a597-e74b543e785b/0/EFDB094B3A4BDDFFAE7A31184633B6D14D8E5F5E.mft
Manifest number: 42
Signing time: Sat 20 Jun 2026 04:04:44 +0000
Manifest this update: Sat 20 Jun 2026 03:59:44 +0000
Manifest next update: Sun 21 Jun 2026 07:52:44 +0000
Files and hashes: 1: 3130332e3135332e36322e302f32332d3234203d3e20313430343537.roa (hash: BZhn4U/UvZ5+wud72EXtfRQcfjbr1V+Ji6U8Qf15hk4=)
2: EFDB094B3A4BDDFFAE7A31184633B6D14D8E5F5E.crl (hash: Bp2zTb7DTmfS6hcJYMAnpfEbPVMGLsVnoljpC6tBLig=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6f6440f6-6f5a-4f4b-a597-e74b543e785b/0/EFDB094B3A4BDDFFAE7A31184633B6D14D8E5F5E.crl
rsync://rpki-rsync.idnic.net/repo/6f6440f6-6f5a-4f4b-a597-e74b543e785b/0/EFDB094B3A4BDDFFAE7A31184633B6D14D8E5F5E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFDB094B3A4BDDFFAE7A31184633B6D14D8E5F5E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 21 Jun 2026 07:52:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:88:23:91:51:c3:f0:28:65:8f:de:3e:92:04:24:3a:40:03:83:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFDB094B3A4BDDFFAE7A31184633B6D14D8E5F5E
Validity
Not Before: Jun 20 03:59:44 2026 GMT
Not After : Jun 21 07:52:44 2026 GMT
Subject: CN=EFAE654EB831B8A6BAB1EA94ABCE869793940E26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:29:78:b9:2f:84:53:4d:7e:c0:5a:dd:06:cd:
84:39:0d:53:f0:d3:69:e4:53:e4:42:bb:63:6e:af:
8c:0e:f4:92:7a:9b:ad:be:26:26:67:86:bb:77:bf:
f5:6f:5d:06:92:bb:7a:46:46:4c:56:02:e3:a1:ad:
f8:0e:1c:9d:a0:d4:92:52:d4:8a:c6:fb:77:89:fb:
08:1b:62:de:ce:0f:60:96:fb:7b:35:04:4f:e7:05:
92:cd:fc:25:16:74:c9:77:78:4c:de:86:a3:ec:42:
57:80:9c:ee:5c:31:fc:2a:a3:d5:b0:64:a4:97:c0:
c2:43:27:a5:88:ee:e5:31:31:59:6e:e6:e5:c5:f1:
7a:bb:ba:54:cf:33:6f:a9:23:95:34:1f:02:59:01:
32:5c:a2:99:08:dd:32:36:e0:17:c5:c1:4b:7a:f9:
f8:b8:78:02:6e:a6:66:f8:42:f9:32:67:5a:93:ae:
16:1f:ee:54:bf:69:d7:66:50:63:e5:d9:d8:33:a2:
7e:59:6b:0c:97:d2:b6:d3:ed:a5:79:33:4a:c2:43:
50:0b:2b:bf:dc:e6:30:c8:05:b0:b8:50:94:e7:67:
a8:68:be:5d:87:8b:1a:bd:8b:f2:01:fb:e2:a4:87:
b6:8d:c1:09:2e:03:d4:2e:b4:ea:9a:21:2a:b3:fe:
57:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:AE:65:4E:B8:31:B8:A6:BA:B1:EA:94:AB:CE:86:97:93:94:0E:26
X509v3 Authority Key Identifier:
keyid:EF:DB:09:4B:3A:4B:DD:FF:AE:7A:31:18:46:33:B6:D1:4D:8E:5F:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6f6440f6-6f5a-4f4b-a597-e74b543e785b/0/EFDB094B3A4BDDFFAE7A31184633B6D14D8E5F5E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFDB094B3A4BDDFFAE7A31184633B6D14D8E5F5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6f6440f6-6f5a-4f4b-a597-e74b543e785b/0/EFDB094B3A4BDDFFAE7A31184633B6D14D8E5F5E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:a8:02:74:05:82:5f:91:e2:5a:4b:2d:dc:70:c9:7c:fa:b2:
56:77:7f:0d:54:ae:9c:2c:e2:b0:00:dd:7a:93:a9:17:51:66:
74:19:79:90:e3:e2:db:70:05:84:15:e6:51:1d:6b:97:df:a5:
a4:df:b4:fe:c5:2c:48:59:d1:cb:b4:5a:0f:bd:f6:73:1a:77:
2e:9a:1d:e3:cd:de:7a:5f:ff:aa:fc:47:68:3d:46:c2:a7:5b:
47:bc:17:9a:bd:fb:ae:67:6a:52:81:64:78:32:66:17:94:f9:
b4:91:b7:02:f8:fd:97:82:af:b8:b5:f1:54:0d:dd:54:c3:88:
af:c0:0b:25:19:10:47:67:6c:e3:ec:4f:25:d1:65:b6:ae:9d:
dc:83:be:66:f3:52:cf:97:f2:d8:4f:e0:7c:e2:0b:3f:ee:9a:
3b:a8:ea:19:4f:e7:96:9a:99:82:82:11:3c:b9:e1:79:ad:9e:
e7:5a:dc:ec:96:e0:b2:35:ec:68:8d:61:3d:f1:77:3c:9b:bc:
f8:76:45:06:6c:15:c7:00:42:51:8c:ae:e4:c9:8b:27:d3:92:
19:80:7c:3f:9b:8c:82:a9:b8:51:9b:f0:d0:ca:ad:5a:c4:ba:
96:68:57:8f:44:7f:b6:58:51:a1:46:c3:9b:6d:b2:42:b7:d5:
a5:ef:6a:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 11:24:57 2026 by rpki-client