
$ rpki-client -vvf rpki-rsync.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/EFA0A80DF71CA377A289711EA4310F3117358BDA.mft
File: EFA0A80DF71CA377A289711EA4310F3117358BDA.mft (raw, json)
Hash identifier: D/rO9UfHKdPzuyaeryP0g6PqJS6oUtq07WFldZfed9M=
Subject key identifier: 05:46:E4:1F:6B:31:62:34:25:06:D4:0C:CA:58:F7:09:62:FC:54:9C
Authority key identifier: EF:A0:A8:0D:F7:1C:A3:77:A2:89:71:1E:A4:31:0F:31:17:35:8B:DA
Certificate issuer: /CN=EFA0A80DF71CA377A289711EA4310F3117358BDA
Certificate serial: 5E5ADDDD4037229881B90FF077603289619054D1
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFA0A80DF71CA377A289711EA4310F3117358BDA.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/EFA0A80DF71CA377A289711EA4310F3117358BDA.mft
Manifest number: 41
Signing time: Thu 18 Jun 2026 12:37:20 +0000
Manifest this update: Thu 18 Jun 2026 12:32:20 +0000
Manifest next update: Fri 19 Jun 2026 16:05:20 +0000
Files and hashes: 1: 32372e3131312e33342e302f32342d3234203d3e203538343737.roa (hash: 1YWuY5HZqKiBZs805+vyXQB+d7lVGfJWx9YMEkEgtvQ=)
2: 32372e3131312e33322e302f31392d3234203d3e203234353332.roa (hash: Fx9bLePWZd911ErojerGEpVTnf/DxfdXCAQiFRWGMk8=)
3: 34332e3232392e3230342e302f32322d3234203d3e203234353332.roa (hash: BwtyTC6qI4XC3HBbimySaUxc14wJ6nXjYuM/+KpzQMU=)
4: 3131392e3233352e31362e302f32302d3234203d3e203234353332.roa (hash: a1jLyYlI+XXOuvRXX5wEn6MAtEMedfGoxkqMvx1OXCk=)
5: 323430333a326530303a3a2f33322d3438203d3e203234353332.roa (hash: 9DAVKa81esoccLZerAJimBEYho7HzR8tvV6sLPxdUYg=)
6: EFA0A80DF71CA377A289711EA4310F3117358BDA.crl (hash: ac6UD1Cw8a1fvht7ReWn/iyaH/YlS9kBcvDQZr3xFEA=)
7: 3230322e3132392e3138342e302f32322d3234203d3e203234353332.roa (hash: CBM38ddIBA7ErC9KFszGB+2Go/rfydEsEM3u2nPHmFA=)
8: 3130332e3234352e3138302e302f32322d3234203d3e203234353332.roa (hash: HsO0FzJAWLg2u6DKU2yDy0xpq+6RbfKYVFKlBWZw79M=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/EFA0A80DF71CA377A289711EA4310F3117358BDA.crl
rsync://rpki-rsync.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/EFA0A80DF71CA377A289711EA4310F3117358BDA.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFA0A80DF71CA377A289711EA4310F3117358BDA.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 12:15:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:5a:dd:dd:40:37:22:98:81:b9:0f:f0:77:60:32:89:61:90:54:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFA0A80DF71CA377A289711EA4310F3117358BDA
Validity
Not Before: Jun 18 12:32:20 2026 GMT
Not After : Jun 19 16:05:20 2026 GMT
Subject: CN=0546E41F6B3162342506D40CCA58F70962FC549C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:56:e5:4a:50:6a:69:d3:50:d7:b7:2b:14:40:
96:85:40:c9:6b:6f:2d:4a:36:37:19:b2:0a:ce:f6:
09:e3:22:ba:29:a6:56:97:8a:43:55:1e:a1:40:5a:
ca:20:a7:ed:3b:4b:08:d9:23:16:3b:e6:73:47:09:
e2:c2:9e:ef:7d:c5:c2:63:71:31:e9:09:e9:fc:77:
bc:47:ee:5a:52:f2:fd:e9:0b:db:f4:f2:3b:fe:c5:
c5:40:82:ac:7d:f8:a7:08:ff:9d:0d:f1:48:31:ec:
78:2f:91:f5:44:cd:5f:3b:d0:99:21:be:c5:f8:e1:
03:46:2c:4f:77:8f:d4:57:87:8c:06:53:fd:7f:0b:
6c:4f:9f:95:8f:3b:22:9f:76:b5:db:cc:f9:f0:2b:
e7:bf:69:70:72:25:71:5b:b8:74:17:ad:8e:ab:da:
f1:4a:8e:68:c9:22:87:37:ad:65:2b:3c:dd:ea:b1:
05:6a:fc:ec:d6:86:ca:91:a1:30:aa:12:85:50:64:
33:95:1f:1d:f5:9d:c2:99:52:63:fe:f8:86:00:0f:
d2:45:73:41:0c:68:c8:f7:16:61:bd:5f:28:2d:01:
4c:b5:ed:6c:62:2b:98:43:45:3d:e2:5d:38:ec:24:
f7:09:2e:f4:c5:6c:b4:d5:96:f1:c7:89:9f:d6:5b:
09:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:46:E4:1F:6B:31:62:34:25:06:D4:0C:CA:58:F7:09:62:FC:54:9C
X509v3 Authority Key Identifier:
keyid:EF:A0:A8:0D:F7:1C:A3:77:A2:89:71:1E:A4:31:0F:31:17:35:8B:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/EFA0A80DF71CA377A289711EA4310F3117358BDA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFA0A80DF71CA377A289711EA4310F3117358BDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/EFA0A80DF71CA377A289711EA4310F3117358BDA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:5b:a7:c3:2d:d5:1e:f6:d1:b0:db:cb:1f:d9:71:9d:22:d9:
47:33:ea:dd:d2:6d:45:92:3b:4f:61:e4:1c:c1:2b:0e:c0:96:
cc:4e:d7:68:0e:99:42:f2:a2:e6:c1:71:43:bb:bc:ec:73:50:
90:85:22:d6:09:31:24:78:69:8d:72:10:87:60:c6:c6:ea:05:
dc:2a:36:7d:d4:1e:2a:02:f3:17:ed:6f:d6:95:70:ed:fe:1c:
df:8a:18:11:4e:1d:6f:b9:dd:d6:4c:94:4a:cf:61:0e:3d:ad:
b6:e5:7a:7b:3c:b2:ad:8e:6f:fc:6f:a7:af:05:38:3d:3e:e3:
f7:7e:bd:af:2f:c5:06:1e:61:1d:2b:4d:bb:ef:dd:17:33:6d:
8e:e2:00:27:bc:86:0e:d0:48:d1:c5:1f:ff:88:27:ee:a2:da:
7b:d8:18:6b:85:41:89:da:5c:1c:16:f5:e5:76:b6:66:bc:43:
8e:02:da:cd:89:d6:72:ed:df:e5:21:17:db:d1:aa:21:0d:6a:
ba:6d:3f:2b:e5:5a:5c:84:27:fe:96:e9:ab:f8:86:eb:99:4e:
c3:0a:86:be:b1:f7:4f:56:79:58:0d:aa:e0:e7:4e:8c:e1:a2:
f0:4e:43:08:7c:61:20:a2:90:4b:c1:01:8b:2e:49:f6:9f:69:
99:25:d8:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 18 21:11:13 2026 by rpki-client