
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E.mft
File: EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E.mft (raw, json)
Hash identifier: 0LyqzLBzd8lZ3sNKdQWie4UPODIYmgxj3F/Z44UXzXc=
Subject key identifier: DF:01:61:BA:18:92:39:F5:28:5F:AE:C8:E0:FF:BD:7D:F7:2D:22:73
Authority key identifier: EF:0D:C3:6F:FE:89:46:F1:04:92:74:EE:88:9B:B9:8C:5A:5A:7D:8E
Certificate issuer: /CN=EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E
Certificate serial: 1E930A30F73F524842259FA9571460CBA8D9E5D1
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E.mft
Manifest number: B6
Signing time: Wed 16 Sep 2026 15:02:44 +0000
Manifest this update: Wed 16 Sep 2026 14:57:44 +0000
Manifest next update: Thu 17 Sep 2026 15:59:44 +0000
Files and hashes: 1: 3230322e3137332e31362e302f32312d3234203d3e203234323130.roa (hash: r4SZ6eUQ/WGNZXPblXSjXtHYlTpktiYzvV0LKCEpMuY=)
2: 3138302e3135302e3233322e302f32312d3234203d3e203234323130.roa (hash: ifJJcEjqzU7+xO+rrfiw7+N3sHyu5nZ4TiZzLx8FyiQ=)
3: EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E.crl (hash: tCcKOmSOssraneqESsIjGFUlZol1kMWe1vwWPy0q0Tk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E.crl
rsync://rpki-rsync.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 15:59:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:93:0a:30:f7:3f:52:48:42:25:9f:a9:57:14:60:cb:a8:d9:e5:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E
Validity
Not Before: Sep 16 14:57:44 2026 GMT
Not After : Sep 17 15:59:44 2026 GMT
Subject: CN=DF0161BA189239F5285FAEC8E0FFBD7DF72D2273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:8f:8b:16:0a:60:7f:ba:58:9b:5e:53:d0:da:
80:2c:2d:9d:92:ec:52:6d:a7:f9:cb:45:0a:34:fa:
7f:32:95:85:bc:20:74:65:77:25:0d:15:60:56:f3:
a7:cf:08:be:f0:44:e0:0d:60:b9:88:ee:19:02:ff:
19:ba:ba:4a:3e:e9:be:2c:cc:d1:08:44:a4:ae:56:
65:39:26:d5:3a:d3:16:f9:db:bc:07:3b:a7:a8:4a:
dd:f2:9e:51:a5:9d:6d:a6:b2:7c:bd:51:d7:ce:0d:
2c:66:70:db:5e:8a:98:c3:d1:1c:cd:0f:45:52:1b:
8c:95:2d:57:f8:7f:d0:97:3c:8c:56:72:48:f0:39:
76:89:ac:d6:af:49:c1:fc:10:99:2b:44:c3:a1:71:
99:88:a8:c0:be:e4:4a:95:50:86:c1:4d:51:62:ae:
67:54:27:3c:73:65:82:b1:d7:3f:38:72:37:32:35:
6f:00:c7:29:8f:93:1f:75:5e:05:7a:17:7a:b3:09:
fb:76:b7:17:23:7b:e7:9e:d3:f6:e4:34:c6:d4:be:
20:bd:5f:cc:ea:c9:39:98:6a:99:09:6d:5d:80:67:
6d:e2:e0:48:10:31:1c:a9:6a:7b:c8:33:9e:3b:fc:
6e:e5:14:42:55:20:54:97:e0:80:1c:1a:45:f0:7b:
eb:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:01:61:BA:18:92:39:F5:28:5F:AE:C8:E0:FF:BD:7D:F7:2D:22:73
X509v3 Authority Key Identifier:
keyid:EF:0D:C3:6F:FE:89:46:F1:04:92:74:EE:88:9B:B9:8C:5A:5A:7D:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:4f:1c:1d:2b:08:5a:01:7c:78:16:50:0a:df:52:ea:83:2f:
b4:83:fb:29:66:66:b5:52:e9:73:f6:5f:c1:a9:2d:73:d7:fa:
d5:3d:64:07:70:ea:b3:62:14:74:41:69:9c:f8:d7:77:14:99:
55:36:56:cd:b6:f0:41:7c:80:35:e5:9e:62:23:0a:51:b1:95:
6b:6a:30:98:6b:a5:bb:be:83:36:bf:18:18:1d:7d:c7:d1:35:
05:d7:a1:38:50:c6:48:1b:7d:19:b5:ac:49:93:cc:68:b7:aa:
e8:b8:59:af:10:37:19:e2:89:73:65:78:1b:80:82:1a:05:9e:
4a:81:8e:5d:77:1d:e4:d9:3b:3c:6c:00:e2:8f:55:b5:a0:48:
bd:3f:ad:80:de:ce:25:b5:67:58:df:09:22:71:8d:78:b0:3e:
44:19:f7:84:66:92:97:80:02:e2:27:87:26:82:44:18:ae:64:
08:0d:dc:51:0a:1e:90:38:43:33:47:1b:51:1b:1d:55:bd:c1:
98:0e:a9:6c:af:f5:de:9f:dc:4f:82:fd:0f:03:80:2e:95:2a:
9a:6c:ff:36:a7:49:ca:f9:a8:ce:0f:2c:03:15:d8:a5:1b:1c:
c6:a4:bd:64:bf:d1:e1:49:57:77:a8:18:01:31:21:5e:ae:b9:
34:d0:f9:fa
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUHpMKMPc/UkhCJZ+pVxRgy6jZ5dEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUYwREMzNkZGRTg5NDZGMTA0OTI3NEVFODg5QkI5OEM1
QTVBN0Q4RTAeFw0yNjA5MTYxNDU3NDRaFw0yNjA5MTcxNTU5NDRaMDMxMTAvBgNV
BAMTKERGMDE2MUJBMTg5MjM5RjUyODVGQUVDOEUwRkZCRDdERjcyRDIyNzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyj4sWCmB/ulibXlPQ2oAsLZ2S
7FJtp/nLRQo0+n8ylYW8IHRldyUNFWBW86fPCL7wROANYLmI7hkC/xm6uko+6b4s
zNEIRKSuVmU5JtU60xb527wHO6eoSt3ynlGlnW2msny9UdfODSxmcNteipjD0RzN
D0VSG4yVLVf4f9CXPIxWckjwOXaJrNavScH8EJkrRMOhcZmIqMC+5EqVUIbBTVFi
rmdUJzxzZYKx1z84cjcyNW8AxymPkx91XgV6F3qzCft2txcje+ee0/bkNMbUviC9
X8zqyTmYapkJbV2AZ23i4EgQMRypanvIM547/G7lFEJVIFSX4IAcGkXwe+sLAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU3wFhuhiSOfUoX67I4P+9ffctInMwHwYDVR0j
BBgwFoAU7w3Db/6JRvEEknTuiJu5jFpafY4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YTAxN2I4MjgtMTdmYS00OGEyLWExMTMtMTQ5Zjk0NjdhMzI4LzAvRUYwREMzNkZG
RTg5NDZGMTA0OTI3NEVFODg5QkI5OEM1QTVBN0Q4RS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FRjBEQzM2RkZFODk0NkYxMDQ5Mjc0RUU4ODlCQjk4QzVBNUE3
RDhFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTAxN2I4MjgtMTdmYS00OGEyLWEx
MTMtMTQ5Zjk0NjdhMzI4LzAvRUYwREMzNkZGRTg5NDZGMTA0OTI3NEVFODg5QkI5
OEM1QTVBN0Q4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABZPHB0rCFoBfHgWUArfUuqDL7SD+ylmZrVS
6XP2X8GpLXPX+tU9ZAdw6rNiFHRBaZz413cUmVU2Vs228EF8gDXlnmIjClGxlWtq
MJhrpbu+gza/GBgdfcfRNQXXoThQxkgbfRm1rEmTzGi3qui4Wa8QNxniiXNleBuA
ghoFnkqBjl13HeTZOzxsAOKPVbWgSL0/rYDeziW1Z1jfCSJxjXiwPkQZ94RmkpeA
AuInhyaCRBiuZAgN3FEKHpA4QzNHG1EbHVW9wZgOqWyv9d6f3E+C/Q8DgC6VKpps
/zanScr5qM4PLAMV2KUbHMakvWS/0eFJV3eoGAExIV6uuTTQ+fo=
-----END CERTIFICATE-----
Generated at Thu Sep 17 10:14:44 2026 by rpki-client