
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/EFBC69859D4CE7D47B71A9D23022FDEA93DF1A02.mft
File: EFBC69859D4CE7D47B71A9D23022FDEA93DF1A02.mft (raw, json)
Hash identifier: PKYEgXrK1TOeBKMvyn8lzhC7JMi4P3E0XZCtoK1hSvU=
Subject key identifier: 1D:AA:19:79:1E:AD:4E:C9:6F:83:F4:55:D5:19:88:97:11:0E:50:C9
Authority key identifier: EF:BC:69:85:9D:4C:E7:D4:7B:71:A9:D2:30:22:FD:EA:93:DF:1A:02
Certificate issuer: /CN=EFBC69859D4CE7D47B71A9D23022FDEA93DF1A02
Certificate serial: 12B33A3D05D183B12E7AB6AAF5FB7E255679F8B1
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFBC69859D4CE7D47B71A9D23022FDEA93DF1A02.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/EFBC69859D4CE7D47B71A9D23022FDEA93DF1A02.mft
Manifest number: 41
Signing time: Fri 19 Jun 2026 16:40:51 +0000
Manifest this update: Fri 19 Jun 2026 16:35:51 +0000
Manifest next update: Sat 20 Jun 2026 19:05:51 +0000
Files and hashes: 1: 3130332e3135362e37342e302f32332d3234203d3e20313431303832.roa (hash: wEHPqNpq5E7BaSWEXPsPlsqnHz7+5ItTw/UwUrelTsw=)
2: EFBC69859D4CE7D47B71A9D23022FDEA93DF1A02.crl (hash: 4XqUhLK+gGiLFxHplEWNqeHYNn+brBDRyw0dzvgMK7w=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/EFBC69859D4CE7D47B71A9D23022FDEA93DF1A02.crl
rsync://rpki-rsync.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/EFBC69859D4CE7D47B71A9D23022FDEA93DF1A02.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFBC69859D4CE7D47B71A9D23022FDEA93DF1A02.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 19:05:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:b3:3a:3d:05:d1:83:b1:2e:7a:b6:aa:f5:fb:7e:25:56:79:f8:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFBC69859D4CE7D47B71A9D23022FDEA93DF1A02
Validity
Not Before: Jun 19 16:35:51 2026 GMT
Not After : Jun 20 19:05:51 2026 GMT
Subject: CN=1DAA19791EAD4EC96F83F455D5198897110E50C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:70:9c:3c:fb:da:50:2a:5e:84:6d:5c:db:1b:
41:dd:76:0a:04:5a:80:9f:a8:2f:30:5a:f1:f9:7b:
ac:4d:c1:21:c7:0e:58:a6:cf:19:5e:6e:6b:d5:ad:
c7:5e:97:6f:79:1d:23:f5:ba:dc:f4:40:66:a1:94:
62:48:98:f9:f6:01:24:be:76:ba:d1:78:2c:fb:1a:
03:06:bf:2a:ed:cd:4f:53:d1:6d:eb:d7:12:3c:79:
4b:35:4f:dd:ea:70:99:59:54:54:3b:ff:28:49:84:
d2:85:7e:21:20:2d:54:9a:06:61:0c:5b:92:76:99:
73:01:07:55:03:96:fe:2f:35:57:27:94:32:01:c3:
bc:d5:09:4e:86:78:5b:d8:4a:93:27:eb:b3:35:c3:
5d:68:a1:0e:e2:68:b0:9a:c1:68:c1:e9:32:cd:66:
c9:8f:e3:25:22:78:eb:3c:77:84:89:5f:05:12:29:
9e:67:fb:e6:8b:e0:67:91:b5:af:39:fe:fa:38:be:
1a:1a:cb:55:44:9d:41:7d:0f:f4:f6:0c:cd:50:92:
0c:dc:e7:a1:e3:16:a4:3e:80:3c:cb:db:5d:03:9e:
3d:21:01:6f:8e:1f:c2:8b:4f:9a:e4:67:15:20:4a:
48:32:6e:24:0a:9a:ba:ab:21:8b:a9:37:f4:42:db:
1e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:AA:19:79:1E:AD:4E:C9:6F:83:F4:55:D5:19:88:97:11:0E:50:C9
X509v3 Authority Key Identifier:
keyid:EF:BC:69:85:9D:4C:E7:D4:7B:71:A9:D2:30:22:FD:EA:93:DF:1A:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/EFBC69859D4CE7D47B71A9D23022FDEA93DF1A02.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFBC69859D4CE7D47B71A9D23022FDEA93DF1A02.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/EFBC69859D4CE7D47B71A9D23022FDEA93DF1A02.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:e1:11:88:f7:70:88:01:08:77:d4:d8:3d:0a:0e:00:08:3d:
1b:ef:23:d3:36:d3:52:80:34:18:74:ff:67:a8:2d:3c:92:d3:
f7:65:1a:bf:8b:c4:20:5f:aa:85:b3:d8:27:e9:43:4e:5a:59:
1d:aa:3f:24:1a:46:47:06:e3:78:49:3a:dd:9d:2a:07:41:29:
f1:22:5b:d3:95:af:d6:ef:df:dc:b3:e6:08:51:b4:f6:0b:a7:
f7:ea:cf:e4:ba:6f:c4:ca:b8:71:40:2a:90:20:85:dc:bf:5a:
d7:54:7b:eb:c8:25:b7:de:c7:0a:0e:84:9a:b5:f0:c7:10:ae:
2b:de:f4:6f:21:b7:72:f6:e6:6c:17:c6:f6:30:c9:83:94:2e:
3a:19:ea:de:ec:a8:bd:ec:e6:ce:7b:90:0a:20:16:b3:84:8c:
29:21:71:6b:23:b0:f1:9a:35:c5:19:97:d3:66:a6:a4:92:1d:
8d:d8:65:03:4a:8b:4c:74:27:d7:e9:cd:ed:a0:5d:d1:a9:c2:
fb:b8:06:9d:a2:ce:84:ef:da:91:05:af:08:67:4c:5b:64:e2:
7b:89:e2:6f:3b:9d:3c:f8:9f:c6:64:ca:9c:95:72:df:18:64:
4f:b4:c0:6d:1a:64:d8:ec:41:12:bc:30:7e:c6:9d:f0:c0:49:
a5:5c:db:dc
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUErM6PQXRg7Eueraq9ft+JVZ5+LEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUZCQzY5ODU5RDRDRTdENDdCNzFBOUQyMzAyMkZERUE5
M0RGMUEwMjAeFw0yNjA2MTkxNjM1NTFaFw0yNjA2MjAxOTA1NTFaMDMxMTAvBgNV
BAMTKDFEQUExOTc5MUVBRDRFQzk2RjgzRjQ1NUQ1MTk4ODk3MTEwRTUwQzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdcJw8+9pQKl6EbVzbG0HddgoE
WoCfqC8wWvH5e6xNwSHHDlimzxlebmvVrcdel295HSP1utz0QGahlGJImPn2ASS+
drrReCz7GgMGvyrtzU9T0W3r1xI8eUs1T93qcJlZVFQ7/yhJhNKFfiEgLVSaBmEM
W5J2mXMBB1UDlv4vNVcnlDIBw7zVCU6GeFvYSpMn67M1w11ooQ7iaLCawWjB6TLN
ZsmP4yUieOs8d4SJXwUSKZ5n++aL4GeRta85/vo4vhoay1VEnUF9D/T2DM1Qkgzc
56HjFqQ+gDzL210Dnj0hAW+OH8KLT5rkZxUgSkgybiQKmrqrIYupN/RC2x7zAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUHaoZeR6tTslvg/RV1RmIlxEOUMkwHwYDVR0j
BBgwFoAU77xphZ1M59R7canSMCL96pPfGgIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZjAwMTAyZDAtNzE0Zi00YjUyLTliZTUtZGVkMTZlZGZlNGEyLzAvRUZCQzY5ODU5
RDRDRTdENDdCNzFBOUQyMzAyMkZERUE5M0RGMUEwMi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FRkJDNjk4NTlENENFN0Q0N0I3MUE5RDIzMDIyRkRFQTkzREYx
QTAyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjAwMTAyZDAtNzE0Zi00YjUyLTli
ZTUtZGVkMTZlZGZlNGEyLzAvRUZCQzY5ODU5RDRDRTdENDdCNzFBOUQyMzAyMkZE
RUE5M0RGMUEwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHjhEYj3cIgBCHfU2D0KDgAIPRvvI9M201KA
NBh0/2eoLTyS0/dlGr+LxCBfqoWz2CfpQ05aWR2qPyQaRkcG43hJOt2dKgdBKfEi
W9OVr9bv39yz5ghRtPYLp/fqz+S6b8TKuHFAKpAghdy/WtdUe+vIJbfexwoOhJq1
8McQrive9G8ht3L25mwXxvYwyYOULjoZ6t7sqL3s5s57kAogFrOEjCkhcWsjsPGa
NcUZl9NmpqSSHY3YZQNKi0x0J9fpze2gXdGpwvu4Bp2izoTv2pEFrwhnTFtk4nuJ
4m87nTz4n8ZkypyVct8YZE+0wG0aZNjsQRK8MH7GnfDASaVc29w=
-----END CERTIFICATE-----
Generated at Sat Jun 20 08:58:51 2026 by rpki-client