
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/EF52E239F082CFB1C35BB8D60B4615A60D4926E9.mft
File: EF52E239F082CFB1C35BB8D60B4615A60D4926E9.mft (raw, json)
Hash identifier: T9t0CmZDq0EiYXflE1BiEZ/wxvGbYE2bg40cpeeAz1Y=
Subject key identifier: F6:70:D9:4F:25:78:25:C9:52:7B:75:9F:F9:56:BE:2F:90:FC:ED:D2
Authority key identifier: EF:52:E2:39:F0:82:CF:B1:C3:5B:B8:D6:0B:46:15:A6:0D:49:26:E9
Certificate issuer: /CN=EF52E239F082CFB1C35BB8D60B4615A60D4926E9
Certificate serial: 7E4382F39643963575169863B008640701B47C45
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF52E239F082CFB1C35BB8D60B4615A60D4926E9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/EF52E239F082CFB1C35BB8D60B4615A60D4926E9.mft
Manifest number: 41
Signing time: Fri 19 Jun 2026 18:38:22 +0000
Manifest this update: Fri 19 Jun 2026 18:33:22 +0000
Manifest next update: Sat 20 Jun 2026 22:13:22 +0000
Files and hashes: 1: EF52E239F082CFB1C35BB8D60B4615A60D4926E9.crl (hash: xZ5yo94m4dRQYczW0oh5mY3SnMyoyPfBnvv93l4UbP4=)
2: 3130332e3133312e35312e302f32342d3234203d3e20313331373735.roa (hash: gKWl4c7FQdp4tPgMGVABYRuitakyfACS20kjMIxhrq4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/EF52E239F082CFB1C35BB8D60B4615A60D4926E9.crl
rsync://rpki-rsync.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/EF52E239F082CFB1C35BB8D60B4615A60D4926E9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF52E239F082CFB1C35BB8D60B4615A60D4926E9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 22:13:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:43:82:f3:96:43:96:35:75:16:98:63:b0:08:64:07:01:b4:7c:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EF52E239F082CFB1C35BB8D60B4615A60D4926E9
Validity
Not Before: Jun 19 18:33:22 2026 GMT
Not After : Jun 20 22:13:22 2026 GMT
Subject: CN=F670D94F257825C9527B759FF956BE2F90FCEDD2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:27:ee:27:b6:d2:6a:a9:4b:14:15:af:39:d7:
3f:e3:78:f0:c2:6c:91:52:1c:08:9c:52:1b:41:6f:
47:08:de:4b:b8:33:05:5c:76:8b:ab:ec:ba:ab:56:
d5:b5:26:45:56:8b:cc:c6:10:37:5d:ea:01:f6:3c:
e7:d2:42:c7:42:6b:e0:35:7a:ff:e1:f0:8b:a9:69:
2f:f3:59:0a:b8:87:94:17:8a:82:00:3d:4b:1c:4a:
ee:97:6f:2e:cc:6d:dd:16:0f:2e:63:26:14:f3:22:
90:49:d8:a5:7d:55:30:09:8f:3d:b5:f0:2d:5e:fd:
bd:53:53:70:d8:1b:d5:98:fa:fe:ff:e6:d5:e9:46:
ba:ac:ce:b0:ba:4d:c4:7e:95:0e:d3:d6:42:50:8d:
01:79:42:f7:e5:46:06:cd:f5:7a:15:e0:bb:f1:37:
00:f1:7b:93:47:87:76:f6:c9:97:43:d9:eb:00:dd:
3e:4e:ed:5d:c8:ec:bb:93:b6:3d:22:ec:4a:f4:69:
88:9d:d8:d1:27:2c:74:21:86:a6:1a:32:19:81:6f:
94:98:7e:90:3c:fa:91:23:39:bf:22:24:c2:4c:a3:
fb:44:cf:03:05:76:61:15:7c:1e:b4:e8:dc:6a:68:
ad:b5:d0:f4:11:41:bd:3e:da:16:e9:3a:28:8a:f7:
20:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:70:D9:4F:25:78:25:C9:52:7B:75:9F:F9:56:BE:2F:90:FC:ED:D2
X509v3 Authority Key Identifier:
keyid:EF:52:E2:39:F0:82:CF:B1:C3:5B:B8:D6:0B:46:15:A6:0D:49:26:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/EF52E239F082CFB1C35BB8D60B4615A60D4926E9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF52E239F082CFB1C35BB8D60B4615A60D4926E9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/EF52E239F082CFB1C35BB8D60B4615A60D4926E9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:9b:10:63:a2:be:c7:9e:05:d8:31:1f:e8:54:fc:ae:29:37:
da:0e:12:95:fa:7d:49:fa:ff:2d:44:7d:48:3e:d4:04:7e:1a:
44:a1:c5:62:ea:6e:7e:0e:d4:5f:98:fa:cc:19:7e:90:99:36:
9b:bb:fa:18:cf:8c:7d:23:45:4f:1a:2f:c8:91:a6:3f:37:c3:
06:85:ce:0a:30:a3:3d:df:3a:6d:ec:24:b3:e3:72:f2:db:3c:
68:dc:7e:77:ec:da:40:f3:c7:63:6c:4c:d8:bd:08:0a:1d:93:
04:de:d8:68:d0:d5:c1:61:f2:50:59:e4:66:78:b5:85:a5:fe:
a8:43:16:76:25:48:ca:8f:1a:25:11:6c:54:5e:78:78:b7:d7:
4f:47:11:4e:1d:37:45:d9:b8:5d:89:b2:c5:d4:04:39:24:e0:
b3:4b:cc:50:76:48:25:e6:56:b6:a9:58:31:1e:41:1f:eb:34:
c8:a2:ca:fe:12:2a:8e:13:1c:2a:34:65:54:f4:a3:d0:82:e1:
a0:2f:66:f8:35:b1:67:4c:56:52:60:92:fa:45:e6:7a:42:cc:
93:49:4e:92:78:be:fa:0e:d4:ac:ea:8c:08:29:f0:9e:af:34:
fa:e9:86:ad:78:3a:36:dc:d9:3c:8f:f7:07:d6:6e:bd:70:56:
77:c0:f2:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 09:20:15 2026 by rpki-client