
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/EF52E239F082CFB1C35BB8D60B4615A60D4926E9.mft
File: EF52E239F082CFB1C35BB8D60B4615A60D4926E9.mft (raw, json)
Hash identifier: g+h95reW+azQ9QxtfmVRb2HI42lJ5+mwdCoSUAdHP2c=
Subject key identifier: FB:FD:DD:A8:70:FB:7C:1B:96:4E:09:1E:B0:13:7E:4A:C3:F7:58:16
Authority key identifier: EF:52:E2:39:F0:82:CF:B1:C3:5B:B8:D6:0B:46:15:A6:0D:49:26:E9
Certificate issuer: /CN=EF52E239F082CFB1C35BB8D60B4615A60D4926E9
Certificate serial: 1FF85AF723094579F275E4035A0DD16A7032033F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF52E239F082CFB1C35BB8D60B4615A60D4926E9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/EF52E239F082CFB1C35BB8D60B4615A60D4926E9.mft
Manifest number: E8
Signing time: Sat 24 Oct 2026 11:18:00 +0000
Manifest this update: Sat 24 Oct 2026 11:13:00 +0000
Manifest next update: Sun 25 Oct 2026 12:06:00 +0000
Files and hashes: 1: EF52E239F082CFB1C35BB8D60B4615A60D4926E9.crl (hash: LcKNFD08aMV8IUSJRLEALI0jScIhCAL0tDu/sHklDyA=)
2: 3130332e3133312e35312e302f32342d3234203d3e20313331373735.roa (hash: gKWl4c7FQdp4tPgMGVABYRuitakyfACS20kjMIxhrq4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/EF52E239F082CFB1C35BB8D60B4615A60D4926E9.crl
rsync://rpki-rsync.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/EF52E239F082CFB1C35BB8D60B4615A60D4926E9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF52E239F082CFB1C35BB8D60B4615A60D4926E9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Oct 2026 03:03:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:f8:5a:f7:23:09:45:79:f2:75:e4:03:5a:0d:d1:6a:70:32:03:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EF52E239F082CFB1C35BB8D60B4615A60D4926E9
Validity
Not Before: Oct 24 11:13:00 2026 GMT
Not After : Oct 25 12:06:00 2026 GMT
Subject: CN=FBFDDDA870FB7C1B964E091EB0137E4AC3F75816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:1e:18:82:de:c9:7b:3f:dd:47:7c:69:a4:7a:
cf:dc:3d:45:39:9c:02:a7:5f:d2:d8:46:75:43:ef:
e0:a6:31:41:30:38:75:c4:70:93:b3:49:74:93:20:
90:7e:a1:ef:fe:19:92:bb:bd:85:e3:10:3c:89:ac:
a7:46:69:c4:81:7f:25:89:3e:ef:73:18:f6:81:33:
74:73:c7:4a:10:94:e3:fb:32:28:e5:ff:04:00:7c:
f3:58:18:7b:4d:1c:01:fb:94:11:c1:de:e7:00:79:
4c:71:51:eb:62:e1:d2:6d:d9:ce:71:1c:a5:01:bc:
e2:79:0a:4a:37:ff:e7:22:39:68:b6:b2:9c:d2:c5:
9b:c9:f6:a3:9a:51:4b:35:ba:33:f0:ac:61:3c:d6:
1d:f6:f7:2a:a4:15:90:64:53:db:f6:40:ab:f4:b6:
b2:c3:7c:d3:ef:90:07:b3:b0:fa:ac:0b:52:1b:6d:
c0:72:12:0e:b9:6a:9e:f2:fe:38:31:e8:ac:b0:41:
62:a9:49:b0:9d:e0:1a:22:2f:33:4a:9a:e1:d6:e8:
06:13:02:ba:4d:8d:fb:ba:d4:68:07:42:bd:c9:e9:
bc:71:88:42:ab:18:9d:1f:7c:d5:11:f6:b1:b8:65:
3b:70:dc:a0:f7:aa:9b:e0:08:3e:b2:2b:e9:78:03:
27:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:FD:DD:A8:70:FB:7C:1B:96:4E:09:1E:B0:13:7E:4A:C3:F7:58:16
X509v3 Authority Key Identifier:
keyid:EF:52:E2:39:F0:82:CF:B1:C3:5B:B8:D6:0B:46:15:A6:0D:49:26:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/EF52E239F082CFB1C35BB8D60B4615A60D4926E9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF52E239F082CFB1C35BB8D60B4615A60D4926E9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/EF52E239F082CFB1C35BB8D60B4615A60D4926E9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:c9:6f:90:ed:aa:61:7d:d0:b6:83:80:81:98:1e:97:cb:00:
7f:5c:83:7a:67:7b:da:87:58:c7:48:9b:cc:49:9d:0d:05:49:
12:10:c3:8e:95:bd:79:61:7d:bb:94:96:e5:e9:3a:8d:72:08:
eb:d1:f5:d6:d4:d6:d8:e6:09:c9:dc:13:f5:f5:a6:c9:61:df:
2a:d6:fd:3f:9c:30:fa:aa:32:87:eb:6d:0c:ed:a9:6d:55:c3:
99:04:60:39:60:c3:40:68:3c:64:d4:b4:53:1a:35:a9:e3:73:
80:28:93:b1:2f:f5:b8:c6:38:b9:b5:e3:55:7f:eb:a2:2f:fe:
dd:d6:c6:58:54:7b:c3:66:b5:d5:35:d7:2a:89:cc:79:f9:f3:
a7:56:60:07:c2:ec:e5:dc:ac:3f:5e:0e:7f:2a:6c:84:04:03:
ed:ed:f2:46:53:52:c1:55:e7:9a:e5:e3:1a:00:72:47:bd:f5:
c0:9f:c7:57:cb:93:13:83:fa:ef:9a:e2:d8:b5:7b:e9:de:be:
3c:87:b6:02:87:46:3f:96:ec:45:fd:e5:5c:10:bb:d9:00:09:
40:d2:19:bb:76:6f:91:1e:00:b1:78:6b:c2:9c:0a:9f:bb:3a:
62:93:19:e8:da:21:55:25:2f:a2:71:a4:ec:df:61:07:8e:b1:
72:d4:5c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:44:40 2026 by rpki-client