
$ rpki-client -vvf repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.mft
File: EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.mft (raw, json)
Hash identifier: OipginaHML52Z9xIP+bLfe9HDs6Dij2QJRkmuNjAaVA=
Subject key identifier: 13:26:47:B1:9A:17:6E:C7:FB:1B:80:7E:55:AD:AD:21:A8:B7:C2:26
Authority key identifier: EF:C0:FE:32:8F:7B:86:F9:C6:82:F4:FE:37:36:0C:4E:3A:D9:94:2C
Certificate issuer: /CN=EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C
Certificate serial: 255EB23CBB61761113F8FA729E6ED6303672C739
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.mft
Manifest number: 04E1
Signing time: Sat 28 Feb 2026 15:41:16 +0000
Manifest this update: Sat 28 Feb 2026 15:36:16 +0000
Manifest next update: Wed 04 Mar 2026 00:15:16 +0000
Files and hashes: 1: EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.crl (hash: iAKIsuJIeB7CdthWdUfH0PhGNicPLh17m+ByYj74dOY=)
2: 3130332e3135332e3132372e302f32342d3234203d3e20313338303839.roa (hash: KdIUSWjYk6G6khIi44dRxNIcc82FtwrOj3DoMvqmaNE=)
3: 3130332e3135332e3132362e302f32342d3234203d3e20313430343632.roa (hash: T6Hicz2H8CuNDpKjhaA17WaIW/oy1qNlEePPsSxqMqI=)
4: 323430363a343463303a3a2f33322d3438203d3e20313430343632.roa (hash: LyQVOVVD0SyWAzKbbigEAOPOxnvDfTq86SNZAm/SmRY=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.crl
rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 00:15:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:5e:b2:3c:bb:61:76:11:13:f8:fa:72:9e:6e:d6:30:36:72:c7:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C
Validity
Not Before: Feb 28 15:36:16 2026 GMT
Not After : Mar 4 00:15:16 2026 GMT
Subject: CN=132647B19A176EC7FB1B807E55ADAD21A8B7C226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3f:3d:a0:1c:52:70:7c:d8:5e:19:48:5d:a7:
28:a6:2a:84:97:6d:cc:82:ac:cf:57:4b:47:17:82:
4b:f6:63:f7:ba:b8:8d:d5:c7:90:95:01:b7:4a:1d:
81:89:07:4a:77:26:9e:57:e2:cf:06:90:a4:dc:dd:
1a:79:33:d2:bf:78:94:63:b9:1a:e2:4c:73:7f:96:
4c:ba:b9:d0:0d:ea:52:b5:b4:f8:d3:f8:93:31:70:
61:92:e5:bd:3e:4d:0e:d3:dc:a1:ab:e7:03:3f:08:
ba:2f:96:a5:8c:44:15:2d:ca:0d:57:e6:6b:83:dd:
cf:0c:6d:2f:0c:90:f9:92:b0:c6:2e:d3:6f:01:57:
34:03:63:8e:28:77:64:ef:60:3d:07:9f:6a:f2:4d:
de:33:c2:19:bf:15:70:97:ca:20:cf:82:7d:7a:9b:
7b:2f:53:25:b7:7d:5d:39:86:79:35:34:2e:8c:7c:
61:0b:fc:cf:e7:d1:7f:81:9d:ed:08:2d:d7:2a:42:
9d:61:e2:91:1c:d4:d7:2c:fc:e3:87:5b:7c:2c:0a:
ef:80:0e:e6:f1:18:e6:56:6d:2a:68:77:2a:f9:e5:
0a:b9:7d:f8:be:9a:51:87:41:d9:7a:92:9a:51:cc:
0a:9a:7b:1b:5a:79:3b:bb:3f:0d:23:eb:c9:f6:3d:
4c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:26:47:B1:9A:17:6E:C7:FB:1B:80:7E:55:AD:AD:21:A8:B7:C2:26
X509v3 Authority Key Identifier:
keyid:EF:C0:FE:32:8F:7B:86:F9:C6:82:F4:FE:37:36:0C:4E:3A:D9:94:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:95:b3:6e:12:45:85:3e:d3:f4:7b:d1:49:c9:ad:f5:dc:05:
0b:4d:4e:95:af:85:e3:5a:71:0f:2a:94:69:97:79:77:c4:d4:
23:2e:8d:79:2f:a1:e1:bf:3c:4e:0b:d6:37:02:7c:f8:52:65:
a9:16:cc:20:ca:b4:21:b3:5d:88:03:dd:0a:29:87:d7:14:aa:
77:4d:05:e0:06:08:c1:5c:26:f9:21:1e:8a:de:53:d0:fc:ea:
54:dd:4c:8a:01:51:fe:76:2d:d0:92:e6:fa:50:ae:56:f9:c4:
f2:40:45:15:06:3f:79:a4:38:72:77:be:38:a9:aa:ea:24:c0:
c1:37:9a:53:40:91:63:3b:d7:66:28:36:4f:f1:66:65:14:0a:
3b:a7:41:2b:61:79:48:22:12:fc:40:db:cd:ca:05:7d:d2:86:
b7:7b:e3:a9:09:b7:ab:0c:55:28:11:bf:96:ea:5e:57:2a:7b:
e5:44:9a:cd:a1:d9:b1:5a:1c:5e:c3:6e:8a:06:9a:81:c9:4e:
4e:71:5b:d1:f0:ed:eb:72:1e:cc:72:55:56:17:00:5b:28:77:
98:c3:77:ed:d6:27:e5:99:ef:6b:0a:64:e3:c7:20:ef:da:4a:
2a:00:ee:4a:fe:a8:b0:79:3d:82:cc:45:0b:56:b5:84:5f:82:
24:98:92:cf
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUJV6yPLthdhET+Ppynm7WMDZyxzkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUZDMEZFMzI4RjdCODZGOUM2ODJGNEZFMzczNjBDNEUz
QUQ5OTQyQzAeFw0yNjAyMjgxNTM2MTZaFw0yNjAzMDQwMDE1MTZaMDMxMTAvBgNV
BAMTKDEzMjY0N0IxOUExNzZFQzdGQjFCODA3RTU1QURBRDIxQThCN0MyMjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCPz2gHFJwfNheGUhdpyimKoSX
bcyCrM9XS0cXgkv2Y/e6uI3Vx5CVAbdKHYGJB0p3Jp5X4s8GkKTc3Rp5M9K/eJRj
uRriTHN/lky6udAN6lK1tPjT+JMxcGGS5b0+TQ7T3KGr5wM/CLovlqWMRBUtyg1X
5muD3c8MbS8MkPmSsMYu028BVzQDY44od2TvYD0Hn2ryTd4zwhm/FXCXyiDPgn16
m3svUyW3fV05hnk1NC6MfGEL/M/n0X+Bne0ILdcqQp1h4pEc1Ncs/OOHW3wsCu+A
DubxGOZWbSpodyr55Qq5ffi+mlGHQdl6kppRzAqaextaeTu7Pw0j68n2PUwrAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUEyZHsZoXbsf7G4B+Va2tIai3wiYwHwYDVR0j
BBgwFoAU78D+Mo97hvnGgvT+NzYMTjrZlCwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
ODNlZDdhYi0xYWM5LTRmNDItYWNkZC01MzU1N2FjN2IzZjMvMC9FRkMwRkUzMjhG
N0I4NkY5QzY4MkY0RkUzNzM2MEM0RTNBRDk5NDJDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRUZDMEZFMzI4RjdCODZGOUM2ODJGNEZFMzczNjBDNEUzQUQ5
OTQyQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzgzZWQ3YWItMWFjOS00ZjQyLWFj
ZGQtNTM1NTdhYzdiM2YzLzAvRUZDMEZFMzI4RjdCODZGOUM2ODJGNEZFMzczNjBD
NEUzQUQ5OTQyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGyVs24SRYU+0/R70UnJrfXcBQtNTpWvheNa
cQ8qlGmXeXfE1CMujXkvoeG/PE4L1jcCfPhSZakWzCDKtCGzXYgD3Qoph9cUqndN
BeAGCMFcJvkhHoreU9D86lTdTIoBUf52LdCS5vpQrlb5xPJARRUGP3mkOHJ3vjip
quokwME3mlNAkWM712YoNk/xZmUUCjunQStheUgiEvxA283KBX3Shrd746kJt6sM
VSgRv5bqXlcqe+VEms2h2bFaHF7DbooGmoHJTk5xW9Hw7etyHsxyVVYXAFsod5jD
d+3WJ+WZ72sKZOPHIO/aSioA7kr+qLB5PYLMRQtWtYRfgiSYks8=
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:26:28 2026 by rpki-client