
$ rpki-client -vvf repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.mft
File: EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.mft (raw, json)
Hash identifier: h+MGwF+YNzg1Nw+OxvK+8gCuGkQjJ2Rm5TQQQEMqaN4=
Subject key identifier: 68:E1:03:EE:E7:31:3B:8B:A8:F3:E9:85:F2:F2:61:7F:9B:9B:FB:23
Authority key identifier: EF:C0:FE:32:8F:7B:86:F9:C6:82:F4:FE:37:36:0C:4E:3A:D9:94:2C
Certificate issuer: /CN=EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C
Certificate serial: 18ABDAEA642E98FB7547920993E53D64B234B185
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.mft
Manifest number: 04F6
Signing time: Fri 17 Apr 2026 16:01:19 +0000
Manifest this update: Fri 17 Apr 2026 15:56:19 +0000
Manifest next update: Mon 20 Apr 2026 17:40:19 +0000
Files and hashes: 1: 3130332e3135332e3132372e302f32342d3234203d3e20313338303839.roa (hash: KdIUSWjYk6G6khIi44dRxNIcc82FtwrOj3DoMvqmaNE=)
2: EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.crl (hash: NVPAV666kYzLMwRU54bXhxk2pevZ7j5QDNOJHHGWLBQ=)
3: 323430363a343463303a3a2f33322d3438203d3e20313430343632.roa (hash: LyQVOVVD0SyWAzKbbigEAOPOxnvDfTq86SNZAm/SmRY=)
4: 3130332e3135332e3132362e302f32342d3234203d3e20313430343632.roa (hash: T6Hicz2H8CuNDpKjhaA17WaIW/oy1qNlEePPsSxqMqI=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.crl
rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 17:40:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:ab:da:ea:64:2e:98:fb:75:47:92:09:93:e5:3d:64:b2:34:b1:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C
Validity
Not Before: Apr 17 15:56:19 2026 GMT
Not After : Apr 20 17:40:19 2026 GMT
Subject: CN=68E103EEE7313B8BA8F3E985F2F2617F9B9BFB23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cb:b5:37:c4:9f:97:d7:33:49:e9:6b:0c:0e:
ac:2b:a1:5c:cd:7a:81:c3:3b:e4:cc:7a:cb:eb:14:
15:61:35:0b:a2:ec:21:ff:b6:d9:e9:aa:68:b6:bd:
f9:60:3a:f5:30:39:d8:73:a9:a3:01:d2:59:b2:1f:
33:98:66:cc:30:8d:30:10:5d:3c:ec:ac:fc:7b:86:
80:15:98:f4:b1:a4:3b:84:52:6e:1c:2b:aa:77:3c:
8c:72:f4:5c:e4:38:ce:c5:e6:37:b1:e1:cd:cf:08:
4f:2c:86:98:12:c3:76:b4:d0:0b:23:ce:e7:80:7d:
df:4b:8a:3a:eb:8a:62:e7:82:0e:b3:91:3f:c9:b5:
2f:12:90:e5:3b:6a:01:2f:03:c5:03:03:13:f0:d8:
e0:a8:23:6b:d3:e6:ae:a3:9e:78:76:8f:d4:fb:6e:
d8:d7:fb:8b:53:e2:40:96:a1:71:fb:1a:54:f1:87:
2c:8e:1b:63:0c:d0:89:26:1c:1e:6a:39:44:ed:20:
2e:dd:e5:11:01:ae:21:3f:1d:1c:31:71:14:e5:d4:
44:ad:94:31:70:ff:11:1c:fe:b0:81:b5:b0:3a:99:
d2:ca:1e:1c:8a:3b:46:2f:e8:33:06:af:55:3d:58:
8f:b7:9e:4d:62:cc:63:32:e9:75:d2:63:3e:6b:9f:
d0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:E1:03:EE:E7:31:3B:8B:A8:F3:E9:85:F2:F2:61:7F:9B:9B:FB:23
X509v3 Authority Key Identifier:
keyid:EF:C0:FE:32:8F:7B:86:F9:C6:82:F4:FE:37:36:0C:4E:3A:D9:94:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:ed:17:ca:b5:e6:ad:b4:e0:e8:b1:ce:7f:ae:dd:72:f8:ea:
30:f8:cc:f6:e0:22:bc:80:5a:75:bd:b7:f9:76:39:aa:1a:9b:
63:a1:99:73:1a:6d:02:3f:be:f5:fb:a5:df:d6:05:40:3c:90:
07:d0:20:01:39:8d:77:e1:11:18:41:46:dc:3d:56:e6:13:94:
bf:9d:7f:eb:ac:98:83:ab:73:97:a7:a1:c3:76:1f:7e:31:47:
6c:1c:1b:bb:00:93:a7:d1:5b:74:32:94:ab:38:cd:00:e7:73:
01:3a:51:03:2d:d1:64:d1:af:9d:76:70:cc:1b:23:bc:c8:eb:
e7:12:2b:1d:14:b6:f6:63:b7:a7:29:9d:45:33:60:76:d8:1c:
74:08:60:19:38:43:80:4e:ee:2b:b7:5b:1c:1c:ba:a9:df:7e:
63:be:f8:64:cc:49:a6:1f:73:09:c2:96:aa:20:e6:55:ac:a6:
6c:60:65:76:c1:ab:9d:da:17:7f:4a:f4:1a:80:84:95:5b:4d:
12:23:5e:25:b6:5b:df:be:6f:d2:77:07:e3:a6:26:19:9d:8f:
82:8f:19:b4:1d:5c:42:2c:c4:49:4f:ce:21:76:94:5a:3f:96:
04:ff:f2:56:fe:6d:fc:17:1b:b3:82:55:1b:08:2f:18:00:14:
8d:14:52:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:59:28 2026 by rpki-client