
$ rpki-client -vvf repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.mft
File: EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.mft (raw, json)
Hash identifier: nyPYdzwd7sLi9Xf27WokRcN4icJIBTNsme1mOuMwn0U=
Subject key identifier: 46:D5:06:11:A0:0D:F8:CB:78:A9:AD:CB:3E:52:1F:65:94:1B:7A:65
Authority key identifier: EF:7C:A8:2C:5B:45:FD:41:2D:E8:92:CB:6D:A7:A8:CA:15:C8:5B:17
Certificate issuer: /CN=EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17
Certificate serial: 0E5B254C783AC89F4C04450921AD377BE1DA23B0
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.mft
Manifest number: 012E
Signing time: Fri 17 Apr 2026 05:05:26 +0000
Manifest this update: Fri 17 Apr 2026 05:00:26 +0000
Manifest next update: Mon 20 Apr 2026 13:42:26 +0000
Files and hashes: 1: 3135372e36362e38362e302f32332d3234203d3e20313532343432.roa (hash: ZVc9p/U56xmweGNg2iRKqjXHoLDT3sF+Khe2VVD4xyg=)
2: EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.crl (hash: bCDYmdbkut/sqbSbnTI/uYq6dC1wu5WPCv7GoR/bFXk=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.crl
rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 13:42:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:5b:25:4c:78:3a:c8:9f:4c:04:45:09:21:ad:37:7b:e1:da:23:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17
Validity
Not Before: Apr 17 05:00:26 2026 GMT
Not After : Apr 20 13:42:26 2026 GMT
Subject: CN=46D50611A00DF8CB78A9ADCB3E521F65941B7A65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a9:47:24:fd:ad:a3:79:ea:f2:c9:7a:30:db:
e5:59:82:11:ed:f5:ab:c0:d0:03:29:d7:0f:1b:f3:
52:5b:56:a9:b4:d0:30:8c:c9:d8:9f:ae:7a:96:d0:
57:11:7b:28:93:82:ca:ec:6c:36:55:84:87:dc:df:
35:a7:64:27:a9:90:67:a0:d5:d0:08:09:7b:e4:24:
28:9c:eb:a6:7e:77:35:f8:f4:2e:46:77:f6:e4:8a:
76:0c:a2:56:26:3e:97:72:8e:e0:da:7f:91:16:dd:
01:43:0d:8e:fa:2e:e8:af:26:b4:74:57:66:0a:19:
43:f0:ca:ba:2a:d9:d3:78:23:7c:b2:2e:e4:25:bd:
44:f1:93:d9:e9:65:7b:e2:5b:f9:44:74:a1:76:01:
9f:35:9c:ea:98:f7:f5:86:2e:7b:66:5a:0d:fe:82:
5d:34:2e:4a:fc:0b:da:38:01:e5:47:f5:7e:61:e6:
e8:db:ea:5d:f6:2b:3b:a4:27:f8:26:63:dc:57:c3:
ec:69:07:4f:6a:a9:13:97:6c:08:79:30:db:5d:f4:
7e:66:db:4a:91:7a:af:79:3d:b1:7b:77:1b:93:71:
9e:e5:64:e6:4b:ae:6a:7a:bf:84:c4:2a:de:ce:f2:
10:e2:51:cf:9c:cb:1e:f2:94:ad:b7:02:93:c0:ff:
d2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:D5:06:11:A0:0D:F8:CB:78:A9:AD:CB:3E:52:1F:65:94:1B:7A:65
X509v3 Authority Key Identifier:
keyid:EF:7C:A8:2C:5B:45:FD:41:2D:E8:92:CB:6D:A7:A8:CA:15:C8:5B:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:fd:d1:17:87:a1:24:5d:e9:90:d2:5a:f9:18:15:8b:e7:81:
97:c3:f3:37:0b:9a:eb:96:84:dc:cf:28:78:6a:29:63:aa:e2:
0a:ad:24:a0:bc:d9:51:95:5d:d2:c7:27:10:b5:08:fb:f8:d9:
e9:6a:eb:9d:a4:2a:53:d1:d4:09:d9:40:92:dc:8e:2a:42:1a:
0e:67:84:6c:47:d5:3c:b9:83:75:d2:82:29:16:f3:7d:85:2b:
a5:81:ef:0a:ff:34:d2:bd:53:ad:37:61:cc:95:b7:48:17:aa:
c9:1a:11:a4:56:44:ce:f2:1f:44:d4:89:08:78:bc:5f:18:ca:
93:14:e7:10:2a:ba:29:fb:6f:f6:81:73:49:de:c9:c9:72:d5:
a9:e4:33:6c:c2:fe:7b:db:3c:91:e5:61:d6:0b:55:e5:03:e5:
07:79:dc:0c:ae:ec:3c:53:6e:55:02:9f:79:54:b0:00:d9:6c:
18:ab:20:80:65:28:61:5b:90:30:20:4a:5a:75:0c:75:67:7f:
e7:92:cc:41:3f:94:cf:23:b2:20:1f:af:73:ef:70:58:a8:79:
78:c8:09:84:bc:01:85:6e:0d:84:b3:80:f1:33:5e:6e:b1:56:
1d:6d:0f:99:c3:4e:30:55:13:f1:63:23:ad:2c:db:b6:70:94:
d9:b4:c6:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:27:14 2026 by rpki-client