
$ rpki-client -vvf repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.mft
File: EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.mft (raw, json)
Hash identifier: f8igz9gVLK7KcT/eIb2PyLNCTUul9PRFhYUuBKD2QIs=
Subject key identifier: 32:10:16:21:8E:56:D6:08:15:E3:93:B4:01:04:33:6B:92:7C:1C:F1
Authority key identifier: EF:7C:A8:2C:5B:45:FD:41:2D:E8:92:CB:6D:A7:A8:CA:15:C8:5B:17
Certificate issuer: /CN=EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17
Certificate serial: 45DF19E4C311CF15BC565327F05F6E98035BFB3B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.mft
Manifest number: E4
Signing time: Mon 03 Nov 2025 05:31:19 +0000
Manifest this update: Mon 03 Nov 2025 05:26:19 +0000
Manifest next update: Thu 06 Nov 2025 05:32:19 +0000
Files and hashes: 1: EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.crl (hash: ww/XSZf8ACkuMJMTSbUC2j6BhxraurLkk6fnSKqyZRo=)
2: 3135372e36362e38362e302f32332d3234203d3e20313532343432.roa (hash: yvjq0+mX9UVVGH4hrgAy0kHkjD5STbq2ZndxXPg4Qok=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.crl
rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 06 Nov 2025 05:32:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:df:19:e4:c3:11:cf:15:bc:56:53:27:f0:5f:6e:98:03:5b:fb:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17
Validity
Not Before: Nov 3 05:26:19 2025 GMT
Not After : Nov 6 05:32:19 2025 GMT
Subject: CN=321016218E56D60815E393B40104336B927C1CF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:85:de:36:fe:35:21:39:e9:5b:83:5a:0e:0b:
95:c1:47:ab:6c:46:67:bd:27:45:41:e4:7e:58:d0:
54:a1:79:4b:aa:a5:44:02:34:77:46:00:71:94:df:
9c:97:97:9d:3c:bd:9a:69:48:6a:6d:da:50:92:16:
b6:6a:12:3e:5c:ec:46:5b:47:7b:81:fc:0a:18:b6:
60:f9:07:a6:e2:a8:3f:7c:28:dc:47:9c:2c:76:cd:
aa:c0:c8:84:73:58:2c:82:73:28:56:2d:48:4a:d0:
2b:a5:4b:2c:d7:9c:c9:67:87:00:d3:a5:b5:65:15:
2b:b4:f1:95:11:26:30:94:0e:50:d8:31:95:58:b4:
e5:bf:b5:ea:33:fb:cb:ce:6e:d4:73:07:09:91:29:
8c:6f:c7:1b:57:fb:9c:8b:41:aa:fa:8b:f9:a0:5b:
1e:05:a5:d7:e0:c2:24:17:97:d5:52:13:24:2a:68:
27:53:d7:86:94:d4:6a:96:39:98:8f:d2:80:ba:83:
29:2b:f9:0d:ba:1e:25:ff:39:a2:dd:6e:83:47:84:
92:c6:dc:bd:ee:58:5a:12:ac:01:ff:87:04:3a:c8:
9f:a8:b6:13:a5:17:0d:16:34:5c:d3:2b:13:0c:5c:
0f:74:cb:54:66:32:09:30:f3:23:d8:a6:2f:b3:56:
3d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:10:16:21:8E:56:D6:08:15:E3:93:B4:01:04:33:6B:92:7C:1C:F1
X509v3 Authority Key Identifier:
keyid:EF:7C:A8:2C:5B:45:FD:41:2D:E8:92:CB:6D:A7:A8:CA:15:C8:5B:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:34:ff:e6:f8:50:e1:ff:f7:99:2a:30:31:c0:67:85:95:a3:
ae:72:95:91:fa:b1:45:55:f1:f5:7b:fa:03:e4:fc:03:43:5a:
db:e9:fc:00:59:5f:66:65:f7:3f:d3:0f:f3:0b:e8:cf:24:bf:
cc:e7:1d:20:20:c9:7f:6c:87:3e:bd:d2:55:e4:e4:34:ea:c4:
b7:00:a0:bd:a7:19:0d:05:3e:93:d4:e0:a7:2d:dd:71:da:42:
a9:2f:d6:2f:14:d6:e8:9a:bc:98:63:b8:15:3d:a4:7d:bc:88:
a6:1d:67:90:d7:33:43:6b:f3:77:27:0c:21:1e:44:d7:54:00:
d8:f2:a8:d5:3d:c4:17:50:67:0c:d0:d6:21:04:b0:49:7c:1f:
c7:2a:04:3b:47:3c:96:1a:02:2d:bf:5a:c8:ee:7a:fe:76:f2:
1a:11:67:c9:4a:7d:0b:71:27:16:54:05:f6:62:ac:67:02:8e:
bd:23:bb:ca:af:fa:3e:65:cb:2a:6d:0f:07:b7:86:d0:e3:31:
b3:06:2b:0a:91:3f:3b:52:34:91:61:c8:75:ee:ce:75:43:6d:
4c:ac:7c:0d:47:d0:64:e4:91:01:d0:c7:91:dc:6a:66:0b:8a:
bf:d6:4c:2f:5d:4c:dc:94:b4:c0:30:5a:64:88:21:0e:48:e2:
86:31:ec:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:57:46 2025 by rpki-client