
$ rpki-client -vvf rpki-rsync.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7.mft
File: EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7.mft (raw, json)
Hash identifier: o2BoMs3XbOB/k2WLp4B62o0YoTmCXc4hEgKoL7sZIzQ=
Subject key identifier: 0D:D7:55:EB:6B:27:47:D6:C6:34:B8:52:04:E1:83:74:22:14:0B:7C
Authority key identifier: EF:FE:71:94:4C:D7:DF:CA:7F:BD:C6:EF:06:3C:9A:6D:28:BB:47:E7
Certificate issuer: /CN=EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7
Certificate serial: 1D7792B3775715A6C5F892DC91F214042CD7E672
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7.mft
Manifest number: 3E
Signing time: Wed 17 Jun 2026 10:35:52 +0000
Manifest this update: Wed 17 Jun 2026 10:30:52 +0000
Manifest next update: Thu 18 Jun 2026 11:21:52 +0000
Files and hashes: 1: 3130332e3134352e3132352e302f32342d3234203d3e20313339343437.roa (hash: iAkXuDNDYQX7aJrJUqwReqIZ7fKNDXS9mw/520ZULDA=)
2: EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7.crl (hash: W1dHASIORFaemkn/JX20paOAwhBAT/ikEYTA7xVCt0g=)
3: 323030313a6466323a313238303a3a2f34382d3438203d3e20313339343437.roa (hash: Z33O96f3Xi269FHR6g3ynqUeqpUoR3vjVRTvXK+PrwU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7.crl
rsync://rpki-rsync.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:77:92:b3:77:57:15:a6:c5:f8:92:dc:91:f2:14:04:2c:d7:e6:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7
Validity
Not Before: Jun 17 10:30:52 2026 GMT
Not After : Jun 18 11:21:52 2026 GMT
Subject: CN=0DD755EB6B2747D6C634B85204E1837422140B7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:55:c0:3c:f6:eb:ce:a6:80:29:28:83:13:dd:
24:e9:0c:d3:21:ba:9e:5a:75:28:f7:52:f0:b3:61:
61:4e:2d:f9:c9:c7:4d:2b:c1:ce:e3:a9:1f:09:c2:
d3:5a:0f:2c:81:e8:98:7c:df:2d:05:5d:74:a2:e7:
50:3b:cc:73:a3:93:51:4d:9a:d2:85:74:a4:ac:c7:
42:d5:f5:f7:50:db:2b:52:a8:90:be:48:ee:41:89:
c4:a2:ad:4c:c7:1d:93:41:79:3b:13:5c:71:78:a9:
ec:49:6f:b6:3f:a5:d1:2f:a8:99:bf:5d:a9:8a:90:
94:a8:88:e9:4e:02:3a:58:50:ec:07:23:08:3f:3d:
48:50:09:bb:a1:a1:c8:95:a7:3c:66:c4:6b:c4:da:
eb:e9:c3:af:d8:9d:42:f6:12:ea:cf:d5:70:d9:82:
36:75:ad:6f:16:a0:a8:e4:f9:bc:23:e5:ea:2f:19:
fd:e4:6d:b6:65:69:0f:89:67:93:79:25:4e:bc:c1:
e8:85:b1:6d:0f:42:7d:bc:11:72:2d:46:d5:40:4f:
79:85:7c:bd:dd:b9:46:45:64:e7:52:06:e2:ee:79:
8b:00:3d:b9:d9:ec:02:f0:e1:aa:a8:bb:cf:e1:10:
c9:05:8a:30:6c:e2:cd:cf:46:7e:d7:de:c1:40:1e:
26:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:D7:55:EB:6B:27:47:D6:C6:34:B8:52:04:E1:83:74:22:14:0B:7C
X509v3 Authority Key Identifier:
keyid:EF:FE:71:94:4C:D7:DF:CA:7F:BD:C6:EF:06:3C:9A:6D:28:BB:47:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:1e:f0:81:30:59:c6:0e:59:12:b8:10:01:03:83:6d:f8:fd:
fd:30:13:97:63:5c:07:54:18:81:9e:7a:a5:c0:45:9e:d6:7f:
b1:b8:06:55:ea:b7:e7:1f:ca:0e:8e:0e:d2:9d:57:05:b1:f0:
84:eb:84:16:8b:60:20:d3:6b:15:6d:ca:0a:1f:a5:05:84:4b:
68:45:31:0c:05:50:69:ca:79:93:6b:01:f3:af:f8:f1:35:7e:
42:31:1b:50:37:64:89:ea:98:00:8e:c4:d2:d7:63:ae:54:db:
d5:34:89:a1:01:e3:a6:08:ae:92:f6:bc:50:87:8e:62:08:8c:
64:fd:7c:d7:29:05:f5:7f:02:d6:4e:f7:45:5e:59:e2:e3:17:
cd:b5:7c:90:01:45:f0:10:df:4c:69:c9:27:55:30:2d:25:92:
25:d4:16:48:c9:69:b6:41:5a:ae:5c:22:56:48:5a:cd:24:69:
d9:de:d4:f4:8c:88:5a:30:4b:34:d8:9e:65:6f:9d:fd:74:9b:
f1:ca:6a:b8:91:6b:15:df:dc:34:9f:94:50:b0:bb:e5:bc:33:
d7:4a:01:d2:0f:16:21:8d:ce:8f:72:70:a1:31:23:04:b4:76:
49:94:66:56:13:80:fe:23:89:a8:90:47:c5:91:c8:2e:4e:24:
89:fa:04:f3
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUHXeSs3dXFabF+JLckfIUBCzX5nIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUZGRTcxOTQ0Q0Q3REZDQTdGQkRDNkVGMDYzQzlBNkQy
OEJCNDdFNzAeFw0yNjA2MTcxMDMwNTJaFw0yNjA2MTgxMTIxNTJaMDMxMTAvBgNV
BAMTKDBERDc1NUVCNkIyNzQ3RDZDNjM0Qjg1MjA0RTE4Mzc0MjIxNDBCN0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1VcA89uvOpoApKIMT3STpDNMh
up5adSj3UvCzYWFOLfnJx00rwc7jqR8JwtNaDyyB6Jh83y0FXXSi51A7zHOjk1FN
mtKFdKSsx0LV9fdQ2ytSqJC+SO5BicSirUzHHZNBeTsTXHF4qexJb7Y/pdEvqJm/
XamKkJSoiOlOAjpYUOwHIwg/PUhQCbuhociVpzxmxGvE2uvpw6/YnUL2EurP1XDZ
gjZ1rW8WoKjk+bwj5eovGf3kbbZlaQ+JZ5N5JU68weiFsW0PQn28EXItRtVAT3mF
fL3duUZFZOdSBuLueYsAPbnZ7ALw4aqou8/hEMkFijBs4s3PRn7X3sFAHiYbAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUDddV62snR9bGNLhSBOGDdCIUC3wwHwYDVR0j
BBgwFoAU7/5xlEzX38p/vcbvBjyabSi7R+cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MDU3ZDRkODEtM2JlOC00MjMwLTg5NTktMmRjMmFmOWQwODVlLzAvRUZGRTcxOTQ0
Q0Q3REZDQTdGQkRDNkVGMDYzQzlBNkQyOEJCNDdFNy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FRkZFNzE5NDRDRDdERkNBN0ZCREM2RUYwNjNDOUE2RDI4QkI0
N0U3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDU3ZDRkODEtM2JlOC00MjMwLTg5
NTktMmRjMmFmOWQwODVlLzAvRUZGRTcxOTQ0Q0Q3REZDQTdGQkRDNkVGMDYzQzlB
NkQyOEJCNDdFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHoe8IEwWcYOWRK4EAEDg234/f0wE5djXAdU
GIGeeqXARZ7Wf7G4BlXqt+cfyg6ODtKdVwWx8ITrhBaLYCDTaxVtygofpQWES2hF
MQwFUGnKeZNrAfOv+PE1fkIxG1A3ZInqmACOxNLXY65U29U0iaEB46YIrpL2vFCH
jmIIjGT9fNcpBfV/AtZO90VeWeLjF821fJABRfAQ30xpySdVMC0lkiXUFkjJabZB
Wq5cIlZIWs0kadne1PSMiFowSzTYnmVvnf10m/HKariRaxXf3DSflFCwu+W8M9dK
AdIPFiGNzo9ycKExIwS0dkmUZlYTgP4jiaiQR8WRyC5OJIn6BPM=
-----END CERTIFICATE-----
Generated at Wed Jun 17 13:03:04 2026 by rpki-client