
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/EF44D1A95206A20CB3AB52607DC981EEC1AA8744.mft
File: EF44D1A95206A20CB3AB52607DC981EEC1AA8744.mft (raw, json)
Hash identifier: EGMUQ3Z0xgbhrkmXsqAQVjbxDu6OZIlZFDZGSa+3/ZY=
Subject key identifier: A5:07:17:ED:78:0F:63:DD:D9:48:23:B0:B5:CF:33:69:C5:4F:2F:9F
Authority key identifier: EF:44:D1:A9:52:06:A2:0C:B3:AB:52:60:7D:C9:81:EE:C1:AA:87:44
Certificate issuer: /CN=EF44D1A95206A20CB3AB52607DC981EEC1AA8744
Certificate serial: 62CBD51B806AC94B54E5290E501F7F42ADBBF4D3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF44D1A95206A20CB3AB52607DC981EEC1AA8744.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/EF44D1A95206A20CB3AB52607DC981EEC1AA8744.mft
Manifest number: BC
Signing time: Sun 20 Sep 2026 04:48:06 +0000
Manifest this update: Sun 20 Sep 2026 04:43:06 +0000
Manifest next update: Mon 21 Sep 2026 07:31:06 +0000
Files and hashes: 1: 3130332e33392e37342e302f32332d3234203d3e20313530323732.roa (hash: BnM/pd6T0nNd5d7QI+jI59NRWk0b0EsbuiWKkA+Hh+0=)
2: EF44D1A95206A20CB3AB52607DC981EEC1AA8744.crl (hash: OT6sNs/nbBGXo/zy22VPsmTrrtk7hYg7MH/VFI4nirY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/EF44D1A95206A20CB3AB52607DC981EEC1AA8744.crl
rsync://rpki-rsync.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/EF44D1A95206A20CB3AB52607DC981EEC1AA8744.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF44D1A95206A20CB3AB52607DC981EEC1AA8744.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 21 Sep 2026 07:31:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:cb:d5:1b:80:6a:c9:4b:54:e5:29:0e:50:1f:7f:42:ad:bb:f4:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EF44D1A95206A20CB3AB52607DC981EEC1AA8744
Validity
Not Before: Sep 20 04:43:06 2026 GMT
Not After : Sep 21 07:31:06 2026 GMT
Subject: CN=A50717ED780F63DDD94823B0B5CF3369C54F2F9F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:85:8b:8b:ab:44:9c:8b:b1:86:1c:df:3e:ab:
f0:95:b9:2c:4f:00:ff:0f:54:a4:14:d2:91:72:1a:
6b:82:a4:91:e4:f2:6c:0e:9b:3c:88:99:92:03:0a:
c2:37:50:3b:43:59:d5:58:0f:42:d9:09:f2:6b:64:
00:e0:ce:c9:c6:06:e5:11:38:eb:1d:75:32:20:e3:
30:24:ea:ac:ca:b0:ef:d4:27:11:aa:66:18:4b:a3:
07:78:d7:23:cd:b0:9c:01:a0:25:74:ae:f6:4a:df:
8a:d2:a7:d6:3c:4c:f4:b6:59:7a:be:91:81:7c:b9:
1a:e6:f0:4d:5b:8a:ca:4d:9a:8f:c1:9a:e8:b5:79:
12:4d:ae:0a:c4:54:56:b7:bf:92:2e:7d:a5:9d:bc:
40:41:c6:e8:7c:b7:65:61:7d:3e:c6:62:9c:2b:30:
95:58:8f:99:94:02:9d:39:f7:4b:a5:4a:97:7d:45:
78:e6:39:d2:ff:06:d5:44:c0:a1:f4:5d:00:d8:65:
38:75:19:90:aa:3d:7f:9d:3f:fe:b1:a1:bb:3b:d0:
2e:03:7e:68:57:48:5f:a4:61:5d:d7:f5:aa:2b:c3:
48:d3:3e:5b:40:df:bf:c8:49:f0:08:db:0b:a3:4f:
31:47:07:19:5e:97:1d:c7:d0:66:98:22:63:f4:7b:
19:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:07:17:ED:78:0F:63:DD:D9:48:23:B0:B5:CF:33:69:C5:4F:2F:9F
X509v3 Authority Key Identifier:
keyid:EF:44:D1:A9:52:06:A2:0C:B3:AB:52:60:7D:C9:81:EE:C1:AA:87:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/EF44D1A95206A20CB3AB52607DC981EEC1AA8744.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF44D1A95206A20CB3AB52607DC981EEC1AA8744.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/EF44D1A95206A20CB3AB52607DC981EEC1AA8744.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:da:dd:26:f6:cf:5d:9f:ad:b6:38:cc:8c:dc:52:9d:40:af:
41:c4:7e:77:c8:48:b1:d3:48:be:9a:42:a0:d1:23:3d:4b:56:
1c:9c:f9:c5:7b:86:22:b9:14:49:c8:b4:99:62:96:c0:bb:32:
f7:28:cb:e3:50:e6:5f:30:37:7d:bf:ff:3f:f4:be:4d:95:cd:
9a:b3:94:46:a3:b5:bd:b0:3e:0e:b1:3f:ee:a2:26:40:d3:08:
95:56:10:93:01:f6:68:88:88:53:b8:b9:8e:2c:4d:d0:b1:41:
f0:75:80:e4:df:e1:4f:00:a6:22:42:a9:c5:33:4e:97:ad:3b:
a8:f2:54:d1:a3:78:ac:38:76:84:47:7d:8e:a7:69:ae:a8:66:
81:1c:2b:c9:a6:4a:64:21:b6:11:e0:04:3a:dd:c5:69:84:1d:
04:15:22:fd:d5:fb:1d:6a:0d:36:dd:b4:dc:93:89:fb:b2:0c:
42:0c:18:9e:b2:8f:a9:74:6e:f8:9e:71:06:f6:73:d2:18:da:
e0:83:13:6c:0b:e5:b8:cf:e1:82:e8:0d:67:a2:83:b9:b3:1d:
77:ac:b2:95:11:2e:6c:3e:a4:93:66:96:cc:d7:f6:cf:f1:74:
8d:c7:52:ef:d1:fa:86:57:0c:7d:c0:9e:41:1d:4c:a8:b5:5b:
5e:c1:5e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 17:58:10 2026 by rpki-client