
$ rpki-client -vvf rpki-rsync.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.mft
File: F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.mft (raw, json)
Hash identifier: Db58kFfp2/jv/p5HMR3q7SItXHQrDCONt60miW1/QWA=
Subject key identifier: 24:60:B8:2C:6D:3F:1C:70:2A:CF:08:0A:27:00:03:A7:84:60:68:3F
Authority key identifier: F8:EF:3E:E5:71:B0:E5:52:13:2B:2C:6A:BA:30:EF:81:6A:04:43:BB
Certificate issuer: /CN=F8EF3EE571B0E552132B2C6ABA30EF816A0443BB
Certificate serial: 28247D3E56B63A76F572255DF9594E1D011803EB
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.mft
Manifest number: 3E
Signing time: Tue 16 Jun 2026 22:21:16 +0000
Manifest this update: Tue 16 Jun 2026 22:16:16 +0000
Manifest next update: Thu 18 Jun 2026 00:33:16 +0000
Files and hashes: 1: F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.crl (hash: U9xrnOnBR//Ysp6WcD3itqDPodGagIgvU/IluV75h2Q=)
2: 323430373a363338303a3a2f33322d3430203d3e20313331373133.roa (hash: wGUQKy4FIVL/pJvzv4ocXf6nJRNeroqTQeM/u7L/DBg=)
3: 3130332e392e3134342e302f32322d3234203d3e20313331373133.roa (hash: 4SizHs7Y7jbN84W7yqURK/C+aTckSwx11cvn67uUtqg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.crl
rsync://rpki-rsync.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 00:33:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:24:7d:3e:56:b6:3a:76:f5:72:25:5d:f9:59:4e:1d:01:18:03:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F8EF3EE571B0E552132B2C6ABA30EF816A0443BB
Validity
Not Before: Jun 16 22:16:16 2026 GMT
Not After : Jun 18 00:33:16 2026 GMT
Subject: CN=2460B82C6D3F1C702ACF080A270003A78460683F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:de:cd:db:b1:73:96:34:f8:27:95:cb:40:80:
31:28:73:8e:8d:06:fe:e0:de:1c:bf:3e:a1:3e:14:
bd:1d:be:ae:59:f4:2f:55:1b:70:dd:a0:5f:ba:59:
59:06:f8:07:ca:91:cc:61:de:7b:4c:fe:53:08:e1:
80:82:ec:ab:b1:e1:4f:99:bf:ff:25:21:7e:07:9e:
4f:61:b7:b9:d7:59:11:25:cf:89:e2:b7:ae:04:ce:
55:3a:18:8e:3a:96:89:98:43:67:83:6a:57:4e:77:
b1:af:41:4d:82:23:a2:8a:1e:9e:40:f9:6e:67:2b:
c8:0c:3e:8e:55:88:06:e5:36:ee:88:45:c3:ee:31:
30:39:e9:c8:4d:ea:37:45:d4:7b:4e:24:98:ed:ff:
5d:f4:a6:61:b6:69:e1:c2:c0:0d:fb:c9:cc:75:f2:
3d:6b:c9:04:e5:ff:d1:13:29:69:05:ac:e3:ce:41:
35:34:46:39:8a:17:68:f8:7f:03:f4:d3:6d:bc:b4:
e5:6e:65:d5:90:ef:9f:2c:86:42:52:17:ea:2b:f6:
2c:87:5f:88:28:0b:70:33:b5:32:8d:9f:5e:73:ee:
64:fd:f1:8d:b6:80:77:06:80:cb:27:9c:23:a2:79:
f7:68:63:5d:71:d6:0e:78:55:7b:f8:8e:b5:69:1c:
0f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:60:B8:2C:6D:3F:1C:70:2A:CF:08:0A:27:00:03:A7:84:60:68:3F
X509v3 Authority Key Identifier:
keyid:F8:EF:3E:E5:71:B0:E5:52:13:2B:2C:6A:BA:30:EF:81:6A:04:43:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:eb:c6:95:f4:0a:b3:0e:09:9f:a3:5d:5e:8d:1e:8f:ca:3d:
04:d0:0a:7c:26:9f:51:c6:f6:7b:48:d7:29:a5:fb:e4:dc:a1:
f0:08:63:80:89:37:29:48:42:d2:0f:ca:8f:50:f2:bd:3c:b5:
7f:bf:c4:b0:7a:9f:30:f1:b2:3c:88:95:6a:72:0c:b9:d1:21:
7c:bb:3a:84:61:30:79:c6:2f:85:ee:e2:37:f6:41:12:8d:62:
52:6a:02:13:5c:da:39:e0:18:bb:18:50:a4:ab:ef:49:5b:51:
46:72:3d:25:9e:19:af:ff:bd:bd:e8:ca:41:50:17:cb:f7:99:
16:dc:21:19:d3:69:69:ce:52:c1:75:33:a2:b5:bf:0e:e3:c8:
de:09:5e:04:e0:e0:5c:80:44:fa:5f:cf:3f:4f:2e:0d:77:f9:
1b:c4:6c:7e:bc:c2:f0:e4:17:c1:4c:13:3d:33:4e:b1:61:3d:
cd:89:78:35:79:6f:91:7e:b3:86:15:3a:4e:b4:77:74:8f:13:
47:05:63:48:27:82:95:5b:75:dd:ba:86:28:ce:ea:aa:aa:00:
06:3c:11:c4:3f:90:a1:67:10:e8:12:8a:04:59:20:ac:bb:b9:
a5:9e:43:44:8c:d3:84:f4:58:12:6d:96:bb:8b:b4:2d:a5:ed:
c1:d6:70:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:30:22 2026 by rpki-client