
$ rpki-client -vvf rpki-rsync.idnic.net/repo/6f6440f6-6f5a-4f4b-a597-e74b543e785b/0/EFDB094B3A4BDDFFAE7A31184633B6D14D8E5F5E.mft
File: EFDB094B3A4BDDFFAE7A31184633B6D14D8E5F5E.mft (raw, json)
Hash identifier: S1obVo+UqI4Xtc3kLqdFsoSbb0M8Leb8aDdyjXG0H+Q=
Subject key identifier: D0:38:A1:E3:DF:B9:35:7A:E3:EC:06:52:34:65:C6:C7:26:26:FA:A5
Authority key identifier: EF:DB:09:4B:3A:4B:DD:FF:AE:7A:31:18:46:33:B6:D1:4D:8E:5F:5E
Certificate issuer: /CN=EFDB094B3A4BDDFFAE7A31184633B6D14D8E5F5E
Certificate serial: 5A836475EBA0C2D95D4BD421E6C277ABFF72194C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFDB094B3A4BDDFFAE7A31184633B6D14D8E5F5E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6f6440f6-6f5a-4f4b-a597-e74b543e785b/0/EFDB094B3A4BDDFFAE7A31184633B6D14D8E5F5E.mft
Manifest number: 39
Signing time: Sat 13 Jun 2026 03:58:56 +0000
Manifest this update: Sat 13 Jun 2026 03:53:56 +0000
Manifest next update: Sun 14 Jun 2026 06:00:56 +0000
Files and hashes: 1: 3130332e3135332e36322e302f32332d3234203d3e20313430343537.roa (hash: BZhn4U/UvZ5+wud72EXtfRQcfjbr1V+Ji6U8Qf15hk4=)
2: EFDB094B3A4BDDFFAE7A31184633B6D14D8E5F5E.crl (hash: AIhrhkIEmW7wWqmkvoHxZl/Oz3xQoP4+rqOnIUy6RII=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6f6440f6-6f5a-4f4b-a597-e74b543e785b/0/EFDB094B3A4BDDFFAE7A31184633B6D14D8E5F5E.crl
rsync://rpki-rsync.idnic.net/repo/6f6440f6-6f5a-4f4b-a597-e74b543e785b/0/EFDB094B3A4BDDFFAE7A31184633B6D14D8E5F5E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFDB094B3A4BDDFFAE7A31184633B6D14D8E5F5E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 06:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:83:64:75:eb:a0:c2:d9:5d:4b:d4:21:e6:c2:77:ab:ff:72:19:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFDB094B3A4BDDFFAE7A31184633B6D14D8E5F5E
Validity
Not Before: Jun 13 03:53:56 2026 GMT
Not After : Jun 14 06:00:56 2026 GMT
Subject: CN=D038A1E3DFB9357AE3EC06523465C6C72626FAA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:27:be:c9:2b:5e:8d:ae:5b:08:ee:c7:02:64:
56:b3:94:a2:e5:2a:83:af:dc:e5:2f:b9:4f:84:11:
bb:11:72:78:46:6a:8e:4f:fd:31:af:1a:f3:df:49:
c1:7a:ac:28:ad:1d:43:55:be:c9:28:4f:39:ec:cd:
08:34:df:83:36:83:86:26:38:44:08:55:22:d6:ad:
9a:f9:66:1b:89:2a:0c:d8:bf:2a:cb:aa:82:86:e1:
6b:73:6c:76:44:72:e6:4c:b4:38:17:05:49:ed:52:
5d:69:b2:aa:39:af:3d:8d:e8:7c:20:16:2c:cb:ee:
37:e0:24:72:da:24:cd:29:07:20:ff:ff:74:f6:d6:
28:23:64:aa:59:ec:e4:f8:4c:68:52:df:81:99:8a:
b9:71:72:a6:a2:9c:5c:72:b3:95:13:14:69:a2:40:
0d:05:91:9b:1a:d2:29:75:e5:bb:e9:64:6d:1d:c4:
ac:4d:d4:6d:bf:d7:0c:61:73:f0:7b:d6:93:fc:63:
77:e2:b1:62:e2:2e:cf:2c:47:3b:3e:d1:91:13:b2:
d2:cf:5f:fb:44:49:ce:31:49:41:66:51:54:c8:a9:
8f:64:ef:cc:bd:25:89:6c:8e:82:1b:d6:ba:ae:17:
f9:da:91:b7:1c:78:90:b2:90:ea:d2:c9:38:ad:f5:
43:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:38:A1:E3:DF:B9:35:7A:E3:EC:06:52:34:65:C6:C7:26:26:FA:A5
X509v3 Authority Key Identifier:
keyid:EF:DB:09:4B:3A:4B:DD:FF:AE:7A:31:18:46:33:B6:D1:4D:8E:5F:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6f6440f6-6f5a-4f4b-a597-e74b543e785b/0/EFDB094B3A4BDDFFAE7A31184633B6D14D8E5F5E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFDB094B3A4BDDFFAE7A31184633B6D14D8E5F5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6f6440f6-6f5a-4f4b-a597-e74b543e785b/0/EFDB094B3A4BDDFFAE7A31184633B6D14D8E5F5E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:bf:1e:e8:b5:62:62:5d:dd:88:7d:26:c6:33:fc:a3:bc:07:
ab:13:63:a5:19:c5:9a:6a:63:51:76:8a:80:a7:61:54:8f:f2:
bb:4b:74:3c:ab:ee:c4:53:5c:b5:ad:ab:87:53:e4:8f:91:05:
3c:69:f1:5d:be:8f:7c:61:27:7f:9d:bc:2b:72:c9:16:cf:62:
02:e9:d1:63:7d:5a:57:44:2b:5c:da:80:e9:2f:59:5a:0d:cc:
6a:f7:ab:d3:52:92:f3:dd:32:b8:3d:c6:c6:41:8f:8c:14:0a:
99:a1:31:dd:0f:2e:57:ae:e5:b1:1d:39:8a:17:d3:60:a3:90:
37:35:ba:e4:58:f1:4c:12:8f:93:1c:4e:4c:8c:e2:3a:17:c8:
de:f1:8a:be:4d:c8:2d:21:04:a5:c1:c0:d9:75:d9:9f:e2:d8:
e5:f0:fe:cb:44:6e:fd:9e:54:d3:36:bf:16:ca:d3:86:44:36:
5e:ca:04:1b:86:66:8d:0a:a4:c7:0d:dd:95:5a:57:04:b0:58:
17:f5:3b:b0:a9:24:89:31:46:e7:74:b0:3c:f3:82:56:e3:87:
c8:2b:6e:95:15:08:b7:c3:40:d2:79:f6:c3:e6:05:8a:2a:41:
75:79:86:a3:ff:71:e9:6f:f5:bb:c4:65:db:57:72:03:0a:07:
4b:cd:ab:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:55:04 2026 by rpki-client