
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/EFBC69859D4CE7D47B71A9D23022FDEA93DF1A02.mft
File: EFBC69859D4CE7D47B71A9D23022FDEA93DF1A02.mft (raw, json)
Hash identifier: WY0Ck8QoiO8GlafIAybUE67ya4qturPvcCtOOcVrWEc=
Subject key identifier: DA:A9:E6:EB:75:11:19:F4:D8:85:6B:00:CC:D0:08:30:E7:F1:32:A9
Authority key identifier: EF:BC:69:85:9D:4C:E7:D4:7B:71:A9:D2:30:22:FD:EA:93:DF:1A:02
Certificate issuer: /CN=EFBC69859D4CE7D47B71A9D23022FDEA93DF1A02
Certificate serial: 58159AFE4FE14AEC9A955017D9DE47183F3459C1
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFBC69859D4CE7D47B71A9D23022FDEA93DF1A02.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/EFBC69859D4CE7D47B71A9D23022FDEA93DF1A02.mft
Manifest number: 3E
Signing time: Wed 17 Jun 2026 07:16:39 +0000
Manifest this update: Wed 17 Jun 2026 07:11:39 +0000
Manifest next update: Thu 18 Jun 2026 11:00:39 +0000
Files and hashes: 1: EFBC69859D4CE7D47B71A9D23022FDEA93DF1A02.crl (hash: a5j3CO39T/3/sRJcTr1AQhXZ8rrKF+ZoqYOk8fV6miU=)
2: 3130332e3135362e37342e302f32332d3234203d3e20313431303832.roa (hash: wEHPqNpq5E7BaSWEXPsPlsqnHz7+5ItTw/UwUrelTsw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/EFBC69859D4CE7D47B71A9D23022FDEA93DF1A02.crl
rsync://rpki-rsync.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/EFBC69859D4CE7D47B71A9D23022FDEA93DF1A02.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFBC69859D4CE7D47B71A9D23022FDEA93DF1A02.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:15:9a:fe:4f:e1:4a:ec:9a:95:50:17:d9:de:47:18:3f:34:59:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFBC69859D4CE7D47B71A9D23022FDEA93DF1A02
Validity
Not Before: Jun 17 07:11:39 2026 GMT
Not After : Jun 18 11:00:39 2026 GMT
Subject: CN=DAA9E6EB751119F4D8856B00CCD00830E7F132A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fe:b1:0c:1e:69:e3:19:24:0c:68:86:f5:36:
1b:b3:cf:22:61:37:5b:3a:de:e9:a3:10:74:74:91:
9b:44:e1:b6:6f:5d:56:2e:87:3e:50:95:e6:13:82:
b3:16:44:83:8a:ac:08:ea:a6:69:ba:99:c6:ad:23:
74:0d:2f:9a:3e:61:91:e7:9d:8b:03:4e:ee:91:bd:
d6:8f:84:c1:ac:aa:62:21:8b:19:83:8c:0b:fc:16:
51:38:ce:af:7d:00:19:43:29:ef:54:12:92:61:4f:
4c:b1:ec:c7:13:fa:a2:24:51:8b:27:bd:8f:51:ab:
5d:ed:7d:5b:03:11:75:8b:c4:91:b4:95:4e:11:99:
e9:c7:ec:89:9e:56:ed:da:b0:21:6c:05:ef:cb:ae:
f3:9c:f0:0c:fc:63:3e:a0:0a:37:59:61:e9:f1:bf:
60:a0:e7:1a:3e:62:e7:ee:4a:b8:79:07:0c:3b:dc:
9c:a7:7c:4b:f2:e9:4c:ab:ac:f5:d9:58:8a:e3:ab:
53:3e:0d:f5:20:d0:fe:e7:38:4e:eb:a9:47:0b:9f:
88:7c:68:2d:8b:65:9e:89:8f:18:d9:37:79:c4:b0:
39:84:e1:4c:64:b9:b0:db:2a:2b:f3:74:ee:53:2f:
6d:08:6b:bf:5d:bf:15:23:30:fb:9f:ca:57:e4:e9:
d6:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:A9:E6:EB:75:11:19:F4:D8:85:6B:00:CC:D0:08:30:E7:F1:32:A9
X509v3 Authority Key Identifier:
keyid:EF:BC:69:85:9D:4C:E7:D4:7B:71:A9:D2:30:22:FD:EA:93:DF:1A:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/EFBC69859D4CE7D47B71A9D23022FDEA93DF1A02.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFBC69859D4CE7D47B71A9D23022FDEA93DF1A02.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/EFBC69859D4CE7D47B71A9D23022FDEA93DF1A02.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:aa:45:b9:b7:66:31:0e:2f:31:f2:06:f1:c5:28:22:6d:23:
44:77:d9:f0:ef:8a:44:c9:04:76:c7:10:6f:30:61:ac:cd:e4:
2b:8a:80:f2:1d:b3:16:31:19:a6:db:25:2e:43:b5:e1:e7:01:
1a:6f:85:0a:27:9e:fb:e3:c1:ef:d8:37:14:d3:c5:e6:e6:a2:
53:46:5c:ee:c2:f1:b1:3c:3f:ec:dd:c0:f4:81:80:bf:f0:87:
78:e3:6c:23:3e:95:18:28:ac:8d:93:a1:08:99:e8:0b:c0:2e:
f4:07:3e:9e:2a:dc:51:2e:2d:a5:7c:84:a7:57:0b:08:8a:a9:
54:1c:32:ca:2a:4a:78:3c:6e:c2:51:3e:78:24:47:83:d5:57:
9f:8f:99:86:84:e5:97:b6:33:3e:b9:c7:4d:bc:8e:af:e9:4a:
4e:db:6b:f1:7f:1a:01:e0:cc:41:85:fc:eb:80:2a:1d:2b:d7:
3f:2f:d2:b7:d6:cc:ff:89:7a:f3:5a:89:7e:ed:37:b8:0c:72:
2b:3c:63:a3:1f:0b:a0:e2:70:f8:30:2e:64:e4:31:1f:22:3f:
d4:c7:0d:92:d7:01:25:93:2d:b0:13:86:9d:8b:89:2c:1f:75:
55:31:ef:e3:f5:0c:b7:23:9f:b1:76:67:9e:47:f9:61:66:6e:
b7:1f:1d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:30:07 2026 by rpki-client