
$ rpki-client -vvf repo-rpki.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/EFCC7BEA840185763FF7624CF3DDE00563137A27.mft
File: EFCC7BEA840185763FF7624CF3DDE00563137A27.mft (raw, json)
Hash identifier: IpvMqLB73rdiu/F6Kd2RkKa6r3fCg6A/yDTPxP2ubfE=
Subject key identifier: FB:E3:2B:A6:7A:EE:69:35:41:CE:05:63:B5:07:FD:01:9B:50:7A:7B
Authority key identifier: EF:CC:7B:EA:84:01:85:76:3F:F7:62:4C:F3:DD:E0:05:63:13:7A:27
Certificate issuer: /CN=EFCC7BEA840185763FF7624CF3DDE00563137A27
Certificate serial: 61B9163163E49E805753516239EC53815EF2CEAC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFCC7BEA840185763FF7624CF3DDE00563137A27.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/EFCC7BEA840185763FF7624CF3DDE00563137A27.mft
Manifest number: 03ED
Signing time: Tue 24 Mar 2026 13:11:19 +0000
Manifest this update: Tue 24 Mar 2026 13:06:19 +0000
Manifest next update: Sat 28 Mar 2026 01:00:19 +0000
Files and hashes: 1: 3130332e3136382e3134392e302f32342d3234203d3e20313532303038.roa (hash: RrBKmVWdUCDQZ5+0DPE+zlOV11wXxx/BWkAvqf88L40=)
2: 323430373a613163303a3a2f33322d3332203d3e20313432333135.roa (hash: jVP4IyadfUbeWINM/KDvDvW3G0lqOs1gYvj37OOsmzs=)
3: 3130332e3136382e3134392e302f32342d3234203d3e20313432333135.roa (hash: 21fs7o5EBuojvRKKFjYztRKfi3uVShv1etf2zh6TGYI=)
4: EFCC7BEA840185763FF7624CF3DDE00563137A27.crl (hash: vngWrTeLEg/9k1eYtA6+YhUSnGVcQBMEEe+d16wAeEg=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/EFCC7BEA840185763FF7624CF3DDE00563137A27.crl
rsync://repo-rpki.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/EFCC7BEA840185763FF7624CF3DDE00563137A27.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFCC7BEA840185763FF7624CF3DDE00563137A27.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 01:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:b9:16:31:63:e4:9e:80:57:53:51:62:39:ec:53:81:5e:f2:ce:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCC7BEA840185763FF7624CF3DDE00563137A27
Validity
Not Before: Mar 24 13:06:19 2026 GMT
Not After : Mar 28 01:00:19 2026 GMT
Subject: CN=FBE32BA67AEE693541CE0563B507FD019B507A7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:06:fd:e3:7c:61:0e:35:14:04:63:7f:d3:4c:
9b:bb:33:d5:67:57:ea:49:0a:8a:a7:be:d1:67:77:
86:e7:cd:7c:85:6c:4e:aa:b8:d0:d4:19:7c:25:3c:
06:da:44:1d:ee:ab:ee:63:ba:3a:fe:1f:5c:ef:73:
5e:5a:e2:3d:49:7c:b6:a1:4c:25:64:2c:74:ee:c9:
6b:0d:ae:cc:f6:2c:73:4f:d6:43:9f:cb:33:6d:69:
07:06:35:a5:89:36:54:34:cb:70:a4:00:1a:5c:50:
eb:89:a6:ba:90:ff:25:85:55:06:9b:25:55:bc:db:
fb:eb:6e:a2:79:86:30:04:68:36:2c:c3:2d:93:91:
77:e7:e6:31:bd:e1:ac:b8:b5:67:81:82:da:1c:ed:
b4:93:66:eb:85:1a:e0:41:9a:76:98:4c:ad:4f:86:
f6:c3:f5:63:f5:1b:5e:d3:a5:f7:bb:d9:da:4b:df:
3b:09:8f:7c:b7:57:27:5b:c4:55:e4:a6:0d:fa:45:
2e:74:61:92:8b:4a:a4:ce:15:5a:1b:06:d1:7e:08:
c8:75:75:e3:8a:c1:68:a4:bd:89:ec:87:81:78:1e:
a0:a6:d3:7d:4c:cd:f4:35:d0:a1:77:a2:de:31:c2:
e8:91:a6:7a:85:66:33:d0:f1:9e:f4:ab:4f:b6:8a:
a8:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:E3:2B:A6:7A:EE:69:35:41:CE:05:63:B5:07:FD:01:9B:50:7A:7B
X509v3 Authority Key Identifier:
keyid:EF:CC:7B:EA:84:01:85:76:3F:F7:62:4C:F3:DD:E0:05:63:13:7A:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/EFCC7BEA840185763FF7624CF3DDE00563137A27.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFCC7BEA840185763FF7624CF3DDE00563137A27.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/EFCC7BEA840185763FF7624CF3DDE00563137A27.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:d3:34:05:ca:96:c5:8f:9d:30:f9:ec:13:99:1f:2b:7d:9b:
fa:bd:66:aa:13:d8:de:2c:6a:6b:74:d5:6c:47:e7:27:3f:76:
17:2a:15:c4:37:60:20:ae:9e:62:43:4e:93:90:ec:af:93:41:
78:0c:9e:8b:3d:8a:c0:0e:14:6b:95:36:bf:c7:9c:7a:42:45:
a0:9d:4c:e5:6c:41:d9:a5:d1:6d:eb:17:15:bd:13:e2:25:55:
c8:8f:53:ee:4d:8c:3d:b7:8c:93:7f:a6:58:f3:94:81:27:c1:
ac:d6:91:29:c0:00:07:4e:bd:ae:49:df:4e:88:8a:b1:bf:4e:
05:65:67:74:25:9c:7c:0f:f2:44:d9:71:21:98:16:ac:c2:1b:
38:de:e0:ba:51:69:37:42:c1:62:ed:bf:70:83:97:6f:0b:47:
6b:cd:47:ac:a8:d1:66:c0:2e:7e:46:9f:cd:79:de:5a:19:68:
cf:d2:9a:ed:f4:bc:d6:bc:0b:e3:5f:27:63:90:f9:e2:dc:36:
eb:29:d0:94:76:5e:8a:d6:52:ae:16:df:5e:30:8b:0b:94:21:
c0:04:a6:79:08:2a:70:db:3c:c7:22:c1:ab:47:c9:8a:27:69:
75:51:ad:00:b2:93:78:f7:9d:1d:12:c0:9c:1f:8c:4e:10:79:
82:a5:1c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:58:31 2026 by rpki-client