
$ rpki-client -vvf repo-rpki.idnic.net/repo/c70282ef-2500-4ffb-8d7d-1f505435227d/0/EF4C4D45351DBB35C40C58769D718931B1AAD47D.mft
File: EF4C4D45351DBB35C40C58769D718931B1AAD47D.mft (raw, json)
Hash identifier: PGXRlyLrVE1H5/1pVmcMIVEEfkgGKG0yxKjECLbgiQ8=
Subject key identifier: E2:D5:7E:0A:7B:31:C9:3C:7C:38:AB:A6:A8:C6:F8:01:B5:14:DD:09
Authority key identifier: EF:4C:4D:45:35:1D:BB:35:C4:0C:58:76:9D:71:89:31:B1:AA:D4:7D
Certificate issuer: /CN=EF4C4D45351DBB35C40C58769D718931B1AAD47D
Certificate serial: 1B564E56FF70197622DA219A7E534943BA62C7F9
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EF4C4D45351DBB35C40C58769D718931B1AAD47D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c70282ef-2500-4ffb-8d7d-1f505435227d/0/EF4C4D45351DBB35C40C58769D718931B1AAD47D.mft
Manifest number: 0560
Signing time: Mon 23 Mar 2026 19:11:51 +0000
Manifest this update: Mon 23 Mar 2026 19:06:51 +0000
Manifest next update: Fri 27 Mar 2026 05:49:51 +0000
Files and hashes: 1: EF4C4D45351DBB35C40C58769D718931B1AAD47D.crl (hash: xbllBBRFN1KGM6BP4aIo8T1ZzEA7T4bHkGfuoFzO2Go=)
2: 3130332e35342e3133342e302f32342d3234203d3e203633383736.roa (hash: rvPyF4pzz+NGPBxHBZxBP55s7GX0enQK9yL4BnvRk1A=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/c70282ef-2500-4ffb-8d7d-1f505435227d/0/EF4C4D45351DBB35C40C58769D718931B1AAD47D.crl
rsync://repo-rpki.idnic.net/repo/c70282ef-2500-4ffb-8d7d-1f505435227d/0/EF4C4D45351DBB35C40C58769D718931B1AAD47D.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EF4C4D45351DBB35C40C58769D718931B1AAD47D.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 27 Mar 2026 05:49:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:56:4e:56:ff:70:19:76:22:da:21:9a:7e:53:49:43:ba:62:c7:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EF4C4D45351DBB35C40C58769D718931B1AAD47D
Validity
Not Before: Mar 23 19:06:51 2026 GMT
Not After : Mar 27 05:49:51 2026 GMT
Subject: CN=E2D57E0A7B31C93C7C38ABA6A8C6F801B514DD09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:78:b0:05:27:06:a6:79:49:ba:4d:80:00:90:
58:d3:bc:8f:39:9e:d0:32:83:a6:dc:88:be:94:61:
b8:70:c9:83:35:e3:9f:a7:be:ee:c0:0f:02:4a:8d:
8a:4f:f6:94:e9:47:bc:ec:58:f1:56:77:98:6d:d6:
b9:b2:9e:93:cf:6b:67:7a:ca:e5:4c:ae:2e:58:87:
a7:ea:55:21:58:65:99:3b:c5:1b:a2:06:e2:49:60:
0d:f1:4f:c9:36:4a:00:be:fc:7a:5c:87:65:dc:1b:
da:3c:2f:ae:ea:43:33:0e:f0:ea:73:a6:02:95:c4:
1f:c4:0a:e1:75:d8:c1:5e:a9:6b:2b:65:88:9d:c8:
45:5b:eb:98:33:a2:68:92:13:f5:3c:79:85:bd:44:
52:b2:2f:77:53:32:e8:44:b1:ec:86:fb:48:46:ce:
d4:5f:82:f3:0c:d1:ba:e7:fe:0b:c1:f0:59:da:c3:
32:44:f1:64:73:00:d7:d7:da:7e:7b:f1:08:17:ce:
3d:34:f9:1c:1e:2e:f3:db:6a:20:d8:cb:f2:bf:3a:
74:1d:5e:02:6a:86:a2:a4:c5:d4:ab:b2:55:22:4c:
05:63:e1:0a:6a:e5:99:da:d9:69:4b:d3:5a:29:27:
82:92:ca:71:7a:63:09:8c:c8:57:67:5f:aa:fc:3a:
83:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:D5:7E:0A:7B:31:C9:3C:7C:38:AB:A6:A8:C6:F8:01:B5:14:DD:09
X509v3 Authority Key Identifier:
keyid:EF:4C:4D:45:35:1D:BB:35:C4:0C:58:76:9D:71:89:31:B1:AA:D4:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c70282ef-2500-4ffb-8d7d-1f505435227d/0/EF4C4D45351DBB35C40C58769D718931B1AAD47D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EF4C4D45351DBB35C40C58769D718931B1AAD47D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c70282ef-2500-4ffb-8d7d-1f505435227d/0/EF4C4D45351DBB35C40C58769D718931B1AAD47D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:c8:af:1b:dc:48:e8:c7:15:d1:70:c9:08:2f:d8:a5:32:fd:
88:62:15:8a:98:40:ca:a8:9b:67:90:e3:03:90:f7:76:0b:65:
75:b8:7b:b9:ab:48:ed:18:1c:f4:a7:c5:26:4a:71:9c:7d:4a:
af:4d:61:d5:23:78:31:8b:bc:0b:e8:2c:df:9e:83:29:aa:4b:
f3:76:5f:ce:1d:c6:c7:4f:5d:e9:ea:18:40:7f:11:29:2d:02:
73:d0:81:72:89:e5:62:10:5c:0f:36:83:7b:8a:5e:e1:56:57:
fb:21:f0:2f:d8:fc:eb:6d:c0:34:01:87:2b:1a:8a:b4:da:65:
f8:68:90:b3:0f:60:cd:2d:60:38:d7:a0:8b:ea:12:f3:bb:5f:
1d:41:ba:61:13:d1:6b:cc:3b:f9:aa:d6:ba:61:95:8b:ad:df:
be:55:3a:aa:ba:42:e7:62:53:a8:52:23:0c:a7:a7:e4:0c:fe:
20:c7:50:8a:7d:9f:9b:9b:2a:1d:65:ff:56:56:e1:d0:de:f1:
9e:3b:1a:46:4e:5f:f5:b4:ea:3f:30:e2:49:40:c4:0b:35:89:
93:cc:4f:11:c3:91:e1:14:bc:26:7f:6d:4a:6d:51:8a:3f:96:
8a:37:37:47:f9:65:55:1f:07:88:78:2e:9d:4c:ed:80:64:b9:
15:96:3c:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:18:43 2026 by rpki-client