
$ rpki-client -vvf rpki-rsync.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.mft
File: F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.mft (raw, json)
Hash identifier: PbgRNEZO6iUfWeBrHog93cC95c715v8kUP+biD3Qa9I=
Subject key identifier: EF:CF:4D:41:EF:86:AB:81:5E:F6:CC:FB:4F:8F:3B:21:89:BD:1E:52
Authority key identifier: F8:EF:3E:E5:71:B0:E5:52:13:2B:2C:6A:BA:30:EF:81:6A:04:43:BB
Certificate issuer: /CN=F8EF3EE571B0E552132B2C6ABA30EF816A0443BB
Certificate serial: 7D6C4362984D91424AB3EEF4A81960E7F1BD4AD7
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.mft
Manifest number: 70
Signing time: Fri 24 Jul 2026 04:40:12 +0000
Manifest this update: Fri 24 Jul 2026 04:35:12 +0000
Manifest next update: Sat 25 Jul 2026 08:33:12 +0000
Files and hashes: 1: F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.crl (hash: Us/rVdG/54IPjEol8jHLEO6HESAGPVf4xovBRIHhFcE=)
2: 3130332e392e3134342e302f32322d3234203d3e20313331373133.roa (hash: 4SizHs7Y7jbN84W7yqURK/C+aTckSwx11cvn67uUtqg=)
3: 323430373a363338303a3a2f33322d3430203d3e20313331373133.roa (hash: wGUQKy4FIVL/pJvzv4ocXf6nJRNeroqTQeM/u7L/DBg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.crl
rsync://rpki-rsync.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 07:07:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:6c:43:62:98:4d:91:42:4a:b3:ee:f4:a8:19:60:e7:f1:bd:4a:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F8EF3EE571B0E552132B2C6ABA30EF816A0443BB
Validity
Not Before: Jul 24 04:35:12 2026 GMT
Not After : Jul 25 08:33:12 2026 GMT
Subject: CN=EFCF4D41EF86AB815EF6CCFB4F8F3B2189BD1E52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1e:9a:49:6a:0a:09:a1:ef:5c:37:8b:26:91:
6c:21:8d:c1:15:27:16:31:f9:03:18:7a:a4:0d:3c:
a7:37:6c:61:28:c3:1a:25:25:cf:7e:9c:63:97:f0:
5b:8d:0b:ef:aa:b4:ff:74:97:2e:63:90:38:a1:f5:
51:b2:80:b3:02:3a:3b:69:9b:12:01:d0:24:4e:7a:
69:c8:22:08:c9:48:60:56:cd:68:82:9b:f2:22:a0:
74:b6:b2:48:64:e9:89:5f:a8:b4:aa:39:75:84:7e:
2a:dd:5a:85:cc:6f:0e:40:fd:3d:5d:24:96:f0:79:
82:d1:b6:ce:ae:ff:fd:91:21:20:89:b1:37:c0:7e:
26:b0:8f:28:9e:b9:ce:2e:8d:ed:5c:bd:e2:ef:ee:
ad:0b:e2:fc:2a:0b:f1:50:20:3d:28:b5:5f:c4:66:
fb:26:a8:8c:1f:06:f3:1b:33:17:b9:7e:14:c6:07:
98:91:70:4b:a1:41:c8:82:1e:16:65:1f:29:43:f6:
66:fa:bb:6f:d6:71:10:49:94:d8:eb:ea:45:4a:87:
06:82:57:b8:91:cf:14:1f:87:c6:e0:a7:3b:3a:c9:
97:17:3b:3e:42:8e:f6:db:7d:02:1e:2b:61:b1:13:
b2:f4:3c:a3:d8:13:ef:52:0e:87:c9:0b:cc:c0:aa:
c6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:CF:4D:41:EF:86:AB:81:5E:F6:CC:FB:4F:8F:3B:21:89:BD:1E:52
X509v3 Authority Key Identifier:
keyid:F8:EF:3E:E5:71:B0:E5:52:13:2B:2C:6A:BA:30:EF:81:6A:04:43:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:2a:4c:14:3f:98:a3:b0:7f:0b:1d:9e:cb:b4:cf:83:13:c7:
b7:d9:da:f9:d5:d4:e9:35:79:33:b3:1c:a5:b9:af:66:c3:28:
70:e3:fb:d9:46:c5:3c:6b:07:44:0e:6f:4f:92:12:fb:b3:40:
30:41:12:3b:2b:08:20:e8:6c:5b:97:3b:c9:49:fc:dc:7e:f1:
c3:6c:06:5a:42:50:f8:d8:b1:e7:a7:5a:a3:e9:f5:6a:36:21:
5e:8f:2f:24:5c:3b:49:f4:2d:6e:a6:19:80:38:e7:15:29:e9:
24:39:7d:f1:b3:b9:71:c4:f1:c5:44:d1:93:c5:e8:06:9c:ff:
25:81:8b:ce:3f:59:06:9d:1f:95:79:a6:d5:74:7c:96:5d:3d:
d7:6f:4c:71:9c:3f:78:4b:3d:bd:f9:f4:0d:39:e4:dd:54:82:
6d:5b:94:9f:59:e4:4f:94:e8:d3:d7:00:ee:06:3e:5d:1f:25:
9d:65:e3:13:fe:11:80:56:69:c0:d8:c1:bb:da:6a:2b:e9:d9:
d3:ac:dc:7b:6a:49:cd:a7:45:19:47:19:5d:5a:8a:21:14:4d:
90:c5:07:47:e3:37:ff:f0:32:25:9c:8b:50:1a:99:cb:7b:c3:
e0:11:65:10:1d:fb:a1:1f:1b:ae:00:b5:4a:ca:bc:10:97:ce:
a1:e2:b5:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:52:44 2026 by rpki-client