
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/EFBC69859D4CE7D47B71A9D23022FDEA93DF1A02.mft
File: EFBC69859D4CE7D47B71A9D23022FDEA93DF1A02.mft (raw, json)
Hash identifier: V/DOhNbDokAKNKakYEaN7ZQRWnpRz1YPGmJGXNw8z88=
Subject key identifier: 06:1A:1C:32:B5:BB:9D:46:4D:8E:15:EB:2A:02:6D:B8:41:3C:B2:58
Authority key identifier: EF:BC:69:85:9D:4C:E7:D4:7B:71:A9:D2:30:22:FD:EA:93:DF:1A:02
Certificate issuer: /CN=EFBC69859D4CE7D47B71A9D23022FDEA93DF1A02
Certificate serial: 01665F1EC79AA4ACA094D38A6FCBDB2E436D59C7
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFBC69859D4CE7D47B71A9D23022FDEA93DF1A02.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/EFBC69859D4CE7D47B71A9D23022FDEA93DF1A02.mft
Manifest number: BF
Signing time: Wed 23 Sep 2026 03:35:27 +0000
Manifest this update: Wed 23 Sep 2026 03:30:27 +0000
Manifest next update: Thu 24 Sep 2026 04:27:27 +0000
Files and hashes: 1: 3130332e3135362e37342e302f32332d3234203d3e20313431303832.roa (hash: wEHPqNpq5E7BaSWEXPsPlsqnHz7+5ItTw/UwUrelTsw=)
2: EFBC69859D4CE7D47B71A9D23022FDEA93DF1A02.crl (hash: 2nC+b8eHsmxmogAw/BNhaZ8ldmciSrCGquWY98CkaTc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/EFBC69859D4CE7D47B71A9D23022FDEA93DF1A02.crl
rsync://rpki-rsync.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/EFBC69859D4CE7D47B71A9D23022FDEA93DF1A02.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFBC69859D4CE7D47B71A9D23022FDEA93DF1A02.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 04:27:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:66:5f:1e:c7:9a:a4:ac:a0:94:d3:8a:6f:cb:db:2e:43:6d:59:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFBC69859D4CE7D47B71A9D23022FDEA93DF1A02
Validity
Not Before: Sep 23 03:30:27 2026 GMT
Not After : Sep 24 04:27:27 2026 GMT
Subject: CN=061A1C32B5BB9D464D8E15EB2A026DB8413CB258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:8f:58:b7:e8:d1:93:13:9b:f4:b1:46:8f:ab:
d0:27:7d:b2:95:73:4f:29:a1:87:12:24:4f:bf:1e:
5b:15:6a:d3:da:65:2d:97:0a:93:8d:6c:68:41:a6:
20:b2:04:ba:d4:61:a2:c9:4b:ba:1b:ea:f3:17:e5:
f9:ae:40:1b:79:61:ad:5e:ae:29:9c:54:15:68:d4:
35:8a:1b:2f:de:0a:60:47:b1:8e:75:6e:57:05:e6:
2f:75:be:2c:66:d3:01:4b:6c:5c:57:42:0e:f4:a5:
07:26:1a:24:da:9c:6b:c6:d2:fc:4b:0f:7d:c5:0f:
6c:62:0b:cc:c8:05:41:c8:c0:a8:b8:58:e0:a0:42:
f1:3e:f5:84:e5:81:a8:ed:3c:90:e7:54:65:2f:1a:
ed:1f:c1:35:07:60:ca:5b:8d:7a:5c:2c:d3:36:c3:
27:5b:68:3a:82:32:14:77:bf:be:38:47:70:fe:90:
df:57:6e:a9:fb:61:97:4f:2d:1f:60:70:29:60:42:
3d:ef:08:f9:3c:42:42:90:7b:74:34:13:1b:ba:3b:
b3:2b:f2:52:0b:c0:76:8e:8d:95:7f:4d:f4:95:f5:
58:56:b6:e0:80:a2:64:4b:a8:0a:be:28:b7:6e:5d:
28:c1:3b:47:05:64:00:f5:5d:99:52:6f:d6:a4:58:
4c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:1A:1C:32:B5:BB:9D:46:4D:8E:15:EB:2A:02:6D:B8:41:3C:B2:58
X509v3 Authority Key Identifier:
keyid:EF:BC:69:85:9D:4C:E7:D4:7B:71:A9:D2:30:22:FD:EA:93:DF:1A:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/EFBC69859D4CE7D47B71A9D23022FDEA93DF1A02.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFBC69859D4CE7D47B71A9D23022FDEA93DF1A02.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/EFBC69859D4CE7D47B71A9D23022FDEA93DF1A02.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:54:c7:54:fb:16:6c:5b:df:e2:53:8b:c2:51:f2:4a:33:17:
27:5c:d4:15:35:4a:6b:63:45:c3:4b:fa:02:c5:1b:2d:73:46:
d3:90:b2:23:d0:37:8d:96:13:d4:e8:a9:af:ec:74:f5:a2:00:
ef:bd:b5:3f:2d:62:8e:b2:0e:65:4d:f0:93:3e:d6:73:03:08:
6a:7a:bf:9c:25:d5:36:59:9d:95:79:ab:7a:35:2e:5c:a9:8c:
31:0c:48:d7:44:71:09:15:fa:ea:8a:ad:9e:0e:5f:80:4e:68:
57:ad:34:e2:cd:26:03:a6:57:a0:88:d2:e2:c9:bd:6b:37:56:
e9:23:6a:ec:d4:08:fc:24:82:60:0a:bf:86:3d:1a:59:c3:e5:
d4:ae:21:15:b8:cc:55:6e:c7:db:63:8c:21:78:70:68:4f:f2:
19:95:fe:b8:42:a1:26:34:57:6d:77:58:1e:8c:e4:15:34:f9:
54:5c:ac:50:e8:50:16:c2:6e:bc:29:30:82:57:62:d7:22:12:
cb:f0:a1:44:c7:32:79:50:0e:41:43:b2:47:bb:2f:a7:29:5f:
2d:27:b9:73:12:50:74:32:47:35:bf:b0:bd:c0:63:cc:2b:e8:
25:fc:5d:ff:d0:a8:d6:08:ff:b8:c6:29:8b:bb:1d:a2:47:b4:
c9:23:4d:26
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUAWZfHseapKyglNOKb8vbLkNtWccwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUZCQzY5ODU5RDRDRTdENDdCNzFBOUQyMzAyMkZERUE5
M0RGMUEwMjAeFw0yNjA5MjMwMzMwMjdaFw0yNjA5MjQwNDI3MjdaMDMxMTAvBgNV
BAMTKDA2MUExQzMyQjVCQjlENDY0RDhFMTVFQjJBMDI2REI4NDEzQ0IyNTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbj1i36NGTE5v0sUaPq9AnfbKV
c08poYcSJE+/HlsVatPaZS2XCpONbGhBpiCyBLrUYaLJS7ob6vMX5fmuQBt5Ya1e
rimcVBVo1DWKGy/eCmBHsY51blcF5i91vixm0wFLbFxXQg70pQcmGiTanGvG0vxL
D33FD2xiC8zIBUHIwKi4WOCgQvE+9YTlgajtPJDnVGUvGu0fwTUHYMpbjXpcLNM2
wydbaDqCMhR3v744R3D+kN9Xbqn7YZdPLR9gcClgQj3vCPk8QkKQe3Q0Exu6O7Mr
8lILwHaOjZV/TfSV9VhWtuCAomRLqAq+KLduXSjBO0cFZAD1XZlSb9akWEwXAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUBhocMrW7nUZNjhXrKgJtuEE8slgwHwYDVR0j
BBgwFoAU77xphZ1M59R7canSMCL96pPfGgIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZjAwMTAyZDAtNzE0Zi00YjUyLTliZTUtZGVkMTZlZGZlNGEyLzAvRUZCQzY5ODU5
RDRDRTdENDdCNzFBOUQyMzAyMkZERUE5M0RGMUEwMi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FRkJDNjk4NTlENENFN0Q0N0I3MUE5RDIzMDIyRkRFQTkzREYx
QTAyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjAwMTAyZDAtNzE0Zi00YjUyLTli
ZTUtZGVkMTZlZGZlNGEyLzAvRUZCQzY5ODU5RDRDRTdENDdCNzFBOUQyMzAyMkZE
RUE5M0RGMUEwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAAxUx1T7Fmxb3+JTi8JR8kozFydc1BU1Smtj
RcNL+gLFGy1zRtOQsiPQN42WE9Toqa/sdPWiAO+9tT8tYo6yDmVN8JM+1nMDCGp6
v5wl1TZZnZV5q3o1LlypjDEMSNdEcQkV+uqKrZ4OX4BOaFetNOLNJgOmV6CI0uLJ
vWs3VukjauzUCPwkgmAKv4Y9GlnD5dSuIRW4zFVux9tjjCF4cGhP8hmV/rhCoSY0
V213WB6M5BU0+VRcrFDoUBbCbrwpMIJXYtciEsvwoUTHMnlQDkFDske7L6cpXy0n
uXMSUHQyRzW/sL3AY8wr6CX8Xf/QqNYI/7jGKYu7HaJHtMkjTSY=
-----END CERTIFICATE-----
Generated at Wed Sep 23 19:09:42 2026 by rpki-client