
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/EF52E239F082CFB1C35BB8D60B4615A60D4926E9.mft
File: EF52E239F082CFB1C35BB8D60B4615A60D4926E9.mft (raw, json)
Hash identifier: iZ3ZZrgVb0Vj2tRQklAFuhwUzmLsBET0MdLHYpvU5ww=
Subject key identifier: FE:B5:34:26:D7:66:10:33:8D:7D:E4:82:5F:8F:EC:D2:E8:81:3C:00
Authority key identifier: EF:52:E2:39:F0:82:CF:B1:C3:5B:B8:D6:0B:46:15:A6:0D:49:26:E9
Certificate issuer: /CN=EF52E239F082CFB1C35BB8D60B4615A60D4926E9
Certificate serial: 36AC1662356EC26EF73066DB882B6ACF3B5738C8
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF52E239F082CFB1C35BB8D60B4615A60D4926E9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/EF52E239F082CFB1C35BB8D60B4615A60D4926E9.mft
Manifest number: 6D
Signing time: Thu 23 Jul 2026 16:50:29 +0000
Manifest this update: Thu 23 Jul 2026 16:45:29 +0000
Manifest next update: Fri 24 Jul 2026 17:46:29 +0000
Files and hashes: 1: EF52E239F082CFB1C35BB8D60B4615A60D4926E9.crl (hash: M2prgsn7fwD0yBZRc+g3xGYokFSpH7vgtDOHleFAOQo=)
2: 3130332e3133312e35312e302f32342d3234203d3e20313331373735.roa (hash: gKWl4c7FQdp4tPgMGVABYRuitakyfACS20kjMIxhrq4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/EF52E239F082CFB1C35BB8D60B4615A60D4926E9.crl
rsync://rpki-rsync.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/EF52E239F082CFB1C35BB8D60B4615A60D4926E9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF52E239F082CFB1C35BB8D60B4615A60D4926E9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 17:46:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:ac:16:62:35:6e:c2:6e:f7:30:66:db:88:2b:6a:cf:3b:57:38:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EF52E239F082CFB1C35BB8D60B4615A60D4926E9
Validity
Not Before: Jul 23 16:45:29 2026 GMT
Not After : Jul 24 17:46:29 2026 GMT
Subject: CN=FEB53426D76610338D7DE4825F8FECD2E8813C00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:67:a9:eb:92:27:66:3c:47:c5:39:b4:54:fb:
6d:c6:7a:5c:13:d6:44:4f:a9:50:e4:1a:d0:af:55:
0c:54:6c:02:e3:e0:d9:c8:64:51:b7:d7:13:ca:d4:
a5:ca:23:4c:f5:d3:41:cb:c5:f3:00:bd:ab:dc:44:
aa:e3:1f:d4:17:e0:c1:86:2c:d9:a3:a6:20:8c:e4:
3f:a4:ee:c7:e3:dc:b3:df:50:ce:7e:52:a7:4a:c0:
29:d1:29:b5:68:2c:f8:e9:5a:63:1d:81:d7:07:52:
67:4e:48:78:42:fe:4f:03:cf:3f:e3:70:c7:b5:5b:
68:5a:b8:15:ac:7b:91:4c:9c:ea:da:52:f3:52:80:
50:27:84:b1:5e:fe:a6:ac:ee:3c:a1:33:7a:ca:38:
b7:a7:f0:52:ff:30:d8:0d:96:47:1d:0a:48:2d:e2:
29:89:c6:20:d2:1e:40:11:8d:b9:6e:80:10:2a:b9:
a5:50:03:60:19:61:46:53:9f:b5:de:ea:22:0b:1b:
9f:32:54:2e:ca:59:de:3b:3a:e4:9c:e8:ed:3c:33:
ee:fd:49:46:fb:4e:f3:b9:07:35:4b:47:10:fe:79:
6c:62:0b:ab:b4:d2:bb:60:44:05:16:ff:9b:b6:cb:
82:db:62:05:f9:19:48:39:6a:95:c8:f7:aa:40:7e:
e6:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:B5:34:26:D7:66:10:33:8D:7D:E4:82:5F:8F:EC:D2:E8:81:3C:00
X509v3 Authority Key Identifier:
keyid:EF:52:E2:39:F0:82:CF:B1:C3:5B:B8:D6:0B:46:15:A6:0D:49:26:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/EF52E239F082CFB1C35BB8D60B4615A60D4926E9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF52E239F082CFB1C35BB8D60B4615A60D4926E9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/EF52E239F082CFB1C35BB8D60B4615A60D4926E9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:d1:45:ea:d2:88:1a:35:dd:a1:dd:59:99:08:e1:c0:ae:07:
19:4e:d0:f3:de:a3:8f:5d:0d:29:a8:21:2c:dc:f5:ac:84:5e:
6a:85:e1:31:14:31:d6:87:f8:b4:bd:fc:22:0e:80:1d:fd:4c:
ed:b5:8c:9a:d2:7d:bc:63:a1:51:ff:c3:e9:67:c2:c3:cc:87:
22:9b:ce:81:87:98:aa:ea:41:b3:ea:29:b8:02:71:6e:30:dd:
1b:f1:75:44:e3:fa:58:01:05:bb:ea:68:98:f2:21:b1:c0:41:
66:97:1b:ee:1b:d2:d1:15:db:28:6c:95:b5:71:a4:e6:47:e5:
ab:11:06:9f:8d:10:fd:41:e9:20:b3:98:33:ac:4d:c4:70:46:
40:f2:3a:2d:c8:4f:5f:7b:15:16:61:70:df:fe:e5:1e:0c:3c:
65:de:7a:29:be:49:61:e3:88:d6:af:0f:d0:97:7a:93:da:87:
d0:fb:8b:83:88:00:98:ce:67:95:b6:37:61:5e:c3:38:27:96:
f7:f3:af:92:ee:5e:2c:51:e8:ab:6e:23:8b:77:7e:6f:27:e6:
83:2e:02:8f:d6:2f:67:6f:e4:f2:6e:b1:af:dc:58:59:cf:d3:
91:4f:b5:d2:bb:4e:68:f5:4d:bc:0e:2b:ee:8b:9b:4f:95:a4:
2b:b2:5d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:32:40 2026 by rpki-client