
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/EF52E239F082CFB1C35BB8D60B4615A60D4926E9.mft
File: EF52E239F082CFB1C35BB8D60B4615A60D4926E9.mft (raw, json)
Hash identifier: kdfqJa07qAPbYtfnu9tBruX/w94VRkAX1zTSSyEvQU8=
Subject key identifier: 59:E7:8A:04:72:5B:40:39:37:28:AB:1F:BD:4B:34:59:70:C3:9E:16
Authority key identifier: EF:52:E2:39:F0:82:CF:B1:C3:5B:B8:D6:0B:46:15:A6:0D:49:26:E9
Certificate issuer: /CN=EF52E239F082CFB1C35BB8D60B4615A60D4926E9
Certificate serial: 3C8B53B83CDD55F9366A2B9782F81CBC9868A2EC
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF52E239F082CFB1C35BB8D60B4615A60D4926E9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/EF52E239F082CFB1C35BB8D60B4615A60D4926E9.mft
Manifest number: 0E
Signing time: Tue 12 May 2026 08:50:16 +0000
Manifest this update: Tue 12 May 2026 08:45:16 +0000
Manifest next update: Wed 13 May 2026 11:30:16 +0000
Files and hashes: 1: EF52E239F082CFB1C35BB8D60B4615A60D4926E9.crl (hash: GGiINBUnbQTNvO1Cd0+NHgGxhdeERdT2FqYRgnWlwDE=)
2: 3130332e3133312e35312e302f32342d3234203d3e20313331373735.roa (hash: gKWl4c7FQdp4tPgMGVABYRuitakyfACS20kjMIxhrq4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/EF52E239F082CFB1C35BB8D60B4615A60D4926E9.crl
rsync://rpki-rsync.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/EF52E239F082CFB1C35BB8D60B4615A60D4926E9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF52E239F082CFB1C35BB8D60B4615A60D4926E9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:8b:53:b8:3c:dd:55:f9:36:6a:2b:97:82:f8:1c:bc:98:68:a2:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EF52E239F082CFB1C35BB8D60B4615A60D4926E9
Validity
Not Before: May 12 08:45:16 2026 GMT
Not After : May 13 11:30:16 2026 GMT
Subject: CN=59E78A04725B40393728AB1FBD4B345970C39E16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:19:be:c5:85:68:bb:6b:e5:ac:20:c6:a5:00:
a7:9d:eb:f1:30:9b:26:21:95:b9:31:99:74:f4:40:
60:47:c2:92:4e:bb:8c:06:58:c9:1c:fb:76:fa:44:
a8:87:4d:2b:dd:8d:3b:7a:bf:9f:5c:97:53:bb:2e:
fc:9c:0b:5a:35:b4:13:1e:08:d8:64:6b:3e:6a:08:
a0:32:94:f9:e8:94:71:da:87:ad:4b:9f:c4:ff:b7:
96:94:62:a0:43:71:bb:a4:b7:22:ac:d2:f5:1b:4e:
69:e4:88:52:08:28:62:38:00:13:eb:ef:c5:83:d8:
87:26:83:b6:b0:75:11:1d:c3:76:16:e3:8f:48:ec:
a1:ad:89:64:72:04:8e:cc:3e:6d:e7:42:52:1a:57:
3b:5e:dc:ed:49:9a:1c:d0:6d:27:ba:a9:58:ce:0d:
0c:ce:40:0c:8d:e0:7b:7e:d2:12:f3:8f:6c:e3:d0:
de:87:b1:48:7c:5f:51:24:6e:42:7b:ae:5e:60:b4:
cd:1a:aa:dc:e3:39:b3:39:49:02:5b:cf:49:da:c6:
c5:f0:16:a8:98:b9:17:95:f0:d4:be:b8:16:85:7c:
b3:92:10:68:fd:e4:5e:8b:04:38:24:b7:ba:28:9b:
d6:cb:dc:55:fa:4b:21:ac:9f:df:3b:ac:2a:0f:b2:
82:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:E7:8A:04:72:5B:40:39:37:28:AB:1F:BD:4B:34:59:70:C3:9E:16
X509v3 Authority Key Identifier:
keyid:EF:52:E2:39:F0:82:CF:B1:C3:5B:B8:D6:0B:46:15:A6:0D:49:26:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/EF52E239F082CFB1C35BB8D60B4615A60D4926E9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF52E239F082CFB1C35BB8D60B4615A60D4926E9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/EF52E239F082CFB1C35BB8D60B4615A60D4926E9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:d6:a1:1a:87:0c:b3:3f:2b:0b:b8:02:23:29:fb:65:c3:54:
dd:45:60:b2:c5:eb:ea:69:44:90:3e:03:0d:1b:1f:61:20:c8:
42:38:6a:44:77:cd:b5:3f:bf:d1:36:06:fd:8e:81:47:00:91:
be:2f:13:ce:44:f6:a7:81:b3:5a:76:de:4d:2e:5b:32:92:94:
98:77:f1:75:0c:60:0b:7c:f3:af:45:6c:06:60:0e:3c:da:9d:
64:6d:ff:c7:ed:de:d4:77:13:b4:4d:d4:e0:7c:09:c2:3c:56:
3f:7c:cd:37:2d:ee:20:94:75:8f:40:33:6f:89:20:b5:57:f0:
21:d9:5e:70:3d:e7:a5:b8:8b:fb:fd:92:05:bd:a8:8d:ba:8e:
4a:a3:28:21:74:9c:bd:6a:39:ac:15:f2:ea:ac:e5:1e:c7:a8:
04:66:0c:5b:19:9c:3b:0c:49:ab:62:12:78:2b:3b:9a:42:af:
23:e0:4d:c7:16:eb:da:3c:bf:08:eb:b9:b9:a2:ab:fc:9f:b6:
35:13:6b:e8:32:97:e9:41:41:3e:91:b4:af:e5:4b:c9:af:d9:
c6:fe:bc:04:bd:cc:6d:43:f9:57:58:21:4d:e4:b3:8f:47:e1:
54:ca:6c:6e:91:ca:00:67:f8:08:de:33:ca:b8:10:63:c8:d6:
c2:fe:f5:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:25:48 2026 by rpki-client