$ rpki-client -vvf rpki-rsync.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7.mft File: EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7.mft (raw, json) Hash identifier: QQXwENrZr0ICLoJo/8MJixHzVcTn0n00MubPjT5l4Lk= Subject key identifier: 2D:6E:2D:91:F6:27:52:D2:FA:64:01:A8:B4:AA:5D:33:55:D6:2E:29 Authority key identifier: EF:FE:71:94:4C:D7:DF:CA:7F:BD:C6:EF:06:3C:9A:6D:28:BB:47:E7 Certificate issuer: /CN=EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7 Certificate serial: 4D3F1C34B20DC07078AC47446F82E3C32FBE9F38 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7.mft Manifest number: 0E Signing time: Tue 12 May 2026 04:08:43 +0000 Manifest this update: Tue 12 May 2026 04:03:43 +0000 Manifest next update: Wed 13 May 2026 07:36:43 +0000 Files and hashes: 1: EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7.crl (hash: tMtPmv0yp4lboiXR4SpnOCeLmAPpezYK5skGviTzJ+4=) 2: 3130332e3134352e3132352e302f32342d3234203d3e20313339343437.roa (hash: iAkXuDNDYQX7aJrJUqwReqIZ7fKNDXS9mw/520ZULDA=) 3: 323030313a6466323a313238303a3a2f34382d3438203d3e20313339343437.roa (hash: Z33O96f3Xi269FHR6g3ynqUeqpUoR3vjVRTvXK+PrwU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7.crl rsync://rpki-rsync.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:36:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:3f:1c:34:b2:0d:c0:70:78:ac:47:44:6f:82:e3:c3:2f:be:9f:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7 Validity Not Before: May 12 04:03:43 2026 GMT Not After : May 13 07:36:43 2026 GMT Subject: CN=2D6E2D91F62752D2FA6401A8B4AA5D3355D62E29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:d4:cc:c6:e5:5a:5a:67:65:52:79:7f:d1:63: a9:3b:54:2f:1d:53:83:a4:c3:bb:16:de:aa:c0:69: 92:7c:85:21:7d:a9:1c:6f:87:3a:a3:af:a1:8d:26: 3f:99:17:b9:82:df:e7:f0:c6:51:ad:d0:57:08:e4: 9b:cd:47:23:c9:5d:4b:04:fd:20:5b:0f:8b:fb:c5: 9b:d4:57:4b:6a:22:3e:06:90:71:1f:6c:2a:22:32: 58:20:47:ff:8b:04:93:6b:64:2d:c8:85:14:34:f7: 0f:bd:f8:3e:ba:9b:15:dc:40:b9:c4:71:9c:9f:91: 68:60:78:47:a7:91:e3:00:3e:39:85:1a:b4:f9:45: 2c:07:42:1d:c8:f1:61:f1:f2:61:6c:0f:0a:2c:90: 34:e7:ad:62:97:86:f8:0d:2a:5c:25:52:b4:7f:35: ec:4a:8e:3b:99:ac:69:8f:79:00:56:58:3d:a1:26: c6:f6:0b:93:5c:92:c6:e6:a1:ee:47:fe:10:4c:2d: 03:3e:35:5a:b4:47:2f:fb:ce:8b:7f:83:8c:a3:4d: 3c:ce:9d:9e:2e:22:e8:3a:3f:39:af:a5:4e:01:87: c8:ed:54:dd:ac:46:e9:1b:bb:2e:11:35:ec:4b:c2: 63:9e:3d:dd:9d:69:ed:7b:3c:a1:38:85:e3:24:d2: 10:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:6E:2D:91:F6:27:52:D2:FA:64:01:A8:B4:AA:5D:33:55:D6:2E:29 X509v3 Authority Key Identifier: keyid:EF:FE:71:94:4C:D7:DF:CA:7F:BD:C6:EF:06:3C:9A:6D:28:BB:47:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:cf:21:4d:89:d1:71:6a:cb:0e:68:f3:7f:15:c0:22:cb:41: 4f:44:2f:b9:e3:bf:91:27:3c:6f:e1:f5:9e:fb:ab:46:36:cc: bf:49:7e:9d:89:ff:0d:a2:1e:be:8e:82:5b:09:77:c2:85:50: 95:67:b8:4b:22:70:e1:b9:a2:4b:25:f8:86:54:8b:45:18:49: dc:69:43:ce:8d:e7:34:5b:de:58:e6:c3:fb:21:c6:46:e5:a7: 20:f4:ca:c5:45:40:ed:95:06:63:54:7b:c2:84:ee:98:0d:84: 0d:c2:4f:5d:d7:32:a6:26:a9:ef:58:65:d8:71:e2:a3:86:cc: ab:2e:c3:95:76:c8:16:db:0b:40:b2:60:44:43:c6:20:e3:7d: a2:6d:2b:d9:6f:42:f0:d3:3e:e1:4c:33:14:1e:43:2f:e9:a9: 0a:26:0a:24:3a:e5:b9:5e:bc:a7:b4:07:82:ab:3d:ba:28:b0: 48:36:ab:c1:03:69:99:22:56:7c:a9:cc:5e:d2:dc:4d:52:f6: b9:0f:69:74:86:67:e6:b0:60:89:d8:0e:33:85:3d:b8:f5:49: 03:c7:8f:ac:cd:8f:65:81:91:89:e5:8e:04:33:41:94:3f:07: 7a:5a:40:6f:db:cb:43:4d:2e:66:0b:48:6f:7c:fd:cd:e3:b3: 86:15:8b:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTT8cNLINwHB4rEdEb4Ljwy++nzgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZGRTcxOTQ0Q0Q3REZDQTdGQkRDNkVGMDYzQzlBNkQy OEJCNDdFNzAeFw0yNjA1MTIwNDAzNDNaFw0yNjA1MTMwNzM2NDNaMDMxMTAvBgNV BAMTKDJENkUyRDkxRjYyNzUyRDJGQTY0MDFBOEI0QUE1RDMzNTVENjJFMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDk1MzG5VpaZ2VSeX/RY6k7VC8d U4Okw7sW3qrAaZJ8hSF9qRxvhzqjr6GNJj+ZF7mC3+fwxlGt0FcI5JvNRyPJXUsE /SBbD4v7xZvUV0tqIj4GkHEfbCoiMlggR/+LBJNrZC3IhRQ09w+9+D66mxXcQLnE cZyfkWhgeEenkeMAPjmFGrT5RSwHQh3I8WHx8mFsDwoskDTnrWKXhvgNKlwlUrR/ NexKjjuZrGmPeQBWWD2hJsb2C5Ncksbmoe5H/hBMLQM+NVq0Ry/7zot/g4yjTTzO nZ4uIug6PzmvpU4Bh8jtVN2sRukbuy4RNexLwmOePd2dae17PKE4heMk0hCRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULW4tkfYnUtL6ZAGotKpdM1XWLikwHwYDVR0j BBgwFoAU7/5xlEzX38p/vcbvBjyabSi7R+cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDU3ZDRkODEtM2JlOC00MjMwLTg5NTktMmRjMmFmOWQwODVlLzAvRUZGRTcxOTQ0 Q0Q3REZDQTdGQkRDNkVGMDYzQzlBNkQyOEJCNDdFNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRkZFNzE5NDRDRDdERkNBN0ZCREM2RUYwNjNDOUE2RDI4QkI0 N0U3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDU3ZDRkODEtM2JlOC00MjMwLTg5 NTktMmRjMmFmOWQwODVlLzAvRUZGRTcxOTQ0Q0Q3REZDQTdGQkRDNkVGMDYzQzlB NkQyOEJCNDdFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAXPIU2J0XFqyw5o838VwCLLQU9EL7njv5En PG/h9Z77q0Y2zL9Jfp2J/w2iHr6OglsJd8KFUJVnuEsicOG5oksl+IZUi0UYSdxp Q86N5zRb3ljmw/shxkblpyD0ysVFQO2VBmNUe8KE7pgNhA3CT13XMqYmqe9YZdhx 4qOGzKsuw5V2yBbbC0CyYERDxiDjfaJtK9lvQvDTPuFMMxQeQy/pqQomCiQ65ble vKe0B4KrPboosEg2q8EDaZkiVnypzF7S3E1S9rkPaXSGZ+awYInYDjOFPbj1SQPH j6zNj2WBkYnljgQzQZQ/B3paQG/by0NNLmYLSG98/c3js4YVi2E= -----END CERTIFICATE-----Generated at Wed May 13 01:44:53 2026 by rpki-client