$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/EFFB61EDA88A3976415A737CCC5A79284C873C9A.mft File: EFFB61EDA88A3976415A737CCC5A79284C873C9A.mft (raw, json) Hash identifier: D1tGRi+zZ2ecN8i/nyZjbHxvjTqeDTNQt/T77DKPS5Q= Subject key identifier: 52:37:ED:50:5A:D9:BB:CF:D6:2E:B0:CF:5C:9A:63:7A:BC:C3:78:9D Authority key identifier: EF:FB:61:ED:A8:8A:39:76:41:5A:73:7C:CC:5A:79:28:4C:87:3C:9A Certificate issuer: /CN=EFFB61EDA88A3976415A737CCC5A79284C873C9A Certificate serial: 42E2E97106F548953DFF37C2B52F9F393294DF70 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFFB61EDA88A3976415A737CCC5A79284C873C9A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/EFFB61EDA88A3976415A737CCC5A79284C873C9A.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 22:28:50 +0000 Manifest this update: Wed 23 Sep 2026 22:23:50 +0000 Manifest next update: Thu 24 Sep 2026 22:50:50 +0000 Files and hashes: 1: 3130332e3138302e3235302e302f32332d3233203d3e20313439333733.roa (hash: sUl2bhI+otw0/fJ4SBeJRv38sPuRgClkXdfSCpnmx2w=) 2: 3130332e3138302e3235302e302f32332d3234203d3e20313439333733.roa (hash: vH86OJq5h4E6zeVZwHKL6SywoMe0OW/Y/A2U521Svpk=) 3: 3130332e3138302e3235302e302f32342d3234203d3e20313439333733.roa (hash: nufJv2+uWrvJ0SWNkLs+ilFdAkkva6iaz1eW145f0T4=) 4: EFFB61EDA88A3976415A737CCC5A79284C873C9A.crl (hash: sQYTZMEElA390PssESQoOYcr5YTLSpQVMDn4Zk1Y4CI=) 5: 3130332e3138302e3235312e302f32342d3234203d3e20313439333733.roa (hash: 5roj2kNLZ/Aw2sfH4UoUgbfgaCTs5klpBUiJr4UV8hE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/EFFB61EDA88A3976415A737CCC5A79284C873C9A.crl rsync://rpki-rsync.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/EFFB61EDA88A3976415A737CCC5A79284C873C9A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFFB61EDA88A3976415A737CCC5A79284C873C9A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 22:50:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:e2:e9:71:06:f5:48:95:3d:ff:37:c2:b5:2f:9f:39:32:94:df:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFFB61EDA88A3976415A737CCC5A79284C873C9A Validity Not Before: Sep 23 22:23:50 2026 GMT Not After : Sep 24 22:50:50 2026 GMT Subject: CN=5237ED505AD9BBCFD62EB0CF5C9A637ABCC3789D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b2:90:cd:45:ad:2a:43:d4:42:d0:73:d8:8e: 01:a6:4e:c9:73:93:79:6f:5d:7f:e9:30:08:ee:18: 1a:75:5b:48:12:e0:a1:a1:d2:6f:e6:67:c8:61:97: 2b:86:a3:c1:f1:82:6b:17:d8:b2:17:e1:ff:7f:5b: 51:1c:7a:de:b2:d1:d8:e9:9d:96:b4:da:eb:6f:c4: fd:4c:0e:93:c9:eb:df:85:44:d7:f6:5f:23:e0:cd: a1:c3:f5:fe:b8:1d:0b:7a:dd:5a:fd:73:b4:2f:1b: 45:0b:a0:73:8e:8d:3b:6c:c0:e9:cd:c0:d4:55:13: 3f:1e:82:68:fd:e3:a6:84:14:e6:88:d9:47:ce:00: d7:a5:a1:e3:84:05:91:68:05:bc:f2:f9:57:c7:39: de:74:54:bd:a7:d0:64:fd:12:cf:62:a1:f2:00:1b: 79:06:80:e2:bf:49:d4:e7:be:9f:d7:b1:16:50:42: fb:04:09:ba:1f:c0:58:1a:8c:86:a0:68:2d:20:3a: 72:df:01:d8:dd:43:8f:b4:a3:cb:e1:4b:93:47:89: 91:fd:ab:c3:61:82:63:61:4c:ce:a8:a8:df:9d:c9: 96:5b:23:07:49:60:44:2b:be:58:39:0e:3b:eb:4d: 72:a0:37:d3:ca:56:1f:ee:94:dc:15:f6:bf:01:e0: 6d:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:37:ED:50:5A:D9:BB:CF:D6:2E:B0:CF:5C:9A:63:7A:BC:C3:78:9D X509v3 Authority Key Identifier: keyid:EF:FB:61:ED:A8:8A:39:76:41:5A:73:7C:CC:5A:79:28:4C:87:3C:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/EFFB61EDA88A3976415A737CCC5A79284C873C9A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFFB61EDA88A3976415A737CCC5A79284C873C9A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/EFFB61EDA88A3976415A737CCC5A79284C873C9A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:6b:67:81:37:be:11:ff:f0:49:39:c6:9c:b7:6a:68:bd:fd: 1e:1f:71:69:aa:a4:bb:66:3c:41:22:80:7a:26:6c:e1:e2:72: 76:05:94:8c:2e:74:5d:bc:3b:04:9e:33:4d:c4:0c:82:b6:18: a4:de:9e:9c:bb:45:ed:3c:19:55:06:14:25:a5:a8:78:14:d7: 86:fa:01:f9:52:02:e3:73:1b:2f:6c:ba:7e:36:64:f2:8e:b9: 98:b5:86:54:c6:db:6d:01:a4:d1:64:7d:bb:c9:a2:0f:db:7a: 58:30:98:61:44:d5:2d:62:67:bc:b6:3f:3c:2a:5b:6d:c3:6f: da:96:50:68:ca:7b:d5:49:b2:7c:27:fd:fc:3e:54:11:05:ef: 1b:54:ac:27:ef:99:ea:4d:7b:da:2f:50:e4:11:9f:04:c0:b8: b7:eb:d2:70:83:e9:16:2f:55:0c:3d:b9:c2:a8:6c:bd:7f:5f: b4:7f:82:d2:be:ae:03:0a:e0:75:ce:69:15:97:70:0a:48:85: 95:c9:25:1d:fa:2d:e9:22:0a:57:52:3b:5a:26:ba:34:1f:5e: 40:7e:68:e9:45:32:78:7d:b1:7f:5f:83:98:5a:aa:92:aa:a7: 05:61:49:df:6a:a4:dc:a0:2c:4b:20:db:6e:ed:f3:d0:4e:45: 2f:dd:02:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQuLpcQb1SJU9/zfCtS+fOTKU33AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZGQjYxRURBODhBMzk3NjQxNUE3MzdDQ0M1QTc5Mjg0 Qzg3M0M5QTAeFw0yNjA5MjMyMjIzNTBaFw0yNjA5MjQyMjUwNTBaMDMxMTAvBgNV BAMTKDUyMzdFRDUwNUFEOUJCQ0ZENjJFQjBDRjVDOUE2MzdBQkNDMzc4OUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCispDNRa0qQ9RC0HPYjgGmTslz k3lvXX/pMAjuGBp1W0gS4KGh0m/mZ8hhlyuGo8HxgmsX2LIX4f9/W1Ecet6y0djp nZa02utvxP1MDpPJ69+FRNf2XyPgzaHD9f64HQt63Vr9c7QvG0ULoHOOjTtswOnN wNRVEz8egmj946aEFOaI2UfOANeloeOEBZFoBbzy+VfHOd50VL2n0GT9Es9iofIA G3kGgOK/SdTnvp/XsRZQQvsECbofwFgajIagaC0gOnLfAdjdQ4+0o8vhS5NHiZH9 q8NhgmNhTM6oqN+dyZZbIwdJYEQrvlg5DjvrTXKgN9PKVh/ulNwV9r8B4G03AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUjftUFrZu8/WLrDPXJpjerzDeJ0wHwYDVR0j BBgwFoAU7/th7aiKOXZBWnN8zFp5KEyHPJowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTI0OWQzODctNzBjZi00MGU5LTg3NTktOWI4NmUwYzY1MTI4LzAvRUZGQjYxRURB ODhBMzk3NjQxNUE3MzdDQ0M1QTc5Mjg0Qzg3M0M5QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRkZCNjFFREE4OEEzOTc2NDE1QTczN0NDQzVBNzkyODRDODcz QzlBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTI0OWQzODctNzBjZi00MGU5LTg3 NTktOWI4NmUwYzY1MTI4LzAvRUZGQjYxRURBODhBMzk3NjQxNUE3MzdDQ0M1QTc5 Mjg0Qzg3M0M5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGBrZ4E3vhH/8Ek5xpy3ami9/R4fcWmqpLtm PEEigHombOHicnYFlIwudF28OwSeM03EDIK2GKTenpy7Re08GVUGFCWlqHgU14b6 AflSAuNzGy9sun42ZPKOuZi1hlTG220BpNFkfbvJog/belgwmGFE1S1iZ7y2Pzwq W23Db9qWUGjKe9VJsnwn/fw+VBEF7xtUrCfvmepNe9ovUOQRnwTAuLfr0nCD6RYv VQw9ucKobL1/X7R/gtK+rgMK4HXOaRWXcApIhZXJJR36LekiCldSO1omujQfXkB+ aOlFMnh9sX9fg5haqpKqpwVhSd9qpNygLEsg227t89BORS/dApo= -----END CERTIFICATE-----Generated at Thu Sep 24 08:24:23 2026 by rpki-client