$ rpki-client -vvf rpki-rsync.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/EFFB61EDA88A3976415A737CCC5A79284C873C9A.mft File: EFFB61EDA88A3976415A737CCC5A79284C873C9A.mft (raw, json) Hash identifier: JYXrEbtgBaS0twKUaphKc1kuGmp/PAWu3E71+9036ho= Subject key identifier: 2A:1E:04:CB:C9:AB:99:C5:15:5D:65:1B:5D:CA:92:F1:48:B4:0C:FD Authority key identifier: EF:FB:61:ED:A8:8A:39:76:41:5A:73:7C:CC:5A:79:28:4C:87:3C:9A Certificate issuer: /CN=EFFB61EDA88A3976415A737CCC5A79284C873C9A Certificate serial: 6E236837B8E6F41C5C7C1258A748A63591324710 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFFB61EDA88A3976415A737CCC5A79284C873C9A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/EFFB61EDA88A3976415A737CCC5A79284C873C9A.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 05:21:02 +0000 Manifest this update: Fri 24 Jul 2026 05:16:02 +0000 Manifest next update: Sat 25 Jul 2026 05:35:02 +0000 Files and hashes: 1: 3130332e3138302e3235302e302f32332d3234203d3e20313439333733.roa (hash: vH86OJq5h4E6zeVZwHKL6SywoMe0OW/Y/A2U521Svpk=) 2: EFFB61EDA88A3976415A737CCC5A79284C873C9A.crl (hash: +4fc2asbUua0ncLro4X6MR3CoOCHe9vKpxeTpzaOetc=) 3: 3130332e3138302e3235302e302f32342d3234203d3e20313439333733.roa (hash: nufJv2+uWrvJ0SWNkLs+ilFdAkkva6iaz1eW145f0T4=) 4: 3130332e3138302e3235302e302f32332d3233203d3e20313439333733.roa (hash: sUl2bhI+otw0/fJ4SBeJRv38sPuRgClkXdfSCpnmx2w=) 5: 3130332e3138302e3235312e302f32342d3234203d3e20313439333733.roa (hash: 5roj2kNLZ/Aw2sfH4UoUgbfgaCTs5klpBUiJr4UV8hE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/EFFB61EDA88A3976415A737CCC5A79284C873C9A.crl rsync://rpki-rsync.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/EFFB61EDA88A3976415A737CCC5A79284C873C9A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFFB61EDA88A3976415A737CCC5A79284C873C9A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:30:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:23:68:37:b8:e6:f4:1c:5c:7c:12:58:a7:48:a6:35:91:32:47:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFFB61EDA88A3976415A737CCC5A79284C873C9A Validity Not Before: Jul 24 05:16:02 2026 GMT Not After : Jul 25 05:35:02 2026 GMT Subject: CN=2A1E04CBC9AB99C5155D651B5DCA92F148B40CFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:72:cf:30:5f:ce:c4:a4:3d:34:c5:66:ac:0f: c6:48:26:a6:90:e6:a6:db:62:ec:e0:63:b2:bd:30: 6d:99:14:f5:71:8f:1e:75:55:c8:ff:37:bf:78:27: 65:3c:13:3a:13:b9:a0:98:a9:c8:ee:78:73:c4:c2: fd:9e:dc:d8:f8:5f:34:55:f3:a2:d0:9b:8b:cb:f4: 0d:8f:64:bb:0e:4d:c6:9b:ff:22:1f:2a:a0:f0:87: fc:e4:d0:f9:07:fa:a8:c5:3f:c8:17:a5:da:67:4e: 00:07:2a:97:b5:e4:d4:cc:da:7e:be:ec:7a:8b:8b: 8c:55:70:fd:7c:23:77:69:50:57:16:06:57:b5:6a: 4c:d7:0b:fe:ea:97:5d:11:2d:ce:b4:b8:15:19:cf: 86:d5:11:db:d5:91:2e:ea:89:75:de:03:f7:13:c2: 73:38:b4:34:56:94:b9:82:4f:7b:e5:c1:eb:15:49: 0c:f4:1b:d0:16:6f:bb:4c:7f:57:d3:17:9f:30:4f: d8:fe:37:ba:f2:1e:b9:d4:9f:59:7c:50:df:14:ea: 65:e1:d0:ef:c0:fe:48:6f:c7:c1:42:72:56:6b:8d: 42:1d:fc:a6:8e:e3:cc:56:a5:03:cd:48:88:bf:ac: 51:89:3d:0c:e3:12:af:4d:48:00:95:19:1a:22:75: 24:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:1E:04:CB:C9:AB:99:C5:15:5D:65:1B:5D:CA:92:F1:48:B4:0C:FD X509v3 Authority Key Identifier: keyid:EF:FB:61:ED:A8:8A:39:76:41:5A:73:7C:CC:5A:79:28:4C:87:3C:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/EFFB61EDA88A3976415A737CCC5A79284C873C9A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFFB61EDA88A3976415A737CCC5A79284C873C9A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/EFFB61EDA88A3976415A737CCC5A79284C873C9A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:15:9f:5e:f5:29:80:57:0c:d9:ca:69:b8:0e:29:5d:67:3d: d8:e3:95:b7:b8:07:71:ec:9b:61:a4:91:57:67:43:be:cb:60: cc:f3:55:c3:2c:60:7e:3d:54:b8:d9:43:cf:72:fd:10:16:0b: 14:d9:a2:b0:25:6f:45:45:c0:d8:d6:4a:22:c1:45:8c:23:9b: d4:51:73:70:b3:69:51:b2:29:87:4e:de:dd:47:af:1d:75:3d: 3b:4a:01:e8:be:77:86:e3:ba:9c:87:cf:74:d7:0a:94:56:3b: 79:07:98:fe:56:de:44:f8:85:85:9b:97:56:d2:77:4e:25:1c: f6:2e:d3:16:f9:57:1f:b2:09:2b:97:7c:7d:e6:af:98:e7:16: 77:5d:41:40:eb:83:87:84:e4:dc:c0:28:9e:ca:3a:15:96:88: 9d:3a:ff:18:23:84:eb:f0:c8:1c:29:45:1b:e0:ff:40:e3:c4: 61:df:f3:9a:42:73:2a:26:e0:60:7b:2e:2a:53:20:21:2e:ae: c1:57:c4:3c:14:40:c3:c6:bb:fc:a2:a9:20:6b:63:49:b7:29: fd:c0:a6:cc:3d:ed:cc:f2:45:3b:ad:e1:0f:61:a3:48:65:d6: f3:7a:27:cf:ea:7d:85:22:9e:5d:02:84:37:c4:e3:cf:c6:ec: 95:c0:12:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbiNoN7jm9BxcfBJYp0imNZEyRxAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZGQjYxRURBODhBMzk3NjQxNUE3MzdDQ0M1QTc5Mjg0 Qzg3M0M5QTAeFw0yNjA3MjQwNTE2MDJaFw0yNjA3MjUwNTM1MDJaMDMxMTAvBgNV BAMTKDJBMUUwNENCQzlBQjk5QzUxNTVENjUxQjVEQ0E5MkYxNDhCNDBDRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2cs8wX87EpD00xWasD8ZIJqaQ 5qbbYuzgY7K9MG2ZFPVxjx51Vcj/N794J2U8EzoTuaCYqcjueHPEwv2e3Nj4XzRV 86LQm4vL9A2PZLsOTcab/yIfKqDwh/zk0PkH+qjFP8gXpdpnTgAHKpe15NTM2n6+ 7HqLi4xVcP18I3dpUFcWBle1akzXC/7ql10RLc60uBUZz4bVEdvVkS7qiXXeA/cT wnM4tDRWlLmCT3vlwesVSQz0G9AWb7tMf1fTF58wT9j+N7ryHrnUn1l8UN8U6mXh 0O/A/khvx8FCclZrjUId/KaO48xWpQPNSIi/rFGJPQzjEq9NSACVGRoidST1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKh4Ey8mrmcUVXWUbXcqS8Ui0DP0wHwYDVR0j BBgwFoAU7/th7aiKOXZBWnN8zFp5KEyHPJowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTI0OWQzODctNzBjZi00MGU5LTg3NTktOWI4NmUwYzY1MTI4LzAvRUZGQjYxRURB ODhBMzk3NjQxNUE3MzdDQ0M1QTc5Mjg0Qzg3M0M5QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRkZCNjFFREE4OEEzOTc2NDE1QTczN0NDQzVBNzkyODRDODcz QzlBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTI0OWQzODctNzBjZi00MGU5LTg3 NTktOWI4NmUwYzY1MTI4LzAvRUZGQjYxRURBODhBMzk3NjQxNUE3MzdDQ0M1QTc5 Mjg0Qzg3M0M5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADQVn171KYBXDNnKabgOKV1nPdjjlbe4B3Hs m2GkkVdnQ77LYMzzVcMsYH49VLjZQ89y/RAWCxTZorAlb0VFwNjWSiLBRYwjm9RR c3CzaVGyKYdO3t1Hrx11PTtKAei+d4bjupyHz3TXCpRWO3kHmP5W3kT4hYWbl1bS d04lHPYu0xb5Vx+yCSuXfH3mr5jnFnddQUDrg4eE5NzAKJ7KOhWWiJ06/xgjhOvw yBwpRRvg/0DjxGHf85pCcyom4GB7LipTICEursFXxDwUQMPGu/yiqSBrY0m3Kf3A psw97czyRTut4Q9ho0hl1vN6J8/qfYUinl0ChDfE48/G7JXAEmE= -----END CERTIFICATE-----Generated at Fri Jul 24 07:47:01 2026 by rpki-client