$ rpki-client -vvf rpki-rsync.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/EFFB61EDA88A3976415A737CCC5A79284C873C9A.mft File: EFFB61EDA88A3976415A737CCC5A79284C873C9A.mft (raw, json) Hash identifier: 040ifxL1juuxFUlTFfW8M5Yg1s23onWe94w8pEnUEpY= Subject key identifier: 1C:DD:38:5D:69:54:4F:88:04:B3:F2:39:C8:C9:3A:49:97:1C:E4:28 Authority key identifier: EF:FB:61:ED:A8:8A:39:76:41:5A:73:7C:CC:5A:79:28:4C:87:3C:9A Certificate issuer: /CN=EFFB61EDA88A3976415A737CCC5A79284C873C9A Certificate serial: 2753E6DD7319E2D9B5454D7DB613F7AC734AFBFE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFFB61EDA88A3976415A737CCC5A79284C873C9A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/EFFB61EDA88A3976415A737CCC5A79284C873C9A.mft Manifest number: 0F Signing time: Tue 12 May 2026 17:06:50 +0000 Manifest this update: Tue 12 May 2026 17:01:50 +0000 Manifest next update: Wed 13 May 2026 17:32:50 +0000 Files and hashes: 1: 3130332e3138302e3235302e302f32332d3233203d3e20313439333733.roa (hash: sUl2bhI+otw0/fJ4SBeJRv38sPuRgClkXdfSCpnmx2w=) 2: 3130332e3138302e3235302e302f32342d3234203d3e20313439333733.roa (hash: nufJv2+uWrvJ0SWNkLs+ilFdAkkva6iaz1eW145f0T4=) 3: EFFB61EDA88A3976415A737CCC5A79284C873C9A.crl (hash: 7I17fElb6vIIENfyPy9ypKVTVcwr1H5UJ9tauBlUxKc=) 4: 3130332e3138302e3235302e302f32332d3234203d3e20313439333733.roa (hash: vH86OJq5h4E6zeVZwHKL6SywoMe0OW/Y/A2U521Svpk=) 5: 3130332e3138302e3235312e302f32342d3234203d3e20313439333733.roa (hash: 5roj2kNLZ/Aw2sfH4UoUgbfgaCTs5klpBUiJr4UV8hE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/EFFB61EDA88A3976415A737CCC5A79284C873C9A.crl rsync://rpki-rsync.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/EFFB61EDA88A3976415A737CCC5A79284C873C9A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFFB61EDA88A3976415A737CCC5A79284C873C9A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 17:32:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:53:e6:dd:73:19:e2:d9:b5:45:4d:7d:b6:13:f7:ac:73:4a:fb:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFFB61EDA88A3976415A737CCC5A79284C873C9A Validity Not Before: May 12 17:01:50 2026 GMT Not After : May 13 17:32:50 2026 GMT Subject: CN=1CDD385D69544F8804B3F239C8C93A49971CE428 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:81:6a:86:91:79:54:1a:48:9a:f7:5b:a7:39: ee:b8:f2:ef:9d:84:e2:10:1e:0c:69:f4:eb:e1:f5: 28:2a:4c:12:f0:1a:2a:54:f7:7e:81:ee:a0:ae:55: f3:03:a3:25:83:13:5b:67:3a:fe:19:13:48:bc:28: 3e:34:40:5b:11:c0:d1:df:56:2b:f5:86:cc:30:8e: b6:cb:69:2c:9c:3d:ee:e8:19:4a:6e:db:e0:93:a2: af:84:56:6d:87:78:75:6b:f0:e8:13:dc:f0:0a:05: 10:b1:be:78:91:1e:81:f7:e8:87:eb:c9:1d:80:b4: 7e:99:d0:b1:f9:3d:15:d3:ce:a0:a2:b7:bf:13:ef: d0:7f:8d:a2:ec:cd:47:9c:38:5f:9c:8d:e7:4c:d3: 75:cc:e6:0d:7b:48:dd:67:b8:5d:89:d2:e0:d3:e9: 93:b7:d9:58:00:82:27:17:5e:86:e1:85:ea:b3:fe: 33:71:b6:3a:61:31:1b:79:a6:a0:6c:f6:35:ed:37: b9:90:3e:84:93:dd:d7:9e:5e:a7:f7:c6:39:77:ab: 5a:a5:5d:57:9f:3d:ab:97:34:8b:10:34:55:6b:57: 53:40:04:46:10:09:87:86:cc:0f:91:6d:7f:52:52: 52:89:3f:dd:b3:da:25:57:fe:0c:e8:b4:54:dd:a8: 7d:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:DD:38:5D:69:54:4F:88:04:B3:F2:39:C8:C9:3A:49:97:1C:E4:28 X509v3 Authority Key Identifier: keyid:EF:FB:61:ED:A8:8A:39:76:41:5A:73:7C:CC:5A:79:28:4C:87:3C:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/EFFB61EDA88A3976415A737CCC5A79284C873C9A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFFB61EDA88A3976415A737CCC5A79284C873C9A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/EFFB61EDA88A3976415A737CCC5A79284C873C9A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:c3:3a:09:a1:c3:d0:30:3c:28:cc:80:73:ca:d7:91:79:09: e2:dc:23:cd:e1:ab:1c:a5:09:04:a0:73:96:42:9e:5b:e5:6a: 03:b4:ad:7a:65:ee:05:fc:4f:94:13:93:fa:51:07:1e:b2:0b: a5:7a:33:3f:c4:34:1c:12:b6:91:ae:0c:b5:ff:70:cb:78:43: 48:21:3c:b5:fd:57:dd:ad:64:9b:35:d9:b9:b3:cf:56:7d:19: 36:d9:d9:c9:00:ae:86:a2:e9:75:66:78:c7:34:f1:87:2e:a9: 29:af:50:e4:98:2c:c8:e1:3a:ea:55:c0:b4:77:2e:56:6a:e7: 0b:f4:72:bd:d1:8d:eb:6b:6d:49:36:b6:31:d0:38:3f:8a:54: 74:78:10:98:74:a4:db:8f:b2:4f:cd:bf:1b:d0:7c:40:fc:b3: f3:57:e9:dc:8e:b5:02:3a:75:91:e5:fd:9b:e6:81:a2:80:fb: a0:df:d1:79:2d:c6:5f:9d:d4:7f:b9:03:bb:cf:21:95:a9:52: e0:a0:da:87:ed:01:82:de:fa:20:92:1e:c6:ec:9a:92:72:ff: 4b:9d:3e:5c:5f:0b:5a:d1:bb:5c:f1:bc:2b:53:97:20:23:53: 13:ea:bd:31:59:bf:ac:4b:5c:55:c9:59:a8:b2:fb:42:c8:c9: 68:f8:79:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ1Pm3XMZ4tm1RU19thP3rHNK+/4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZGQjYxRURBODhBMzk3NjQxNUE3MzdDQ0M1QTc5Mjg0 Qzg3M0M5QTAeFw0yNjA1MTIxNzAxNTBaFw0yNjA1MTMxNzMyNTBaMDMxMTAvBgNV BAMTKDFDREQzODVENjk1NDRGODgwNEIzRjIzOUM4QzkzQTQ5OTcxQ0U0MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEgWqGkXlUGkia91unOe648u+d hOIQHgxp9Ovh9SgqTBLwGipU936B7qCuVfMDoyWDE1tnOv4ZE0i8KD40QFsRwNHf Viv1hswwjrbLaSycPe7oGUpu2+CToq+EVm2HeHVr8OgT3PAKBRCxvniRHoH36Ifr yR2AtH6Z0LH5PRXTzqCit78T79B/jaLszUecOF+cjedM03XM5g17SN1nuF2J0uDT 6ZO32VgAgicXXobhheqz/jNxtjphMRt5pqBs9jXtN7mQPoST3deeXqf3xjl3q1ql XVefPauXNIsQNFVrV1NABEYQCYeGzA+RbX9SUlKJP92z2iVX/gzotFTdqH2xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHN04XWlUT4gEs/I5yMk6SZcc5CgwHwYDVR0j BBgwFoAU7/th7aiKOXZBWnN8zFp5KEyHPJowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTI0OWQzODctNzBjZi00MGU5LTg3NTktOWI4NmUwYzY1MTI4LzAvRUZGQjYxRURB ODhBMzk3NjQxNUE3MzdDQ0M1QTc5Mjg0Qzg3M0M5QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRkZCNjFFREE4OEEzOTc2NDE1QTczN0NDQzVBNzkyODRDODcz QzlBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTI0OWQzODctNzBjZi00MGU5LTg3 NTktOWI4NmUwYzY1MTI4LzAvRUZGQjYxRURBODhBMzk3NjQxNUE3MzdDQ0M1QTc5 Mjg0Qzg3M0M5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAELDOgmhw9AwPCjMgHPK15F5CeLcI83hqxyl CQSgc5ZCnlvlagO0rXpl7gX8T5QTk/pRBx6yC6V6Mz/ENBwStpGuDLX/cMt4Q0gh PLX9V92tZJs12bmzz1Z9GTbZ2ckAroai6XVmeMc08YcuqSmvUOSYLMjhOupVwLR3 LlZq5wv0cr3RjetrbUk2tjHQOD+KVHR4EJh0pNuPsk/NvxvQfED8s/NX6dyOtQI6 dZHl/ZvmgaKA+6Df0Xktxl+d1H+5A7vPIZWpUuCg2oftAYLe+iCSHsbsmpJy/0ud PlxfC1rRu1zxvCtTlyAjUxPqvTFZv6xLXFXJWaiy+0LIyWj4eWI= -----END CERTIFICATE-----Generated at Wed May 13 04:36:28 2026 by rpki-client