$ rpki-client -vvf rpki-rsync.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/EF44D1A95206A20CB3AB52607DC981EEC1AA8744.mft File: EF44D1A95206A20CB3AB52607DC981EEC1AA8744.mft (raw, json) Hash identifier: /+GAhbvOwUWEaiykNuwF6MKE3oKXH7sdx6TrfdjINC0= Subject key identifier: 65:80:3F:1D:C0:3A:98:F2:FA:AF:E6:9E:58:23:4E:C8:CA:33:2B:81 Authority key identifier: EF:44:D1:A9:52:06:A2:0C:B3:AB:52:60:7D:C9:81:EE:C1:AA:87:44 Certificate issuer: /CN=EF44D1A95206A20CB3AB52607DC981EEC1AA8744 Certificate serial: 287EDD7E0305CA72DAB572F13B6D1600C77DEE61 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF44D1A95206A20CB3AB52607DC981EEC1AA8744.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/EF44D1A95206A20CB3AB52607DC981EEC1AA8744.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 06:22:07 +0000 Manifest this update: Fri 24 Jul 2026 06:17:07 +0000 Manifest next update: Sat 25 Jul 2026 10:02:07 +0000 Files and hashes: 1: 3130332e33392e37342e302f32332d3234203d3e20313530323732.roa (hash: BnM/pd6T0nNd5d7QI+jI59NRWk0b0EsbuiWKkA+Hh+0=) 2: EF44D1A95206A20CB3AB52607DC981EEC1AA8744.crl (hash: K+6r0jBe3FA7aiBy0gUlqkI1JFiYiqEZITrWtJXRC20=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/EF44D1A95206A20CB3AB52607DC981EEC1AA8744.crl rsync://rpki-rsync.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/EF44D1A95206A20CB3AB52607DC981EEC1AA8744.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF44D1A95206A20CB3AB52607DC981EEC1AA8744.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:7e:dd:7e:03:05:ca:72:da:b5:72:f1:3b:6d:16:00:c7:7d:ee:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EF44D1A95206A20CB3AB52607DC981EEC1AA8744 Validity Not Before: Jul 24 06:17:07 2026 GMT Not After : Jul 25 10:02:07 2026 GMT Subject: CN=65803F1DC03A98F2FAAFE69E58234EC8CA332B81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:2b:62:b4:a4:6a:27:ea:2a:95:33:c0:d3:05: a9:54:32:ca:24:c9:12:90:07:4e:e5:55:62:1a:9c: bd:13:cf:46:36:27:99:df:2f:72:bf:3d:80:dc:fa: 23:17:ac:16:67:49:36:5e:0b:af:5d:ac:2b:74:14: 1e:bb:4e:d1:3a:1c:77:0e:89:37:15:76:14:aa:3b: 4c:7d:35:a2:fd:07:b9:50:e9:3c:59:ce:04:ee:24: be:6e:8a:60:fd:ce:22:9f:e7:cd:45:da:83:a8:0a: ed:43:e9:a6:a5:e8:dd:c2:ec:de:fa:7e:c7:83:42: 66:10:5e:52:d4:dd:b7:b4:82:62:66:f2:61:f4:90: b8:73:1d:c6:a0:2b:75:06:75:c9:b9:f8:d7:c0:bc: 8a:f0:e2:e3:b1:aa:3f:ca:bd:60:68:41:45:43:26: 7f:47:ae:a7:5e:e9:58:79:29:bf:f3:44:b8:11:fb: 32:12:1d:7b:a6:84:70:6c:32:c0:58:f7:ab:4f:f6: b9:4a:ab:f2:e2:d6:ef:a9:65:b6:23:5d:8d:75:57: 7e:7e:08:57:d4:6f:75:eb:6e:e6:87:e8:db:cd:c8: a1:de:d0:b1:3a:63:9e:d2:25:47:37:85:8f:34:89: 48:e7:dd:c5:0e:47:a5:40:73:51:63:2c:17:ad:31: ee:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:80:3F:1D:C0:3A:98:F2:FA:AF:E6:9E:58:23:4E:C8:CA:33:2B:81 X509v3 Authority Key Identifier: keyid:EF:44:D1:A9:52:06:A2:0C:B3:AB:52:60:7D:C9:81:EE:C1:AA:87:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/EF44D1A95206A20CB3AB52607DC981EEC1AA8744.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF44D1A95206A20CB3AB52607DC981EEC1AA8744.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/EF44D1A95206A20CB3AB52607DC981EEC1AA8744.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:d3:8b:dd:28:5c:4b:02:39:9e:2c:70:92:e7:c0:5c:4b:f4: 4e:00:e6:e6:d7:2c:45:65:5b:c4:74:ac:c3:37:5a:fb:d4:da: 90:d3:45:c8:e0:55:b9:d3:19:1e:58:e4:6a:f3:a7:00:d3:bb: 0a:be:74:e9:b2:84:07:c4:de:96:d5:2b:33:bc:41:8a:59:a9: 0f:84:87:69:21:38:cc:a4:ba:f3:64:e9:0e:1a:9a:d4:99:d5: 0e:72:90:a6:ad:3f:33:1a:28:8b:82:cf:6e:2a:75:a1:17:90: 91:64:35:d2:8e:af:79:e0:23:d2:0d:46:c4:a2:d5:15:70:24: 26:1e:53:36:c4:a0:e4:a9:5c:ac:15:63:d4:5e:20:b4:af:e8: 88:d6:b7:cc:a9:5f:9a:8c:3a:a7:7a:53:3f:80:f9:2e:03:eb: e7:75:c2:43:36:ef:b7:50:47:58:cf:0b:ec:51:a0:e8:51:af: 12:de:64:ab:c9:ef:19:51:40:4f:50:88:9b:74:de:ba:c8:2a: f6:23:57:0a:d2:8e:f7:1a:45:9a:77:16:98:58:77:9e:19:bb: 9c:8e:b2:e9:a8:cb:e9:95:ca:19:dd:e0:6a:95:f6:0e:ea:b3: 86:c5:8e:f2:f3:c9:79:f5:c9:58:e5:97:b5:cd:28:17:9d:05: 31:fa:27:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKH7dfgMFynLatXLxO20WAMd97mEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUY0NEQxQTk1MjA2QTIwQ0IzQUI1MjYwN0RDOTgxRUVD MUFBODc0NDAeFw0yNjA3MjQwNjE3MDdaFw0yNjA3MjUxMDAyMDdaMDMxMTAvBgNV BAMTKDY1ODAzRjFEQzAzQTk4RjJGQUFGRTY5RTU4MjM0RUM4Q0EzMzJCODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjK2K0pGon6iqVM8DTBalUMsok yRKQB07lVWIanL0Tz0Y2J5nfL3K/PYDc+iMXrBZnSTZeC69drCt0FB67TtE6HHcO iTcVdhSqO0x9NaL9B7lQ6TxZzgTuJL5uimD9ziKf581F2oOoCu1D6aal6N3C7N76 fseDQmYQXlLU3be0gmJm8mH0kLhzHcagK3UGdcm5+NfAvIrw4uOxqj/KvWBoQUVD Jn9Hrqde6Vh5Kb/zRLgR+zISHXumhHBsMsBY96tP9rlKq/Li1u+pZbYjXY11V35+ CFfUb3XrbuaH6NvNyKHe0LE6Y57SJUc3hY80iUjn3cUOR6VAc1FjLBetMe7tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZYA/HcA6mPL6r+aeWCNOyMozK4EwHwYDVR0j BBgwFoAU70TRqVIGogyzq1JgfcmB7sGqh0QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2UxOWFiYzgtODUwNy00MWVkLTgyODktN2UzYWM3YjI0OTM1LzAvRUY0NEQxQTk1 MjA2QTIwQ0IzQUI1MjYwN0RDOTgxRUVDMUFBODc0NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRjQ0RDFBOTUyMDZBMjBDQjNBQjUyNjA3REM5ODFFRUMxQUE4 NzQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2UxOWFiYzgtODUwNy00MWVkLTgy ODktN2UzYWM3YjI0OTM1LzAvRUY0NEQxQTk1MjA2QTIwQ0IzQUI1MjYwN0RDOTgx RUVDMUFBODc0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFHTi90oXEsCOZ4scJLnwFxL9E4A5ubXLEVl W8R0rMM3WvvU2pDTRcjgVbnTGR5Y5GrzpwDTuwq+dOmyhAfE3pbVKzO8QYpZqQ+E h2khOMykuvNk6Q4amtSZ1Q5ykKatPzMaKIuCz24qdaEXkJFkNdKOr3ngI9INRsSi 1RVwJCYeUzbEoOSpXKwVY9ReILSv6IjWt8ypX5qMOqd6Uz+A+S4D6+d1wkM277dQ R1jPC+xRoOhRrxLeZKvJ7xlRQE9QiJt03rrIKvYjVwrSjvcaRZp3FphYd54Zu5yO sumoy+mVyhnd4GqV9g7qs4bFjvLzyXn1yVjll7XNKBedBTH6J94= -----END CERTIFICATE-----Generated at Fri Jul 24 12:10:42 2026 by rpki-client