$ rpki-client -vvf rpki-rsync.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/EFA0A80DF71CA377A289711EA4310F3117358BDA.mft File: EFA0A80DF71CA377A289711EA4310F3117358BDA.mft (raw, json) Hash identifier: T+h7R0rWRKWqCBHGc85yWQ73T4mdvIfO15oR+IC7ock= Subject key identifier: 98:11:69:60:C8:5E:AB:6F:3E:A5:D9:39:92:D9:8A:5F:FE:E8:ED:3D Authority key identifier: EF:A0:A8:0D:F7:1C:A3:77:A2:89:71:1E:A4:31:0F:31:17:35:8B:DA Certificate issuer: /CN=EFA0A80DF71CA377A289711EA4310F3117358BDA Certificate serial: 3090A7829039545C7E34F5AFCB10D625C2D00F76 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFA0A80DF71CA377A289711EA4310F3117358BDA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/EFA0A80DF71CA377A289711EA4310F3117358BDA.mft Manifest number: 70 Signing time: Thu 23 Jul 2026 22:17:07 +0000 Manifest this update: Thu 23 Jul 2026 22:12:07 +0000 Manifest next update: Fri 24 Jul 2026 22:53:07 +0000 Files and hashes: 1: EFA0A80DF71CA377A289711EA4310F3117358BDA.crl (hash: ygEfslwGOuCUTSOiOXL3itL5hs2wAi8zVnRj+ojizvo=) 2: 323430333a326530303a3a2f33322d3438203d3e203234353332.roa (hash: 9DAVKa81esoccLZerAJimBEYho7HzR8tvV6sLPxdUYg=) 3: 3130332e3234352e3138302e302f32322d3234203d3e203234353332.roa (hash: HsO0FzJAWLg2u6DKU2yDy0xpq+6RbfKYVFKlBWZw79M=) 4: 3131392e3233352e31362e302f32302d3234203d3e203234353332.roa (hash: a1jLyYlI+XXOuvRXX5wEn6MAtEMedfGoxkqMvx1OXCk=) 5: 32372e3131312e33342e302f32342d3234203d3e203538343737.roa (hash: 1YWuY5HZqKiBZs805+vyXQB+d7lVGfJWx9YMEkEgtvQ=) 6: 34332e3232392e3230342e302f32322d3234203d3e203234353332.roa (hash: BwtyTC6qI4XC3HBbimySaUxc14wJ6nXjYuM/+KpzQMU=) 7: 3230322e3132392e3138342e302f32322d3234203d3e203234353332.roa (hash: CBM38ddIBA7ErC9KFszGB+2Go/rfydEsEM3u2nPHmFA=) 8: 32372e3131312e33322e302f31392d3234203d3e203234353332.roa (hash: Fx9bLePWZd911ErojerGEpVTnf/DxfdXCAQiFRWGMk8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/EFA0A80DF71CA377A289711EA4310F3117358BDA.crl rsync://rpki-rsync.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/EFA0A80DF71CA377A289711EA4310F3117358BDA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFA0A80DF71CA377A289711EA4310F3117358BDA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 22:53:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:90:a7:82:90:39:54:5c:7e:34:f5:af:cb:10:d6:25:c2:d0:0f:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFA0A80DF71CA377A289711EA4310F3117358BDA Validity Not Before: Jul 23 22:12:07 2026 GMT Not After : Jul 24 22:53:07 2026 GMT Subject: CN=98116960C85EAB6F3EA5D93992D98A5FFEE8ED3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:6a:a9:96:9e:f8:50:25:69:11:3d:59:4d:9a: cd:a8:a9:57:98:ef:e1:31:ec:b4:e8:3d:7b:38:2b: 72:5f:fd:83:e8:39:70:47:58:24:6b:60:18:a4:40: b0:21:bf:47:14:ce:cc:cd:cc:59:77:ec:ee:ae:71: bd:d0:00:22:cd:fc:05:45:f2:8f:89:29:ed:8e:11: 12:65:48:bd:fc:a1:ee:94:b4:b4:d7:3c:95:61:5b: cd:ea:65:b3:06:7f:27:20:bd:cf:32:e7:79:7f:51: 46:26:86:21:72:b1:8e:5d:70:d8:0d:6a:16:f6:65: 35:52:93:3f:24:1a:fa:a0:d1:1b:6a:8a:a3:27:af: 49:4a:54:fd:ba:34:ef:36:38:a1:10:fa:6f:e3:68: 82:9e:e0:d9:fd:04:d0:66:5e:c3:b4:e8:10:d9:e5: 2c:fe:32:e9:a7:17:05:b8:a9:c4:ce:15:b1:60:a6: 07:59:6e:5f:e1:0c:64:f6:cf:b7:00:a5:d5:6f:55: bb:0e:4b:3c:82:2a:96:70:62:cb:e3:e3:a2:b1:89: 08:0f:2d:b6:e5:12:eb:15:dd:c3:07:ec:db:e2:d6: e5:2d:aa:c8:2c:bb:10:a5:27:5f:65:c5:e2:3d:d4: 1c:c2:6e:5e:71:a8:1a:29:c9:94:7a:5e:2a:2b:19: bd:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:11:69:60:C8:5E:AB:6F:3E:A5:D9:39:92:D9:8A:5F:FE:E8:ED:3D X509v3 Authority Key Identifier: keyid:EF:A0:A8:0D:F7:1C:A3:77:A2:89:71:1E:A4:31:0F:31:17:35:8B:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/EFA0A80DF71CA377A289711EA4310F3117358BDA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFA0A80DF71CA377A289711EA4310F3117358BDA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/EFA0A80DF71CA377A289711EA4310F3117358BDA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:c9:cd:8b:19:93:8a:71:86:76:d4:27:f0:71:43:f3:19:14: b4:ea:41:9c:10:86:df:05:da:62:fe:0a:a1:0f:02:ce:24:98: 43:0a:ee:e4:45:4c:7d:f1:b3:f4:8b:21:0c:40:50:1c:45:fd: 25:98:30:a2:d4:5b:85:f4:01:20:5c:99:06:2f:80:c6:3c:6a: ef:15:44:84:85:35:4e:7d:c1:cd:b6:07:59:f7:64:13:b4:df: 51:a7:36:58:40:9e:21:84:60:bb:9e:fb:d7:13:5f:92:38:4c: 27:95:80:c3:c8:a5:7f:88:92:a9:b7:ac:98:19:78:a8:a8:d7: 14:b9:c7:36:46:fd:f5:b4:43:b9:63:e8:63:c4:e8:61:49:57: b3:c6:8d:de:e4:66:0f:d0:ff:ef:a2:ef:62:95:e3:b7:31:7d: 1a:05:9f:43:d0:87:61:43:85:b0:6b:31:56:64:bd:77:9d:d3: 10:16:a5:45:d4:7c:79:5e:81:22:a3:44:75:af:83:ab:90:76: 9a:ee:7e:f2:f0:e9:08:44:2c:e2:8f:40:de:16:e6:73:08:da: c1:8e:ff:de:6b:cd:b0:7d:7c:02:96:b6:12:44:34:4e:03:d5: 99:0a:dc:61:8c:8c:cb:86:b6:e6:d9:3f:9b:88:28:da:ea:e4: 16:84:6d:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMJCngpA5VFx+NPWvyxDWJcLQD3YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZBMEE4MERGNzFDQTM3N0EyODk3MTFFQTQzMTBGMzEx NzM1OEJEQTAeFw0yNjA3MjMyMjEyMDdaFw0yNjA3MjQyMjUzMDdaMDMxMTAvBgNV BAMTKDk4MTE2OTYwQzg1RUFCNkYzRUE1RDkzOTkyRDk4QTVGRkVFOEVEM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHaqmWnvhQJWkRPVlNms2oqVeY 7+Ex7LToPXs4K3Jf/YPoOXBHWCRrYBikQLAhv0cUzszNzFl37O6ucb3QACLN/AVF 8o+JKe2OERJlSL38oe6UtLTXPJVhW83qZbMGfycgvc8y53l/UUYmhiFysY5dcNgN ahb2ZTVSkz8kGvqg0RtqiqMnr0lKVP26NO82OKEQ+m/jaIKe4Nn9BNBmXsO06BDZ 5Sz+MumnFwW4qcTOFbFgpgdZbl/hDGT2z7cApdVvVbsOSzyCKpZwYsvj46KxiQgP LbblEusV3cMH7Nvi1uUtqsgsuxClJ19lxeI91BzCbl5xqBopyZR6XiorGb0/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmBFpYMheq28+pdk5ktmKX/7o7T0wHwYDVR0j BBgwFoAU76CoDfcco3eiiXEepDEPMRc1i9owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTQzZTJlNjctYTE3MS00ZDllLWE5MzUtNDA2OTAyYjFlMTNiLzAvRUZBMEE4MERG NzFDQTM3N0EyODk3MTFFQTQzMTBGMzExNzM1OEJEQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRkEwQTgwREY3MUNBMzc3QTI4OTcxMUVBNDMxMEYzMTE3MzU4 QkRBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTQzZTJlNjctYTE3MS00ZDllLWE5 MzUtNDA2OTAyYjFlMTNiLzAvRUZBMEE4MERGNzFDQTM3N0EyODk3MTFFQTQzMTBG MzExNzM1OEJEQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE3JzYsZk4pxhnbUJ/BxQ/MZFLTqQZwQht8F 2mL+CqEPAs4kmEMK7uRFTH3xs/SLIQxAUBxF/SWYMKLUW4X0ASBcmQYvgMY8au8V RISFNU59wc22B1n3ZBO031GnNlhAniGEYLue+9cTX5I4TCeVgMPIpX+Ikqm3rJgZ eKio1xS5xzZG/fW0Q7lj6GPE6GFJV7PGjd7kZg/Q/++i72KV47cxfRoFn0PQh2FD hbBrMVZkvXed0xAWpUXUfHlegSKjRHWvg6uQdprufvLw6QhELOKPQN4W5nMI2sGO /95rzbB9fAKWthJENE4D1ZkK3GGMjMuGtubZP5uIKNrq5BaEbaU= -----END CERTIFICATE-----Generated at Fri Jul 24 11:17:56 2026 by rpki-client