$ rpki-client -vvf rpki-rsync.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E.mft File: EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E.mft (raw, json) Hash identifier: UKfYLK8bQi69iMQpCh2aQ4YIZLOvBgTtT/tjeT6Dukg= Subject key identifier: 8D:88:FB:3A:EC:CB:C6:57:BE:69:C5:66:C7:03:6B:72:E4:98:17:BB Authority key identifier: EF:0D:C3:6F:FE:89:46:F1:04:92:74:EE:88:9B:B9:8C:5A:5A:7D:8E Certificate issuer: /CN=EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E Certificate serial: 38FAA54EE2945B90F87BF66E76D034792D098E57 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E.mft Manifest number: 6D Signing time: Thu 23 Jul 2026 16:04:33 +0000 Manifest this update: Thu 23 Jul 2026 15:59:33 +0000 Manifest next update: Fri 24 Jul 2026 17:48:33 +0000 Files and hashes: 1: 3230322e3137332e31362e302f32312d3234203d3e203234323130.roa (hash: r4SZ6eUQ/WGNZXPblXSjXtHYlTpktiYzvV0LKCEpMuY=) 2: 3138302e3135302e3233322e302f32312d3234203d3e203234323130.roa (hash: ifJJcEjqzU7+xO+rrfiw7+N3sHyu5nZ4TiZzLx8FyiQ=) 3: EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E.crl (hash: ftncX3TPZS/zsHBnBqnMYhg7TiG7hYyVQL2MUkB2Kxo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E.crl rsync://rpki-rsync.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 17:48:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:fa:a5:4e:e2:94:5b:90:f8:7b:f6:6e:76:d0:34:79:2d:09:8e:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E Validity Not Before: Jul 23 15:59:33 2026 GMT Not After : Jul 24 17:48:33 2026 GMT Subject: CN=8D88FB3AECCBC657BE69C566C7036B72E49817BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:89:52:12:72:8c:74:29:ca:2d:9e:d1:86:d9: db:83:e0:7e:fb:e7:91:e8:f8:56:3c:ba:ad:ab:26: 96:f4:af:df:41:27:4a:6d:b4:07:72:1e:6d:93:25: 84:62:a5:33:f5:8c:fb:16:f6:f7:33:d0:f0:38:46: 66:49:bb:33:6a:0d:e1:94:6c:8a:84:1b:e1:45:48: 88:f8:a8:cc:3f:5b:5e:b6:48:3a:3e:44:a7:7a:25: a9:ca:0d:85:f4:82:3b:31:30:8c:9f:b4:66:ca:da: c2:43:db:64:16:5d:a5:5f:8b:a0:d1:c6:08:ec:a0: 0a:13:8c:66:9d:5a:a7:fc:27:b3:7e:20:ab:7a:2f: 77:41:8c:02:8c:68:fa:87:0b:f0:cd:95:d3:25:21: de:f2:74:20:cc:1b:44:6c:b3:73:63:86:79:82:2d: fe:df:84:b8:ee:37:7b:e5:52:e5:ac:a3:44:25:9b: 6b:5e:5f:6d:18:09:9b:df:7e:8b:67:bd:b1:31:4d: 74:78:64:8c:81:23:52:a0:02:f5:8e:55:09:23:8c: d1:69:0f:4d:e9:19:4d:3b:a0:44:88:ce:98:8a:4d: 1f:1a:68:a5:9f:10:af:73:5f:ea:b7:ba:bb:8d:15: 18:fd:de:93:c5:ce:4c:c2:06:96:43:36:92:ba:d5: 3f:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:88:FB:3A:EC:CB:C6:57:BE:69:C5:66:C7:03:6B:72:E4:98:17:BB X509v3 Authority Key Identifier: keyid:EF:0D:C3:6F:FE:89:46:F1:04:92:74:EE:88:9B:B9:8C:5A:5A:7D:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:b8:a0:5f:c3:c1:a5:6e:98:30:07:e7:15:10:d8:e2:3d:79: b3:ec:21:fc:34:41:50:82:76:a3:d5:67:e1:4f:8e:77:49:7e: 16:9f:6e:4d:25:9e:07:e9:03:55:f1:c2:fe:e4:fd:b9:ed:0d: 87:41:a7:db:39:08:bb:42:ff:16:5a:62:c3:6f:1d:89:77:5e: 31:54:9d:40:0d:c3:43:96:d8:ed:35:95:97:f9:6a:5b:9c:2e: a4:d6:fe:3b:19:f5:08:3a:8e:62:08:7d:e7:f8:52:8b:b3:22: b6:99:cd:2c:ec:60:cc:7d:13:08:5f:d3:d9:0a:63:ae:33:13: 57:02:50:6f:d1:b3:ee:b7:1c:c3:07:f0:bf:fb:67:38:20:33: 5f:ea:17:6f:1d:af:61:a7:d3:3b:d7:07:b9:fc:81:c6:d5:fc: 50:8d:bb:55:1b:f3:c9:f1:6e:50:54:07:ea:b7:c9:7a:4c:a6: 54:00:9a:d6:b2:96:5c:73:90:8e:bb:4f:a4:7a:86:2b:e6:a9: d7:c9:7c:f5:7e:b1:f3:36:73:43:6d:35:13:a5:68:31:62:82: e2:93:36:a0:26:5b:c4:fb:ca:d7:b3:68:52:ad:45:ed:30:54: 52:12:75:79:be:38:67:26:57:74:6c:f4:6a:e6:61:9d:4f:b5: 40:e7:3e:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOPqlTuKUW5D4e/ZudtA0eS0JjlcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUYwREMzNkZGRTg5NDZGMTA0OTI3NEVFODg5QkI5OEM1 QTVBN0Q4RTAeFw0yNjA3MjMxNTU5MzNaFw0yNjA3MjQxNzQ4MzNaMDMxMTAvBgNV BAMTKDhEODhGQjNBRUNDQkM2NTdCRTY5QzU2NkM3MDM2QjcyRTQ5ODE3QkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDliVIScox0KcotntGG2duD4H77 55Ho+FY8uq2rJpb0r99BJ0pttAdyHm2TJYRipTP1jPsW9vcz0PA4RmZJuzNqDeGU bIqEG+FFSIj4qMw/W162SDo+RKd6JanKDYX0gjsxMIyftGbK2sJD22QWXaVfi6DR xgjsoAoTjGadWqf8J7N+IKt6L3dBjAKMaPqHC/DNldMlId7ydCDMG0Rss3NjhnmC Lf7fhLjuN3vlUuWso0Qlm2teX20YCZvffotnvbExTXR4ZIyBI1KgAvWOVQkjjNFp D03pGU07oESIzpiKTR8aaKWfEK9zX+q3uruNFRj93pPFzkzCBpZDNpK61T/3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjYj7OuzLxle+acVmxwNrcuSYF7swHwYDVR0j BBgwFoAU7w3Db/6JRvEEknTuiJu5jFpafY4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTAxN2I4MjgtMTdmYS00OGEyLWExMTMtMTQ5Zjk0NjdhMzI4LzAvRUYwREMzNkZG RTg5NDZGMTA0OTI3NEVFODg5QkI5OEM1QTVBN0Q4RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRjBEQzM2RkZFODk0NkYxMDQ5Mjc0RUU4ODlCQjk4QzVBNUE3 RDhFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTAxN2I4MjgtMTdmYS00OGEyLWEx MTMtMTQ5Zjk0NjdhMzI4LzAvRUYwREMzNkZGRTg5NDZGMTA0OTI3NEVFODg5QkI5 OEM1QTVBN0Q4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACG4oF/DwaVumDAH5xUQ2OI9ebPsIfw0QVCC dqPVZ+FPjndJfhafbk0lngfpA1Xxwv7k/bntDYdBp9s5CLtC/xZaYsNvHYl3XjFU nUANw0OW2O01lZf5alucLqTW/jsZ9Qg6jmIIfef4UouzIraZzSzsYMx9Ewhf09kK Y64zE1cCUG/Rs+63HMMH8L/7ZzggM1/qF28dr2Gn0zvXB7n8gcbV/FCNu1Ub88nx blBUB+q3yXpMplQAmtayllxzkI67T6R6hivmqdfJfPV+sfM2c0NtNROlaDFiguKT NqAmW8T7ytezaFKtRe0wVFISdXm+OGcmV3Rs9GrmYZ1PtUDnPi0= -----END CERTIFICATE-----Generated at Fri Jul 24 05:19:21 2026 by rpki-client