$ rpki-client -vvf rpki-rsync.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/EF4CD1AC581004419A7468D03FF81EAA25D9E33F.mft File: EF4CD1AC581004419A7468D03FF81EAA25D9E33F.mft (raw, json) Hash identifier: YQZan2HdCp1dU6KXC6gfS5YccLQD2z8rhWw3RPLpmV0= Subject key identifier: 27:DA:8A:CF:A2:6D:ED:59:60:3D:8D:E6:AD:15:C8:E8:F1:E7:F9:E6 Authority key identifier: EF:4C:D1:AC:58:10:04:41:9A:74:68:D0:3F:F8:1E:AA:25:D9:E3:3F Certificate issuer: /CN=EF4CD1AC581004419A7468D03FF81EAA25D9E33F Certificate serial: 5412D2602B208984F6448ACFEE831ADE043725CD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF4CD1AC581004419A7468D03FF81EAA25D9E33F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/EF4CD1AC581004419A7468D03FF81EAA25D9E33F.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 04:40:09 +0000 Manifest this update: Fri 24 Jul 2026 04:35:09 +0000 Manifest next update: Sat 25 Jul 2026 07:56:09 +0000 Files and hashes: 1: EF4CD1AC581004419A7468D03FF81EAA25D9E33F.crl (hash: eUB+m0ONlPwAK+w5hN6kanfTDhWBS54571AYZxJ78Ds=) 2: 3130332e39352e392e302f32342d3234203d3e20313335343838.roa (hash: cCW7eYSWOx2HeGcwXRHzekDYmrW8hp1mJ3VwAjVNaok=) 3: 3130332e39352e382e302f32342d3234203d3e20313335343838.roa (hash: 6xX5hpFI3vfAbJBKIH+olFnqZn+fECnqjvCv45mqV+0=) 4: 3130332e39352e31302e302f32342d3234203d3e20313335343838.roa (hash: 1LTG4MgFRMZ7zoAbplTKMa6nhkiFff/vlGz+LTJuyUg=) 5: 3130332e39352e31312e302f32342d3234203d3e20313335343838.roa (hash: HZ438Kbp42EzorB5guWDSUbAmdr1EsWvtnLwdrcr+sI=) 6: 3130332e39352e382e302f32322d3232203d3e20313335343838.roa (hash: Z1qBcC8HhREP/iS2ZW6nzTxnpSKKD3Oek2Lz09Kit8U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/EF4CD1AC581004419A7468D03FF81EAA25D9E33F.crl rsync://rpki-rsync.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/EF4CD1AC581004419A7468D03FF81EAA25D9E33F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF4CD1AC581004419A7468D03FF81EAA25D9E33F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:30:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:12:d2:60:2b:20:89:84:f6:44:8a:cf:ee:83:1a:de:04:37:25:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EF4CD1AC581004419A7468D03FF81EAA25D9E33F Validity Not Before: Jul 24 04:35:09 2026 GMT Not After : Jul 25 07:56:09 2026 GMT Subject: CN=27DA8ACFA26DED59603D8DE6AD15C8E8F1E7F9E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:b7:61:c7:ac:e2:53:5a:ef:88:49:bf:a4:49: dd:ea:cf:2a:08:6c:86:66:b5:fc:9d:3e:a5:d4:ce: 81:f2:7d:63:a0:80:4c:e0:81:9b:2c:11:7f:30:ef: 44:08:f4:a2:fe:02:fa:fa:0e:c3:80:b6:05:61:d2: 2d:36:df:80:e5:34:da:f0:93:21:fa:ad:f0:7f:f6: 2e:32:b7:b9:b7:fa:e5:32:fc:af:7f:f2:50:80:74: f6:1b:f4:0f:9f:74:c9:2a:44:39:82:97:1f:3c:66: 23:24:04:a6:6f:99:e9:40:1b:53:e7:63:b8:4b:c8: 45:a4:54:13:b9:fa:ed:eb:a9:02:df:f3:88:42:4a: 52:c9:c0:96:ce:75:ee:de:90:dc:28:3f:0f:5c:54: 8f:c1:ff:d5:37:38:16:3c:f7:5f:d0:99:25:d3:23: f2:02:24:2c:60:33:d9:96:5e:f2:a8:ce:1d:e8:71: 9e:fb:f4:9b:94:28:c4:c8:c8:98:e2:e9:93:fe:41: f2:21:c5:58:44:91:5a:f4:04:dd:ed:88:df:11:8f: 7f:8a:7c:5c:0d:c4:31:5d:f6:7a:18:f9:b4:22:0a: e0:ae:a5:03:ec:c9:18:b5:e9:12:f1:d4:80:7e:b2: 06:11:88:09:87:e1:ac:41:b8:d1:5c:64:92:c7:de: c9:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:DA:8A:CF:A2:6D:ED:59:60:3D:8D:E6:AD:15:C8:E8:F1:E7:F9:E6 X509v3 Authority Key Identifier: keyid:EF:4C:D1:AC:58:10:04:41:9A:74:68:D0:3F:F8:1E:AA:25:D9:E3:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/EF4CD1AC581004419A7468D03FF81EAA25D9E33F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF4CD1AC581004419A7468D03FF81EAA25D9E33F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/EF4CD1AC581004419A7468D03FF81EAA25D9E33F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:98:fa:d6:ea:80:92:32:71:5e:57:7c:b4:f1:74:cf:65:bc: 55:86:7c:16:cd:b5:95:a2:9b:3a:84:a3:5b:59:dc:7a:1b:ca: 6a:b3:da:df:c3:3a:93:41:0b:d6:fc:70:52:98:87:7f:ae:2d: 28:39:74:6a:e9:d4:ae:ed:a7:cd:29:45:d6:70:db:0e:7b:93: 04:64:cb:20:d2:07:88:d9:66:46:e2:71:fc:35:39:bd:43:31: cb:47:56:da:b2:b2:e7:0f:bb:4d:bd:6f:17:89:05:e1:b7:76: 9f:a6:00:90:b4:e8:c5:5e:4a:20:d5:1b:4d:c2:0c:b3:46:3b: 78:eb:fe:82:92:a7:da:06:5d:49:c9:32:e1:31:bf:87:68:fb: aa:53:9b:98:e7:b7:d9:b4:86:26:1a:45:73:bc:76:50:e4:fe: 17:79:b7:8d:ea:98:34:7d:23:2c:66:42:7e:f6:6b:ce:10:b1: da:f2:69:66:46:1d:66:8c:9d:32:e3:b8:51:7e:9e:49:d1:6c: 24:d4:9b:ae:62:f9:cd:8c:90:33:19:f6:69:23:60:d6:35:51: 0f:f6:47:93:9d:47:3e:58:34:7f:67:d5:20:53:bf:56:d0:54: 0e:9d:16:65:d2:e7:14:7f:cb:0b:22:83:e8:74:f8:22:a1:55: b9:43:ca:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVBLSYCsgiYT2RIrP7oMa3gQ3Jc0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUY0Q0QxQUM1ODEwMDQ0MTlBNzQ2OEQwM0ZGODFFQUEy NUQ5RTMzRjAeFw0yNjA3MjQwNDM1MDlaFw0yNjA3MjUwNzU2MDlaMDMxMTAvBgNV BAMTKDI3REE4QUNGQTI2REVENTk2MDNEOERFNkFEMTVDOEU4RjFFN0Y5RTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4t2HHrOJTWu+ISb+kSd3qzyoI bIZmtfydPqXUzoHyfWOggEzggZssEX8w70QI9KL+Avr6DsOAtgVh0i0234DlNNrw kyH6rfB/9i4yt7m3+uUy/K9/8lCAdPYb9A+fdMkqRDmClx88ZiMkBKZvmelAG1Pn Y7hLyEWkVBO5+u3rqQLf84hCSlLJwJbOde7ekNwoPw9cVI/B/9U3OBY891/QmSXT I/ICJCxgM9mWXvKozh3ocZ779JuUKMTIyJji6ZP+QfIhxVhEkVr0BN3tiN8Rj3+K fFwNxDFd9noY+bQiCuCupQPsyRi16RLx1IB+sgYRiAmH4axBuNFcZJLH3sndAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ9qKz6Jt7VlgPY3mrRXI6PHn+eYwHwYDVR0j BBgwFoAU70zRrFgQBEGadGjQP/geqiXZ4z8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTM2NDY1ZWMtOTE2MC00NTliLThkMTEtOTQ4ZmMyNmRhMWMwLzAvRUY0Q0QxQUM1 ODEwMDQ0MTlBNzQ2OEQwM0ZGODFFQUEyNUQ5RTMzRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRjRDRDFBQzU4MTAwNDQxOUE3NDY4RDAzRkY4MUVBQTI1RDlF MzNGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTM2NDY1ZWMtOTE2MC00NTliLThk MTEtOTQ4ZmMyNmRhMWMwLzAvRUY0Q0QxQUM1ODEwMDQ0MTlBNzQ2OEQwM0ZGODFF QUEyNUQ5RTMzRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH+Y+tbqgJIycV5XfLTxdM9lvFWGfBbNtZWi mzqEo1tZ3Hobymqz2t/DOpNBC9b8cFKYh3+uLSg5dGrp1K7tp80pRdZw2w57kwRk yyDSB4jZZkbicfw1Ob1DMctHVtqysucPu029bxeJBeG3dp+mAJC06MVeSiDVG03C DLNGO3jr/oKSp9oGXUnJMuExv4do+6pTm5jnt9m0hiYaRXO8dlDk/hd5t43qmDR9 IyxmQn72a84QsdryaWZGHWaMnTLjuFF+nknRbCTUm65i+c2MkDMZ9mkjYNY1UQ/2 R5OdRz5YNH9n1SBTv1bQVA6dFmXS5xR/ywsig+h0+CKhVblDyhc= -----END CERTIFICATE-----Generated at Fri Jul 24 07:41:16 2026 by rpki-client