$ rpki-client -vvf rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC.mft File: EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC.mft (raw, json) Hash identifier: XTY/jN00ArdEV5zTT2W8MXq1LkfsJY13Cb5kWvCBBMk= Subject key identifier: BC:9E:1A:89:74:8A:07:16:6B:DA:BB:E4:81:8D:3F:8E:92:60:82:BC Authority key identifier: EF:4A:2E:C5:53:79:CA:2F:E3:A7:D2:4D:D2:C2:85:E8:BF:3A:39:FC Certificate issuer: /CN=EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC Certificate serial: 65EA6D32B232892FDBB0727D4179F070EB085818 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 01:00:20 +0000 Manifest this update: Fri 24 Jul 2026 00:55:20 +0000 Manifest next update: Sat 25 Jul 2026 04:50:20 +0000 Files and hashes: 1: 323030313a6466343a363463303a3a2f34382d3438203d3e20313533313430.roa (hash: WBFw33DVjLMzvjb9A+5nTenZ7QhkAKAHSXyABZyuBhE=) 2: EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC.crl (hash: tgaJshDSfvaLwPJuPlKRy70mRBy6orRaUYYHAEZ+mhg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC.crl rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:ea:6d:32:b2:32:89:2f:db:b0:72:7d:41:79:f0:70:eb:08:58:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC Validity Not Before: Jul 24 00:55:20 2026 GMT Not After : Jul 25 04:50:20 2026 GMT Subject: CN=BC9E1A89748A07166BDABBE4818D3F8E926082BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ae:fc:e5:6f:68:61:78:aa:55:20:16:d2:53: 96:a6:7c:56:4f:00:ef:e6:ef:42:ad:87:9c:3d:9f: 11:64:90:a3:e2:75:c3:c9:59:14:ff:d8:39:2f:63: 44:1d:a5:2d:ed:c5:f3:84:3e:f2:fd:7b:e2:31:22: 30:a4:65:a6:58:ca:20:f7:60:8d:25:7a:15:43:16: 6d:fc:0b:db:a2:a8:6b:4e:8d:b9:33:77:76:ac:fe: 81:59:b2:f0:a9:bc:c3:eb:4e:7f:03:dc:28:42:25: db:4a:ab:00:14:63:73:52:a2:54:c8:bf:2c:fc:5a: c3:99:66:d5:79:81:e0:5c:e0:6f:9c:0b:7f:0b:9e: 8c:18:b1:3f:12:fd:4f:b8:db:dc:ad:70:a8:33:c2: c5:10:80:90:4d:2d:21:23:2d:21:3e:14:86:9b:81: e7:3c:bc:bc:94:d3:87:0f:87:90:ef:c2:1d:e4:8e: e9:a6:76:1c:e0:b2:6a:7e:bf:4c:6e:97:c9:e7:93: 15:2d:de:a7:3b:66:07:c6:94:2a:fb:8d:ad:93:5b: f5:14:38:f5:de:10:d7:12:a4:85:79:df:21:ba:10: a1:e7:6a:f6:84:57:c1:d5:f3:73:70:4a:8c:82:5b: 34:08:29:3a:d3:e8:64:c1:69:70:8f:ed:15:50:a7: d9:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:9E:1A:89:74:8A:07:16:6B:DA:BB:E4:81:8D:3F:8E:92:60:82:BC X509v3 Authority Key Identifier: keyid:EF:4A:2E:C5:53:79:CA:2F:E3:A7:D2:4D:D2:C2:85:E8:BF:3A:39:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:2b:dc:be:33:9d:5b:9b:8c:f8:6e:d1:15:ac:ec:86:b7:8a: 0f:7f:96:1b:22:74:7a:77:b0:55:ef:16:fe:ba:ea:6c:8d:3d: 89:a9:26:58:00:1a:b5:7b:45:c3:78:2b:91:78:91:d2:d9:86: 34:30:cd:89:f9:10:26:49:d8:de:15:ba:21:10:f0:ca:cd:01: 2d:08:9e:36:4b:d1:58:e6:70:62:26:38:4a:9d:9c:e5:d8:e2: fd:b6:21:62:4d:83:b7:0a:74:a4:c9:47:38:4d:84:0d:03:eb: e1:9a:0c:f1:af:a0:ef:8d:e4:ef:28:71:8b:cd:51:a1:3c:be: 63:93:4d:d4:b6:5f:eb:3f:58:31:4e:f2:48:ff:7f:bc:70:7f: 2a:54:a1:9c:93:7d:81:7d:a0:ee:9e:da:81:59:cc:7e:89:2c: be:9f:ad:d2:9d:60:87:d4:f5:f5:f3:cd:c8:09:30:7a:75:07: 67:6e:76:91:49:07:1d:d8:17:c6:51:b5:86:98:ca:17:45:1e: b9:ac:12:f1:95:d5:e9:1a:1a:79:15:42:35:35:4c:7c:53:98: e2:a8:a8:02:6d:b3:d7:6d:02:7c:a5:d8:b8:af:51:7a:2b:07: 97:b4:a1:37:49:cd:ac:0e:c7:2f:26:3b:07:86:36:ae:91:5a: 64:f5:66:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZeptMrIyiS/bsHJ9QXnwcOsIWBgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUY0QTJFQzU1Mzc5Q0EyRkUzQTdEMjRERDJDMjg1RThC RjNBMzlGQzAeFw0yNjA3MjQwMDU1MjBaFw0yNjA3MjUwNDUwMjBaMDMxMTAvBgNV BAMTKEJDOUUxQTg5NzQ4QTA3MTY2QkRBQkJFNDgxOEQzRjhFOTI2MDgyQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBrvzlb2hheKpVIBbSU5amfFZP AO/m70Kth5w9nxFkkKPidcPJWRT/2DkvY0QdpS3txfOEPvL9e+IxIjCkZaZYyiD3 YI0lehVDFm38C9uiqGtOjbkzd3as/oFZsvCpvMPrTn8D3ChCJdtKqwAUY3NSolTI vyz8WsOZZtV5geBc4G+cC38LnowYsT8S/U+429ytcKgzwsUQgJBNLSEjLSE+FIab gec8vLyU04cPh5Dvwh3kjummdhzgsmp+v0xul8nnkxUt3qc7ZgfGlCr7ja2TW/UU OPXeENcSpIV53yG6EKHnavaEV8HV83NwSoyCWzQIKTrT6GTBaXCP7RVQp9n9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvJ4aiXSKBxZr2rvkgY0/jpJggrwwHwYDVR0j BBgwFoAU70ouxVN5yi/jp9JN0sKF6L86OfwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2FmY2JmYmItYmEzZi00ZDUzLWEwNGYtMTRkNmY0YmUwY2IxLzEvRUY0QTJFQzU1 Mzc5Q0EyRkUzQTdEMjRERDJDMjg1RThCRjNBMzlGQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRjRBMkVDNTUzNzlDQTJGRTNBN0QyNEREMkMyODVFOEJGM0Ez OUZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2FmY2JmYmItYmEzZi00ZDUzLWEw NGYtMTRkNmY0YmUwY2IxLzEvRUY0QTJFQzU1Mzc5Q0EyRkUzQTdEMjRERDJDMjg1 RThCRjNBMzlGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB0r3L4znVubjPhu0RWs7Ia3ig9/lhsidHp3 sFXvFv666myNPYmpJlgAGrV7RcN4K5F4kdLZhjQwzYn5ECZJ2N4VuiEQ8MrNAS0I njZL0VjmcGImOEqdnOXY4v22IWJNg7cKdKTJRzhNhA0D6+GaDPGvoO+N5O8ocYvN UaE8vmOTTdS2X+s/WDFO8kj/f7xwfypUoZyTfYF9oO6e2oFZzH6JLL6frdKdYIfU 9fXzzcgJMHp1B2dudpFJBx3YF8ZRtYaYyhdFHrmsEvGV1ekaGnkVQjU1THxTmOKo qAJts9dtAnyl2LivUXorB5e0oTdJzawOxy8mOweGNq6RWmT1ZqI= -----END CERTIFICATE-----Generated at Fri Jul 24 10:33:10 2026 by rpki-client