$ rpki-client -vvf rpki-rsync.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/EFBC69859D4CE7D47B71A9D23022FDEA93DF1A02.mft File: EFBC69859D4CE7D47B71A9D23022FDEA93DF1A02.mft (raw, json) Hash identifier: 7ukjPq4M8QE+Fp2HnE7Xi0hB+7QgrG3MhpKggt82iXY= Subject key identifier: 30:95:11:C7:DB:15:F5:B0:55:B4:A6:51:6D:A8:B2:E5:ED:1D:E0:BD Authority key identifier: EF:BC:69:85:9D:4C:E7:D4:7B:71:A9:D2:30:22:FD:EA:93:DF:1A:02 Certificate issuer: /CN=EFBC69859D4CE7D47B71A9D23022FDEA93DF1A02 Certificate serial: 38627EB5E356C7CCF810904B3ED601346E7E6346 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFBC69859D4CE7D47B71A9D23022FDEA93DF1A02.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/EFBC69859D4CE7D47B71A9D23022FDEA93DF1A02.mft Manifest number: 0F Signing time: Tue 12 May 2026 19:30:27 +0000 Manifest this update: Tue 12 May 2026 19:25:27 +0000 Manifest next update: Wed 13 May 2026 22:23:27 +0000 Files and hashes: 1: 3130332e3135362e37342e302f32332d3234203d3e20313431303832.roa (hash: wEHPqNpq5E7BaSWEXPsPlsqnHz7+5ItTw/UwUrelTsw=) 2: EFBC69859D4CE7D47B71A9D23022FDEA93DF1A02.crl (hash: OwYzEXvtT/jMDP8Y6CPHaROhNy2SGmxU0FXZS42dz9A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/EFBC69859D4CE7D47B71A9D23022FDEA93DF1A02.crl rsync://rpki-rsync.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/EFBC69859D4CE7D47B71A9D23022FDEA93DF1A02.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFBC69859D4CE7D47B71A9D23022FDEA93DF1A02.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:62:7e:b5:e3:56:c7:cc:f8:10:90:4b:3e:d6:01:34:6e:7e:63:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFBC69859D4CE7D47B71A9D23022FDEA93DF1A02 Validity Not Before: May 12 19:25:27 2026 GMT Not After : May 13 22:23:27 2026 GMT Subject: CN=309511C7DB15F5B055B4A6516DA8B2E5ED1DE0BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:df:33:df:49:79:b8:58:31:46:a0:36:46:8f: 9d:5d:e9:f1:5e:c9:e1:ef:b6:96:9c:d4:91:fe:20: 37:b0:1a:38:8a:9e:9b:b1:e4:19:96:06:97:5d:0a: 98:4f:43:3d:97:a9:26:2c:90:c7:0c:f3:f8:10:10: 37:22:85:a8:78:c0:6e:41:9a:19:4f:f7:51:a6:c6: 55:3c:a5:ca:0b:db:44:76:65:3e:35:79:c4:05:5b: fd:de:61:87:d0:e3:35:9d:3f:74:70:d2:0c:9a:e4: 1e:ea:2b:eb:c2:bd:40:ce:c9:fd:c4:13:d4:55:f5: 9f:ef:45:41:20:8f:23:e0:1d:84:b2:cf:e2:dc:0d: 4e:3a:01:6e:61:59:6f:f2:a8:56:80:c7:db:91:54: 32:1e:92:45:da:ac:7b:ba:0c:76:fe:cf:17:28:d6: e6:ab:cc:ee:2b:96:df:bf:0b:d4:51:04:80:8f:f7: f4:5e:ff:25:35:93:10:86:9c:ff:cb:13:04:6e:60: 0d:cc:3d:f5:6d:d7:8d:7d:05:80:ac:46:34:33:7d: 25:42:7f:c4:79:81:02:1c:27:7e:43:17:f7:60:f0: 5b:6d:04:84:f8:37:71:d6:37:09:72:e1:3a:2d:2f: f4:3d:d0:6e:0f:9b:05:00:77:07:94:b1:42:4b:a3: eb:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:95:11:C7:DB:15:F5:B0:55:B4:A6:51:6D:A8:B2:E5:ED:1D:E0:BD X509v3 Authority Key Identifier: keyid:EF:BC:69:85:9D:4C:E7:D4:7B:71:A9:D2:30:22:FD:EA:93:DF:1A:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/EFBC69859D4CE7D47B71A9D23022FDEA93DF1A02.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFBC69859D4CE7D47B71A9D23022FDEA93DF1A02.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/EFBC69859D4CE7D47B71A9D23022FDEA93DF1A02.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:76:4e:8b:1a:23:11:07:31:29:2d:86:be:67:5b:34:ba:a1: 6c:8c:8e:60:51:f1:a5:49:ea:25:19:a5:61:61:7e:73:7f:56: 73:b4:d3:4c:1c:41:7b:62:63:4d:f4:35:ae:57:a4:92:b9:d3: 65:cc:62:c6:0f:17:a3:01:81:46:52:54:9b:bc:91:e8:a7:f7: 2e:a4:a2:ba:c6:cf:72:aa:f2:11:eb:18:7f:91:a7:66:8f:b3: 76:31:72:72:e1:f2:a4:92:3d:6a:b8:a3:42:81:9a:e7:21:75: 2a:05:e8:b5:cb:35:3f:10:2e:fa:5b:51:60:a8:28:b8:06:b2: 7a:5c:c1:a1:b6:12:19:13:ca:a1:17:48:af:6a:05:34:0c:ad: 69:28:49:05:28:8e:3e:cd:12:97:49:ca:bd:70:5b:d9:34:d6: 15:25:a9:c8:fe:da:c0:9a:fb:b8:94:15:4e:3f:43:f0:62:b7: b9:4b:c0:31:f9:6c:10:a1:da:03:3e:04:ad:5f:18:45:df:9c: ef:e0:41:c0:7a:ea:54:24:91:99:19:4b:0f:ed:13:a1:ff:3b: 06:fa:1d:ac:13:07:36:f9:ba:77:58:e0:2a:6e:a5:6d:65:55: bc:56:3b:e1:f8:21:60:0b:95:53:a2:f5:27:13:9d:c4:36:30: 44:42:f5:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOGJ+teNWx8z4EJBLPtYBNG5+Y0YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZCQzY5ODU5RDRDRTdENDdCNzFBOUQyMzAyMkZERUE5 M0RGMUEwMjAeFw0yNjA1MTIxOTI1MjdaFw0yNjA1MTMyMjIzMjdaMDMxMTAvBgNV BAMTKDMwOTUxMUM3REIxNUY1QjA1NUI0QTY1MTZEQThCMkU1RUQxREUwQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl3zPfSXm4WDFGoDZGj51d6fFe yeHvtpac1JH+IDewGjiKnpux5BmWBpddCphPQz2XqSYskMcM8/gQEDcihah4wG5B mhlP91GmxlU8pcoL20R2ZT41ecQFW/3eYYfQ4zWdP3Rw0gya5B7qK+vCvUDOyf3E E9RV9Z/vRUEgjyPgHYSyz+LcDU46AW5hWW/yqFaAx9uRVDIekkXarHu6DHb+zxco 1uarzO4rlt+/C9RRBICP9/Re/yU1kxCGnP/LEwRuYA3MPfVt1419BYCsRjQzfSVC f8R5gQIcJ35DF/dg8FttBIT4N3HWNwly4TotL/Q90G4PmwUAdweUsUJLo+tPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMJURx9sV9bBVtKZRbaiy5e0d4L0wHwYDVR0j BBgwFoAU77xphZ1M59R7canSMCL96pPfGgIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjAwMTAyZDAtNzE0Zi00YjUyLTliZTUtZGVkMTZlZGZlNGEyLzAvRUZCQzY5ODU5 RDRDRTdENDdCNzFBOUQyMzAyMkZERUE5M0RGMUEwMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRkJDNjk4NTlENENFN0Q0N0I3MUE5RDIzMDIyRkRFQTkzREYx QTAyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjAwMTAyZDAtNzE0Zi00YjUyLTli ZTUtZGVkMTZlZGZlNGEyLzAvRUZCQzY5ODU5RDRDRTdENDdCNzFBOUQyMzAyMkZE RUE5M0RGMUEwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHR2TosaIxEHMSkthr5nWzS6oWyMjmBR8aVJ 6iUZpWFhfnN/VnO000wcQXtiY030Na5XpJK502XMYsYPF6MBgUZSVJu8kein9y6k orrGz3Kq8hHrGH+Rp2aPs3YxcnLh8qSSPWq4o0KBmuchdSoF6LXLNT8QLvpbUWCo KLgGsnpcwaG2EhkTyqEXSK9qBTQMrWkoSQUojj7NEpdJyr1wW9k01hUlqcj+2sCa +7iUFU4/Q/Bit7lLwDH5bBCh2gM+BK1fGEXfnO/gQcB66lQkkZkZSw/tE6H/Owb6 HawTBzb5undY4CpupW1lVbxWO+H4IWALlVOi9ScTncQ2MERC9WA= -----END CERTIFICATE-----Generated at Tue May 12 22:19:38 2026 by rpki-client