$ rpki-client -vvf rpki-rsync.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7.mft File: EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7.mft (raw, json) Hash identifier: O1q9/U1nLDIe6yvrnMW7275geXc6kJVnQ2/5Lq+TSf0= Subject key identifier: 4D:08:FA:45:22:10:92:10:26:48:D8:A3:31:F4:5E:A7:C5:1A:02:15 Authority key identifier: EF:FE:71:94:4C:D7:DF:CA:7F:BD:C6:EF:06:3C:9A:6D:28:BB:47:E7 Certificate issuer: /CN=EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7 Certificate serial: 5215502506285C5550A09D6DECB0ABB7BE3CBD25 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 11:24:03 +0000 Manifest this update: Tue 02 Jun 2026 11:19:03 +0000 Manifest next update: Wed 03 Jun 2026 12:06:03 +0000 Files and hashes: 1: EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7.crl (hash: z8hpXknVHfGbn7R4EW7X3dJdtJE45XAY4hKqGcccNDM=) 2: 3130332e3134352e3132352e302f32342d3234203d3e20313339343437.roa (hash: iAkXuDNDYQX7aJrJUqwReqIZ7fKNDXS9mw/520ZULDA=) 3: 323030313a6466323a313238303a3a2f34382d3438203d3e20313339343437.roa (hash: Z33O96f3Xi269FHR6g3ynqUeqpUoR3vjVRTvXK+PrwU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7.crl rsync://rpki-rsync.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 12:06:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:15:50:25:06:28:5c:55:50:a0:9d:6d:ec:b0:ab:b7:be:3c:bd:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7 Validity Not Before: Jun 2 11:19:03 2026 GMT Not After : Jun 3 12:06:03 2026 GMT Subject: CN=4D08FA45221092102648D8A331F45EA7C51A0215 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:fc:97:af:21:9c:9b:57:20:2d:76:f3:b1:f6: 88:5d:09:14:83:f5:aa:1b:73:6b:af:b5:a0:ef:0b: 61:33:0f:55:ba:6d:70:e8:d5:78:96:f5:2e:d0:11: b9:a4:18:44:bd:89:9b:5d:03:be:a8:3b:eb:b9:84: f5:a2:49:fe:ad:35:f9:7a:c0:d7:2b:f1:a7:0a:44: a8:08:7d:c2:7c:aa:34:1c:32:80:31:e4:0a:3e:80: 90:bf:e2:a6:ca:a5:be:9a:57:b8:19:4a:68:25:ff: 67:9f:fb:22:3d:3c:88:14:89:88:79:29:29:5b:11: f6:42:bf:f2:4f:b5:92:6f:a2:d6:62:12:cb:ed:ce: 0a:55:26:d0:34:62:1c:3f:c7:ce:4e:3b:5c:05:3f: 3d:a2:03:3b:dc:5b:9c:63:46:e5:05:b2:e2:c9:c5: 94:1b:b1:6f:b3:70:a1:80:11:a5:05:19:77:de:04: 3d:d7:61:11:a2:fd:38:4c:6c:03:f6:12:9d:d2:6b: 25:67:b7:cb:20:24:9e:69:81:0a:0d:69:85:35:5a: e1:98:93:2b:8e:32:98:52:a8:95:7f:d8:e3:03:72: 3e:b1:31:09:34:65:e3:a9:ba:27:c2:4a:09:2f:4e: 11:5d:e1:34:51:24:81:1e:86:12:cd:46:4b:59:e0: 52:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:08:FA:45:22:10:92:10:26:48:D8:A3:31:F4:5E:A7:C5:1A:02:15 X509v3 Authority Key Identifier: keyid:EF:FE:71:94:4C:D7:DF:CA:7F:BD:C6:EF:06:3C:9A:6D:28:BB:47:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:f8:a9:08:f9:ab:8c:03:13:56:58:df:42:c0:ac:23:4f:d6: 94:1f:e8:12:b6:3a:09:ac:93:15:91:f1:44:c0:c4:2f:93:ae: 2f:b7:2b:83:86:62:ec:5a:fa:2b:39:86:1f:48:89:fc:a6:9d: 16:0c:32:71:d5:4c:bf:81:cb:5d:58:0f:6d:8f:ef:a0:51:2c: 5a:69:ef:8e:03:99:dc:88:5f:76:42:1e:54:dd:36:00:10:59: 5c:c2:81:f0:0b:50:73:a4:0a:b9:7b:40:eb:ce:84:ae:14:49: a3:6b:de:7d:32:96:fa:ae:b1:f5:61:31:0f:18:cc:ef:61:8f: 05:88:89:85:ae:4f:4d:04:cd:5b:fa:9a:13:39:3e:b0:be:82: 15:ab:22:d6:0e:95:02:df:aa:78:f4:b8:9c:06:87:0e:54:02: 89:9f:65:1e:fe:c2:ca:3e:2c:64:55:2b:18:4f:f0:8b:34:4d: 10:5b:c2:2f:6d:e8:a7:cf:9d:63:32:e2:68:92:31:e0:65:4c: ee:98:78:a2:b0:a5:c7:07:8d:55:c6:37:13:ef:2f:f2:ce:19: 2b:a9:05:90:fc:dc:8b:dc:0c:ac:7f:46:32:5f:9e:5e:4b:e4: a7:fe:c0:9d:a1:ec:ec:74:d1:e5:f7:60:80:50:1d:60:0d:a2: 81:47:ec:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUhVQJQYoXFVQoJ1t7LCrt748vSUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZGRTcxOTQ0Q0Q3REZDQTdGQkRDNkVGMDYzQzlBNkQy OEJCNDdFNzAeFw0yNjA2MDIxMTE5MDNaFw0yNjA2MDMxMjA2MDNaMDMxMTAvBgNV BAMTKDREMDhGQTQ1MjIxMDkyMTAyNjQ4RDhBMzMxRjQ1RUE3QzUxQTAyMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5/JevIZybVyAtdvOx9ohdCRSD 9aobc2uvtaDvC2EzD1W6bXDo1XiW9S7QEbmkGES9iZtdA76oO+u5hPWiSf6tNfl6 wNcr8acKRKgIfcJ8qjQcMoAx5Ao+gJC/4qbKpb6aV7gZSmgl/2ef+yI9PIgUiYh5 KSlbEfZCv/JPtZJvotZiEsvtzgpVJtA0Yhw/x85OO1wFPz2iAzvcW5xjRuUFsuLJ xZQbsW+zcKGAEaUFGXfeBD3XYRGi/ThMbAP2Ep3SayVnt8sgJJ5pgQoNaYU1WuGY kyuOMphSqJV/2OMDcj6xMQk0ZeOpuifCSgkvThFd4TRRJIEehhLNRktZ4FJbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTQj6RSIQkhAmSNijMfRep8UaAhUwHwYDVR0j BBgwFoAU7/5xlEzX38p/vcbvBjyabSi7R+cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDU3ZDRkODEtM2JlOC00MjMwLTg5NTktMmRjMmFmOWQwODVlLzAvRUZGRTcxOTQ0 Q0Q3REZDQTdGQkRDNkVGMDYzQzlBNkQyOEJCNDdFNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRkZFNzE5NDRDRDdERkNBN0ZCREM2RUYwNjNDOUE2RDI4QkI0 N0U3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDU3ZDRkODEtM2JlOC00MjMwLTg5 NTktMmRjMmFmOWQwODVlLzAvRUZGRTcxOTQ0Q0Q3REZDQTdGQkRDNkVGMDYzQzlB NkQyOEJCNDdFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAET4qQj5q4wDE1ZY30LArCNP1pQf6BK2Ogms kxWR8UTAxC+Tri+3K4OGYuxa+is5hh9IifymnRYMMnHVTL+By11YD22P76BRLFpp 744DmdyIX3ZCHlTdNgAQWVzCgfALUHOkCrl7QOvOhK4USaNr3n0ylvqusfVhMQ8Y zO9hjwWIiYWuT00EzVv6mhM5PrC+ghWrItYOlQLfqnj0uJwGhw5UAomfZR7+wso+ LGRVKxhP8Is0TRBbwi9t6KfPnWMy4miSMeBlTO6YeKKwpccHjVXGNxPvL/LOGSup BZD83IvcDKx/RjJfnl5L5Kf+wJ2h7Ox00eX3YIBQHWANooFH7Fg= -----END CERTIFICATE-----Generated at Wed Jun 3 04:22:30 2026 by rpki-client