$ rpki-client -vvf rpki-rsync.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/EFFB61EDA88A3976415A737CCC5A79284C873C9A.mft File: EFFB61EDA88A3976415A737CCC5A79284C873C9A.mft (raw, json) Hash identifier: NQp5pkCG9kBMctAIS/TgFHETeNCxhwWnN6ZpUlcJ0lc= Subject key identifier: 3A:97:24:07:4E:37:80:4E:4B:17:C6:74:3C:96:65:78:51:57:D1:74 Authority key identifier: EF:FB:61:ED:A8:8A:39:76:41:5A:73:7C:CC:5A:79:28:4C:87:3C:9A Certificate issuer: /CN=EFFB61EDA88A3976415A737CCC5A79284C873C9A Certificate serial: 29ED524EECB7DC4AB0F1B721A7360671A26687DB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFFB61EDA88A3976415A737CCC5A79284C873C9A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/EFFB61EDA88A3976415A737CCC5A79284C873C9A.mft Manifest number: 2B Signing time: Wed 03 Jun 2026 01:16:18 +0000 Manifest this update: Wed 03 Jun 2026 01:11:18 +0000 Manifest next update: Thu 04 Jun 2026 01:47:18 +0000 Files and hashes: 1: 3130332e3138302e3235302e302f32342d3234203d3e20313439333733.roa (hash: nufJv2+uWrvJ0SWNkLs+ilFdAkkva6iaz1eW145f0T4=) 2: 3130332e3138302e3235302e302f32332d3234203d3e20313439333733.roa (hash: vH86OJq5h4E6zeVZwHKL6SywoMe0OW/Y/A2U521Svpk=) 3: 3130332e3138302e3235302e302f32332d3233203d3e20313439333733.roa (hash: sUl2bhI+otw0/fJ4SBeJRv38sPuRgClkXdfSCpnmx2w=) 4: EFFB61EDA88A3976415A737CCC5A79284C873C9A.crl (hash: 5SdNxiZGIg8AsfVXtdwQp+XjPJBeZj7ATDospQZ0Gco=) 5: 3130332e3138302e3235312e302f32342d3234203d3e20313439333733.roa (hash: 5roj2kNLZ/Aw2sfH4UoUgbfgaCTs5klpBUiJr4UV8hE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/EFFB61EDA88A3976415A737CCC5A79284C873C9A.crl rsync://rpki-rsync.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/EFFB61EDA88A3976415A737CCC5A79284C873C9A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFFB61EDA88A3976415A737CCC5A79284C873C9A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Jun 2026 01:47:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:ed:52:4e:ec:b7:dc:4a:b0:f1:b7:21:a7:36:06:71:a2:66:87:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFFB61EDA88A3976415A737CCC5A79284C873C9A Validity Not Before: Jun 3 01:11:18 2026 GMT Not After : Jun 4 01:47:18 2026 GMT Subject: CN=3A9724074E37804E4B17C6743C9665785157D174 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:2d:07:83:b3:82:2f:fa:00:b8:db:64:70:c6: 42:2c:b7:29:d3:21:1a:10:bb:03:1c:a4:1c:7c:a0: 38:b3:2d:8e:8a:5c:16:fc:07:3a:2a:08:55:36:c4: ca:95:43:1e:6d:5e:06:8d:fc:33:a8:84:31:98:c0: 23:b7:e3:ba:78:61:71:88:4a:5f:ae:d1:68:b3:51: b4:20:32:dc:7c:d4:03:e6:d1:fe:df:e1:e6:92:73: e9:13:2f:d2:48:97:d6:4c:d3:72:8e:e3:2f:d5:ce: 01:dc:18:65:51:32:d0:0d:f6:43:c2:a5:80:0a:d9: e2:d4:3d:38:3e:bd:34:cb:66:37:52:92:72:7f:dc: 0e:34:36:1b:a9:10:02:68:50:6d:20:af:63:88:29: aa:bb:b3:d0:cd:06:88:9b:93:a6:22:ae:86:08:0a: 23:43:00:3c:09:30:6b:90:40:fb:0a:f5:0a:29:f9: a0:9c:36:b4:1e:1b:1f:ff:f9:c5:6e:a5:41:07:07: d6:9b:3f:25:b3:59:ae:ae:5b:88:1e:e8:9c:d5:48: f9:a6:df:ec:6d:ac:5e:0a:54:fb:1a:4f:ac:c1:72: 62:4b:88:c4:35:fa:4c:e7:78:52:93:81:5f:d9:35: 2d:9e:50:74:c8:3d:e9:8c:fd:74:0a:34:f8:e5:85: b1:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:97:24:07:4E:37:80:4E:4B:17:C6:74:3C:96:65:78:51:57:D1:74 X509v3 Authority Key Identifier: keyid:EF:FB:61:ED:A8:8A:39:76:41:5A:73:7C:CC:5A:79:28:4C:87:3C:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/EFFB61EDA88A3976415A737CCC5A79284C873C9A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFFB61EDA88A3976415A737CCC5A79284C873C9A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/EFFB61EDA88A3976415A737CCC5A79284C873C9A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:db:b6:d1:94:60:19:80:00:18:51:d7:93:d9:2b:d5:8e:65: 3a:f7:85:5b:27:3a:f4:a1:d6:cd:d8:25:11:1d:6b:ac:6b:27: 3d:05:22:07:4d:6d:e2:8e:90:61:5d:bf:ac:a6:93:ab:6a:dc: d6:69:33:a4:a7:1e:ca:72:bf:33:be:64:68:be:d2:a4:ad:15: e2:c7:f7:84:f6:8d:8e:55:b8:1a:9d:d8:f8:55:df:3d:38:16: fa:70:a0:3c:b1:8c:05:64:62:7a:c1:ba:ee:c7:00:35:22:b7: 78:08:00:ad:ea:9d:1d:7a:9e:b0:fc:e4:1f:07:38:58:7c:41: 72:9b:05:37:76:18:03:1e:13:85:b8:81:3b:ed:ab:ce:e3:32: 3d:ce:50:31:d3:a4:fc:b7:0e:dc:80:81:b3:d4:08:1d:a3:ea: f6:8f:6f:bf:42:d1:93:56:50:78:20:46:49:ac:3e:3b:b2:82: a0:6c:22:01:72:63:7e:6f:ba:bb:29:24:d3:d0:6f:94:53:6c: 39:ee:5e:27:f4:eb:aa:0a:59:45:04:3d:7f:e7:de:68:01:8f: a9:0e:e3:92:70:5d:b5:c7:16:48:06:92:21:20:c3:9b:60:07: 62:a5:ac:e0:37:af:62:ed:eb:b1:c6:35:4c:50:1a:ef:8b:48: fa:c7:dc:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKe1STuy33Eqw8bchpzYGcaJmh9swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZGQjYxRURBODhBMzk3NjQxNUE3MzdDQ0M1QTc5Mjg0 Qzg3M0M5QTAeFw0yNjA2MDMwMTExMThaFw0yNjA2MDQwMTQ3MThaMDMxMTAvBgNV BAMTKDNBOTcyNDA3NEUzNzgwNEU0QjE3QzY3NDNDOTY2NTc4NTE1N0QxNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGLQeDs4Iv+gC422RwxkIstynT IRoQuwMcpBx8oDizLY6KXBb8BzoqCFU2xMqVQx5tXgaN/DOohDGYwCO347p4YXGI Sl+u0WizUbQgMtx81APm0f7f4eaSc+kTL9JIl9ZM03KO4y/VzgHcGGVRMtAN9kPC pYAK2eLUPTg+vTTLZjdSknJ/3A40NhupEAJoUG0gr2OIKaq7s9DNBoibk6YiroYI CiNDADwJMGuQQPsK9Qop+aCcNrQeGx//+cVupUEHB9abPyWzWa6uW4ge6JzVSPmm 3+xtrF4KVPsaT6zBcmJLiMQ1+kzneFKTgV/ZNS2eUHTIPemM/XQKNPjlhbEpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOpckB043gE5LF8Z0PJZleFFX0XQwHwYDVR0j BBgwFoAU7/th7aiKOXZBWnN8zFp5KEyHPJowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTI0OWQzODctNzBjZi00MGU5LTg3NTktOWI4NmUwYzY1MTI4LzAvRUZGQjYxRURB ODhBMzk3NjQxNUE3MzdDQ0M1QTc5Mjg0Qzg3M0M5QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRkZCNjFFREE4OEEzOTc2NDE1QTczN0NDQzVBNzkyODRDODcz QzlBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTI0OWQzODctNzBjZi00MGU5LTg3 NTktOWI4NmUwYzY1MTI4LzAvRUZGQjYxRURBODhBMzk3NjQxNUE3MzdDQ0M1QTc5 Mjg0Qzg3M0M5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFDbttGUYBmAABhR15PZK9WOZTr3hVsnOvSh 1s3YJREda6xrJz0FIgdNbeKOkGFdv6ymk6tq3NZpM6SnHspyvzO+ZGi+0qStFeLH 94T2jY5VuBqd2PhV3z04FvpwoDyxjAVkYnrBuu7HADUit3gIAK3qnR16nrD85B8H OFh8QXKbBTd2GAMeE4W4gTvtq87jMj3OUDHTpPy3DtyAgbPUCB2j6vaPb79C0ZNW UHggRkmsPjuygqBsIgFyY35vurspJNPQb5RTbDnuXif066oKWUUEPX/n3mgBj6kO 45JwXbXHFkgGkiEgw5tgB2KlrOA3r2Lt67HGNUxQGu+LSPrH3C0= -----END CERTIFICATE-----Generated at Wed Jun 3 04:12:18 2026 by rpki-client