$ rpki-client -vvf rpki-rsync.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E.mft File: EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E.mft (raw, json) Hash identifier: R3eHXI+QE2lmDn15G+WVfK7Oeiw7pw1OAPR0J8BUYow= Subject key identifier: 76:C5:B5:94:07:64:9C:6D:78:B3:77:08:EC:89:6F:DA:C4:AB:51:5B Authority key identifier: EF:0D:C3:6F:FE:89:46:F1:04:92:74:EE:88:9B:B9:8C:5A:5A:7D:8E Certificate issuer: /CN=EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E Certificate serial: 4DA7B88F72CE8E926DB079B9FC08C5D439D6D673 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 23:29:19 +0000 Manifest this update: Tue 02 Jun 2026 23:24:19 +0000 Manifest next update: Thu 04 Jun 2026 02:32:19 +0000 Files and hashes: 1: 3230322e3137332e31362e302f32312d3234203d3e203234323130.roa (hash: r4SZ6eUQ/WGNZXPblXSjXtHYlTpktiYzvV0LKCEpMuY=) 2: EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E.crl (hash: omaYiXKk8/v3PwsG++kXdyr7+HvaD2yE4BQB11D3BZM=) 3: 3138302e3135302e3233322e302f32312d3234203d3e203234323130.roa (hash: ifJJcEjqzU7+xO+rrfiw7+N3sHyu5nZ4TiZzLx8FyiQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E.crl rsync://rpki-rsync.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:a7:b8:8f:72:ce:8e:92:6d:b0:79:b9:fc:08:c5:d4:39:d6:d6:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E Validity Not Before: Jun 2 23:24:19 2026 GMT Not After : Jun 4 02:32:19 2026 GMT Subject: CN=76C5B59407649C6D78B37708EC896FDAC4AB515B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d3:cb:dc:e6:c7:5f:a1:44:3e:47:68:be:23: 03:4e:5d:5d:0e:aa:9c:ad:25:d3:dd:36:55:0e:15: eb:eb:91:66:51:d6:31:88:82:b0:e0:8b:e9:0a:bb: 59:b1:a1:ef:2b:d9:de:78:2f:52:34:13:0c:c3:08: 2d:50:2b:b4:2f:f5:ea:7a:b9:77:8b:75:1d:f0:5e: 0f:e3:35:f1:5d:7a:93:84:f3:1f:a4:89:ed:62:06: eb:0c:f2:b6:66:3d:ba:9b:af:98:e0:9f:63:3b:cf: 5a:0b:5d:a3:92:c9:4f:e7:9f:ad:2f:c1:5e:1d:77: 76:1e:dc:2a:59:c2:e9:ac:32:85:e0:6b:7f:f7:67: e2:a8:b8:19:72:b6:cd:23:07:5c:6f:db:1b:a7:4b: 02:ad:18:fb:0d:34:8e:71:d1:e0:92:ee:b6:1e:91: fa:7c:9b:b0:0d:be:a3:4b:ef:e7:ef:d5:c4:ef:e1: 64:62:87:17:1c:21:3f:f3:09:d7:c3:0c:89:95:dc: 26:69:dc:07:6a:c8:08:d1:42:2a:28:39:b4:34:29: c5:f2:b8:de:13:70:89:8a:ef:85:4e:ae:25:87:41: 8a:d1:8f:9b:3b:f9:c3:0f:24:d9:62:ed:87:07:76: c3:fa:b7:cd:c9:48:03:10:83:50:d9:8f:f1:c5:21: 08:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:C5:B5:94:07:64:9C:6D:78:B3:77:08:EC:89:6F:DA:C4:AB:51:5B X509v3 Authority Key Identifier: keyid:EF:0D:C3:6F:FE:89:46:F1:04:92:74:EE:88:9B:B9:8C:5A:5A:7D:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:19:f1:88:28:67:50:28:6f:6d:1f:95:ea:e7:64:f2:d6:6f: 7b:91:11:61:52:92:1c:46:82:55:c0:ba:1b:80:d2:1a:d8:bd: 86:fd:4b:a2:e3:a7:36:bc:62:74:92:59:6a:12:ad:2a:83:99: 3c:9a:1d:5a:f9:37:24:82:6f:e2:22:11:a1:4e:56:69:45:58: 0a:d4:d5:da:7c:03:00:8d:84:3a:e2:7f:6d:45:4a:89:9d:49: eb:89:2d:c5:75:43:61:84:d4:54:18:74:f1:41:25:b9:c1:2c: d6:73:0d:ca:63:00:45:3c:24:d1:ff:ad:dc:7b:cd:da:7c:eb: 1d:be:3b:a5:8f:07:50:78:2a:89:48:d8:62:de:c1:25:50:9a: 88:72:67:96:a9:ea:da:b4:8f:13:20:96:1c:44:c4:d8:08:d5: 2b:8c:70:3d:d3:40:e2:a8:49:b4:00:79:d1:11:28:78:25:41: 1b:2e:fb:47:dc:b3:94:f2:1a:98:b9:ea:30:2e:88:cb:11:ea: 85:0b:12:75:e8:3c:23:47:51:85:55:a5:3a:fd:92:cb:56:44: 65:7b:dc:29:8d:83:65:6c:8b:ac:7f:f6:81:57:fb:13:c1:bb: 56:81:66:3c:c2:7c:30:57:a6:22:66:9b:7f:d5:2a:8d:63:eb: 2b:ef:5c:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTae4j3LOjpJtsHm5/AjF1DnW1nMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUYwREMzNkZGRTg5NDZGMTA0OTI3NEVFODg5QkI5OEM1 QTVBN0Q4RTAeFw0yNjA2MDIyMzI0MTlaFw0yNjA2MDQwMjMyMTlaMDMxMTAvBgNV BAMTKDc2QzVCNTk0MDc2NDlDNkQ3OEIzNzcwOEVDODk2RkRBQzRBQjUxNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe08vc5sdfoUQ+R2i+IwNOXV0O qpytJdPdNlUOFevrkWZR1jGIgrDgi+kKu1mxoe8r2d54L1I0EwzDCC1QK7Qv9ep6 uXeLdR3wXg/jNfFdepOE8x+kie1iBusM8rZmPbqbr5jgn2M7z1oLXaOSyU/nn60v wV4dd3Ye3CpZwumsMoXga3/3Z+KouBlyts0jB1xv2xunSwKtGPsNNI5x0eCS7rYe kfp8m7ANvqNL7+fv1cTv4WRihxccIT/zCdfDDImV3CZp3AdqyAjRQiooObQ0KcXy uN4TcImK74VOriWHQYrRj5s7+cMPJNli7YcHdsP6t83JSAMQg1DZj/HFIQgRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdsW1lAdknG14s3cI7Ilv2sSrUVswHwYDVR0j BBgwFoAU7w3Db/6JRvEEknTuiJu5jFpafY4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTAxN2I4MjgtMTdmYS00OGEyLWExMTMtMTQ5Zjk0NjdhMzI4LzAvRUYwREMzNkZG RTg5NDZGMTA0OTI3NEVFODg5QkI5OEM1QTVBN0Q4RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRjBEQzM2RkZFODk0NkYxMDQ5Mjc0RUU4ODlCQjk4QzVBNUE3 RDhFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTAxN2I4MjgtMTdmYS00OGEyLWEx MTMtMTQ5Zjk0NjdhMzI4LzAvRUYwREMzNkZGRTg5NDZGMTA0OTI3NEVFODg5QkI5 OEM1QTVBN0Q4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFsZ8YgoZ1Aob20flernZPLWb3uREWFSkhxG glXAuhuA0hrYvYb9S6Ljpza8YnSSWWoSrSqDmTyaHVr5NySCb+IiEaFOVmlFWArU 1dp8AwCNhDrif21FSomdSeuJLcV1Q2GE1FQYdPFBJbnBLNZzDcpjAEU8JNH/rdx7 zdp86x2+O6WPB1B4KolI2GLewSVQmohyZ5ap6tq0jxMglhxExNgI1SuMcD3TQOKo SbQAedERKHglQRsu+0fcs5TyGpi56jAuiMsR6oULEnXoPCNHUYVVpTr9kstWRGV7 3CmNg2Vsi6x/9oFX+xPBu1aBZjzCfDBXpiJmm3/VKo1j6yvvXL4= -----END CERTIFICATE-----Generated at Wed Jun 3 04:16:12 2026 by rpki-client