$ rpki-client -vvf rpki-rsync.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E.mft File: EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E.mft (raw, json) Hash identifier: spjCWY5TQ6d1dJAZJafu0AhoqLtpWPeoOM8Sc5eAeYE= Subject key identifier: 1E:FF:76:16:B8:2E:4B:8D:E2:A0:36:E5:B3:3A:FD:34:10:AE:B8:B7 Authority key identifier: EF:0D:C3:6F:FE:89:46:F1:04:92:74:EE:88:9B:B9:8C:5A:5A:7D:8E Certificate issuer: /CN=EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E Certificate serial: 0D1822549AF341D37DAB8438A872960EC59A93AD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E.mft Manifest number: 69 Signing time: Mon 20 Jul 2026 13:38:22 +0000 Manifest this update: Mon 20 Jul 2026 13:33:22 +0000 Manifest next update: Tue 21 Jul 2026 16:52:22 +0000 Files and hashes: 1: EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E.crl (hash: Ff/Z9PSwXFa42c4YjA3FPx3LZNFosphjwEac/n8jX7c=) 2: 3138302e3135302e3233322e302f32312d3234203d3e203234323130.roa (hash: ifJJcEjqzU7+xO+rrfiw7+N3sHyu5nZ4TiZzLx8FyiQ=) 3: 3230322e3137332e31362e302f32312d3234203d3e203234323130.roa (hash: r4SZ6eUQ/WGNZXPblXSjXtHYlTpktiYzvV0LKCEpMuY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E.crl rsync://rpki-rsync.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 16:52:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:18:22:54:9a:f3:41:d3:7d:ab:84:38:a8:72:96:0e:c5:9a:93:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E Validity Not Before: Jul 20 13:33:22 2026 GMT Not After : Jul 21 16:52:22 2026 GMT Subject: CN=1EFF7616B82E4B8DE2A036E5B33AFD3410AEB8B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f7:fe:b0:65:d6:4d:73:5e:cb:ab:d8:1a:db: 4a:57:3a:69:30:57:3f:1d:60:96:5b:27:e1:58:cb: a4:8e:6f:30:2a:45:f6:e7:9d:a0:f4:f4:22:37:bc: 54:6d:2f:7b:4b:f1:0d:8f:8b:f9:82:ad:ab:67:2d: 96:63:8f:87:a3:85:bb:e2:de:36:0d:d5:2b:e1:a6: 55:4c:b4:61:b0:b5:94:46:c2:79:ea:f9:69:1d:e2: c7:bd:b4:13:3a:df:ff:3e:13:ad:1e:5f:62:98:30: 3a:5e:d2:9b:dc:e0:b0:8a:e5:9e:56:fb:42:62:d3: b2:93:18:bf:d3:74:e8:42:39:cf:b9:ea:2a:47:ad: 01:58:81:a1:50:04:7c:16:e8:cd:5a:94:d4:c5:90: 27:ef:63:3a:1e:b2:f9:27:17:8c:69:99:3c:7d:cf: 9f:6f:db:d7:60:c3:9f:25:5d:30:e8:6d:dd:eb:4b: a7:10:11:a8:33:35:3a:69:9a:70:28:55:05:2d:21: f0:99:f1:17:6b:2a:f2:7b:47:87:59:5b:2c:19:2a: 43:6d:e7:f0:22:ec:24:25:b5:1c:2e:62:6a:52:b4: 27:ed:de:ca:87:c5:b6:ce:8b:b7:8c:19:fd:68:bb: 1c:3a:8c:69:7d:f6:6c:82:d8:db:07:24:e2:85:cd: a7:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:FF:76:16:B8:2E:4B:8D:E2:A0:36:E5:B3:3A:FD:34:10:AE:B8:B7 X509v3 Authority Key Identifier: keyid:EF:0D:C3:6F:FE:89:46:F1:04:92:74:EE:88:9B:B9:8C:5A:5A:7D:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:59:fe:03:f6:f2:d9:95:b4:e4:11:80:57:8f:36:c0:40:95: 6e:69:f2:91:d2:1a:67:d0:15:22:85:87:10:20:11:00:9a:c0: 8d:7e:6c:93:42:67:90:50:5c:d1:4a:b2:03:1d:dc:2a:7b:43: 07:c2:cd:6a:14:f3:5a:43:32:40:f9:2f:59:c9:26:94:9d:09: d1:5d:0b:e9:a6:09:e6:f4:c9:b2:dd:12:61:b0:c7:a5:08:5b: e0:d0:60:42:f9:7b:7d:d2:e2:c7:68:67:38:f8:19:88:37:3f: 92:f5:b7:49:eb:a1:57:e8:30:a4:75:f3:7e:34:b4:11:fa:7e: c1:b4:9b:53:a1:3c:84:f8:a5:3a:ae:e2:37:cf:07:a2:64:24: 18:7d:af:0c:3c:d3:f1:64:7a:97:2e:34:a5:55:02:8b:c1:0e: 3e:27:6d:6a:f3:37:30:e1:72:d2:b8:16:7d:f0:39:6c:c3:72: 7b:a6:87:24:3c:19:14:73:d8:99:4a:48:b5:03:63:7b:ce:8a: 73:4d:75:80:e0:c9:20:5f:9f:47:e4:cf:0d:65:20:02:b6:a5: 83:20:56:c0:83:4d:c4:a1:b9:5b:74:bc:2f:ba:9a:e1:6f:79: 4e:fc:89:4f:fa:0c:13:c5:3b:b1:27:ce:a0:d8:a4:88:0e:88: 43:f2:0a:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDRgiVJrzQdN9q4Q4qHKWDsWak60wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUYwREMzNkZGRTg5NDZGMTA0OTI3NEVFODg5QkI5OEM1 QTVBN0Q4RTAeFw0yNjA3MjAxMzMzMjJaFw0yNjA3MjExNjUyMjJaMDMxMTAvBgNV BAMTKDFFRkY3NjE2QjgyRTRCOERFMkEwMzZFNUIzM0FGRDM0MTBBRUI4QjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt9/6wZdZNc17Lq9ga20pXOmkw Vz8dYJZbJ+FYy6SObzAqRfbnnaD09CI3vFRtL3tL8Q2Pi/mCratnLZZjj4ejhbvi 3jYN1SvhplVMtGGwtZRGwnnq+Wkd4se9tBM63/8+E60eX2KYMDpe0pvc4LCK5Z5W +0Ji07KTGL/TdOhCOc+56ipHrQFYgaFQBHwW6M1alNTFkCfvYzoesvknF4xpmTx9 z59v29dgw58lXTDobd3rS6cQEagzNTppmnAoVQUtIfCZ8RdrKvJ7R4dZWywZKkNt 5/Ai7CQltRwuYmpStCft3sqHxbbOi7eMGf1ouxw6jGl99myC2NsHJOKFzaefAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHv92FrguS43ioDblszr9NBCuuLcwHwYDVR0j BBgwFoAU7w3Db/6JRvEEknTuiJu5jFpafY4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTAxN2I4MjgtMTdmYS00OGEyLWExMTMtMTQ5Zjk0NjdhMzI4LzAvRUYwREMzNkZG RTg5NDZGMTA0OTI3NEVFODg5QkI5OEM1QTVBN0Q4RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRjBEQzM2RkZFODk0NkYxMDQ5Mjc0RUU4ODlCQjk4QzVBNUE3 RDhFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTAxN2I4MjgtMTdmYS00OGEyLWEx MTMtMTQ5Zjk0NjdhMzI4LzAvRUYwREMzNkZGRTg5NDZGMTA0OTI3NEVFODg5QkI5 OEM1QTVBN0Q4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHxZ/gP28tmVtOQRgFePNsBAlW5p8pHSGmfQ FSKFhxAgEQCawI1+bJNCZ5BQXNFKsgMd3Cp7QwfCzWoU81pDMkD5L1nJJpSdCdFd C+mmCeb0ybLdEmGwx6UIW+DQYEL5e33S4sdoZzj4GYg3P5L1t0nroVfoMKR18340 tBH6fsG0m1OhPIT4pTqu4jfPB6JkJBh9rww80/FkepcuNKVVAovBDj4nbWrzNzDh ctK4Fn3wOWzDcnumhyQ8GRRz2JlKSLUDY3vOinNNdYDgySBfn0fkzw1lIAK2pYMg VsCDTcShuVt0vC+6muFveU78iU/6DBPFO7EnzqDYpIgOiEPyCjQ= -----END CERTIFICATE-----Generated at Tue Jul 21 07:00:36 2026 by rpki-client