$ rpki-client -vvf rpki-rsync.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/EF4CD1AC581004419A7468D03FF81EAA25D9E33F.mft File: EF4CD1AC581004419A7468D03FF81EAA25D9E33F.mft (raw, json) Hash identifier: /NQATesO2AlYo0id+YA7Cz1YjuMUm2GBXvNokQiZuiU= Subject key identifier: D8:8A:E7:10:1B:75:99:75:72:D6:C7:48:A2:D5:27:48:56:B8:15:B3 Authority key identifier: EF:4C:D1:AC:58:10:04:41:9A:74:68:D0:3F:F8:1E:AA:25:D9:E3:3F Certificate issuer: /CN=EF4CD1AC581004419A7468D03FF81EAA25D9E33F Certificate serial: 3B9C3B1828D18FA51E5750367E1B9A3FEC1B73AD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF4CD1AC581004419A7468D03FF81EAA25D9E33F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/EF4CD1AC581004419A7468D03FF81EAA25D9E33F.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 18:57:50 +0000 Manifest this update: Tue 02 Jun 2026 18:52:50 +0000 Manifest next update: Wed 03 Jun 2026 20:41:50 +0000 Files and hashes: 1: 3130332e39352e392e302f32342d3234203d3e20313335343838.roa (hash: cCW7eYSWOx2HeGcwXRHzekDYmrW8hp1mJ3VwAjVNaok=) 2: 3130332e39352e382e302f32322d3232203d3e20313335343838.roa (hash: Z1qBcC8HhREP/iS2ZW6nzTxnpSKKD3Oek2Lz09Kit8U=) 3: 3130332e39352e382e302f32342d3234203d3e20313335343838.roa (hash: 6xX5hpFI3vfAbJBKIH+olFnqZn+fECnqjvCv45mqV+0=) 4: 3130332e39352e31312e302f32342d3234203d3e20313335343838.roa (hash: HZ438Kbp42EzorB5guWDSUbAmdr1EsWvtnLwdrcr+sI=) 5: 3130332e39352e31302e302f32342d3234203d3e20313335343838.roa (hash: 1LTG4MgFRMZ7zoAbplTKMa6nhkiFff/vlGz+LTJuyUg=) 6: EF4CD1AC581004419A7468D03FF81EAA25D9E33F.crl (hash: 3sR75CQxFJp/Vjj3zKyTTWeUZcr/MX9eW5ipl4g1UAo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/EF4CD1AC581004419A7468D03FF81EAA25D9E33F.crl rsync://rpki-rsync.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/EF4CD1AC581004419A7468D03FF81EAA25D9E33F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF4CD1AC581004419A7468D03FF81EAA25D9E33F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 20:41:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:9c:3b:18:28:d1:8f:a5:1e:57:50:36:7e:1b:9a:3f:ec:1b:73:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EF4CD1AC581004419A7468D03FF81EAA25D9E33F Validity Not Before: Jun 2 18:52:50 2026 GMT Not After : Jun 3 20:41:50 2026 GMT Subject: CN=D88AE7101B75997572D6C748A2D5274856B815B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:86:e1:32:a4:55:85:1a:89:29:0b:b1:df:6f: b5:6e:f7:d5:6b:7f:3b:81:6b:1e:2e:89:5c:40:b5: df:26:2e:7e:ea:61:dc:68:73:91:21:f5:60:dd:9f: b7:36:8d:e4:93:5d:a9:16:b5:36:44:6c:b2:31:fa: 05:1f:77:0c:92:b6:d8:f0:4e:d8:18:31:11:91:72: 21:8c:5e:3a:6f:ef:55:49:37:65:2d:26:a8:2e:59: cf:89:d6:fd:b0:5f:72:4a:1c:93:8e:c2:04:c9:0c: c4:f6:9f:31:5b:fb:4e:fc:f7:32:32:92:3e:f8:14: 80:7f:df:d1:a0:00:ea:fc:e1:56:20:12:87:32:4e: 43:17:a9:63:7a:25:b4:da:92:a4:ae:4c:23:5a:86: d7:9f:e5:c8:cc:55:d6:e3:cb:bb:1b:f9:f7:82:0a: b3:20:67:52:bb:f9:c8:cd:a7:db:2b:0c:69:63:6f: de:22:0c:64:a0:3f:7c:b6:31:fb:7b:19:dc:14:e0: 87:3f:c9:29:1a:d7:3a:3d:84:24:e9:f4:f5:84:da: 18:5a:1a:de:9c:a0:6b:32:0d:95:95:67:fa:21:96: 9b:ef:ab:88:24:dd:87:eb:e2:21:bb:89:5b:99:e8: ae:8a:a2:ee:b5:75:83:db:7d:9c:7b:63:04:3d:76: d9:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:8A:E7:10:1B:75:99:75:72:D6:C7:48:A2:D5:27:48:56:B8:15:B3 X509v3 Authority Key Identifier: keyid:EF:4C:D1:AC:58:10:04:41:9A:74:68:D0:3F:F8:1E:AA:25:D9:E3:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/EF4CD1AC581004419A7468D03FF81EAA25D9E33F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF4CD1AC581004419A7468D03FF81EAA25D9E33F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/EF4CD1AC581004419A7468D03FF81EAA25D9E33F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:12:c2:be:1a:71:01:19:b1:f6:3a:1d:f9:ee:9e:47:3c:d6: 8a:62:0a:67:a9:64:08:20:7a:bb:2a:99:14:7a:5c:d1:f3:ef: d6:cf:ed:33:80:ac:d4:33:54:23:af:7b:f8:b8:f9:18:58:91: b5:65:97:9e:b9:cd:75:8b:fb:7e:b5:73:05:4e:d7:e5:b8:f7: d6:b8:06:8d:62:78:5d:d8:91:5d:38:21:e8:7a:62:1d:d5:9c: 61:87:fd:26:12:79:38:a0:b8:0e:77:c1:c6:7a:2e:6c:11:e4: 38:13:e3:19:c7:19:99:fb:98:12:af:bc:cf:02:88:c0:b2:ea: a9:dc:c7:0b:d9:2d:1a:ab:e4:f3:61:6f:eb:d6:d5:2b:02:a4: 0d:cf:f8:81:f3:b5:04:6d:e2:a7:e9:f9:cc:03:21:41:88:53: b3:d2:46:cf:65:ce:d1:f1:4e:ce:e2:ce:92:48:6e:32:51:59: 2f:be:61:e8:2d:d5:8d:d1:9f:a2:0e:80:00:ec:a2:16:85:d2: 47:d1:c0:53:fe:2d:49:72:30:40:ca:0a:60:d1:58:62:31:fd: bd:f6:79:9a:4a:84:6b:c8:2e:b9:86:a6:b3:d2:f0:1b:a5:a1: 19:0b:ff:1f:13:e2:1e:1a:9c:10:86:89:10:8c:1e:79:0a:e8: 7f:c0:a7:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO5w7GCjRj6UeV1A2fhuaP+wbc60wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUY0Q0QxQUM1ODEwMDQ0MTlBNzQ2OEQwM0ZGODFFQUEy NUQ5RTMzRjAeFw0yNjA2MDIxODUyNTBaFw0yNjA2MDMyMDQxNTBaMDMxMTAvBgNV BAMTKEQ4OEFFNzEwMUI3NTk5NzU3MkQ2Qzc0OEEyRDUyNzQ4NTZCODE1QjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDThuEypFWFGokpC7Hfb7Vu99Vr fzuBax4uiVxAtd8mLn7qYdxoc5Eh9WDdn7c2jeSTXakWtTZEbLIx+gUfdwySttjw TtgYMRGRciGMXjpv71VJN2UtJqguWc+J1v2wX3JKHJOOwgTJDMT2nzFb+0789zIy kj74FIB/39GgAOr84VYgEocyTkMXqWN6JbTakqSuTCNahtef5cjMVdbjy7sb+feC CrMgZ1K7+cjNp9srDGljb94iDGSgP3y2Mft7GdwU4Ic/ySka1zo9hCTp9PWE2hha Gt6coGsyDZWVZ/ohlpvvq4gk3Yfr4iG7iVuZ6K6Kou61dYPbfZx7YwQ9dtmrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2IrnEBt1mXVy1sdIotUnSFa4FbMwHwYDVR0j BBgwFoAU70zRrFgQBEGadGjQP/geqiXZ4z8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTM2NDY1ZWMtOTE2MC00NTliLThkMTEtOTQ4ZmMyNmRhMWMwLzAvRUY0Q0QxQUM1 ODEwMDQ0MTlBNzQ2OEQwM0ZGODFFQUEyNUQ5RTMzRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRjRDRDFBQzU4MTAwNDQxOUE3NDY4RDAzRkY4MUVBQTI1RDlF MzNGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTM2NDY1ZWMtOTE2MC00NTliLThk MTEtOTQ4ZmMyNmRhMWMwLzAvRUY0Q0QxQUM1ODEwMDQ0MTlBNzQ2OEQwM0ZGODFF QUEyNUQ5RTMzRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIcSwr4acQEZsfY6Hfnunkc81opiCmepZAgg ersqmRR6XNHz79bP7TOArNQzVCOve/i4+RhYkbVll565zXWL+361cwVO1+W499a4 Bo1ieF3YkV04Ieh6Yh3VnGGH/SYSeTiguA53wcZ6LmwR5DgT4xnHGZn7mBKvvM8C iMCy6qncxwvZLRqr5PNhb+vW1SsCpA3P+IHztQRt4qfp+cwDIUGIU7PSRs9lztHx Ts7izpJIbjJRWS++Yegt1Y3Rn6IOgADsohaF0kfRwFP+LUlyMEDKCmDRWGIx/b32 eZpKhGvILrmGprPS8BuloRkL/x8T4h4anBCGiRCMHnkK6H/Ap/k= -----END CERTIFICATE-----Generated at Wed Jun 3 03:57:22 2026 by rpki-client