$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/EFFB61EDA88A3976415A737CCC5A79284C873C9A.mft File: EFFB61EDA88A3976415A737CCC5A79284C873C9A.mft (raw, json) Hash identifier: PsR1/LOBC9YLuEZKwgmCPGYJ+N4BCQD0dReR9h4/R40= Subject key identifier: 36:0F:8D:1C:72:EB:BD:95:1D:D2:96:C3:99:EF:6F:2B:AE:B0:F9:E3 Authority key identifier: EF:FB:61:ED:A8:8A:39:76:41:5A:73:7C:CC:5A:79:28:4C:87:3C:9A Certificate issuer: /CN=EFFB61EDA88A3976415A737CCC5A79284C873C9A Certificate serial: 41BCA4AD8ED4255B9BB4EEBE56099E19B77760DB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFFB61EDA88A3976415A737CCC5A79284C873C9A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/EFFB61EDA88A3976415A737CCC5A79284C873C9A.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 00:03:38 +0000 Manifest this update: Wed 16 Sep 2026 23:58:38 +0000 Manifest next update: Fri 18 Sep 2026 03:39:38 +0000 Files and hashes: 1: 3130332e3138302e3235302e302f32332d3233203d3e20313439333733.roa (hash: sUl2bhI+otw0/fJ4SBeJRv38sPuRgClkXdfSCpnmx2w=) 2: 3130332e3138302e3235312e302f32342d3234203d3e20313439333733.roa (hash: 5roj2kNLZ/Aw2sfH4UoUgbfgaCTs5klpBUiJr4UV8hE=) 3: EFFB61EDA88A3976415A737CCC5A79284C873C9A.crl (hash: LhAUPw7J4sgb97e16CsRFhvdKVa01nkG+baYgo/dll0=) 4: 3130332e3138302e3235302e302f32342d3234203d3e20313439333733.roa (hash: nufJv2+uWrvJ0SWNkLs+ilFdAkkva6iaz1eW145f0T4=) 5: 3130332e3138302e3235302e302f32332d3234203d3e20313439333733.roa (hash: vH86OJq5h4E6zeVZwHKL6SywoMe0OW/Y/A2U521Svpk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/EFFB61EDA88A3976415A737CCC5A79284C873C9A.crl rsync://rpki-rsync.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/EFFB61EDA88A3976415A737CCC5A79284C873C9A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFFB61EDA88A3976415A737CCC5A79284C873C9A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 03:39:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:bc:a4:ad:8e:d4:25:5b:9b:b4:ee:be:56:09:9e:19:b7:77:60:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFFB61EDA88A3976415A737CCC5A79284C873C9A Validity Not Before: Sep 16 23:58:38 2026 GMT Not After : Sep 18 03:39:38 2026 GMT Subject: CN=360F8D1C72EBBD951DD296C399EF6F2BAEB0F9E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:05:9d:01:56:bb:dc:39:35:97:31:08:7b:df: 36:aa:71:ac:f8:fa:e8:5f:61:9f:ac:c3:b1:71:af: e9:ba:ab:ed:f7:2d:5a:69:5c:8a:9f:54:9b:4a:51: 0a:d4:9e:e6:da:57:e8:ac:ed:e5:5e:e0:e8:6a:11: 0b:a8:c8:86:71:cb:27:68:44:4b:e7:bb:de:9c:46: 00:60:9d:92:49:1c:91:ba:55:7c:3f:3d:39:4f:f4: ec:1e:2a:1c:31:39:c9:b4:7b:1b:9e:41:06:51:ff: 93:c5:68:5d:ba:9d:a6:f6:e9:81:2d:29:cd:3e:77: d6:2a:9b:4e:8e:68:a9:e8:f1:20:25:86:a1:86:52: 02:06:78:37:1b:54:79:2d:0f:68:5a:30:1e:0d:f8: 13:17:c4:08:15:ca:f9:a9:06:58:38:e3:41:69:12: 53:fc:c6:aa:e0:6a:1f:27:88:e9:98:d3:e3:f0:be: 6f:b2:e9:fe:27:5a:2b:d9:b5:7c:fa:54:34:4d:e3: 94:4b:d5:25:06:f5:9a:bc:75:26:d6:b9:da:80:b6: 52:96:b5:7c:72:ea:7e:bf:e6:58:c0:78:05:9c:b7: 07:83:60:db:d4:15:43:df:57:3e:5b:a1:32:d7:56: 8b:09:7e:d6:5e:ee:b2:91:46:7e:f3:2a:8b:06:90: 5d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:0F:8D:1C:72:EB:BD:95:1D:D2:96:C3:99:EF:6F:2B:AE:B0:F9:E3 X509v3 Authority Key Identifier: keyid:EF:FB:61:ED:A8:8A:39:76:41:5A:73:7C:CC:5A:79:28:4C:87:3C:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/EFFB61EDA88A3976415A737CCC5A79284C873C9A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFFB61EDA88A3976415A737CCC5A79284C873C9A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/EFFB61EDA88A3976415A737CCC5A79284C873C9A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:9b:bf:db:dd:20:9f:54:e9:87:42:56:59:23:06:f4:12:7b: 8c:9c:69:56:4c:4d:10:ff:e1:5e:1c:a1:a2:af:5d:8d:48:b8: 9e:68:0e:09:f2:96:f2:41:d1:63:69:36:5d:4b:48:4d:75:69: 60:8e:ac:17:f1:14:7f:ae:63:e3:38:25:31:20:10:dc:46:e7: c6:40:6d:14:fb:b8:dd:a7:86:42:07:ba:d3:90:c4:93:1a:05: 08:21:b0:a2:37:39:5c:8e:9d:ef:e9:de:c5:91:4b:2f:bd:da: f1:28:e0:67:59:cd:f3:8e:da:4c:fb:fd:a9:76:0b:18:9b:19: 19:d0:5e:59:e6:62:45:17:f6:14:59:4e:d1:af:70:ef:45:28: 01:63:87:43:1f:c4:de:ed:89:9b:f6:92:14:4b:79:c1:d1:d9: e6:c3:a6:7f:36:8d:fc:ab:95:84:2a:e7:85:24:45:96:9a:f0: 18:78:80:f4:56:bc:03:a1:7e:40:62:fc:8e:f8:62:7a:22:4b: 03:73:9e:5c:dc:88:2c:98:28:81:80:bc:38:df:e5:3e:eb:cf: 4f:05:db:fa:04:a9:f2:a2:28:06:41:82:6a:a2:ca:cf:cc:b4: e0:93:a9:fc:e3:64:09:af:08:89:92:8e:15:85:12:7a:3d:34: 7b:da:93:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQbykrY7UJVubtO6+VgmeGbd3YNswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZGQjYxRURBODhBMzk3NjQxNUE3MzdDQ0M1QTc5Mjg0 Qzg3M0M5QTAeFw0yNjA5MTYyMzU4MzhaFw0yNjA5MTgwMzM5MzhaMDMxMTAvBgNV BAMTKDM2MEY4RDFDNzJFQkJEOTUxREQyOTZDMzk5RUY2RjJCQUVCMEY5RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVBZ0BVrvcOTWXMQh73zaqcaz4 +uhfYZ+sw7Fxr+m6q+33LVppXIqfVJtKUQrUnubaV+is7eVe4OhqEQuoyIZxyydo REvnu96cRgBgnZJJHJG6VXw/PTlP9OweKhwxOcm0exueQQZR/5PFaF26nab26YEt Kc0+d9Yqm06OaKno8SAlhqGGUgIGeDcbVHktD2haMB4N+BMXxAgVyvmpBlg440Fp ElP8xqrgah8niOmY0+Pwvm+y6f4nWivZtXz6VDRN45RL1SUG9Zq8dSbWudqAtlKW tXxy6n6/5ljAeAWctweDYNvUFUPfVz5boTLXVosJftZe7rKRRn7zKosGkF35AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNg+NHHLrvZUd0pbDme9vK66w+eMwHwYDVR0j BBgwFoAU7/th7aiKOXZBWnN8zFp5KEyHPJowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTI0OWQzODctNzBjZi00MGU5LTg3NTktOWI4NmUwYzY1MTI4LzAvRUZGQjYxRURB ODhBMzk3NjQxNUE3MzdDQ0M1QTc5Mjg0Qzg3M0M5QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRkZCNjFFREE4OEEzOTc2NDE1QTczN0NDQzVBNzkyODRDODcz QzlBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTI0OWQzODctNzBjZi00MGU5LTg3 NTktOWI4NmUwYzY1MTI4LzAvRUZGQjYxRURBODhBMzk3NjQxNUE3MzdDQ0M1QTc5 Mjg0Qzg3M0M5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEKbv9vdIJ9U6YdCVlkjBvQSe4ycaVZMTRD/ 4V4coaKvXY1IuJ5oDgnylvJB0WNpNl1LSE11aWCOrBfxFH+uY+M4JTEgENxG58ZA bRT7uN2nhkIHutOQxJMaBQghsKI3OVyOne/p3sWRSy+92vEo4GdZzfOO2kz7/al2 CxibGRnQXlnmYkUX9hRZTtGvcO9FKAFjh0MfxN7tiZv2khRLecHR2ebDpn82jfyr lYQq54UkRZaa8Bh4gPRWvAOhfkBi/I74YnoiSwNznlzciCyYKIGAvDjf5T7rz08F 2/oEqfKiKAZBgmqiys/MtOCTqfzjZAmvCImSjhWFEno9NHvak6g= -----END CERTIFICATE-----Generated at Thu Sep 17 15:54:45 2026 by rpki-client