$ rpki-client -vvf rpki-rsync.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/EFA0A80DF71CA377A289711EA4310F3117358BDA.mft File: EFA0A80DF71CA377A289711EA4310F3117358BDA.mft (raw, json) Hash identifier: S/KPJ6r1IbWWSx3eIRPgtNRsLEfTsAbfmb5flQwZAfk= Subject key identifier: DA:92:F6:11:78:92:43:A3:48:1B:49:20:9A:EB:96:2E:0E:D4:A4:7F Authority key identifier: EF:A0:A8:0D:F7:1C:A3:77:A2:89:71:1E:A4:31:0F:31:17:35:8B:DA Certificate issuer: /CN=EFA0A80DF71CA377A289711EA4310F3117358BDA Certificate serial: 1C43C6302E2A43B6187E6551A861A3293FE7D060 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFA0A80DF71CA377A289711EA4310F3117358BDA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/EFA0A80DF71CA377A289711EA4310F3117358BDA.mft Manifest number: 7D Signing time: Sun 02 Aug 2026 07:57:21 +0000 Manifest this update: Sun 02 Aug 2026 07:52:21 +0000 Manifest next update: Mon 03 Aug 2026 09:34:21 +0000 Files and hashes: 1: 34332e3232392e3230342e302f32322d3234203d3e203234353332.roa (hash: BwtyTC6qI4XC3HBbimySaUxc14wJ6nXjYuM/+KpzQMU=) 2: EFA0A80DF71CA377A289711EA4310F3117358BDA.crl (hash: Z8+mj3eMSs7Co8QOvR2qo+lzxkWTu1L4/RomSf35RqU=) 3: 32372e3131312e33322e302f31392d3234203d3e203234353332.roa (hash: Fx9bLePWZd911ErojerGEpVTnf/DxfdXCAQiFRWGMk8=) 4: 32372e3131312e33342e302f32342d3234203d3e203538343737.roa (hash: 1YWuY5HZqKiBZs805+vyXQB+d7lVGfJWx9YMEkEgtvQ=) 5: 3131392e3233352e31362e302f32302d3234203d3e203234353332.roa (hash: a1jLyYlI+XXOuvRXX5wEn6MAtEMedfGoxkqMvx1OXCk=) 6: 3230322e3132392e3138342e302f32322d3234203d3e203234353332.roa (hash: CBM38ddIBA7ErC9KFszGB+2Go/rfydEsEM3u2nPHmFA=) 7: 3130332e3234352e3138302e302f32322d3234203d3e203234353332.roa (hash: HsO0FzJAWLg2u6DKU2yDy0xpq+6RbfKYVFKlBWZw79M=) 8: 323430333a326530303a3a2f33322d3438203d3e203234353332.roa (hash: 9DAVKa81esoccLZerAJimBEYho7HzR8tvV6sLPxdUYg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/EFA0A80DF71CA377A289711EA4310F3117358BDA.crl rsync://rpki-rsync.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/EFA0A80DF71CA377A289711EA4310F3117358BDA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFA0A80DF71CA377A289711EA4310F3117358BDA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 08:45:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:43:c6:30:2e:2a:43:b6:18:7e:65:51:a8:61:a3:29:3f:e7:d0:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFA0A80DF71CA377A289711EA4310F3117358BDA Validity Not Before: Aug 2 07:52:21 2026 GMT Not After : Aug 3 09:34:21 2026 GMT Subject: CN=DA92F611789243A3481B49209AEB962E0ED4A47F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:4c:41:fc:26:e0:a8:70:84:14:4c:d2:6f:0b: 76:9b:38:14:f6:59:37:d1:70:db:27:44:08:3b:b1: e5:e4:67:c7:53:4a:b5:a6:75:ba:0c:59:13:92:39: 08:87:ad:bd:4f:1a:1f:27:6d:f0:52:01:2a:16:fc: e3:99:a4:87:03:69:7d:ec:fc:91:20:b8:58:96:ce: ee:c9:4a:4e:55:c8:63:9e:3d:65:9b:26:34:5d:c7: 4d:23:23:ce:c7:ef:53:6f:d5:d3:67:8a:48:ac:87: f7:13:88:d0:59:09:00:1d:69:11:32:c3:a9:90:08: 8a:81:1b:ef:07:b7:9a:e8:0f:a7:69:cf:5c:38:40: 70:36:8b:39:31:34:a9:56:31:c5:2d:94:90:64:0d: c8:40:18:84:22:e3:77:79:c0:ce:a7:09:91:67:6d: 39:f7:ce:5c:55:03:03:a2:a6:19:62:87:cd:43:40: 8a:03:c2:62:f1:46:46:15:69:1e:06:9f:ca:93:f2: ed:f0:9b:77:c7:22:8a:d3:c1:d6:b0:1f:fe:eb:94: 6d:a0:62:94:d1:d0:dd:71:40:44:11:32:d3:09:a1: 04:6a:68:22:a8:87:d0:9c:ee:84:c8:a1:59:b2:09: 0f:87:b6:a3:07:2d:a6:18:1b:7f:0b:11:ea:3f:28: 8c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:92:F6:11:78:92:43:A3:48:1B:49:20:9A:EB:96:2E:0E:D4:A4:7F X509v3 Authority Key Identifier: keyid:EF:A0:A8:0D:F7:1C:A3:77:A2:89:71:1E:A4:31:0F:31:17:35:8B:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/EFA0A80DF71CA377A289711EA4310F3117358BDA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFA0A80DF71CA377A289711EA4310F3117358BDA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/EFA0A80DF71CA377A289711EA4310F3117358BDA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:c3:05:71:9d:22:7b:aa:2f:69:f6:a1:ad:f6:a0:e9:22:b6: 19:d5:db:6c:7a:e2:18:8c:b4:07:72:a0:10:98:a9:76:29:49: 32:33:be:09:dc:25:62:e3:64:48:8e:14:46:2d:79:9e:d3:ab: b3:23:14:ac:d1:72:23:e1:47:ff:b1:2f:85:db:cd:6e:9a:95: 77:31:ff:71:3c:66:54:11:1e:c0:52:6c:d7:0d:04:3d:90:3e: 50:de:20:3c:4d:05:c3:a7:8e:87:a2:1a:5a:19:a2:be:45:34: 46:dd:9e:18:ad:44:ab:1b:5b:5b:3a:df:ef:64:f7:dd:13:74: 5c:0d:ef:f7:1b:85:e3:13:b1:2f:21:ff:b9:28:0a:f1:3d:aa: e2:70:65:f4:21:42:95:a1:f4:95:b9:82:b5:d5:a0:9e:14:6d: 49:44:c8:30:4e:86:e6:1d:ea:a9:8d:4f:d0:8b:ea:46:d3:f8: 2b:df:a0:df:d2:8c:e7:60:6b:e9:19:f3:1d:33:e4:79:99:8c: e6:07:20:29:de:22:65:16:6f:3b:c2:cd:6b:c5:20:99:c4:ce: 83:8f:e9:b0:00:60:c9:29:53:dc:59:93:bc:e7:76:a1:a2:08: c0:fa:99:b4:db:ab:0a:b6:f7:13:c3:aa:71:c4:97:b5:a7:92: 72:6f:0c:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHEPGMC4qQ7YYfmVRqGGjKT/n0GAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZBMEE4MERGNzFDQTM3N0EyODk3MTFFQTQzMTBGMzEx NzM1OEJEQTAeFw0yNjA4MDIwNzUyMjFaFw0yNjA4MDMwOTM0MjFaMDMxMTAvBgNV BAMTKERBOTJGNjExNzg5MjQzQTM0ODFCNDkyMDlBRUI5NjJFMEVENEE0N0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoTEH8JuCocIQUTNJvC3abOBT2 WTfRcNsnRAg7seXkZ8dTSrWmdboMWROSOQiHrb1PGh8nbfBSASoW/OOZpIcDaX3s /JEguFiWzu7JSk5VyGOePWWbJjRdx00jI87H71Nv1dNnikish/cTiNBZCQAdaREy w6mQCIqBG+8Ht5roD6dpz1w4QHA2izkxNKlWMcUtlJBkDchAGIQi43d5wM6nCZFn bTn3zlxVAwOiphlih81DQIoDwmLxRkYVaR4Gn8qT8u3wm3fHIorTwdawH/7rlG2g YpTR0N1xQEQRMtMJoQRqaCKoh9Cc7oTIoVmyCQ+HtqMHLaYYG38LEeo/KIyHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2pL2EXiSQ6NIG0kgmuuWLg7UpH8wHwYDVR0j BBgwFoAU76CoDfcco3eiiXEepDEPMRc1i9owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTQzZTJlNjctYTE3MS00ZDllLWE5MzUtNDA2OTAyYjFlMTNiLzAvRUZBMEE4MERG NzFDQTM3N0EyODk3MTFFQTQzMTBGMzExNzM1OEJEQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRkEwQTgwREY3MUNBMzc3QTI4OTcxMUVBNDMxMEYzMTE3MzU4 QkRBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTQzZTJlNjctYTE3MS00ZDllLWE5 MzUtNDA2OTAyYjFlMTNiLzAvRUZBMEE4MERGNzFDQTM3N0EyODk3MTFFQTQzMTBG MzExNzM1OEJEQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALPDBXGdInuqL2n2oa32oOkithnV22x64hiM tAdyoBCYqXYpSTIzvgncJWLjZEiOFEYteZ7Tq7MjFKzRciPhR/+xL4XbzW6alXcx /3E8ZlQRHsBSbNcNBD2QPlDeIDxNBcOnjoeiGloZor5FNEbdnhitRKsbW1s63+9k 990TdFwN7/cbheMTsS8h/7koCvE9quJwZfQhQpWh9JW5grXVoJ4UbUlEyDBOhuYd 6qmNT9CL6kbT+CvfoN/SjOdga+kZ8x0z5HmZjOYHICneImUWbzvCzWvFIJnEzoOP 6bAAYMkpU9xZk7zndqGiCMD6mbTbqwq29xPDqnHEl7WnknJvDJE= -----END CERTIFICATE-----Generated at Mon Aug 3 01:46:01 2026 by rpki-client