$ rpki-client -vvf rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC.mft File: EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC.mft (raw, json) Hash identifier: Tq6VZmovXOtLMMV+vaNIxeSBpEKpOyXWxfi+k6IDNac= Subject key identifier: 02:70:CC:60:50:2E:FD:5D:CF:C5:C0:B1:85:EE:C0:28:FA:4E:C7:A5 Authority key identifier: EF:4A:2E:C5:53:79:CA:2F:E3:A7:D2:4D:D2:C2:85:E8:BF:3A:39:FC Certificate issuer: /CN=EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC Certificate serial: 701CB8C6F80F6411C42BE3A13BB09D4C88847060 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC.mft Manifest number: 7C Signing time: Sun 02 Aug 2026 07:36:59 +0000 Manifest this update: Sun 02 Aug 2026 07:31:59 +0000 Manifest next update: Mon 03 Aug 2026 07:47:59 +0000 Files and hashes: 1: 323030313a6466343a363463303a3a2f34382d3438203d3e20313533313430.roa (hash: WBFw33DVjLMzvjb9A+5nTenZ7QhkAKAHSXyABZyuBhE=) 2: EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC.crl (hash: OCltswMS8xc06lXPR44psoezspjvFOVxqrcFORZebmU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC.crl rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 07:47:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:1c:b8:c6:f8:0f:64:11:c4:2b:e3:a1:3b:b0:9d:4c:88:84:70:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC Validity Not Before: Aug 2 07:31:59 2026 GMT Not After : Aug 3 07:47:59 2026 GMT Subject: CN=0270CC60502EFD5DCFC5C0B185EEC028FA4EC7A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:bd:f4:48:a9:dd:ff:3c:b3:38:05:fb:8c:68: c9:04:3b:a9:2b:34:40:ba:4a:f4:76:a5:22:59:10: ca:43:c2:fb:22:12:88:36:ef:c2:31:74:d4:12:fb: dc:d8:ab:f0:5a:e5:16:be:ca:e2:2a:95:5b:f4:d3: b2:36:44:cc:21:cd:18:62:bc:3f:6e:35:a0:0e:9d: bc:57:e2:81:0f:bd:1c:12:66:12:51:95:73:bd:a0: 26:6f:0f:40:08:34:af:f4:42:da:09:d2:60:e7:55: 91:0a:cf:28:32:4f:48:3f:cd:9b:29:47:fc:31:9b: 58:c0:fd:1b:0b:5b:99:91:e8:34:69:07:eb:95:20: 9e:59:33:22:21:cd:15:48:97:cb:0f:70:70:26:7b: 66:f8:73:44:64:a9:7e:87:f7:1f:0d:e3:a3:a7:4f: e4:08:5a:1a:36:97:30:0b:10:2f:6c:01:fd:58:e3: f7:cd:31:b7:2c:8f:62:c3:bd:d8:09:af:9a:21:84: 96:14:bd:99:2d:fd:87:c1:5b:d2:a5:87:ff:10:11: 65:ec:74:df:c7:8b:e7:5a:54:6b:8a:6a:b6:30:f7: 93:3e:0e:70:94:d4:d6:82:4c:39:46:bd:1e:fb:8a: e0:0b:c1:ed:94:0e:c8:70:0d:4b:17:92:fd:8c:8c: cd:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:70:CC:60:50:2E:FD:5D:CF:C5:C0:B1:85:EE:C0:28:FA:4E:C7:A5 X509v3 Authority Key Identifier: keyid:EF:4A:2E:C5:53:79:CA:2F:E3:A7:D2:4D:D2:C2:85:E8:BF:3A:39:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:2e:eb:7b:49:2a:0e:46:d7:1e:15:bf:93:1e:51:86:c2:1c: f3:d8:26:39:6a:03:75:23:73:3c:7a:ae:0f:80:9e:eb:f5:fe: be:e7:a5:e0:85:39:dc:ba:bd:73:1a:fe:fd:43:3f:d0:0f:ce: df:3c:e2:a9:ff:65:47:49:d1:f1:a6:95:ca:56:e6:b5:36:36: 73:46:e8:13:a4:ab:3b:c8:40:59:4a:b6:f9:25:1e:51:a2:c5: c7:63:93:61:ee:49:19:9e:d9:1d:f4:25:da:ea:6b:62:e9:95: 77:52:20:52:88:9e:87:45:6b:93:17:d8:5e:29:b6:b6:c5:c0: 70:86:42:f7:ab:c5:0c:0c:91:d1:db:12:3f:68:d2:ae:85:1c: 75:76:c7:03:53:ba:2d:e5:07:29:ad:a7:c4:5c:3b:5e:00:a2: f2:9d:1a:02:bf:ac:64:52:f6:5e:cc:7a:99:a5:25:d8:aa:9b: f2:d4:fc:f9:2f:58:37:5e:43:31:b3:dd:43:3d:02:58:09:75: dd:dc:2b:f6:f3:64:86:5a:32:c9:b6:62:c6:0e:17:cc:4a:3e: 43:de:f3:6c:3f:97:44:5c:a7:ce:d0:4c:b3:85:68:eb:44:e3: 28:e4:8e:ae:45:bf:80:4e:9e:66:ba:9c:b2:6b:88:be:05:13: 89:61:34:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcBy4xvgPZBHEK+OhO7CdTIiEcGAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUY0QTJFQzU1Mzc5Q0EyRkUzQTdEMjRERDJDMjg1RThC RjNBMzlGQzAeFw0yNjA4MDIwNzMxNTlaFw0yNjA4MDMwNzQ3NTlaMDMxMTAvBgNV BAMTKDAyNzBDQzYwNTAyRUZENURDRkM1QzBCMTg1RUVDMDI4RkE0RUM3QTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzvfRIqd3/PLM4BfuMaMkEO6kr NEC6SvR2pSJZEMpDwvsiEog278IxdNQS+9zYq/Ba5Ra+yuIqlVv007I2RMwhzRhi vD9uNaAOnbxX4oEPvRwSZhJRlXO9oCZvD0AINK/0QtoJ0mDnVZEKzygyT0g/zZsp R/wxm1jA/RsLW5mR6DRpB+uVIJ5ZMyIhzRVIl8sPcHAme2b4c0RkqX6H9x8N46On T+QIWho2lzALEC9sAf1Y4/fNMbcsj2LDvdgJr5ohhJYUvZkt/YfBW9Klh/8QEWXs dN/Hi+daVGuKarYw95M+DnCU1NaCTDlGvR77iuALwe2UDshwDUsXkv2MjM3pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAnDMYFAu/V3PxcCxhe7AKPpOx6UwHwYDVR0j BBgwFoAU70ouxVN5yi/jp9JN0sKF6L86OfwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2FmY2JmYmItYmEzZi00ZDUzLWEwNGYtMTRkNmY0YmUwY2IxLzEvRUY0QTJFQzU1 Mzc5Q0EyRkUzQTdEMjRERDJDMjg1RThCRjNBMzlGQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRjRBMkVDNTUzNzlDQTJGRTNBN0QyNEREMkMyODVFOEJGM0Ez OUZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2FmY2JmYmItYmEzZi00ZDUzLWEw NGYtMTRkNmY0YmUwY2IxLzEvRUY0QTJFQzU1Mzc5Q0EyRkUzQTdEMjRERDJDMjg1 RThCRjNBMzlGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGgu63tJKg5G1x4Vv5MeUYbCHPPYJjlqA3Uj czx6rg+Anuv1/r7npeCFOdy6vXMa/v1DP9APzt884qn/ZUdJ0fGmlcpW5rU2NnNG 6BOkqzvIQFlKtvklHlGixcdjk2HuSRme2R30Jdrqa2LplXdSIFKInodFa5MX2F4p trbFwHCGQverxQwMkdHbEj9o0q6FHHV2xwNTui3lBymtp8RcO14AovKdGgK/rGRS 9l7MepmlJdiqm/LU/PkvWDdeQzGz3UM9AlgJdd3cK/bzZIZaMsm2YsYOF8xKPkPe 82w/l0Rcp87QTLOFaOtE4yjkjq5Fv4BOnma6nLJriL4FE4lhNHI= -----END CERTIFICATE-----Generated at Sun Aug 2 23:18:10 2026 by rpki-client