$ rpki-client -vvf rpki-rsync.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/EFFB61EDA88A3976415A737CCC5A79284C873C9A.mft File: EFFB61EDA88A3976415A737CCC5A79284C873C9A.mft (raw, json) Hash identifier: y1lfm7EJ6ixaRJ7ppttHD+zkOPUUa4UNtanrjaCQ4yU= Subject key identifier: 84:B7:4B:01:A7:8E:F7:43:B4:7C:C1:D3:C0:3E:1C:7D:2F:A2:CE:46 Authority key identifier: EF:FB:61:ED:A8:8A:39:76:41:5A:73:7C:CC:5A:79:28:4C:87:3C:9A Certificate issuer: /CN=EFFB61EDA88A3976415A737CCC5A79284C873C9A Certificate serial: 6D529C41CA3ED73FEBF8F3F698D037F1D291B35B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFFB61EDA88A3976415A737CCC5A79284C873C9A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/EFFB61EDA88A3976415A737CCC5A79284C873C9A.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 03:57:38 +0000 Manifest this update: Wed 17 Jun 2026 03:52:38 +0000 Manifest next update: Thu 18 Jun 2026 07:22:38 +0000 Files and hashes: 1: 3130332e3138302e3235302e302f32332d3234203d3e20313439333733.roa (hash: vH86OJq5h4E6zeVZwHKL6SywoMe0OW/Y/A2U521Svpk=) 2: 3130332e3138302e3235302e302f32342d3234203d3e20313439333733.roa (hash: nufJv2+uWrvJ0SWNkLs+ilFdAkkva6iaz1eW145f0T4=) 3: EFFB61EDA88A3976415A737CCC5A79284C873C9A.crl (hash: JmSApyZnwf6SdIHZFbFTEJs3jdgcu/c8edc+hJ1Db6w=) 4: 3130332e3138302e3235302e302f32332d3233203d3e20313439333733.roa (hash: sUl2bhI+otw0/fJ4SBeJRv38sPuRgClkXdfSCpnmx2w=) 5: 3130332e3138302e3235312e302f32342d3234203d3e20313439333733.roa (hash: 5roj2kNLZ/Aw2sfH4UoUgbfgaCTs5klpBUiJr4UV8hE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/EFFB61EDA88A3976415A737CCC5A79284C873C9A.crl rsync://rpki-rsync.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/EFFB61EDA88A3976415A737CCC5A79284C873C9A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFFB61EDA88A3976415A737CCC5A79284C873C9A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:52:9c:41:ca:3e:d7:3f:eb:f8:f3:f6:98:d0:37:f1:d2:91:b3:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFFB61EDA88A3976415A737CCC5A79284C873C9A Validity Not Before: Jun 17 03:52:38 2026 GMT Not After : Jun 18 07:22:38 2026 GMT Subject: CN=84B74B01A78EF743B47CC1D3C03E1C7D2FA2CE46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:07:02:84:44:af:ac:e4:85:7f:d4:33:f5:1f: 1e:74:2b:c8:7c:82:ea:fd:cf:de:0f:de:04:87:20: 75:05:1e:d3:c4:43:48:e8:8e:e4:da:46:08:cb:d4: f2:f0:38:bd:81:d7:df:03:06:b8:27:27:f2:12:d6: fd:94:94:90:db:4d:78:7c:fd:fe:13:db:9e:52:fd: 4b:c1:92:da:75:94:1a:23:8e:3d:f9:de:bc:be:de: 99:99:ca:e3:57:48:4d:80:6d:25:4b:c0:27:2c:a7: 3a:6d:08:79:6e:a2:cb:40:e4:75:15:97:47:ff:36: 46:30:2f:aa:07:14:f3:71:17:23:5c:d5:3a:a5:15: fa:23:68:4d:db:eb:56:a6:ee:86:fe:27:da:af:a3: d1:c1:72:b9:ec:eb:49:24:25:38:81:28:f0:7e:9b: 64:86:28:3a:d0:93:d4:d4:8c:55:a3:9e:ee:05:a2: 53:ea:2f:8a:93:50:58:f8:38:53:44:e2:f0:94:f9: 78:8f:8d:3d:fd:9d:04:d2:74:18:cc:00:78:e4:37: a7:3c:0d:b6:73:df:8d:98:f9:71:39:23:5b:c5:ea: ea:6b:cb:4c:6b:6a:48:78:34:13:49:e2:93:b0:19: 48:63:79:f4:b9:47:65:45:64:97:d4:ef:2a:d8:cd: f5:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:B7:4B:01:A7:8E:F7:43:B4:7C:C1:D3:C0:3E:1C:7D:2F:A2:CE:46 X509v3 Authority Key Identifier: keyid:EF:FB:61:ED:A8:8A:39:76:41:5A:73:7C:CC:5A:79:28:4C:87:3C:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/EFFB61EDA88A3976415A737CCC5A79284C873C9A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFFB61EDA88A3976415A737CCC5A79284C873C9A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/EFFB61EDA88A3976415A737CCC5A79284C873C9A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:91:7c:02:53:26:30:f7:9e:e7:2e:ad:95:13:d1:45:f9:03: e5:7a:f4:0a:88:c9:3b:ad:df:c7:13:3d:9e:56:10:af:18:15: 72:b2:78:59:84:f6:7e:41:f6:93:ba:a0:70:a8:37:e2:78:6f: 85:c1:e8:84:3f:bc:0d:33:ee:eb:89:4d:3d:94:e2:9c:44:35: ff:91:19:58:ee:55:42:69:30:c6:00:1e:3d:df:04:1a:bf:ca: 49:75:8b:d2:bb:6a:39:f9:1e:b0:19:00:38:02:e0:5f:73:65: 08:f9:fe:b6:b9:59:4e:19:ad:07:c4:a5:21:af:d1:c6:ad:06: 1a:7a:b1:4e:f2:31:bb:32:b2:17:a0:ac:aa:c5:1c:04:36:f7: 57:9e:ef:af:b8:0d:2d:ee:da:89:09:19:22:7a:be:a6:a7:8b: 99:39:27:e0:44:06:65:3f:d6:3f:ca:04:eb:d4:fb:75:98:b0: 80:0a:f4:f7:0f:d6:1f:59:5e:81:7d:63:d1:a2:81:d0:06:f5: c6:01:2d:91:3f:63:03:3a:dc:ad:7c:a0:47:3c:42:8c:cc:bf: 70:46:70:c4:73:10:29:d4:ff:4d:85:b1:f8:88:c5:44:6d:3f: 28:4b:e5:39:05:c7:8e:81:61:aa:c5:40:03:80:7b:5b:6b:bf: e8:ba:46:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbVKcQco+1z/r+PP2mNA38dKRs1swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZGQjYxRURBODhBMzk3NjQxNUE3MzdDQ0M1QTc5Mjg0 Qzg3M0M5QTAeFw0yNjA2MTcwMzUyMzhaFw0yNjA2MTgwNzIyMzhaMDMxMTAvBgNV BAMTKDg0Qjc0QjAxQTc4RUY3NDNCNDdDQzFEM0MwM0UxQzdEMkZBMkNFNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8BwKERK+s5IV/1DP1Hx50K8h8 gur9z94P3gSHIHUFHtPEQ0jojuTaRgjL1PLwOL2B198DBrgnJ/IS1v2UlJDbTXh8 /f4T255S/UvBktp1lBojjj353ry+3pmZyuNXSE2AbSVLwCcspzptCHluostA5HUV l0f/NkYwL6oHFPNxFyNc1TqlFfojaE3b61am7ob+J9qvo9HBcrns60kkJTiBKPB+ m2SGKDrQk9TUjFWjnu4FolPqL4qTUFj4OFNE4vCU+XiPjT39nQTSdBjMAHjkN6c8 DbZz342Y+XE5I1vF6upry0xrakh4NBNJ4pOwGUhjefS5R2VFZJfU7yrYzfU/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhLdLAaeO90O0fMHTwD4cfS+izkYwHwYDVR0j BBgwFoAU7/th7aiKOXZBWnN8zFp5KEyHPJowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTI0OWQzODctNzBjZi00MGU5LTg3NTktOWI4NmUwYzY1MTI4LzAvRUZGQjYxRURB ODhBMzk3NjQxNUE3MzdDQ0M1QTc5Mjg0Qzg3M0M5QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRkZCNjFFREE4OEEzOTc2NDE1QTczN0NDQzVBNzkyODRDODcz QzlBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTI0OWQzODctNzBjZi00MGU5LTg3 NTktOWI4NmUwYzY1MTI4LzAvRUZGQjYxRURBODhBMzk3NjQxNUE3MzdDQ0M1QTc5 Mjg0Qzg3M0M5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFSRfAJTJjD3nucurZUT0UX5A+V69AqIyTut 38cTPZ5WEK8YFXKyeFmE9n5B9pO6oHCoN+J4b4XB6IQ/vA0z7uuJTT2U4pxENf+R GVjuVUJpMMYAHj3fBBq/ykl1i9K7ajn5HrAZADgC4F9zZQj5/ra5WU4ZrQfEpSGv 0catBhp6sU7yMbsyshegrKrFHAQ291ee76+4DS3u2okJGSJ6vqani5k5J+BEBmU/ 1j/KBOvU+3WYsIAK9PcP1h9ZXoF9Y9GigdAG9cYBLZE/YwM63K18oEc8QozMv3BG cMRzECnU/02FsfiIxURtPyhL5TkFx46BYarFQAOAe1trv+i6RkI= -----END CERTIFICATE-----Generated at Wed Jun 17 11:13:52 2026 by rpki-client