$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/EFFB61EDA88A3976415A737CCC5A79284C873C9A.mft File: EFFB61EDA88A3976415A737CCC5A79284C873C9A.mft (raw, json) Hash identifier: vNF+Jd432XzxJSfb9xeyrfdvw28KvRfGFSqu+33sZzg= Subject key identifier: 81:A1:02:C7:64:3F:B7:CC:26:24:39:32:A3:73:8B:A6:12:D7:55:25 Authority key identifier: EF:FB:61:ED:A8:8A:39:76:41:5A:73:7C:CC:5A:79:28:4C:87:3C:9A Certificate issuer: /CN=EFFB61EDA88A3976415A737CCC5A79284C873C9A Certificate serial: 3BC07F9D68B75966D2F5F84D4B224EE1B72F1733 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFFB61EDA88A3976415A737CCC5A79284C873C9A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/EFFB61EDA88A3976415A737CCC5A79284C873C9A.mft Manifest number: BE Signing time: Mon 21 Sep 2026 13:38:26 +0000 Manifest this update: Mon 21 Sep 2026 13:33:26 +0000 Manifest next update: Tue 22 Sep 2026 17:03:26 +0000 Files and hashes: 1: EFFB61EDA88A3976415A737CCC5A79284C873C9A.crl (hash: zjDWojyA0Wh/MRdBlaLbRg8D3NQPYqcibAPRBb14tMY=) 2: 3130332e3138302e3235302e302f32332d3234203d3e20313439333733.roa (hash: vH86OJq5h4E6zeVZwHKL6SywoMe0OW/Y/A2U521Svpk=) 3: 3130332e3138302e3235302e302f32342d3234203d3e20313439333733.roa (hash: nufJv2+uWrvJ0SWNkLs+ilFdAkkva6iaz1eW145f0T4=) 4: 3130332e3138302e3235302e302f32332d3233203d3e20313439333733.roa (hash: sUl2bhI+otw0/fJ4SBeJRv38sPuRgClkXdfSCpnmx2w=) 5: 3130332e3138302e3235312e302f32342d3234203d3e20313439333733.roa (hash: 5roj2kNLZ/Aw2sfH4UoUgbfgaCTs5klpBUiJr4UV8hE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/EFFB61EDA88A3976415A737CCC5A79284C873C9A.crl rsync://rpki-rsync.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/EFFB61EDA88A3976415A737CCC5A79284C873C9A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFFB61EDA88A3976415A737CCC5A79284C873C9A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 17:03:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:c0:7f:9d:68:b7:59:66:d2:f5:f8:4d:4b:22:4e:e1:b7:2f:17:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFFB61EDA88A3976415A737CCC5A79284C873C9A Validity Not Before: Sep 21 13:33:26 2026 GMT Not After : Sep 22 17:03:26 2026 GMT Subject: CN=81A102C7643FB7CC26243932A3738BA612D75525 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:78:e4:37:b3:b0:b9:8d:60:dc:5c:1c:d7:24: e9:79:ff:82:a7:fa:62:55:38:19:45:f2:10:54:96: d8:c9:f6:13:96:1f:2a:e2:d4:98:aa:4a:c2:13:d7: 20:32:29:a1:46:8a:f8:e4:95:24:b5:64:9e:a1:c1: 78:ab:60:95:c3:b1:2a:a2:3a:18:e3:42:3f:4f:ea: aa:18:87:28:b1:32:7e:e8:3e:99:49:de:3d:28:15: 91:47:3c:bb:b0:59:d5:f6:d7:5f:77:48:c5:66:52: de:c4:0b:11:b7:03:9a:8c:b4:e5:98:e4:ef:4a:3b: 2d:7b:c6:23:cb:26:49:56:a5:aa:cc:12:ff:af:c1: a7:89:7e:a5:68:59:f3:3d:22:3a:90:74:1e:d6:99: 22:d7:47:a6:01:1c:4f:69:bf:6b:2a:1c:3c:0d:3e: f1:a4:3e:f2:60:72:55:66:78:57:c0:8e:27:0f:72: ec:d9:d2:f9:42:b1:bd:46:cc:76:3a:a7:57:8b:0c: ac:a8:7e:34:a9:e5:24:03:4b:14:70:45:cc:a8:92: 2c:e5:a3:89:5c:9d:f4:50:e2:5b:1c:5d:b3:23:2b: a9:8f:cd:2e:38:0a:23:ea:89:cf:0d:63:ba:b5:e2: 51:54:ae:67:f1:13:f7:96:4f:e9:dc:75:04:12:8c: 2d:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:A1:02:C7:64:3F:B7:CC:26:24:39:32:A3:73:8B:A6:12:D7:55:25 X509v3 Authority Key Identifier: keyid:EF:FB:61:ED:A8:8A:39:76:41:5A:73:7C:CC:5A:79:28:4C:87:3C:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/EFFB61EDA88A3976415A737CCC5A79284C873C9A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFFB61EDA88A3976415A737CCC5A79284C873C9A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/EFFB61EDA88A3976415A737CCC5A79284C873C9A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:df:6f:3a:5a:23:94:05:1f:e1:3d:09:07:a6:df:e8:e8:d8: e1:41:11:23:cf:39:3a:ac:3f:1c:40:d7:34:cb:20:bf:cf:82: bd:b8:f1:bf:b6:be:56:96:f0:80:15:1c:ef:d5:fa:8c:8a:d5: bb:74:9c:15:13:41:f8:97:02:85:82:f2:69:c5:a8:07:59:85: 7f:2b:51:5d:e4:62:1e:70:98:84:06:7c:f8:78:f2:86:ac:83: e9:83:2f:8e:a3:6f:06:34:69:74:cd:04:51:99:3b:79:e4:27: 6e:ab:5a:2e:18:ca:cc:af:35:4a:e8:f6:a3:d6:b6:3a:ff:f6: dc:b9:1f:52:aa:82:c6:63:31:c4:aa:e6:f4:14:69:c7:02:5f: 66:16:a9:0d:e3:60:09:98:aa:7c:93:28:41:db:23:11:c2:80: b5:0b:ae:41:2a:70:72:b8:04:92:f9:d3:0b:ab:3c:dc:ea:de: ba:72:27:49:4a:ba:2b:b5:ca:e0:bd:b5:87:f6:b6:e7:2d:c7: 56:b3:64:d3:e9:99:41:0b:96:9f:96:af:8d:c7:c0:0b:a1:be: be:b6:9a:1f:fa:f8:0d:8c:34:60:a4:51:d4:81:61:17:15:3e: 4d:49:e0:d4:bb:97:ad:44:7e:3f:ce:b1:8a:e4:c0:e5:ca:68: b2:71:8f:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO8B/nWi3WWbS9fhNSyJO4bcvFzMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZGQjYxRURBODhBMzk3NjQxNUE3MzdDQ0M1QTc5Mjg0 Qzg3M0M5QTAeFw0yNjA5MjExMzMzMjZaFw0yNjA5MjIxNzAzMjZaMDMxMTAvBgNV BAMTKDgxQTEwMkM3NjQzRkI3Q0MyNjI0MzkzMkEzNzM4QkE2MTJENzU1MjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfeOQ3s7C5jWDcXBzXJOl5/4Kn +mJVOBlF8hBUltjJ9hOWHyri1JiqSsIT1yAyKaFGivjklSS1ZJ6hwXirYJXDsSqi OhjjQj9P6qoYhyixMn7oPplJ3j0oFZFHPLuwWdX21193SMVmUt7ECxG3A5qMtOWY 5O9KOy17xiPLJklWparMEv+vwaeJfqVoWfM9IjqQdB7WmSLXR6YBHE9pv2sqHDwN PvGkPvJgclVmeFfAjicPcuzZ0vlCsb1GzHY6p1eLDKyofjSp5SQDSxRwRcyokizl o4lcnfRQ4lscXbMjK6mPzS44CiPqic8NY7q14lFUrmfxE/eWT+ncdQQSjC2nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgaECx2Q/t8wmJDkyo3OLphLXVSUwHwYDVR0j BBgwFoAU7/th7aiKOXZBWnN8zFp5KEyHPJowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTI0OWQzODctNzBjZi00MGU5LTg3NTktOWI4NmUwYzY1MTI4LzAvRUZGQjYxRURB ODhBMzk3NjQxNUE3MzdDQ0M1QTc5Mjg0Qzg3M0M5QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRkZCNjFFREE4OEEzOTc2NDE1QTczN0NDQzVBNzkyODRDODcz QzlBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTI0OWQzODctNzBjZi00MGU5LTg3 NTktOWI4NmUwYzY1MTI4LzAvRUZGQjYxRURBODhBMzk3NjQxNUE3MzdDQ0M1QTc5 Mjg0Qzg3M0M5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAADfbzpaI5QFH+E9CQem3+jo2OFBESPPOTqs PxxA1zTLIL/Pgr248b+2vlaW8IAVHO/V+oyK1bt0nBUTQfiXAoWC8mnFqAdZhX8r UV3kYh5wmIQGfPh48oasg+mDL46jbwY0aXTNBFGZO3nkJ26rWi4YysyvNUro9qPW tjr/9ty5H1KqgsZjMcSq5vQUaccCX2YWqQ3jYAmYqnyTKEHbIxHCgLULrkEqcHK4 BJL50wurPNzq3rpyJ0lKuiu1yuC9tYf2tuctx1azZNPpmUELlp+Wr43HwAuhvr62 mh/6+A2MNGCkUdSBYRcVPk1J4NS7l61Efj/OsYrkwOXKaLJxj70= -----END CERTIFICATE-----Generated at Tue Sep 22 05:28:05 2026 by rpki-client