$ rpki-client -vvf rpki-rsync.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.mft File: EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.mft (raw, json) Hash identifier: ggwckMETgFrgUW/R1MXGn4+QdsNg8A3eqQhd6iJiImw= Subject key identifier: DC:D5:CD:4E:84:8A:83:E4:2D:5E:68:53:36:62:8E:B1:E4:9E:EE:3B Authority key identifier: EF:D4:29:07:B2:81:E7:9D:93:B3:A5:5B:E7:7E:69:57:B1:B4:BC:A9 Certificate issuer: /CN=EFD42907B281E79D93B3A55BE77E6957B1B4BCA9 Certificate serial: 4FA6848EB44B3890369400EC6C332FA63E63BCD2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.mft Manifest number: 38 Signing time: Sat 13 Jun 2026 05:30:40 +0000 Manifest this update: Sat 13 Jun 2026 05:25:40 +0000 Manifest next update: Sun 14 Jun 2026 08:28:40 +0000 Files and hashes: 1: 323430373a366634303a3a2f33322d3332203d3e203538383230.roa (hash: pbMg7J7P4kS8Sxdzt0uwVKMCDecvHVa7e/rU45LkW3I=) 2: 323430373a366634303a3a2f33322d3438203d3e203538383230.roa (hash: uLpfvmOWPLMtCPKe67fDfTWwMZzd/ScnogVVWTCv8e4=) 3: 3130332e3136372e3133322e302f32332d3234203d3e20313339343536.roa (hash: QuFmVmJ2dd3gMmUQt4P6SAtpf/EY7B6QH+WkpK0hIbk=) 4: EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.crl (hash: OruG/4EHCSW81h+GCLgaBNB7bxcg1ryRdDtVpZCHhso=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.crl rsync://rpki-rsync.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 08:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:a6:84:8e:b4:4b:38:90:36:94:00:ec:6c:33:2f:a6:3e:63:bc:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFD42907B281E79D93B3A55BE77E6957B1B4BCA9 Validity Not Before: Jun 13 05:25:40 2026 GMT Not After : Jun 14 08:28:40 2026 GMT Subject: CN=DCD5CD4E848A83E42D5E685336628EB1E49EEE3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e1:8b:93:f7:08:bf:bf:7c:cc:2e:08:88:1c: eb:14:96:0a:3a:e9:9a:1a:2a:ec:f5:f5:12:d3:f2: 95:5d:e8:2b:16:42:37:1a:4c:28:03:4b:44:bd:73: 70:88:73:57:3a:02:6a:f4:c4:52:c1:da:c2:f9:18: 6e:d1:bc:54:8d:6d:2c:6a:5a:21:bd:8a:f6:87:74: c8:65:c7:2b:fa:ab:63:f2:77:64:20:f5:a3:88:1b: 9c:04:0a:14:57:a8:ea:65:d6:be:19:ce:69:9a:73: 0f:ee:d9:b2:79:cf:cb:45:54:d6:24:fa:cd:1d:92: b8:6d:61:9b:30:21:a4:2e:9d:06:ec:d7:b8:61:c9: 1a:58:eb:80:4a:75:67:1e:d6:a3:31:e5:0d:6a:57: e2:b1:ac:de:2a:05:57:5b:4b:30:9f:d2:36:94:4e: 14:8f:41:75:bd:a3:76:d1:8f:98:76:a4:d2:d6:50: 01:33:50:ac:d7:19:ba:80:1d:46:e8:17:c4:93:ee: bd:8d:95:74:23:d7:ed:3c:d8:39:dd:01:a1:28:a1: 7e:a6:a1:8d:5e:6a:3f:3c:66:f5:38:27:d3:c9:9e: c8:79:f0:3f:3d:82:8b:2b:22:44:e2:f9:41:3a:d7: 61:50:78:4c:92:b8:fc:f6:23:60:06:e7:a5:bb:a0: fc:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:D5:CD:4E:84:8A:83:E4:2D:5E:68:53:36:62:8E:B1:E4:9E:EE:3B X509v3 Authority Key Identifier: keyid:EF:D4:29:07:B2:81:E7:9D:93:B3:A5:5B:E7:7E:69:57:B1:B4:BC:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:4a:64:19:4c:e9:eb:bd:81:a1:e2:ca:95:da:b9:c2:04:95: 34:59:00:56:8f:c6:98:29:d9:eb:b1:86:42:76:ac:91:24:07: 81:12:a9:bd:52:8d:05:9a:a9:35:89:eb:d6:1c:f8:db:a4:34: 29:d3:1b:33:6c:7a:64:24:c3:dd:94:e4:51:a3:78:5f:0a:73: 5c:b4:b1:c4:55:f6:e5:68:95:ac:ea:a9:38:b9:4c:73:98:11: 28:12:1b:77:09:3f:4c:be:35:c2:a3:4b:df:f7:a0:fe:74:93: ff:bd:04:01:21:07:6e:d0:25:d7:b8:fc:ff:1d:26:12:14:f8: ee:bf:61:20:5a:f0:3c:6a:44:da:6e:3b:58:d3:0b:14:a6:24: 90:9a:fb:75:89:52:1e:98:b7:e9:13:2c:a3:61:58:76:d2:eb: 0c:66:de:80:a2:7c:e0:e2:fe:7d:ae:d6:65:2d:5a:a9:0b:27: 93:1b:79:a0:66:24:48:ad:26:3a:5f:9b:cc:76:20:57:4c:c8: ad:2b:6b:85:6c:7f:f7:35:0f:08:24:ca:ea:43:e7:b3:7a:cc: 64:1f:15:ea:12:96:7c:7f:0c:c6:20:c9:7a:38:7c:5c:49:8d: 21:21:d2:31:ef:e5:1d:2d:fb:c9:0f:51:90:23:18:3f:6b:41: 67:0f:fc:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT6aEjrRLOJA2lADsbDMvpj5jvNIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZENDI5MDdCMjgxRTc5RDkzQjNBNTVCRTc3RTY5NTdC MUI0QkNBOTAeFw0yNjA2MTMwNTI1NDBaFw0yNjA2MTQwODI4NDBaMDMxMTAvBgNV BAMTKERDRDVDRDRFODQ4QTgzRTQyRDVFNjg1MzM2NjI4RUIxRTQ5RUVFM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCW4YuT9wi/v3zMLgiIHOsUlgo6 6ZoaKuz19RLT8pVd6CsWQjcaTCgDS0S9c3CIc1c6Amr0xFLB2sL5GG7RvFSNbSxq WiG9ivaHdMhlxyv6q2Pyd2Qg9aOIG5wEChRXqOpl1r4Zzmmacw/u2bJ5z8tFVNYk +s0dkrhtYZswIaQunQbs17hhyRpY64BKdWce1qMx5Q1qV+KxrN4qBVdbSzCf0jaU ThSPQXW9o3bRj5h2pNLWUAEzUKzXGbqAHUboF8ST7r2NlXQj1+082DndAaEooX6m oY1eaj88ZvU4J9PJnsh58D89gosrIkTi+UE612FQeEySuPz2I2AG56W7oPyHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3NXNToSKg+QtXmhTNmKOseSe7jswHwYDVR0j BBgwFoAU79QpB7KB552Ts6Vb535pV7G0vKkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmVkNDcyMDItZGU2MC00N2YzLWEyYTctNjA4YTc0YTFlODc0LzAvRUZENDI5MDdC MjgxRTc5RDkzQjNBNTVCRTc3RTY5NTdCMUI0QkNBOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRkQ0MjkwN0IyODFFNzlEOTNCM0E1NUJFNzdFNjk1N0IxQjRC Q0E5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmVkNDcyMDItZGU2MC00N2YzLWEy YTctNjA4YTc0YTFlODc0LzAvRUZENDI5MDdCMjgxRTc5RDkzQjNBNTVCRTc3RTY5 NTdCMUI0QkNBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADVKZBlM6eu9gaHiypXaucIElTRZAFaPxpgp 2euxhkJ2rJEkB4ESqb1SjQWaqTWJ69Yc+NukNCnTGzNsemQkw92U5FGjeF8Kc1y0 scRV9uVolazqqTi5THOYESgSG3cJP0y+NcKjS9/3oP50k/+9BAEhB27QJde4/P8d JhIU+O6/YSBa8DxqRNpuO1jTCxSmJJCa+3WJUh6Yt+kTLKNhWHbS6wxm3oCifODi /n2u1mUtWqkLJ5MbeaBmJEitJjpfm8x2IFdMyK0ra4Vsf/c1DwgkyupD57N6zGQf FeoSlnx/DMYgyXo4fFxJjSEh0jHv5R0t+8kPUZAjGD9rQWcP/NY= -----END CERTIFICATE-----Generated at Sat Jun 13 21:19:28 2026 by rpki-client