$ rpki-client -vvf rpki-rsync.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.mft File: EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.mft (raw, json) Hash identifier: FQX232r6XAaAgg4LZ3hAAfMgsG2sDHtXbwiQUIkKl5o= Subject key identifier: 86:38:4A:7F:68:B6:3E:55:2A:4A:97:F3:F2:EF:D2:1A:DE:C9:A3:82 Authority key identifier: EF:D4:29:07:B2:81:E7:9D:93:B3:A5:5B:E7:7E:69:57:B1:B4:BC:A9 Certificate issuer: /CN=EFD42907B281E79D93B3A55BE77E6957B1B4BCA9 Certificate serial: 27D589AC72BE788BFD655BDEAFEB758CA959A841 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.mft Manifest number: 74 Signing time: Tue 28 Jul 2026 14:19:09 +0000 Manifest this update: Tue 28 Jul 2026 14:14:09 +0000 Manifest next update: Wed 29 Jul 2026 18:10:09 +0000 Files and hashes: 1: 323430373a366634303a3a2f33322d3332203d3e203538383230.roa (hash: pbMg7J7P4kS8Sxdzt0uwVKMCDecvHVa7e/rU45LkW3I=) 2: 323430373a366634303a3a2f33322d3438203d3e203538383230.roa (hash: uLpfvmOWPLMtCPKe67fDfTWwMZzd/ScnogVVWTCv8e4=) 3: EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.crl (hash: rM2EzgRmkasASSLTwqr1rzfa/51YTSkqTsIHMSbMYJg=) 4: 3130332e3136372e3133322e302f32332d3234203d3e20313339343536.roa (hash: QuFmVmJ2dd3gMmUQt4P6SAtpf/EY7B6QH+WkpK0hIbk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.crl rsync://rpki-rsync.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 18:10:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:d5:89:ac:72:be:78:8b:fd:65:5b:de:af:eb:75:8c:a9:59:a8:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFD42907B281E79D93B3A55BE77E6957B1B4BCA9 Validity Not Before: Jul 28 14:14:09 2026 GMT Not After : Jul 29 18:10:09 2026 GMT Subject: CN=86384A7F68B63E552A4A97F3F2EFD21ADEC9A382 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:48:71:e2:13:9e:6b:9f:0b:3c:c3:e0:f4:19: c5:69:8a:6a:be:f2:5b:46:1d:5a:5b:e2:ba:76:60: 80:7e:e6:7c:24:c4:1b:2e:d1:b2:73:82:d7:b8:a9: f6:f9:e7:56:55:23:91:52:f4:c4:0f:55:9f:2a:f9: f2:33:6a:ed:f4:71:72:42:76:0e:56:99:60:42:77: 56:4e:ec:9c:4e:b8:71:16:f4:a8:cf:5f:f3:fe:1d: d6:36:5b:21:72:4f:56:de:ed:0c:c2:02:62:24:1e: 00:20:33:5f:96:fd:27:c0:32:c7:b7:b7:5c:52:ba: 8a:77:f5:e9:08:02:0d:d0:3b:bd:58:ac:c1:72:66: 59:da:6d:c3:23:be:6b:0c:7f:d9:49:05:1a:67:b4: e3:56:76:f1:e9:f0:f7:22:d0:95:b0:3c:68:c4:23: bc:5c:df:8c:de:52:05:18:a1:26:55:45:c5:29:ea: d8:58:d5:26:bf:66:84:c9:62:50:f9:c3:94:9a:56: 57:f0:82:d4:43:d1:41:3f:a4:f0:ef:2b:e5:80:1e: 24:eb:a6:53:b5:f4:ce:bb:30:2a:06:c2:27:94:5a: b9:4f:37:ad:34:8b:41:b5:91:ae:20:2f:b5:7c:de: 27:4a:ac:4d:cd:9c:85:c7:83:4f:1b:b8:b8:64:d7: d4:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:38:4A:7F:68:B6:3E:55:2A:4A:97:F3:F2:EF:D2:1A:DE:C9:A3:82 X509v3 Authority Key Identifier: keyid:EF:D4:29:07:B2:81:E7:9D:93:B3:A5:5B:E7:7E:69:57:B1:B4:BC:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:a7:42:c2:34:37:37:97:f8:56:17:7d:c1:83:ad:a8:0b:4b: fb:02:32:c2:66:0b:3e:b6:58:8e:95:2d:a3:75:55:4a:04:ec: 2d:e5:99:47:4a:b9:c3:74:09:75:c9:bd:e6:bb:2e:15:b8:90: ab:1f:cd:80:c0:c9:c0:55:1f:88:1e:e0:44:48:ab:20:af:01: a7:8d:b4:de:29:f3:57:7b:44:e8:80:cd:56:72:07:b6:5f:04: 80:0d:62:fe:6f:e4:ef:00:d2:fe:dd:75:bf:30:a6:36:34:8b: 7f:f8:12:4b:73:fa:98:11:7e:5f:41:9f:f2:0e:62:51:a8:0e: e9:1a:7d:30:c8:77:17:12:77:48:fa:1e:0d:d4:d8:7d:f1:12: 57:b6:a5:cf:cd:c0:f9:13:b5:c6:11:eb:dd:83:d7:c1:25:3c: 9a:24:9c:d4:11:e0:d7:c1:0d:e4:d5:28:aa:b9:6e:bf:e6:cc: 39:3a:46:ca:97:46:7b:23:4a:8f:64:ad:08:f2:85:c7:11:93: 0e:67:41:d9:90:b6:ab:90:ef:be:03:d4:fb:6d:0b:96:19:81: b6:0f:43:31:0f:1d:97:13:59:bc:59:87:3f:fe:1a:cd:dd:0f: ec:a1:3b:0b:36:a9:c6:4a:f4:00:77:95:e4:6f:be:5a:4e:b6: cd:2f:66:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ9WJrHK+eIv9ZVver+t1jKlZqEEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZENDI5MDdCMjgxRTc5RDkzQjNBNTVCRTc3RTY5NTdC MUI0QkNBOTAeFw0yNjA3MjgxNDE0MDlaFw0yNjA3MjkxODEwMDlaMDMxMTAvBgNV BAMTKDg2Mzg0QTdGNjhCNjNFNTUyQTRBOTdGM0YyRUZEMjFBREVDOUEzODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0SHHiE55rnws8w+D0GcVpimq+ 8ltGHVpb4rp2YIB+5nwkxBsu0bJzgte4qfb551ZVI5FS9MQPVZ8q+fIzau30cXJC dg5WmWBCd1ZO7JxOuHEW9KjPX/P+HdY2WyFyT1be7QzCAmIkHgAgM1+W/SfAMse3 t1xSuop39ekIAg3QO71YrMFyZlnabcMjvmsMf9lJBRpntONWdvHp8Pci0JWwPGjE I7xc34zeUgUYoSZVRcUp6thY1Sa/ZoTJYlD5w5SaVlfwgtRD0UE/pPDvK+WAHiTr plO19M67MCoGwieUWrlPN600i0G1ka4gL7V83idKrE3NnIXHg08buLhk19QvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhjhKf2i2PlUqSpfz8u/SGt7Jo4IwHwYDVR0j BBgwFoAU79QpB7KB552Ts6Vb535pV7G0vKkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmVkNDcyMDItZGU2MC00N2YzLWEyYTctNjA4YTc0YTFlODc0LzAvRUZENDI5MDdC MjgxRTc5RDkzQjNBNTVCRTc3RTY5NTdCMUI0QkNBOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRkQ0MjkwN0IyODFFNzlEOTNCM0E1NUJFNzdFNjk1N0IxQjRC Q0E5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmVkNDcyMDItZGU2MC00N2YzLWEy YTctNjA4YTc0YTFlODc0LzAvRUZENDI5MDdCMjgxRTc5RDkzQjNBNTVCRTc3RTY5 NTdCMUI0QkNBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABSnQsI0NzeX+FYXfcGDragLS/sCMsJmCz62 WI6VLaN1VUoE7C3lmUdKucN0CXXJvea7LhW4kKsfzYDAycBVH4ge4ERIqyCvAaeN tN4p81d7ROiAzVZyB7ZfBIANYv5v5O8A0v7ddb8wpjY0i3/4Ektz+pgRfl9Bn/IO YlGoDukafTDIdxcSd0j6Hg3U2H3xEle2pc/NwPkTtcYR692D18ElPJoknNQR4NfB DeTVKKq5br/mzDk6RsqXRnsjSo9krQjyhccRkw5nQdmQtquQ774D1PttC5YZgbYP QzEPHZcTWbxZhz/+Gs3dD+yhOws2qcZK9AB3leRvvlpOts0vZgo= -----END CERTIFICATE-----Generated at Wed Jul 29 11:22:43 2026 by rpki-client