$ rpki-client -vvf rpki-rsync.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/EFA0A80DF71CA377A289711EA4310F3117358BDA.mft File: EFA0A80DF71CA377A289711EA4310F3117358BDA.mft (raw, json) Hash identifier: WWhxYzVXGKu9rYXCjkjciLtoD9x9DHmFpDFaZC/D510= Subject key identifier: FD:68:4C:02:9D:92:9E:3E:A2:47:37:07:C3:39:1C:E0:39:1B:A3:45 Authority key identifier: EF:A0:A8:0D:F7:1C:A3:77:A2:89:71:1E:A4:31:0F:31:17:35:8B:DA Certificate issuer: /CN=EFA0A80DF71CA377A289711EA4310F3117358BDA Certificate serial: 72363530A24DD76082EC373EB698FA415C2A3FD0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFA0A80DF71CA377A289711EA4310F3117358BDA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/EFA0A80DF71CA377A289711EA4310F3117358BDA.mft Manifest number: 77 Signing time: Tue 28 Jul 2026 22:09:05 +0000 Manifest this update: Tue 28 Jul 2026 22:04:05 +0000 Manifest next update: Wed 29 Jul 2026 22:59:05 +0000 Files and hashes: 1: EFA0A80DF71CA377A289711EA4310F3117358BDA.crl (hash: JiYUp+OxfuBUPGIRBlMhQZxQUMOehylYm6zm43iFPfU=) 2: 32372e3131312e33322e302f31392d3234203d3e203234353332.roa (hash: Fx9bLePWZd911ErojerGEpVTnf/DxfdXCAQiFRWGMk8=) 3: 3131392e3233352e31362e302f32302d3234203d3e203234353332.roa (hash: a1jLyYlI+XXOuvRXX5wEn6MAtEMedfGoxkqMvx1OXCk=) 4: 32372e3131312e33342e302f32342d3234203d3e203538343737.roa (hash: 1YWuY5HZqKiBZs805+vyXQB+d7lVGfJWx9YMEkEgtvQ=) 5: 3130332e3234352e3138302e302f32322d3234203d3e203234353332.roa (hash: HsO0FzJAWLg2u6DKU2yDy0xpq+6RbfKYVFKlBWZw79M=) 6: 3230322e3132392e3138342e302f32322d3234203d3e203234353332.roa (hash: CBM38ddIBA7ErC9KFszGB+2Go/rfydEsEM3u2nPHmFA=) 7: 34332e3232392e3230342e302f32322d3234203d3e203234353332.roa (hash: BwtyTC6qI4XC3HBbimySaUxc14wJ6nXjYuM/+KpzQMU=) 8: 323430333a326530303a3a2f33322d3438203d3e203234353332.roa (hash: 9DAVKa81esoccLZerAJimBEYho7HzR8tvV6sLPxdUYg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/EFA0A80DF71CA377A289711EA4310F3117358BDA.crl rsync://rpki-rsync.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/EFA0A80DF71CA377A289711EA4310F3117358BDA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFA0A80DF71CA377A289711EA4310F3117358BDA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 22:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:36:35:30:a2:4d:d7:60:82:ec:37:3e:b6:98:fa:41:5c:2a:3f:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFA0A80DF71CA377A289711EA4310F3117358BDA Validity Not Before: Jul 28 22:04:05 2026 GMT Not After : Jul 29 22:59:05 2026 GMT Subject: CN=FD684C029D929E3EA2473707C3391CE0391BA345 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:d9:6c:3a:3b:0a:1a:b5:01:ca:fe:55:17:0a: 76:5b:e9:99:1a:f1:25:ed:82:8f:6f:5f:85:81:f4: 13:23:c8:b9:e7:e2:4d:47:51:f3:76:0c:cd:64:05: 22:4b:69:1d:6c:32:31:4b:b1:ab:e5:68:6d:fe:15: e7:18:e8:88:dc:f7:a7:e9:dc:bb:68:16:59:bf:36: f7:2e:a6:bf:76:a5:71:cd:59:8e:0a:f1:6f:48:88: 12:c1:b0:09:61:f0:09:a5:f6:6d:85:3a:60:85:94: f1:ea:fd:de:17:02:df:0a:14:e0:b3:27:4d:5c:2a: 69:1b:9d:5c:93:a5:ce:e5:c1:75:82:3e:bb:52:de: f1:29:71:1d:74:d2:8d:52:0a:10:9c:22:f8:2b:c1: 08:7c:8a:d4:af:ab:1d:fa:f4:0d:b6:9a:e6:b5:7a: 19:2e:11:fd:ca:dd:13:7a:98:db:01:94:a2:ee:97: b8:97:14:27:4d:ff:21:19:89:c5:fe:76:49:3b:b5: 87:cb:0c:52:2d:b0:eb:94:52:d3:3b:b9:df:e5:13: 6a:de:f1:3f:bf:1e:fa:37:cd:fc:64:d8:ce:17:94: 3c:b3:ec:81:eb:ce:74:3a:3c:17:75:2d:80:7f:54: af:e6:25:a9:34:16:5d:f4:3b:eb:a1:a6:4d:d9:a4: 44:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:68:4C:02:9D:92:9E:3E:A2:47:37:07:C3:39:1C:E0:39:1B:A3:45 X509v3 Authority Key Identifier: keyid:EF:A0:A8:0D:F7:1C:A3:77:A2:89:71:1E:A4:31:0F:31:17:35:8B:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/EFA0A80DF71CA377A289711EA4310F3117358BDA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFA0A80DF71CA377A289711EA4310F3117358BDA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/EFA0A80DF71CA377A289711EA4310F3117358BDA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:6a:df:04:1c:eb:ac:a7:dd:f1:17:0d:d1:cf:03:cd:4e:93: 51:a2:d1:a6:39:21:a3:6f:d4:dc:79:ef:a8:96:79:df:2c:02: e2:13:62:40:15:70:8c:d3:83:0e:16:2f:47:71:d1:73:80:e9: 93:e3:f8:0a:01:54:94:ba:4c:93:a4:11:cf:86:3f:37:e0:14: 1a:3d:c1:5d:d2:22:fc:2f:e8:d8:44:c3:cd:83:f6:e8:2c:44: a8:23:bf:d1:7c:98:92:d3:39:08:fc:60:26:58:8e:de:b9:31: f2:ff:db:c6:eb:e1:ba:9d:01:2d:e5:a0:0e:b4:f9:3d:4c:a1: 78:29:06:0a:10:c0:4f:59:0d:ac:6c:46:b7:bf:fe:7c:49:58: 80:be:d7:c9:af:5f:8a:1c:ce:b2:69:85:a5:73:2a:3b:59:c7: c5:1e:d2:de:3e:2d:1a:c6:e6:ad:51:4f:a3:94:c4:5f:2e:36: 9a:af:f2:83:5c:42:19:00:81:4b:e4:06:c8:3e:cb:c6:cb:0a: 83:69:2b:46:b6:ee:8b:cc:b9:59:b6:32:c9:ea:12:67:e3:f6: 55:46:ee:8c:3b:ce:6f:54:9a:bf:7a:7c:b8:ac:21:49:eb:d6: 6d:94:d0:93:6c:8e:03:2f:f9:2f:fa:21:98:00:e5:52:61:30: 45:4f:d2:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcjY1MKJN12CC7Dc+tpj6QVwqP9AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZBMEE4MERGNzFDQTM3N0EyODk3MTFFQTQzMTBGMzEx NzM1OEJEQTAeFw0yNjA3MjgyMjA0MDVaFw0yNjA3MjkyMjU5MDVaMDMxMTAvBgNV BAMTKEZENjg0QzAyOUQ5MjlFM0VBMjQ3MzcwN0MzMzkxQ0UwMzkxQkEzNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDm2Ww6OwoatQHK/lUXCnZb6Zka 8SXtgo9vX4WB9BMjyLnn4k1HUfN2DM1kBSJLaR1sMjFLsavlaG3+FecY6Ijc96fp 3LtoFlm/Nvcupr92pXHNWY4K8W9IiBLBsAlh8Aml9m2FOmCFlPHq/d4XAt8KFOCz J01cKmkbnVyTpc7lwXWCPrtS3vEpcR100o1SChCcIvgrwQh8itSvqx369A22mua1 ehkuEf3K3RN6mNsBlKLul7iXFCdN/yEZicX+dkk7tYfLDFItsOuUUtM7ud/lE2re 8T+/Hvo3zfxk2M4XlDyz7IHrznQ6PBd1LYB/VK/mJak0Fl30O+uhpk3ZpES3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/WhMAp2Snj6iRzcHwzkc4Dkbo0UwHwYDVR0j BBgwFoAU76CoDfcco3eiiXEepDEPMRc1i9owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTQzZTJlNjctYTE3MS00ZDllLWE5MzUtNDA2OTAyYjFlMTNiLzAvRUZBMEE4MERG NzFDQTM3N0EyODk3MTFFQTQzMTBGMzExNzM1OEJEQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRkEwQTgwREY3MUNBMzc3QTI4OTcxMUVBNDMxMEYzMTE3MzU4 QkRBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTQzZTJlNjctYTE3MS00ZDllLWE5 MzUtNDA2OTAyYjFlMTNiLzAvRUZBMEE4MERGNzFDQTM3N0EyODk3MTFFQTQzMTBG MzExNzM1OEJEQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHVq3wQc66yn3fEXDdHPA81Ok1Gi0aY5IaNv 1Nx576iWed8sAuITYkAVcIzTgw4WL0dx0XOA6ZPj+AoBVJS6TJOkEc+GPzfgFBo9 wV3SIvwv6NhEw82D9ugsRKgjv9F8mJLTOQj8YCZYjt65MfL/28br4bqdAS3loA60 +T1MoXgpBgoQwE9ZDaxsRre//nxJWIC+18mvX4oczrJphaVzKjtZx8Ue0t4+LRrG 5q1RT6OUxF8uNpqv8oNcQhkAgUvkBsg+y8bLCoNpK0a27ovMuVm2MsnqEmfj9lVG 7ow7zm9Umr96fLisIUnr1m2U0JNsjgMv+S/6IZgA5VJhMEVP0ts= -----END CERTIFICATE-----Generated at Wed Jul 29 11:13:24 2026 by rpki-client