$ rpki-client -vvf rpki-rsync.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/EFA0A80DF71CA377A289711EA4310F3117358BDA.mft File: EFA0A80DF71CA377A289711EA4310F3117358BDA.mft (raw, json) Hash identifier: ZRlFq8ySPcVlqRjXH82FQPdiJGhIWI4rJ15JjHxHLDo= Subject key identifier: EC:E3:E8:A7:2E:E3:0A:F9:63:D7:3C:FD:B3:3F:31:2F:A7:71:3B:11 Authority key identifier: EF:A0:A8:0D:F7:1C:A3:77:A2:89:71:1E:A4:31:0F:31:17:35:8B:DA Certificate issuer: /CN=EFA0A80DF71CA377A289711EA4310F3117358BDA Certificate serial: 688D8FF7F3E0444D04330C483AF1719ECE450D7F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFA0A80DF71CA377A289711EA4310F3117358BDA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/EFA0A80DF71CA377A289711EA4310F3117358BDA.mft Manifest number: 3A Signing time: Sat 13 Jun 2026 11:48:56 +0000 Manifest this update: Sat 13 Jun 2026 11:43:56 +0000 Manifest next update: Sun 14 Jun 2026 12:57:56 +0000 Files and hashes: 1: 3131392e3233352e31362e302f32302d3234203d3e203234353332.roa (hash: a1jLyYlI+XXOuvRXX5wEn6MAtEMedfGoxkqMvx1OXCk=) 2: 323430333a326530303a3a2f33322d3438203d3e203234353332.roa (hash: 9DAVKa81esoccLZerAJimBEYho7HzR8tvV6sLPxdUYg=) 3: 32372e3131312e33342e302f32342d3234203d3e203538343737.roa (hash: 1YWuY5HZqKiBZs805+vyXQB+d7lVGfJWx9YMEkEgtvQ=) 4: EFA0A80DF71CA377A289711EA4310F3117358BDA.crl (hash: dWURNhdkz43vY43c7oSnsH0as5bRHaEHEEJ52LKjDJU=) 5: 3130332e3234352e3138302e302f32322d3234203d3e203234353332.roa (hash: HsO0FzJAWLg2u6DKU2yDy0xpq+6RbfKYVFKlBWZw79M=) 6: 32372e3131312e33322e302f31392d3234203d3e203234353332.roa (hash: Fx9bLePWZd911ErojerGEpVTnf/DxfdXCAQiFRWGMk8=) 7: 3230322e3132392e3138342e302f32322d3234203d3e203234353332.roa (hash: CBM38ddIBA7ErC9KFszGB+2Go/rfydEsEM3u2nPHmFA=) 8: 34332e3232392e3230342e302f32322d3234203d3e203234353332.roa (hash: BwtyTC6qI4XC3HBbimySaUxc14wJ6nXjYuM/+KpzQMU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/EFA0A80DF71CA377A289711EA4310F3117358BDA.crl rsync://rpki-rsync.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/EFA0A80DF71CA377A289711EA4310F3117358BDA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFA0A80DF71CA377A289711EA4310F3117358BDA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:8d:8f:f7:f3:e0:44:4d:04:33:0c:48:3a:f1:71:9e:ce:45:0d:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFA0A80DF71CA377A289711EA4310F3117358BDA Validity Not Before: Jun 13 11:43:56 2026 GMT Not After : Jun 14 12:57:56 2026 GMT Subject: CN=ECE3E8A72EE30AF963D73CFDB33F312FA7713B11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e8:ef:8b:26:83:08:9d:78:af:9b:d7:7b:44: b0:c5:61:14:ca:51:52:29:1c:bb:55:05:b2:75:a6: ca:4b:58:b7:b6:b3:a8:a4:33:6f:36:27:02:e0:ce: 65:5a:5f:52:f4:57:bd:5c:df:a9:17:91:55:38:19: da:52:5a:ad:9e:82:d0:c9:27:f7:e6:a2:f5:6d:40: fb:d7:12:af:6a:d7:16:af:19:68:04:6c:03:b2:2e: 6b:1d:c1:74:7e:e4:f2:c7:87:88:06:87:4d:77:fb: 6d:cf:c9:c1:c4:b0:d1:55:41:de:53:60:9c:36:74: c3:d9:14:c2:15:c1:e9:f4:49:3c:db:58:73:80:93: 9d:91:5d:84:d1:62:5f:0c:90:5b:c7:b1:ba:90:e1: 1a:eb:69:43:f9:97:65:3a:40:92:c1:00:72:3a:91: b3:a1:4d:3a:a5:0c:61:1e:f8:62:26:12:90:02:e2: 8a:91:c5:64:fb:9a:f2:5d:88:63:6d:6d:d7:11:26: 7d:b3:5c:11:92:b5:c9:3d:55:37:3a:55:07:76:01: e5:91:31:66:41:53:91:ee:ca:2b:d7:19:26:79:ec: 41:d5:92:43:01:59:05:05:8d:19:d0:57:1e:78:9d: 74:90:75:c4:f0:42:4c:5f:46:7b:e5:d8:f8:0c:ff: c7:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:E3:E8:A7:2E:E3:0A:F9:63:D7:3C:FD:B3:3F:31:2F:A7:71:3B:11 X509v3 Authority Key Identifier: keyid:EF:A0:A8:0D:F7:1C:A3:77:A2:89:71:1E:A4:31:0F:31:17:35:8B:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/EFA0A80DF71CA377A289711EA4310F3117358BDA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFA0A80DF71CA377A289711EA4310F3117358BDA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/EFA0A80DF71CA377A289711EA4310F3117358BDA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:6e:f3:c1:59:a7:09:a3:82:80:02:7b:c2:d7:30:ab:f0:00: 5c:c7:8e:f0:85:c5:35:6f:ce:44:87:7c:3e:2d:28:2f:56:20: de:eb:35:bf:49:49:64:82:9a:6b:b4:69:04:71:6e:78:a9:0a: 4b:52:a7:9a:cc:81:94:0f:4e:b1:1f:2a:fb:00:00:2a:c4:47: 72:88:86:ae:57:bf:74:24:a2:07:27:b9:12:f5:cd:00:5b:2c: 0a:44:b4:5f:8c:83:70:11:2d:f0:4d:2e:35:8b:57:ba:82:55: 58:34:b3:3c:9d:40:ac:93:d4:5a:ee:7c:41:eb:db:d4:06:4b: b0:19:48:58:86:5c:a0:5e:c7:4f:a1:7d:ab:ba:d9:29:59:75: 1b:fd:21:ce:7b:d8:b8:52:99:38:53:47:f7:22:14:04:eb:b9: 73:53:90:4a:45:7e:e6:dd:ad:51:50:af:a9:25:d3:06:16:31: db:c3:7e:f1:98:46:51:68:33:d1:0f:b9:34:a4:0e:f5:c2:c6: 83:5b:e1:08:0b:16:39:76:dc:c5:cf:44:3a:04:c7:62:75:28: b8:b1:47:0c:4e:73:96:ba:6d:e8:65:64:9b:c2:19:d5:a7:ad: 36:4e:02:c6:24:46:91:67:be:3f:82:9a:4e:c8:b2:cb:b7:51: 90:d1:69:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaI2P9/PgRE0EMwxIOvFxns5FDX8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZBMEE4MERGNzFDQTM3N0EyODk3MTFFQTQzMTBGMzEx NzM1OEJEQTAeFw0yNjA2MTMxMTQzNTZaFw0yNjA2MTQxMjU3NTZaMDMxMTAvBgNV BAMTKEVDRTNFOEE3MkVFMzBBRjk2M0Q3M0NGREIzM0YzMTJGQTc3MTNCMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC06O+LJoMInXivm9d7RLDFYRTK UVIpHLtVBbJ1pspLWLe2s6ikM282JwLgzmVaX1L0V71c36kXkVU4GdpSWq2egtDJ J/fmovVtQPvXEq9q1xavGWgEbAOyLmsdwXR+5PLHh4gGh013+23PycHEsNFVQd5T YJw2dMPZFMIVwen0STzbWHOAk52RXYTRYl8MkFvHsbqQ4RrraUP5l2U6QJLBAHI6 kbOhTTqlDGEe+GImEpAC4oqRxWT7mvJdiGNtbdcRJn2zXBGStck9VTc6VQd2AeWR MWZBU5HuyivXGSZ57EHVkkMBWQUFjRnQVx54nXSQdcTwQkxfRnvl2PgM/8c3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7OPopy7jCvlj1zz9sz8xL6dxOxEwHwYDVR0j BBgwFoAU76CoDfcco3eiiXEepDEPMRc1i9owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTQzZTJlNjctYTE3MS00ZDllLWE5MzUtNDA2OTAyYjFlMTNiLzAvRUZBMEE4MERG NzFDQTM3N0EyODk3MTFFQTQzMTBGMzExNzM1OEJEQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRkEwQTgwREY3MUNBMzc3QTI4OTcxMUVBNDMxMEYzMTE3MzU4 QkRBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTQzZTJlNjctYTE3MS00ZDllLWE5 MzUtNDA2OTAyYjFlMTNiLzAvRUZBMEE4MERGNzFDQTM3N0EyODk3MTFFQTQzMTBG MzExNzM1OEJEQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABVu88FZpwmjgoACe8LXMKvwAFzHjvCFxTVv zkSHfD4tKC9WIN7rNb9JSWSCmmu0aQRxbnipCktSp5rMgZQPTrEfKvsAACrER3KI hq5Xv3QkogcnuRL1zQBbLApEtF+Mg3ARLfBNLjWLV7qCVVg0szydQKyT1FrufEHr 29QGS7AZSFiGXKBex0+hfau62SlZdRv9Ic572LhSmThTR/ciFATruXNTkEpFfubd rVFQr6kl0wYWMdvDfvGYRlFoM9EPuTSkDvXCxoNb4QgLFjl23MXPRDoEx2J1KLix RwxOc5a6behlZJvCGdWnrTZOAsYkRpFnvj+Cmk7Issu3UZDRaY0= -----END CERTIFICATE-----Generated at Sat Jun 13 22:39:18 2026 by rpki-client