$ rpki-client -vvf rpki-rsync.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E.mft File: EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E.mft (raw, json) Hash identifier: rpPlAeW3SdJ6Qy+wLUgZoZkk93AQduvYRowqAkP4xTI= Subject key identifier: 85:0C:65:FB:98:E8:1D:3B:D1:FD:D5:F4:13:72:4A:47:9F:72:C5:68 Authority key identifier: EF:0D:C3:6F:FE:89:46:F1:04:92:74:EE:88:9B:B9:8C:5A:5A:7D:8E Certificate issuer: /CN=EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E Certificate serial: 092CBE2A52077E47D0CACA27577AA69EE9AB39B4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 15:48:28 +0000 Manifest this update: Tue 16 Jun 2026 15:43:28 +0000 Manifest next update: Wed 17 Jun 2026 17:37:28 +0000 Files and hashes: 1: 3138302e3135302e3233322e302f32312d3234203d3e203234323130.roa (hash: ifJJcEjqzU7+xO+rrfiw7+N3sHyu5nZ4TiZzLx8FyiQ=) 2: EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E.crl (hash: uKfdSLhpvdJNdwjVIM/xDo0YkciKqPs9xeWEfzbnBcA=) 3: 3230322e3137332e31362e302f32312d3234203d3e203234323130.roa (hash: r4SZ6eUQ/WGNZXPblXSjXtHYlTpktiYzvV0LKCEpMuY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E.crl rsync://rpki-rsync.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 17:37:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:2c:be:2a:52:07:7e:47:d0:ca:ca:27:57:7a:a6:9e:e9:ab:39:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E Validity Not Before: Jun 16 15:43:28 2026 GMT Not After : Jun 17 17:37:28 2026 GMT Subject: CN=850C65FB98E81D3BD1FDD5F413724A479F72C568 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:91:90:58:50:80:44:d6:26:fb:7d:e4:6d:55: c6:1a:36:fd:d1:95:7a:35:41:41:c3:4e:fa:21:bc: 6f:9d:8d:86:30:dc:29:fb:e9:9e:69:f8:95:c8:4c: 8f:28:b0:63:1b:46:64:c3:76:20:ce:52:19:d0:35: 3a:bc:7c:4c:df:33:3f:e6:9c:54:40:a2:fb:3e:42: 8b:d9:7c:9e:e8:5d:2f:67:58:47:27:99:75:d7:7e: 1d:d6:7f:c6:f8:2a:8e:53:49:e5:54:8a:20:82:e6: d0:75:7f:0a:4c:f7:a8:f1:05:bb:ee:b8:1c:73:c4: 4b:d2:09:74:b3:d7:7c:bc:40:bf:ae:59:bf:ab:3b: 56:20:f3:ac:66:98:a3:08:dc:fd:fb:b1:0d:5a:49: 5d:21:35:fc:e5:5d:c8:01:5b:c6:49:6e:ee:06:f3: f3:15:cb:5a:fb:94:07:db:1a:55:9a:6d:73:bf:cd: 27:97:fd:3e:1a:27:89:85:73:37:77:37:55:cc:3d: 5b:4c:90:0c:c6:c7:78:ca:5e:e6:9c:86:87:f0:6c: 21:33:88:e6:3c:6e:c4:7d:66:c9:7c:95:e6:74:89: cd:28:89:68:a7:38:8e:39:6f:85:03:5a:28:55:6b: 47:54:05:6b:b9:a4:ec:7e:94:69:15:c3:23:a5:f3: 0e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:0C:65:FB:98:E8:1D:3B:D1:FD:D5:F4:13:72:4A:47:9F:72:C5:68 X509v3 Authority Key Identifier: keyid:EF:0D:C3:6F:FE:89:46:F1:04:92:74:EE:88:9B:B9:8C:5A:5A:7D:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:89:9f:67:7f:b8:45:73:1e:f7:bc:45:0a:6f:ae:d9:b6:d3: e1:b5:70:ae:0f:a6:09:f3:a4:10:25:62:a2:db:63:c4:a7:be: c8:2d:a5:aa:f0:10:d7:74:e7:c4:d3:1a:c7:d5:0e:6a:71:e1: 1b:48:64:36:14:11:9d:c8:ab:d0:23:64:59:f6:00:f2:e7:3a: 2a:b2:cc:d0:0f:d0:01:a1:00:ae:20:37:28:4b:e8:43:e4:b3: d5:4b:06:b9:fd:b3:0c:fc:e2:53:3a:6f:6a:c0:86:6a:de:58: 62:b0:4d:42:ff:c2:4f:f6:06:18:4b:75:46:9c:7c:3c:eb:a8: a2:7c:fb:2f:8b:75:06:aa:0d:45:eb:fd:b7:2d:86:e5:04:6e: 55:8b:7f:30:c2:70:4f:b4:3a:02:2c:21:07:6c:56:1d:cf:13: e1:56:74:0a:6d:c8:17:51:c4:26:94:85:9a:b0:89:01:ae:9b: c8:60:fd:13:9f:b6:87:df:c6:ee:a5:63:25:32:d6:7e:f1:a7: f7:80:63:e9:6e:2e:9a:6c:af:ab:15:ca:f3:db:2d:a7:ee:99: ec:a4:a7:66:ff:fc:33:e3:fa:78:0a:6f:25:b3:b5:6a:47:8a: 20:ec:c0:ac:8e:c4:7f:99:c7:05:6b:8b:03:36:99:db:ca:21: 10:30:f3:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCSy+KlIHfkfQysonV3qmnumrObQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUYwREMzNkZGRTg5NDZGMTA0OTI3NEVFODg5QkI5OEM1 QTVBN0Q4RTAeFw0yNjA2MTYxNTQzMjhaFw0yNjA2MTcxNzM3MjhaMDMxMTAvBgNV BAMTKDg1MEM2NUZCOThFODFEM0JEMUZERDVGNDEzNzI0QTQ3OUY3MkM1NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSkZBYUIBE1ib7feRtVcYaNv3R lXo1QUHDTvohvG+djYYw3Cn76Z5p+JXITI8osGMbRmTDdiDOUhnQNTq8fEzfMz/m nFRAovs+QovZfJ7oXS9nWEcnmXXXfh3Wf8b4Ko5TSeVUiiCC5tB1fwpM96jxBbvu uBxzxEvSCXSz13y8QL+uWb+rO1Yg86xmmKMI3P37sQ1aSV0hNfzlXcgBW8ZJbu4G 8/MVy1r7lAfbGlWabXO/zSeX/T4aJ4mFczd3N1XMPVtMkAzGx3jKXuachofwbCEz iOY8bsR9Zsl8leZ0ic0oiWinOI45b4UDWihVa0dUBWu5pOx+lGkVwyOl8w61AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhQxl+5joHTvR/dX0E3JKR59yxWgwHwYDVR0j BBgwFoAU7w3Db/6JRvEEknTuiJu5jFpafY4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTAxN2I4MjgtMTdmYS00OGEyLWExMTMtMTQ5Zjk0NjdhMzI4LzAvRUYwREMzNkZG RTg5NDZGMTA0OTI3NEVFODg5QkI5OEM1QTVBN0Q4RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRjBEQzM2RkZFODk0NkYxMDQ5Mjc0RUU4ODlCQjk4QzVBNUE3 RDhFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTAxN2I4MjgtMTdmYS00OGEyLWEx MTMtMTQ5Zjk0NjdhMzI4LzAvRUYwREMzNkZGRTg5NDZGMTA0OTI3NEVFODg5QkI5 OEM1QTVBN0Q4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGuJn2d/uEVzHve8RQpvrtm20+G1cK4Ppgnz pBAlYqLbY8SnvsgtparwENd058TTGsfVDmpx4RtIZDYUEZ3Iq9AjZFn2APLnOiqy zNAP0AGhAK4gNyhL6EPks9VLBrn9swz84lM6b2rAhmreWGKwTUL/wk/2BhhLdUac fDzrqKJ8+y+LdQaqDUXr/bcthuUEblWLfzDCcE+0OgIsIQdsVh3PE+FWdAptyBdR xCaUhZqwiQGum8hg/ROftoffxu6lYyUy1n7xp/eAY+luLppsr6sVyvPbLafumeyk p2b//DPj+ngKbyWztWpHiiDswKyOxH+ZxwVriwM2mdvKIRAw8/g= -----END CERTIFICATE-----Generated at Wed Jun 17 10:33:38 2026 by rpki-client