$ rpki-client -vvvf rpki-rsync.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7.mft File: EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7.mft (raw, json) Hash identifier: ugSxo6frblHMZN8RGazMzTI6KIE67xajdd/9ovKfr3U= Subject key identifier: 30:85:3C:A6:B8:E2:86:59:FD:14:6B:95:28:E7:22:93:E4:8D:53:82 Authority key identifier: EF:FE:71:94:4C:D7:DF:CA:7F:BD:C6:EF:06:3C:9A:6D:28:BB:47:E7 Certificate issuer: /CN=EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7 Certificate serial: 4C8730D95E97A1FF83B38EE52AF3BF86B8F3EA6F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 05:47:55 +0000 Manifest this update: Thu 24 Sep 2026 05:42:55 +0000 Manifest next update: Fri 25 Sep 2026 07:54:55 +0000 Files and hashes: 1: EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7.crl (hash: wWZkQ5Jp4jrhxGX31vSs46o3yPGdfBazUESiGJHfRZA=) 2: 323030313a6466323a313238303a3a2f34382d3438203d3e20313339343437.roa (hash: Z33O96f3Xi269FHR6g3ynqUeqpUoR3vjVRTvXK+PrwU=) 3: 3130332e3134352e3132352e302f32342d3234203d3e20313339343437.roa (hash: iAkXuDNDYQX7aJrJUqwReqIZ7fKNDXS9mw/520ZULDA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7.crl rsync://rpki-rsync.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 05:55:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:87:30:d9:5e:97:a1:ff:83:b3:8e:e5:2a:f3:bf:86:b8:f3:ea:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7 Validity Not Before: Sep 24 05:42:55 2026 GMT Not After : Sep 25 07:54:55 2026 GMT Subject: CN=30853CA6B8E28659FD146B9528E72293E48D5382 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:cb:ab:de:b1:09:3f:3e:58:a5:3f:dc:bd:fc: 83:12:18:f1:39:ba:4f:c6:0b:64:37:e5:e3:a5:d8: 7b:b7:cd:2f:31:ff:11:37:35:b0:d1:38:70:de:10: 77:b0:42:1a:35:14:c4:6e:ed:98:28:84:04:cf:5b: 59:cc:51:2c:4c:ff:8b:77:8f:d5:1b:e7:a1:bf:6e: ad:e1:d8:95:db:42:be:be:86:78:a7:4f:9f:a6:05: d6:37:55:04:fa:3e:a7:a3:5c:fb:4a:ff:bd:bb:57: 36:21:c4:46:81:62:8c:7e:ae:65:25:43:a4:de:a4: db:bd:cc:a1:ec:97:85:e9:88:76:d3:a1:c3:98:8f: 2d:a4:40:3e:ff:ef:a2:40:e1:f3:9d:63:ac:c7:8f: 12:45:f2:15:9e:17:9d:41:97:e5:69:b0:9d:7a:dd: 7f:fc:ee:71:f5:22:94:12:ba:61:06:d6:a8:a5:1c: 26:40:e3:ed:eb:ec:f8:34:58:e1:8d:df:f4:ad:16: 51:8b:dc:24:5a:ef:70:bf:83:f4:8c:86:71:3d:38: 2f:31:33:33:ed:eb:89:58:bc:54:b9:e0:e5:2b:ac: f6:c1:7c:70:d8:a3:e3:6a:aa:a0:8e:10:cc:5b:6a: 9b:af:8c:31:40:f1:7b:90:61:05:aa:cb:9f:93:ac: c4:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:85:3C:A6:B8:E2:86:59:FD:14:6B:95:28:E7:22:93:E4:8D:53:82 X509v3 Authority Key Identifier: keyid:EF:FE:71:94:4C:D7:DF:CA:7F:BD:C6:EF:06:3C:9A:6D:28:BB:47:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:36:cf:db:53:68:28:f1:62:60:a2:f9:27:7b:18:df:af:af: 21:88:a1:65:75:39:b5:07:e7:11:36:2f:99:f2:a3:31:c6:0f: c2:a4:79:3a:91:30:30:50:1d:a0:a6:8a:b2:63:83:b9:58:17: bd:55:42:8d:ba:34:e7:dd:db:6e:95:c6:38:31:74:2f:c3:81: 68:2b:6a:b8:c8:f7:e7:da:97:2b:8f:94:fd:74:7a:d9:ce:e1: 89:5d:c4:3e:1b:20:8c:0d:f6:00:2f:5b:87:ae:e1:7d:e8:77: 6f:c5:39:02:5f:23:45:51:d8:ca:28:26:75:40:e4:99:16:bd: b8:93:66:ea:f6:0d:94:b7:fd:9b:7e:4d:57:e2:fc:ac:b9:89: 12:13:21:bf:43:78:21:9b:bf:57:5b:13:7e:cd:78:39:ee:62: 57:d4:f1:2f:bb:88:ec:b2:ed:6a:b0:f2:90:cf:c8:43:8b:48: 65:cd:c8:e9:f2:a0:4b:44:02:71:83:de:4c:cf:a6:fa:43:ee: c8:39:ad:94:2c:95:af:e8:6b:25:3f:cb:f8:1a:d1:e1:a5:7c: 09:96:56:54:0e:a6:18:97:bc:08:e8:8a:0e:ae:b4:02:6f:70: b7:a7:2a:33:e1:c2:6c:96:4f:e2:6e:5f:10:b7:17:6b:41:c0: ea:3e:b8:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTIcw2V6Xof+Ds47lKvO/hrjz6m8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZGRTcxOTQ0Q0Q3REZDQTdGQkRDNkVGMDYzQzlBNkQy OEJCNDdFNzAeFw0yNjA5MjQwNTQyNTVaFw0yNjA5MjUwNzU0NTVaMDMxMTAvBgNV BAMTKDMwODUzQ0E2QjhFMjg2NTlGRDE0NkI5NTI4RTcyMjkzRTQ4RDUzODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6y6vesQk/PlilP9y9/IMSGPE5 uk/GC2Q35eOl2Hu3zS8x/xE3NbDROHDeEHewQho1FMRu7ZgohATPW1nMUSxM/4t3 j9Ub56G/bq3h2JXbQr6+hninT5+mBdY3VQT6PqejXPtK/727VzYhxEaBYox+rmUl Q6TepNu9zKHsl4XpiHbTocOYjy2kQD7/76JA4fOdY6zHjxJF8hWeF51Bl+VpsJ16 3X/87nH1IpQSumEG1qilHCZA4+3r7Pg0WOGN3/StFlGL3CRa73C/g/SMhnE9OC8x MzPt64lYvFS54OUrrPbBfHDYo+NqqqCOEMxbapuvjDFA8XuQYQWqy5+TrMTrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMIU8prjihln9FGuVKOcik+SNU4IwHwYDVR0j BBgwFoAU7/5xlEzX38p/vcbvBjyabSi7R+cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDU3ZDRkODEtM2JlOC00MjMwLTg5NTktMmRjMmFmOWQwODVlLzAvRUZGRTcxOTQ0 Q0Q3REZDQTdGQkRDNkVGMDYzQzlBNkQyOEJCNDdFNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRkZFNzE5NDRDRDdERkNBN0ZCREM2RUYwNjNDOUE2RDI4QkI0 N0U3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDU3ZDRkODEtM2JlOC00MjMwLTg5 NTktMmRjMmFmOWQwODVlLzAvRUZGRTcxOTQ0Q0Q3REZDQTdGQkRDNkVGMDYzQzlB NkQyOEJCNDdFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAA2z9tTaCjxYmCi+Sd7GN+vryGIoWV1ObUH 5xE2L5nyozHGD8KkeTqRMDBQHaCmirJjg7lYF71VQo26NOfd226VxjgxdC/DgWgr arjI9+falyuPlP10etnO4YldxD4bIIwN9gAvW4eu4X3od2/FOQJfI0VR2MooJnVA 5JkWvbiTZur2DZS3/Zt+TVfi/Ky5iRITIb9DeCGbv1dbE37NeDnuYlfU8S+7iOyy 7Wqw8pDPyEOLSGXNyOnyoEtEAnGD3kzPpvpD7sg5rZQsla/oayU/y/ga0eGlfAmW VlQOphiXvAjoig6utAJvcLenKjPhwmyWT+JuXxC3F2tBwOo+uL0= -----END CERTIFICATE-----Generated at Thu Sep 24 10:27:41 2026 by rpki-client