$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/EF44D1A95206A20CB3AB52607DC981EEC1AA8744.mft File: EF44D1A95206A20CB3AB52607DC981EEC1AA8744.mft (raw, json) Hash identifier: 27UtPDoHCyfhdVpzq+c4hMsA0mHft8ckmsL5EpfUrhw= Subject key identifier: 89:B3:DF:1D:48:1A:72:A4:89:39:B8:D6:BE:C9:4D:E4:E7:99:9E:A5 Authority key identifier: EF:44:D1:A9:52:06:A2:0C:B3:AB:52:60:7D:C9:81:EE:C1:AA:87:44 Certificate issuer: /CN=EF44D1A95206A20CB3AB52607DC981EEC1AA8744 Certificate serial: 382F252D71E0B22E772210D353F924D914A8B78C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF44D1A95206A20CB3AB52607DC981EEC1AA8744.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/EF44D1A95206A20CB3AB52607DC981EEC1AA8744.mft Manifest number: C3 Signing time: Fri 25 Sep 2026 12:05:32 +0000 Manifest this update: Fri 25 Sep 2026 12:00:32 +0000 Manifest next update: Sat 26 Sep 2026 13:24:32 +0000 Files and hashes: 1: 3130332e33392e37342e302f32332d3234203d3e20313530323732.roa (hash: BnM/pd6T0nNd5d7QI+jI59NRWk0b0EsbuiWKkA+Hh+0=) 2: EF44D1A95206A20CB3AB52607DC981EEC1AA8744.crl (hash: /bcIJmoFfUoCsno45JBq/NcSM4jCi375btzpWiiXLpI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/EF44D1A95206A20CB3AB52607DC981EEC1AA8744.crl rsync://rpki-rsync.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/EF44D1A95206A20CB3AB52607DC981EEC1AA8744.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF44D1A95206A20CB3AB52607DC981EEC1AA8744.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 13:24:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:2f:25:2d:71:e0:b2:2e:77:22:10:d3:53:f9:24:d9:14:a8:b7:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EF44D1A95206A20CB3AB52607DC981EEC1AA8744 Validity Not Before: Sep 25 12:00:32 2026 GMT Not After : Sep 26 13:24:32 2026 GMT Subject: CN=89B3DF1D481A72A48939B8D6BEC94DE4E7999EA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:25:5e:6f:11:91:10:a5:25:f7:59:06:b4:17: 97:ce:a3:e4:6a:67:3d:d6:17:3c:d4:9b:11:d2:10: c6:9e:e9:09:00:a2:01:0b:91:1c:9e:3e:3a:70:e7: 55:7e:56:85:0d:8a:b7:6c:d2:fb:16:92:1a:fd:53: d1:ab:af:9a:99:83:fb:47:16:25:82:c7:d7:ee:0d: 4b:a7:a3:fb:8e:29:ce:9e:5f:7d:bc:99:8e:ed:e6: 29:46:03:2d:a6:5d:4d:02:9d:60:c3:9d:cf:77:5e: 53:fe:0e:06:b7:d5:fd:ae:2e:74:18:2a:41:74:44: c6:96:b1:9b:9f:fa:e0:fa:e5:97:27:15:d5:75:50: 9a:88:70:ff:97:6f:1d:a4:e1:ff:b1:de:64:14:d1: 23:91:b2:a1:04:ba:f7:60:7d:8b:a0:06:ed:84:fc: 30:87:96:0c:6c:8a:bf:d2:c9:e4:df:86:c7:6f:36: 1a:c1:f0:87:9a:a8:ee:8d:d4:b5:27:89:66:0a:6f: 84:58:cc:ab:2d:a1:5d:98:ee:a8:2f:ee:c5:b1:fa: f0:67:4a:3e:1a:36:c5:8c:65:fa:cb:7e:c4:bf:67: cf:62:84:02:f4:55:ab:fe:0f:5b:f2:b9:62:cd:57: 04:e9:e1:92:08:50:2e:df:6d:dc:30:ba:1f:b6:66: fd:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:B3:DF:1D:48:1A:72:A4:89:39:B8:D6:BE:C9:4D:E4:E7:99:9E:A5 X509v3 Authority Key Identifier: keyid:EF:44:D1:A9:52:06:A2:0C:B3:AB:52:60:7D:C9:81:EE:C1:AA:87:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/EF44D1A95206A20CB3AB52607DC981EEC1AA8744.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF44D1A95206A20CB3AB52607DC981EEC1AA8744.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/EF44D1A95206A20CB3AB52607DC981EEC1AA8744.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:44:aa:91:c3:9d:8e:44:84:98:21:07:55:37:03:65:e6:79: 6a:17:93:9c:67:d9:ec:50:1f:fe:6b:65:7d:5c:20:25:64:3c: 18:d0:95:f7:11:b9:8e:cd:84:12:9b:fe:4b:06:6c:6c:65:35: 47:f3:04:a0:71:06:fa:ab:96:33:4d:5b:24:53:5c:fc:20:d4: 9c:16:2f:c2:5b:0e:a9:82:5f:96:9f:b4:f6:12:9c:61:7f:31: 98:ff:cd:59:79:38:17:2a:28:f2:88:19:14:13:fc:3a:70:21: 45:11:03:c6:9d:89:50:4e:4d:f3:29:87:99:e7:d1:74:e7:48: ce:5b:fb:d4:28:79:53:0c:fe:dd:c6:18:3e:9c:6d:ea:5d:90: 53:17:66:d0:90:c6:f9:59:33:11:46:1d:9e:25:9d:b4:2d:5e: 9a:3e:79:96:65:79:89:de:7b:66:b0:96:f5:fc:05:e5:62:d4: 8e:13:14:7e:26:32:a7:f2:95:75:c6:cb:6b:19:86:68:42:d8: be:44:83:39:a7:bc:ec:ca:e7:d3:80:92:fc:4b:5f:23:46:a7: 0a:50:f1:83:63:9d:43:fc:39:eb:bd:98:3e:b7:8c:b2:a2:32: e9:f1:1e:27:6a:23:7f:27:f4:83:d8:0e:97:f9:7d:4c:1e:a4: 92:9a:c6:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOC8lLXHgsi53IhDTU/kk2RSot4wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUY0NEQxQTk1MjA2QTIwQ0IzQUI1MjYwN0RDOTgxRUVD MUFBODc0NDAeFw0yNjA5MjUxMjAwMzJaFw0yNjA5MjYxMzI0MzJaMDMxMTAvBgNV BAMTKDg5QjNERjFENDgxQTcyQTQ4OTM5QjhENkJFQzk0REU0RTc5OTlFQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuJV5vEZEQpSX3WQa0F5fOo+Rq Zz3WFzzUmxHSEMae6QkAogELkRyePjpw51V+VoUNirds0vsWkhr9U9Grr5qZg/tH FiWCx9fuDUuno/uOKc6eX328mY7t5ilGAy2mXU0CnWDDnc93XlP+Dga31f2uLnQY KkF0RMaWsZuf+uD65ZcnFdV1UJqIcP+Xbx2k4f+x3mQU0SORsqEEuvdgfYugBu2E /DCHlgxsir/SyeTfhsdvNhrB8IeaqO6N1LUniWYKb4RYzKstoV2Y7qgv7sWx+vBn Sj4aNsWMZfrLfsS/Z89ihAL0Vav+D1vyuWLNVwTp4ZIIUC7fbdwwuh+2Zv3JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUibPfHUgacqSJObjWvslN5OeZnqUwHwYDVR0j BBgwFoAU70TRqVIGogyzq1JgfcmB7sGqh0QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2UxOWFiYzgtODUwNy00MWVkLTgyODktN2UzYWM3YjI0OTM1LzAvRUY0NEQxQTk1 MjA2QTIwQ0IzQUI1MjYwN0RDOTgxRUVDMUFBODc0NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRjQ0RDFBOTUyMDZBMjBDQjNBQjUyNjA3REM5ODFFRUMxQUE4 NzQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2UxOWFiYzgtODUwNy00MWVkLTgy ODktN2UzYWM3YjI0OTM1LzAvRUY0NEQxQTk1MjA2QTIwQ0IzQUI1MjYwN0RDOTgx RUVDMUFBODc0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJtEqpHDnY5EhJghB1U3A2XmeWoXk5xn2exQ H/5rZX1cICVkPBjQlfcRuY7NhBKb/ksGbGxlNUfzBKBxBvqrljNNWyRTXPwg1JwW L8JbDqmCX5aftPYSnGF/MZj/zVl5OBcqKPKIGRQT/DpwIUURA8adiVBOTfMph5nn 0XTnSM5b+9QoeVMM/t3GGD6cbepdkFMXZtCQxvlZMxFGHZ4lnbQtXpo+eZZleYne e2awlvX8BeVi1I4TFH4mMqfylXXGy2sZhmhC2L5EgzmnvOzK59OAkvxLXyNGpwpQ 8YNjnUP8Oeu9mD63jLKiMunxHidqI38n9IPYDpf5fUwepJKaxi8= -----END CERTIFICATE-----Generated at Sat Sep 26 06:59:13 2026 by rpki-client