$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/EF44D1A95206A20CB3AB52607DC981EEC1AA8744.mft File: EF44D1A95206A20CB3AB52607DC981EEC1AA8744.mft (raw, json) Hash identifier: +Uk/Zk1fK7Hu2KQuN1AKVkC3/L6jgFwmT6+Ilvb3j0U= Subject key identifier: C3:F0:9F:2E:52:B5:91:4D:D3:BF:F2:30:E2:A0:BF:CA:73:41:A3:93 Authority key identifier: EF:44:D1:A9:52:06:A2:0C:B3:AB:52:60:7D:C9:81:EE:C1:AA:87:44 Certificate issuer: /CN=EF44D1A95206A20CB3AB52607DC981EEC1AA8744 Certificate serial: 5EA8D615A62017DB9625FEA2A8AFF7803B4F8269 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF44D1A95206A20CB3AB52607DC981EEC1AA8744.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/EF44D1A95206A20CB3AB52607DC981EEC1AA8744.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 16:31:10 +0000 Manifest this update: Thu 24 Sep 2026 16:26:10 +0000 Manifest next update: Fri 25 Sep 2026 20:03:10 +0000 Files and hashes: 1: EF44D1A95206A20CB3AB52607DC981EEC1AA8744.crl (hash: N/MJqENypT2gx7X3cA9DtaprRkYf/sAoPHu8NhsEYfU=) 2: 3130332e33392e37342e302f32332d3234203d3e20313530323732.roa (hash: BnM/pd6T0nNd5d7QI+jI59NRWk0b0EsbuiWKkA+Hh+0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/EF44D1A95206A20CB3AB52607DC981EEC1AA8744.crl rsync://rpki-rsync.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/EF44D1A95206A20CB3AB52607DC981EEC1AA8744.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF44D1A95206A20CB3AB52607DC981EEC1AA8744.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 20:03:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:a8:d6:15:a6:20:17:db:96:25:fe:a2:a8:af:f7:80:3b:4f:82:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EF44D1A95206A20CB3AB52607DC981EEC1AA8744 Validity Not Before: Sep 24 16:26:10 2026 GMT Not After : Sep 25 20:03:10 2026 GMT Subject: CN=C3F09F2E52B5914DD3BFF230E2A0BFCA7341A393 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:64:17:d0:6b:9f:c4:75:35:dc:54:42:eb:7f: 8e:e1:41:c7:a6:dc:f2:dd:93:48:bf:e3:ca:c6:3c: fa:a4:75:f6:b8:c6:c9:89:9a:b2:d5:a9:fc:03:a1: 31:8c:5a:c8:76:1f:ab:e2:46:3b:75:8f:d5:af:ed: 8b:95:36:8f:2f:ff:bc:b9:24:7b:80:4d:2e:4a:91: 2c:3c:36:9b:12:a4:c4:59:0a:39:bd:34:91:fa:21: 4a:21:5e:8b:93:25:cb:bb:6f:7e:b4:9c:9e:c4:63: 99:25:d8:45:5e:94:49:3d:9c:55:1a:82:37:68:db: ad:df:34:25:bc:7c:13:b6:2d:b0:2c:9b:c5:d3:a4: 68:c4:ee:21:37:62:6a:ab:6e:0d:a4:a4:08:dc:5c: 7a:95:35:0a:3e:69:00:88:5f:ad:31:fc:b3:f1:85: 9e:ae:57:d0:92:7f:c6:98:c8:e0:8d:9b:01:b0:c2: ca:de:ff:62:56:42:4e:ca:e1:e0:c5:02:da:fb:64: e0:4f:fe:96:5d:45:44:ac:fd:5d:e2:63:da:6d:a1: 51:44:9b:c7:b5:03:c4:03:d2:aa:0e:d9:65:f9:68: f4:5d:7f:06:2d:6e:a3:95:0a:88:a3:e5:c0:1c:f2: 83:3f:e8:73:87:45:9a:2c:d2:3f:08:3b:9b:2e:9b: 44:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:F0:9F:2E:52:B5:91:4D:D3:BF:F2:30:E2:A0:BF:CA:73:41:A3:93 X509v3 Authority Key Identifier: keyid:EF:44:D1:A9:52:06:A2:0C:B3:AB:52:60:7D:C9:81:EE:C1:AA:87:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/EF44D1A95206A20CB3AB52607DC981EEC1AA8744.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF44D1A95206A20CB3AB52607DC981EEC1AA8744.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/EF44D1A95206A20CB3AB52607DC981EEC1AA8744.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:36:8f:a2:57:c2:02:0b:80:b9:da:b9:bc:a0:5e:52:bc:2b: fc:6f:5e:52:fd:3a:54:3f:4b:7d:00:46:67:d7:b0:cb:b4:aa: 5b:5d:24:df:a6:4a:a8:ac:ea:6d:60:96:e1:e4:0a:c8:c4:1d: 60:7d:fa:52:82:94:68:db:50:7a:0d:95:a2:20:3f:55:46:db: 74:b3:b5:4b:c8:ba:a4:a1:47:c0:be:0d:34:cf:15:75:db:e1: 29:47:af:16:8f:0b:87:ce:59:5c:6d:9d:8c:e2:9e:ec:ee:73: 18:f6:32:df:70:c9:d4:d1:71:81:f5:dd:98:58:52:a3:85:55: 35:86:b8:ca:f7:d5:c5:a8:f5:9d:65:0b:78:58:2c:d4:62:a8: 9d:ac:af:cb:3a:81:18:2d:49:42:ca:98:4b:da:ad:fa:0e:6d: 29:91:c3:20:8d:3a:8f:80:a0:21:7c:04:64:5c:63:e7:68:ab: 07:9d:07:0f:7f:9d:f8:d3:9f:b1:94:7e:c3:3f:a6:b4:08:9b: 6e:e6:85:a1:2f:b7:51:6d:bb:4d:39:fb:7f:bd:ae:9b:c2:10: f5:d3:47:e2:61:0d:fd:9e:a9:ce:3d:b1:8c:cc:c8:0b:e2:d0: 36:1e:19:46:ab:e4:aa:b8:71:db:08:5d:f8:e3:94:a3:c9:39: 30:77:82:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXqjWFaYgF9uWJf6iqK/3gDtPgmkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUY0NEQxQTk1MjA2QTIwQ0IzQUI1MjYwN0RDOTgxRUVD MUFBODc0NDAeFw0yNjA5MjQxNjI2MTBaFw0yNjA5MjUyMDAzMTBaMDMxMTAvBgNV BAMTKEMzRjA5RjJFNTJCNTkxNEREM0JGRjIzMEUyQTBCRkNBNzM0MUEzOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5ZBfQa5/EdTXcVELrf47hQcem 3PLdk0i/48rGPPqkdfa4xsmJmrLVqfwDoTGMWsh2H6viRjt1j9Wv7YuVNo8v/7y5 JHuATS5KkSw8NpsSpMRZCjm9NJH6IUohXouTJcu7b360nJ7EY5kl2EVelEk9nFUa gjdo263fNCW8fBO2LbAsm8XTpGjE7iE3Ymqrbg2kpAjcXHqVNQo+aQCIX60x/LPx hZ6uV9CSf8aYyOCNmwGwwsre/2JWQk7K4eDFAtr7ZOBP/pZdRUSs/V3iY9ptoVFE m8e1A8QD0qoO2WX5aPRdfwYtbqOVCoij5cAc8oM/6HOHRZos0j8IO5sum0SBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw/CfLlK1kU3Tv/Iw4qC/ynNBo5MwHwYDVR0j BBgwFoAU70TRqVIGogyzq1JgfcmB7sGqh0QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2UxOWFiYzgtODUwNy00MWVkLTgyODktN2UzYWM3YjI0OTM1LzAvRUY0NEQxQTk1 MjA2QTIwQ0IzQUI1MjYwN0RDOTgxRUVDMUFBODc0NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRjQ0RDFBOTUyMDZBMjBDQjNBQjUyNjA3REM5ODFFRUMxQUE4 NzQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2UxOWFiYzgtODUwNy00MWVkLTgy ODktN2UzYWM3YjI0OTM1LzAvRUY0NEQxQTk1MjA2QTIwQ0IzQUI1MjYwN0RDOTgx RUVDMUFBODc0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGM2j6JXwgILgLnaubygXlK8K/xvXlL9OlQ/ S30ARmfXsMu0qltdJN+mSqis6m1gluHkCsjEHWB9+lKClGjbUHoNlaIgP1VG23Sz tUvIuqShR8C+DTTPFXXb4SlHrxaPC4fOWVxtnYzinuzucxj2Mt9wydTRcYH13ZhY UqOFVTWGuMr31cWo9Z1lC3hYLNRiqJ2sr8s6gRgtSULKmEvarfoObSmRwyCNOo+A oCF8BGRcY+doqwedBw9/nfjTn7GUfsM/prQIm27mhaEvt1Ftu005+3+9rpvCEPXT R+JhDf2eqc49sYzMyAvi0DYeGUar5Kq4cdsIXfjjlKPJOTB3gmQ= -----END CERTIFICATE-----Generated at Fri Sep 25 10:43:59 2026 by rpki-client