$ rpki-client -vvf rpki-rsync.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.mft File: EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.mft (raw, json) Hash identifier: kMGTffJjCXD5vDva4EYR8fOnRoWaPH0dD3sBYrMo8x0= Subject key identifier: 46:D9:DB:2C:EC:89:04:1E:CE:DC:48:77:37:B8:4C:C2:5E:61:63:B6 Authority key identifier: EF:D4:29:07:B2:81:E7:9D:93:B3:A5:5B:E7:7E:69:57:B1:B4:BC:A9 Certificate issuer: /CN=EFD42907B281E79D93B3A55BE77E6957B1B4BCA9 Certificate serial: 438A3EC8D90817064AE32CF77EC2D14936848972 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.mft Manifest number: 0F Signing time: Tue 12 May 2026 22:41:13 +0000 Manifest this update: Tue 12 May 2026 22:36:13 +0000 Manifest next update: Thu 14 May 2026 02:02:13 +0000 Files and hashes: 1: EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.crl (hash: HIwxr9An0s2MM2jL+99lQuPR5XsoK/TsD2vorzbNTc0=) 2: 3130332e3136372e3133322e302f32332d3234203d3e20313339343536.roa (hash: QuFmVmJ2dd3gMmUQt4P6SAtpf/EY7B6QH+WkpK0hIbk=) 3: 323430373a366634303a3a2f33322d3438203d3e203538383230.roa (hash: uLpfvmOWPLMtCPKe67fDfTWwMZzd/ScnogVVWTCv8e4=) 4: 323430373a366634303a3a2f33322d3332203d3e203538383230.roa (hash: pbMg7J7P4kS8Sxdzt0uwVKMCDecvHVa7e/rU45LkW3I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.crl rsync://rpki-rsync.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 02:02:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:8a:3e:c8:d9:08:17:06:4a:e3:2c:f7:7e:c2:d1:49:36:84:89:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFD42907B281E79D93B3A55BE77E6957B1B4BCA9 Validity Not Before: May 12 22:36:13 2026 GMT Not After : May 14 02:02:13 2026 GMT Subject: CN=46D9DB2CEC89041ECEDC487737B84CC25E6163B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:03:7a:82:c4:e6:df:6a:f1:2e:c7:0b:95:e2: 0a:42:cd:ea:95:4e:b6:c3:8b:1c:88:6d:0d:8e:94: 1d:26:24:e4:96:08:f9:8b:39:f5:04:80:3c:82:fa: 97:58:e5:52:0e:0a:1f:10:1c:dc:4c:31:80:64:52: 0e:34:e3:bb:35:9c:87:e2:2c:61:1a:aa:13:4f:87: ba:07:a2:b5:f7:72:86:c1:6b:f4:c5:a8:67:5d:8b: 47:3d:84:67:89:3c:37:d8:0d:ad:ca:b8:e5:2e:a6: f7:cf:9f:2e:36:06:a6:4d:aa:72:22:aa:bd:6e:78: b9:40:1f:be:d4:fb:0c:02:7e:0d:dd:58:55:d4:1a: 06:d0:f7:32:45:fd:e4:71:ba:d1:d6:d7:8b:8f:72: c2:6e:86:82:15:ef:f2:a1:e4:36:8e:7e:09:96:6c: af:2e:ec:fd:5a:0c:65:14:d9:ff:f2:62:01:bd:dd: 8e:c7:cb:41:c1:bf:ea:c2:b8:63:57:b2:ac:72:ad: a8:3a:f2:76:b6:20:df:06:53:33:9b:7a:51:79:89: 55:5a:b5:50:9f:c1:83:82:e3:4c:8d:31:e3:12:db: 2f:30:28:4e:03:04:36:31:d8:f1:91:c2:f3:f6:ac: 6f:cf:cb:33:6a:76:19:cb:83:bc:12:1b:57:d9:68: 6b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:D9:DB:2C:EC:89:04:1E:CE:DC:48:77:37:B8:4C:C2:5E:61:63:B6 X509v3 Authority Key Identifier: keyid:EF:D4:29:07:B2:81:E7:9D:93:B3:A5:5B:E7:7E:69:57:B1:B4:BC:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:55:6a:cc:32:5e:c6:64:22:6a:43:27:73:47:73:c5:04:70: 90:5f:d2:bf:f4:a8:07:4e:8a:69:86:00:a9:9d:3e:2d:93:b5: 93:8e:e3:4a:55:82:ae:7a:3b:50:1f:d4:35:85:2f:a8:12:1f: ff:4b:1c:c9:79:d8:e3:1b:f2:e5:4b:20:5c:1e:bd:74:9e:9e: cc:78:da:28:c7:c5:60:b4:2f:8d:b8:c4:0d:7b:70:1d:7f:e9: 1d:67:3a:49:40:73:5b:e6:6f:d5:9b:e9:e8:a5:5a:30:4d:ed: c9:ed:b6:8a:2a:33:b3:8a:9f:4d:b4:67:51:4e:61:0a:ae:de: 5e:44:91:c2:43:19:69:8b:13:9c:39:b2:e5:ee:ac:72:b8:7e: 71:5e:d7:ec:04:97:84:3c:7e:e8:a7:44:9c:0a:da:e6:e9:ff: cd:16:70:d3:fb:4b:c1:42:b0:a3:9b:0a:44:a9:9f:cd:0f:3d: de:32:71:93:6b:36:14:5e:19:21:3f:7a:98:21:02:3f:1c:55: b6:63:96:a5:d4:0d:b1:d1:6e:6b:e9:62:d9:dd:1b:06:cf:2c: f2:54:98:11:9d:6e:8f:0b:f1:7d:11:87:df:6c:c7:3f:f8:a9: c4:cc:d7:55:78:e2:ae:32:f0:7a:6d:5f:24:94:aa:96:29:ea: 49:ee:29:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ4o+yNkIFwZK4yz3fsLRSTaEiXIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZENDI5MDdCMjgxRTc5RDkzQjNBNTVCRTc3RTY5NTdC MUI0QkNBOTAeFw0yNjA1MTIyMjM2MTNaFw0yNjA1MTQwMjAyMTNaMDMxMTAvBgNV BAMTKDQ2RDlEQjJDRUM4OTA0MUVDRURDNDg3NzM3Qjg0Q0MyNUU2MTYzQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvA3qCxObfavEuxwuV4gpCzeqV TrbDixyIbQ2OlB0mJOSWCPmLOfUEgDyC+pdY5VIOCh8QHNxMMYBkUg4047s1nIfi LGEaqhNPh7oHorX3cobBa/TFqGddi0c9hGeJPDfYDa3KuOUupvfPny42BqZNqnIi qr1ueLlAH77U+wwCfg3dWFXUGgbQ9zJF/eRxutHW14uPcsJuhoIV7/Kh5DaOfgmW bK8u7P1aDGUU2f/yYgG93Y7Hy0HBv+rCuGNXsqxyrag68na2IN8GUzObelF5iVVa tVCfwYOC40yNMeMS2y8wKE4DBDYx2PGRwvP2rG/PyzNqdhnLg7wSG1fZaGtBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURtnbLOyJBB7O3Eh3N7hMwl5hY7YwHwYDVR0j BBgwFoAU79QpB7KB552Ts6Vb535pV7G0vKkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmVkNDcyMDItZGU2MC00N2YzLWEyYTctNjA4YTc0YTFlODc0LzAvRUZENDI5MDdC MjgxRTc5RDkzQjNBNTVCRTc3RTY5NTdCMUI0QkNBOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRkQ0MjkwN0IyODFFNzlEOTNCM0E1NUJFNzdFNjk1N0IxQjRC Q0E5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmVkNDcyMDItZGU2MC00N2YzLWEy YTctNjA4YTc0YTFlODc0LzAvRUZENDI5MDdCMjgxRTc5RDkzQjNBNTVCRTc3RTY5 NTdCMUI0QkNBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACNVaswyXsZkImpDJ3NHc8UEcJBf0r/0qAdO immGAKmdPi2TtZOO40pVgq56O1Af1DWFL6gSH/9LHMl52OMb8uVLIFwevXSensx4 2ijHxWC0L424xA17cB1/6R1nOklAc1vmb9Wb6eilWjBN7cnttooqM7OKn020Z1FO YQqu3l5EkcJDGWmLE5w5suXurHK4fnFe1+wEl4Q8fuinRJwK2ubp/80WcNP7S8FC sKObCkSpn80PPd4ycZNrNhReGSE/epghAj8cVbZjlqXUDbHRbmvpYtndGwbPLPJU mBGdbo8L8X0Rh99sxz/4qcTM11V44q4y8HptXySUqpYp6knuKQc= -----END CERTIFICATE-----Generated at Wed May 13 05:47:31 2026 by rpki-client