$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.mft File: EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.mft (raw, json) Hash identifier: qH9wLi5PBmzA4cNcQALL9i5VaTnz9S8iEcEcdBCL0tc= Subject key identifier: 12:48:AB:4F:05:AF:F3:02:2C:61:CE:E4:EF:2B:92:D4:BD:DD:38:75 Authority key identifier: EF:D4:29:07:B2:81:E7:9D:93:B3:A5:5B:E7:7E:69:57:B1:B4:BC:A9 Certificate issuer: /CN=EFD42907B281E79D93B3A55BE77E6957B1B4BCA9 Certificate serial: 6C0E344CC2EF1692BEE9618A51CE6FA8911DF475 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.mft Manifest number: C7 Signing time: Fri 25 Sep 2026 13:37:17 +0000 Manifest this update: Fri 25 Sep 2026 13:32:17 +0000 Manifest next update: Sat 26 Sep 2026 15:00:17 +0000 Files and hashes: 1: 3130332e3136372e3133332e302f32342d3234203d3e20313339343536.roa (hash: 1J0/I4tqmUll60RJxwp6bFaa6UPkoQKQXxUGs5DsE7s=) 2: EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.crl (hash: iOeiUb71bSkuXpju/eqJNDeGoWPzVpvaIzl8ttRhjdU=) 3: 323430373a366634303a3a2f33322d3332203d3e203538383230.roa (hash: pbMg7J7P4kS8Sxdzt0uwVKMCDecvHVa7e/rU45LkW3I=) 4: 3130332e3136372e3133322e302f32342d3234203d3e20313339343536.roa (hash: pKyTnDy4jjm+bK/0uv1ZCFmZNnZvfEkd2gMR4Mti5xA=) 5: 323430373a366634303a3a2f33322d3438203d3e203538383230.roa (hash: uLpfvmOWPLMtCPKe67fDfTWwMZzd/ScnogVVWTCv8e4=) 6: 3130332e3136372e3133322e302f32332d3233203d3e203538383230.roa (hash: MzMoXvwp2stngvRucIeMRj/ZickQ1zvi8Fxd3aMU4jw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.crl rsync://rpki-rsync.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 15:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:0e:34:4c:c2:ef:16:92:be:e9:61:8a:51:ce:6f:a8:91:1d:f4:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFD42907B281E79D93B3A55BE77E6957B1B4BCA9 Validity Not Before: Sep 25 13:32:17 2026 GMT Not After : Sep 26 15:00:17 2026 GMT Subject: CN=1248AB4F05AFF3022C61CEE4EF2B92D4BDDD3875 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:d1:ca:1d:03:66:a7:d5:66:a8:83:97:f9:28: 02:5b:c0:ea:fa:06:3b:6e:eb:50:d6:73:76:04:12: 55:95:d9:fb:f9:7f:ba:c2:5a:97:d9:1c:fe:9a:58: 88:74:44:52:7c:7e:4d:6c:e1:ec:00:2d:12:3c:80: 63:87:68:8c:18:d3:43:24:16:a4:46:5c:15:79:08: 00:f2:2d:53:08:3f:fc:17:9f:53:07:1f:e1:1d:ea: 59:69:61:90:7f:5b:d7:c3:5b:3b:a5:3d:26:e7:8b: ab:98:1c:d7:61:ba:bb:a4:4a:12:97:e8:81:35:31: b7:35:96:48:d4:a0:3a:85:35:3f:67:4f:30:94:b1: 08:67:2f:99:3c:4e:cc:75:54:68:26:25:05:f7:67: bb:ad:55:7c:87:a7:03:4b:82:74:a2:6a:e7:d5:bf: f9:15:50:cb:80:25:0e:57:c1:dd:dc:f1:70:96:19: 2a:7e:23:48:47:9c:46:81:42:60:b2:bf:41:4f:ed: 47:29:66:f5:b3:20:4d:82:7f:20:c9:b0:aa:66:a0: d0:ef:aa:27:b3:49:10:7c:30:5e:bf:50:8c:fb:a2: a6:31:e4:cc:d4:58:07:5d:8e:4c:f9:08:3d:a6:fe: 4d:bf:69:e4:86:bc:80:57:b1:4e:49:31:32:38:df: 3f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:48:AB:4F:05:AF:F3:02:2C:61:CE:E4:EF:2B:92:D4:BD:DD:38:75 X509v3 Authority Key Identifier: keyid:EF:D4:29:07:B2:81:E7:9D:93:B3:A5:5B:E7:7E:69:57:B1:B4:BC:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:54:84:ee:49:a2:c5:9d:7c:87:72:16:1b:f5:b6:9f:75:7c: b4:ad:41:26:66:94:d3:38:b4:0e:b5:06:40:a1:15:cd:54:53: 65:ee:43:9d:3e:17:e6:18:e8:29:56:2f:54:ab:b5:7a:34:a0: 45:df:c9:b6:8b:9d:be:68:5e:ad:87:f6:a8:53:b5:cd:a4:4a: 97:e1:f2:b3:72:ad:89:96:66:e2:60:01:e1:a7:fb:ef:2a:b3: 56:08:a2:c5:9b:3c:8a:ba:5b:af:43:30:a9:98:40:c9:37:c1: 28:99:4c:13:40:58:e2:55:86:66:4a:d0:11:7f:2c:c6:0a:e8: 2c:8f:4f:8a:a4:07:01:d8:73:c3:e4:72:5b:4b:65:82:20:ca: 20:e8:47:46:a5:5a:34:24:01:18:7c:aa:02:00:c8:85:f6:6c: d9:98:48:fe:4a:97:86:79:16:d5:71:3a:ee:b2:29:b0:9d:99: cf:15:2a:d6:0c:11:99:85:fc:ef:cf:d1:51:d4:8e:ab:72:41: 79:65:37:f2:85:1f:5f:82:f1:33:27:24:35:15:8f:7a:31:0d: e2:b0:21:49:79:db:e1:81:fb:ec:3a:4d:8d:4b:9c:ee:28:42: be:8c:b6:43:73:67:fc:dd:93:b2:10:86:fc:ba:5c:ae:a0:69: dd:34:d7:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbA40TMLvFpK+6WGKUc5vqJEd9HUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZENDI5MDdCMjgxRTc5RDkzQjNBNTVCRTc3RTY5NTdC MUI0QkNBOTAeFw0yNjA5MjUxMzMyMTdaFw0yNjA5MjYxNTAwMTdaMDMxMTAvBgNV BAMTKDEyNDhBQjRGMDVBRkYzMDIyQzYxQ0VFNEVGMkI5MkQ0QkRERDM4NzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDu0codA2an1Waog5f5KAJbwOr6 Bjtu61DWc3YEElWV2fv5f7rCWpfZHP6aWIh0RFJ8fk1s4ewALRI8gGOHaIwY00Mk FqRGXBV5CADyLVMIP/wXn1MHH+Ed6llpYZB/W9fDWzulPSbni6uYHNdhurukShKX 6IE1Mbc1lkjUoDqFNT9nTzCUsQhnL5k8Tsx1VGgmJQX3Z7utVXyHpwNLgnSiaufV v/kVUMuAJQ5Xwd3c8XCWGSp+I0hHnEaBQmCyv0FP7UcpZvWzIE2CfyDJsKpmoNDv qiezSRB8MF6/UIz7oqYx5MzUWAddjkz5CD2m/k2/aeSGvIBXsU5JMTI43z9xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEkirTwWv8wIsYc7k7yuS1L3dOHUwHwYDVR0j BBgwFoAU79QpB7KB552Ts6Vb535pV7G0vKkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmVkNDcyMDItZGU2MC00N2YzLWEyYTctNjA4YTc0YTFlODc0LzAvRUZENDI5MDdC MjgxRTc5RDkzQjNBNTVCRTc3RTY5NTdCMUI0QkNBOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRkQ0MjkwN0IyODFFNzlEOTNCM0E1NUJFNzdFNjk1N0IxQjRC Q0E5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmVkNDcyMDItZGU2MC00N2YzLWEy YTctNjA4YTc0YTFlODc0LzAvRUZENDI5MDdCMjgxRTc5RDkzQjNBNTVCRTc3RTY5 NTdCMUI0QkNBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG5UhO5JosWdfIdyFhv1tp91fLStQSZmlNM4 tA61BkChFc1UU2XuQ50+F+YY6ClWL1SrtXo0oEXfybaLnb5oXq2H9qhTtc2kSpfh 8rNyrYmWZuJgAeGn++8qs1YIosWbPIq6W69DMKmYQMk3wSiZTBNAWOJVhmZK0BF/ LMYK6CyPT4qkBwHYc8PkcltLZYIgyiDoR0alWjQkARh8qgIAyIX2bNmYSP5Kl4Z5 FtVxOu6yKbCdmc8VKtYMEZmF/O/P0VHUjqtyQXllN/KFH1+C8TMnJDUVj3oxDeKw IUl52+GB++w6TY1LnO4oQr6MtkNzZ/zdk7IQhvy6XK6gad0015A= -----END CERTIFICATE-----Generated at Fri Sep 25 20:16:26 2026 by rpki-client