$ rpki-client -vvf rpki-rsync.idnic.net/repo/6f6440f6-6f5a-4f4b-a597-e74b543e785b/0/EFDB094B3A4BDDFFAE7A31184633B6D14D8E5F5E.mft File: EFDB094B3A4BDDFFAE7A31184633B6D14D8E5F5E.mft (raw, json) Hash identifier: oq55ivwERbyaEVjwgQBXmtknjYzUxlMCSMrka0DCL8Q= Subject key identifier: 97:CA:E3:BE:C9:D6:D8:F8:B6:EF:D1:F1:01:A8:E0:C3:9D:08:CF:7E Authority key identifier: EF:DB:09:4B:3A:4B:DD:FF:AE:7A:31:18:46:33:B6:D1:4D:8E:5F:5E Certificate issuer: /CN=EFDB094B3A4BDDFFAE7A31184633B6D14D8E5F5E Certificate serial: 5F01E536C263F544BCE3B9622A35E324A95C560C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFDB094B3A4BDDFFAE7A31184633B6D14D8E5F5E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6f6440f6-6f5a-4f4b-a597-e74b543e785b/0/EFDB094B3A4BDDFFAE7A31184633B6D14D8E5F5E.mft Manifest number: 0F Signing time: Tue 12 May 2026 23:58:19 +0000 Manifest this update: Tue 12 May 2026 23:53:19 +0000 Manifest next update: Thu 14 May 2026 00:14:19 +0000 Files and hashes: 1: EFDB094B3A4BDDFFAE7A31184633B6D14D8E5F5E.crl (hash: JtGuZMPjMOhLWSy9YrGF73bzcghWZwSCXu73qeLMRAY=) 2: 3130332e3135332e36322e302f32332d3234203d3e20313430343537.roa (hash: BZhn4U/UvZ5+wud72EXtfRQcfjbr1V+Ji6U8Qf15hk4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6f6440f6-6f5a-4f4b-a597-e74b543e785b/0/EFDB094B3A4BDDFFAE7A31184633B6D14D8E5F5E.crl rsync://rpki-rsync.idnic.net/repo/6f6440f6-6f5a-4f4b-a597-e74b543e785b/0/EFDB094B3A4BDDFFAE7A31184633B6D14D8E5F5E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFDB094B3A4BDDFFAE7A31184633B6D14D8E5F5E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:01:e5:36:c2:63:f5:44:bc:e3:b9:62:2a:35:e3:24:a9:5c:56:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFDB094B3A4BDDFFAE7A31184633B6D14D8E5F5E Validity Not Before: May 12 23:53:19 2026 GMT Not After : May 14 00:14:19 2026 GMT Subject: CN=97CAE3BEC9D6D8F8B6EFD1F101A8E0C39D08CF7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:94:cd:08:b4:55:c8:33:0d:82:47:40:82:71: 87:f3:eb:d5:04:72:a7:62:23:8c:6d:06:8f:88:21: 9d:cc:3c:c4:79:5e:b3:3c:8b:5a:a7:f1:08:b4:a6: 08:0b:78:3e:00:a0:5d:da:ca:1d:1a:69:f7:7d:47: c7:ff:12:c8:10:28:d6:2c:f6:47:d0:52:7b:a4:27: cf:7e:e3:75:50:db:95:75:8a:36:93:0f:cd:e3:30: a4:a0:c6:6d:4e:5d:fd:f5:02:a1:b6:37:8e:78:57: 87:42:f5:98:bf:36:9d:4b:5a:cf:e8:11:b3:22:00: ba:f8:71:68:9a:8b:19:b0:e8:37:1e:70:31:08:5f: 2c:e5:6b:34:24:30:01:24:e1:38:4f:04:d8:a4:66: 09:3b:d0:bf:7d:8a:6a:3d:09:39:51:32:ca:4f:4c: 14:6c:8e:e3:76:da:93:fa:7e:a7:37:56:f9:77:07: 6f:80:b9:7f:f0:88:d3:e0:b0:b4:19:84:02:48:65: 43:ea:5d:35:c4:97:63:f5:b9:c9:72:37:bf:83:3e: 1c:8b:80:d5:ab:14:3b:46:eb:01:19:d2:c8:64:9f: b5:40:cf:6b:c9:9e:a9:f5:42:05:48:eb:b6:a6:d9: dd:61:5e:d8:7f:50:65:28:41:49:45:05:31:34:10: f8:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:CA:E3:BE:C9:D6:D8:F8:B6:EF:D1:F1:01:A8:E0:C3:9D:08:CF:7E X509v3 Authority Key Identifier: keyid:EF:DB:09:4B:3A:4B:DD:FF:AE:7A:31:18:46:33:B6:D1:4D:8E:5F:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6f6440f6-6f5a-4f4b-a597-e74b543e785b/0/EFDB094B3A4BDDFFAE7A31184633B6D14D8E5F5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFDB094B3A4BDDFFAE7A31184633B6D14D8E5F5E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6f6440f6-6f5a-4f4b-a597-e74b543e785b/0/EFDB094B3A4BDDFFAE7A31184633B6D14D8E5F5E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:19:01:22:6f:bc:f3:3f:28:51:09:3a:2b:9f:97:f7:bc:8f: 00:47:25:03:85:39:3d:24:a3:bd:12:10:3b:83:42:e2:12:f2: 09:4e:06:20:23:0b:23:35:63:a2:54:c1:9e:1a:62:4a:67:af: fe:7e:02:7c:0e:3b:4e:01:c9:6f:ce:0e:df:8e:7a:41:24:a5: 0b:cf:bd:0e:9e:71:e9:01:39:2c:fb:c3:9d:98:80:05:26:cd: 47:8b:5e:d9:86:d5:81:f3:ac:e0:c0:92:e5:ef:7a:36:0f:b6: 9d:1d:6a:61:28:4c:56:ec:e1:c5:4a:77:1c:38:c2:79:09:e0: e7:b6:c5:6a:14:a1:86:e0:94:f8:2a:19:2c:81:d9:cb:d7:21: df:b0:14:69:4d:a2:c9:83:c6:79:3f:ea:38:45:17:65:1c:a5: 6d:2c:78:f9:b3:c2:d0:e5:80:a5:42:dc:3c:86:32:74:e1:84: e9:a9:f2:42:d2:f0:f3:a2:d8:b4:64:a2:23:38:bc:b4:49:c6: 6c:de:c1:08:7a:cd:b3:6e:33:78:90:9e:a5:a3:d6:f1:84:0a: 96:68:8b:f3:96:67:9f:88:54:90:a1:f1:28:55:01:76:27:d1: bd:eb:28:67:f2:d9:8b:30:68:e4:13:ab:52:35:d3:fe:58:dd: 49:e0:f7:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXwHlNsJj9US847liKjXjJKlcVgwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZEQjA5NEIzQTRCRERGRkFFN0EzMTE4NDYzM0I2RDE0 RDhFNUY1RTAeFw0yNjA1MTIyMzUzMTlaFw0yNjA1MTQwMDE0MTlaMDMxMTAvBgNV BAMTKDk3Q0FFM0JFQzlENkQ4RjhCNkVGRDFGMTAxQThFMEMzOUQwOENGN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDclM0ItFXIMw2CR0CCcYfz69UE cqdiI4xtBo+IIZ3MPMR5XrM8i1qn8Qi0pggLeD4AoF3ayh0aafd9R8f/EsgQKNYs 9kfQUnukJ89+43VQ25V1ijaTD83jMKSgxm1OXf31AqG2N454V4dC9Zi/Np1LWs/o EbMiALr4cWiaixmw6DcecDEIXyzlazQkMAEk4ThPBNikZgk70L99imo9CTlRMspP TBRsjuN22pP6fqc3Vvl3B2+AuX/wiNPgsLQZhAJIZUPqXTXEl2P1uclyN7+DPhyL gNWrFDtG6wEZ0shkn7VAz2vJnqn1QgVI67am2d1hXth/UGUoQUlFBTE0EPjrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUl8rjvsnW2Pi279HxAajgw50Iz34wHwYDVR0j BBgwFoAU79sJSzpL3f+uejEYRjO20U2OX14wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmY2NDQwZjYtNmY1YS00ZjRiLWE1OTctZTc0YjU0M2U3ODViLzAvRUZEQjA5NEIz QTRCRERGRkFFN0EzMTE4NDYzM0I2RDE0RDhFNUY1RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRkRCMDk0QjNBNEJEREZGQUU3QTMxMTg0NjMzQjZEMTREOEU1 RjVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmY2NDQwZjYtNmY1YS00ZjRiLWE1 OTctZTc0YjU0M2U3ODViLzAvRUZEQjA5NEIzQTRCRERGRkFFN0EzMTE4NDYzM0I2 RDE0RDhFNUY1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGsZASJvvPM/KFEJOiufl/e8jwBHJQOFOT0k o70SEDuDQuIS8glOBiAjCyM1Y6JUwZ4aYkpnr/5+AnwOO04ByW/ODt+OekEkpQvP vQ6ecekBOSz7w52YgAUmzUeLXtmG1YHzrODAkuXvejYPtp0damEoTFbs4cVKdxw4 wnkJ4Oe2xWoUoYbglPgqGSyB2cvXId+wFGlNosmDxnk/6jhFF2UcpW0sePmzwtDl gKVC3DyGMnThhOmp8kLS8POi2LRkoiM4vLRJxmzewQh6zbNuM3iQnqWj1vGECpZo i/OWZ5+IVJCh8ShVAXYn0b3rKGfy2YswaOQTq1I10/5Y3Ung9+4= -----END CERTIFICATE-----Generated at Wed May 13 03:16:43 2026 by rpki-client