$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6f6440f6-6f5a-4f4b-a597-e74b543e785b/0/EFDB094B3A4BDDFFAE7A31184633B6D14D8E5F5E.mft File: EFDB094B3A4BDDFFAE7A31184633B6D14D8E5F5E.mft (raw, json) Hash identifier: 1TmJ6racrAYuC4WBrlYf9rNPXomWIDx8bm7BWvDLYIc= Subject key identifier: FB:5A:88:A2:52:31:F8:55:04:49:B6:F8:EF:8E:11:A8:CB:C5:3D:38 Authority key identifier: EF:DB:09:4B:3A:4B:DD:FF:AE:7A:31:18:46:33:B6:D1:4D:8E:5F:5E Certificate issuer: /CN=EFDB094B3A4BDDFFAE7A31184633B6D14D8E5F5E Certificate serial: 53B5E18CDA0166F18AFC6F933DDFC179EB538E48 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFDB094B3A4BDDFFAE7A31184633B6D14D8E5F5E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6f6440f6-6f5a-4f4b-a597-e74b543e785b/0/EFDB094B3A4BDDFFAE7A31184633B6D14D8E5F5E.mft Manifest number: C4 Signing time: Fri 25 Sep 2026 07:19:49 +0000 Manifest this update: Fri 25 Sep 2026 07:14:49 +0000 Manifest next update: Sat 26 Sep 2026 09:23:49 +0000 Files and hashes: 1: EFDB094B3A4BDDFFAE7A31184633B6D14D8E5F5E.crl (hash: jvnTd1YGtfq8bw0hoGFJndLodfAYNg3LvOrfuU++6Zk=) 2: 3130332e3135332e36322e302f32332d3234203d3e20313430343537.roa (hash: BZhn4U/UvZ5+wud72EXtfRQcfjbr1V+Ji6U8Qf15hk4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6f6440f6-6f5a-4f4b-a597-e74b543e785b/0/EFDB094B3A4BDDFFAE7A31184633B6D14D8E5F5E.crl rsync://rpki-rsync.idnic.net/repo/6f6440f6-6f5a-4f4b-a597-e74b543e785b/0/EFDB094B3A4BDDFFAE7A31184633B6D14D8E5F5E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFDB094B3A4BDDFFAE7A31184633B6D14D8E5F5E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 09:23:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:b5:e1:8c:da:01:66:f1:8a:fc:6f:93:3d:df:c1:79:eb:53:8e:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFDB094B3A4BDDFFAE7A31184633B6D14D8E5F5E Validity Not Before: Sep 25 07:14:49 2026 GMT Not After : Sep 26 09:23:49 2026 GMT Subject: CN=FB5A88A25231F8550449B6F8EF8E11A8CBC53D38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:df:71:c7:c6:a2:35:ab:97:7e:b4:55:2b:68: 6e:7d:b3:4e:f4:d8:50:1f:d9:02:9d:a2:e3:df:81: 07:7e:22:e8:1f:0f:34:28:33:bd:e3:1a:4a:7f:d7: 85:ba:25:19:17:e2:7b:0c:62:0c:d6:36:dc:d6:e7: 6b:e1:53:71:56:12:41:d4:53:20:20:d5:36:eb:33: 58:01:cd:cd:c7:db:3c:7c:81:eb:bf:4c:d4:e7:76: db:0e:2f:86:e6:81:1f:6f:fe:73:a4:ce:10:20:18: 12:b4:ba:e4:3b:06:3c:a3:d2:a7:2f:a8:a7:79:65: 89:74:47:4f:15:ac:3b:be:8f:24:ee:e5:3a:f4:66: 67:40:7a:cf:48:75:d5:99:94:17:0a:6d:94:6c:85: c8:69:2b:45:ad:b4:ce:ee:9c:8f:62:61:74:4e:7d: c3:00:c0:f8:f9:6d:57:1c:89:f5:1d:d0:9e:d2:0e: 33:9f:13:39:82:16:2e:cf:6f:19:bb:00:0a:28:3b: 0d:a8:1e:b3:d5:2b:e8:28:9f:8d:61:ec:9c:86:d6: 84:2b:17:3b:ef:eb:4a:4a:ae:ce:ed:6b:59:99:8b: 69:e8:8d:e0:1b:6d:f6:54:9e:06:e2:94:31:0e:dd: 06:3e:81:eb:40:98:69:72:47:19:24:19:aa:0c:7d: 5c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:5A:88:A2:52:31:F8:55:04:49:B6:F8:EF:8E:11:A8:CB:C5:3D:38 X509v3 Authority Key Identifier: keyid:EF:DB:09:4B:3A:4B:DD:FF:AE:7A:31:18:46:33:B6:D1:4D:8E:5F:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6f6440f6-6f5a-4f4b-a597-e74b543e785b/0/EFDB094B3A4BDDFFAE7A31184633B6D14D8E5F5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFDB094B3A4BDDFFAE7A31184633B6D14D8E5F5E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6f6440f6-6f5a-4f4b-a597-e74b543e785b/0/EFDB094B3A4BDDFFAE7A31184633B6D14D8E5F5E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:df:a7:f1:5d:2e:64:ff:ea:18:01:46:3e:e6:ca:90:13:80: dd:75:a4:77:92:9d:d9:49:0c:9e:70:62:65:9b:ea:0f:0f:5f: 11:b7:33:bd:8d:6d:19:38:a8:47:a0:4b:cc:38:79:5d:39:33: ce:7d:77:bd:5c:dd:6c:e3:a8:1b:eb:32:ff:c2:e2:36:21:60: ec:bb:20:46:9e:40:db:5c:54:90:3b:62:cf:c2:1c:d9:f7:06: b7:6c:27:6c:15:69:6b:d2:4a:c9:79:cf:39:0d:7c:6b:2c:a4: 78:76:21:9f:6c:22:ef:53:05:c7:2a:98:3d:3e:04:a3:c4:7e: ed:64:83:d3:d7:17:46:0d:e2:ad:e2:a2:80:34:f1:66:fa:5c: d0:1b:4e:3d:eb:1f:11:56:e0:d4:3b:7c:8e:60:3a:9e:ff:23: d9:44:76:8b:9f:e6:17:92:6c:35:29:8f:02:3c:14:36:b6:9f: af:37:a8:b9:5c:55:42:75:8d:07:d3:de:93:e3:17:b1:4c:4e: da:74:21:ee:87:1d:39:3c:0b:44:59:07:65:e0:fc:01:7c:69: 37:92:2c:27:5e:62:51:d6:9c:b0:9f:76:24:b3:54:fc:16:95: dc:e4:df:c7:45:5e:52:8d:9e:70:fb:a6:af:28:d6:15:18:f5: 87:0c:7d:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU7XhjNoBZvGK/G+TPd/BeetTjkgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZEQjA5NEIzQTRCRERGRkFFN0EzMTE4NDYzM0I2RDE0 RDhFNUY1RTAeFw0yNjA5MjUwNzE0NDlaFw0yNjA5MjYwOTIzNDlaMDMxMTAvBgNV BAMTKEZCNUE4OEEyNTIzMUY4NTUwNDQ5QjZGOEVGOEUxMUE4Q0JDNTNEMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD33HHxqI1q5d+tFUraG59s070 2FAf2QKdouPfgQd+IugfDzQoM73jGkp/14W6JRkX4nsMYgzWNtzW52vhU3FWEkHU UyAg1TbrM1gBzc3H2zx8geu/TNTndtsOL4bmgR9v/nOkzhAgGBK0uuQ7Bjyj0qcv qKd5ZYl0R08VrDu+jyTu5Tr0ZmdAes9IddWZlBcKbZRshchpK0WttM7unI9iYXRO fcMAwPj5bVccifUd0J7SDjOfEzmCFi7Pbxm7AAooOw2oHrPVK+gon41h7JyG1oQr Fzvv60pKrs7ta1mZi2nojeAbbfZUngbilDEO3QY+getAmGlyRxkkGaoMfVyrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+1qIolIx+FUESbb4744RqMvFPTgwHwYDVR0j BBgwFoAU79sJSzpL3f+uejEYRjO20U2OX14wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmY2NDQwZjYtNmY1YS00ZjRiLWE1OTctZTc0YjU0M2U3ODViLzAvRUZEQjA5NEIz QTRCRERGRkFFN0EzMTE4NDYzM0I2RDE0RDhFNUY1RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRkRCMDk0QjNBNEJEREZGQUU3QTMxMTg0NjMzQjZEMTREOEU1 RjVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmY2NDQwZjYtNmY1YS00ZjRiLWE1 OTctZTc0YjU0M2U3ODViLzAvRUZEQjA5NEIzQTRCRERGRkFFN0EzMTE4NDYzM0I2 RDE0RDhFNUY1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHTfp/FdLmT/6hgBRj7mypATgN11pHeSndlJ DJ5wYmWb6g8PXxG3M72NbRk4qEegS8w4eV05M859d71c3WzjqBvrMv/C4jYhYOy7 IEaeQNtcVJA7Ys/CHNn3BrdsJ2wVaWvSSsl5zzkNfGsspHh2IZ9sIu9TBccqmD0+ BKPEfu1kg9PXF0YN4q3iooA08Wb6XNAbTj3rHxFW4NQ7fI5gOp7/I9lEdouf5heS bDUpjwI8FDa2n683qLlcVUJ1jQfT3pPjF7FMTtp0Ie6HHTk8C0RZB2Xg/AF8aTeS LCdeYlHWnLCfdiSzVPwWldzk38dFXlKNnnD7pq8o1hUY9YcMfQQ= -----END CERTIFICATE-----Generated at Fri Sep 25 17:16:14 2026 by rpki-client