$ rpki-client -vvvf rpki-rsync.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/EFA0A80DF71CA377A289711EA4310F3117358BDA.mft File: EFA0A80DF71CA377A289711EA4310F3117358BDA.mft (raw, json) Hash identifier: oxB57x7BH4MEokJzTksxeLwP2jYKfC3l8WycC7t25f4= Subject key identifier: 38:08:66:AF:A2:CC:97:0A:1B:1B:C7:34:D8:80:0A:33:12:04:01:18 Authority key identifier: EF:A0:A8:0D:F7:1C:A3:77:A2:89:71:1E:A4:31:0F:31:17:35:8B:DA Certificate issuer: /CN=EFA0A80DF71CA377A289711EA4310F3117358BDA Certificate serial: 30790D801B8AB3AFD59FEA422708D4BD06027382 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFA0A80DF71CA377A289711EA4310F3117358BDA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/EFA0A80DF71CA377A289711EA4310F3117358BDA.mft Manifest number: C4 Signing time: Thu 24 Sep 2026 06:59:27 +0000 Manifest this update: Thu 24 Sep 2026 06:54:27 +0000 Manifest next update: Fri 25 Sep 2026 09:37:27 +0000 Files and hashes: 1: 34332e3232392e3230342e302f32322d3234203d3e203234353332.roa (hash: BwtyTC6qI4XC3HBbimySaUxc14wJ6nXjYuM/+KpzQMU=) 2: EFA0A80DF71CA377A289711EA4310F3117358BDA.crl (hash: KguBzbW9ywNO8CXRrKrKpZ2NJy7+JFtfmROkG1mguYA=) 3: 3130332e3234352e3138302e302f32322d3234203d3e203234353332.roa (hash: HsO0FzJAWLg2u6DKU2yDy0xpq+6RbfKYVFKlBWZw79M=) 4: 32372e3131312e33342e302f32342d3234203d3e203538343737.roa (hash: 1YWuY5HZqKiBZs805+vyXQB+d7lVGfJWx9YMEkEgtvQ=) 5: 3230322e3132392e3138342e302f32322d3234203d3e203234353332.roa (hash: CBM38ddIBA7ErC9KFszGB+2Go/rfydEsEM3u2nPHmFA=) 6: 32372e3131312e33322e302f31392d3234203d3e203234353332.roa (hash: Fx9bLePWZd911ErojerGEpVTnf/DxfdXCAQiFRWGMk8=) 7: 323430333a326530303a3a2f33322d3438203d3e203234353332.roa (hash: 9DAVKa81esoccLZerAJimBEYho7HzR8tvV6sLPxdUYg=) 8: 3131392e3233352e31362e302f32302d3234203d3e203234353332.roa (hash: a1jLyYlI+XXOuvRXX5wEn6MAtEMedfGoxkqMvx1OXCk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/EFA0A80DF71CA377A289711EA4310F3117358BDA.crl rsync://rpki-rsync.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/EFA0A80DF71CA377A289711EA4310F3117358BDA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFA0A80DF71CA377A289711EA4310F3117358BDA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 09:37:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:79:0d:80:1b:8a:b3:af:d5:9f:ea:42:27:08:d4:bd:06:02:73:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFA0A80DF71CA377A289711EA4310F3117358BDA Validity Not Before: Sep 24 06:54:27 2026 GMT Not After : Sep 25 09:37:27 2026 GMT Subject: CN=380866AFA2CC970A1B1BC734D8800A3312040118 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:43:eb:11:33:9c:24:9e:ae:ea:fb:0a:90:8f: 9a:c8:9f:a3:6e:43:fc:e2:57:ef:04:6a:01:84:4d: c3:ea:9f:7e:1e:73:c5:b4:4d:cf:69:25:c8:aa:96: 47:f6:13:80:ab:3d:0c:82:c3:53:b2:23:33:f3:1f: 1c:cb:9e:49:5e:64:ec:a3:d4:f9:63:14:df:df:73: ba:84:08:c7:75:e9:e7:b7:8a:8e:51:50:17:46:1c: b7:1c:2b:1e:47:0f:89:26:93:f9:68:9d:ef:30:30: f0:9f:e3:71:82:0c:d4:81:bb:50:bc:d8:1e:89:e8: 36:67:97:44:7d:be:11:69:94:07:ed:d8:58:ac:f0: 97:e9:03:23:f8:74:3f:0e:f5:58:5e:59:e5:44:d4: 57:b8:60:2e:78:3f:71:80:f2:81:ae:fa:90:48:65: 21:6e:79:e1:d0:67:1f:4d:0d:cc:7c:d7:84:a1:9e: 84:3c:79:be:af:79:3c:db:2b:d8:ae:be:a6:22:b1: 43:4b:ef:4e:bf:8b:43:c8:1e:a6:17:82:39:bf:8d: 82:8d:3a:be:35:ba:7b:81:b7:86:be:28:0e:8c:c2: 73:86:ee:38:73:0b:85:41:1b:58:ff:f5:a2:66:e5: 0e:9f:19:c9:d2:a6:a5:c5:a8:25:31:b1:ef:7c:b1: ab:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:08:66:AF:A2:CC:97:0A:1B:1B:C7:34:D8:80:0A:33:12:04:01:18 X509v3 Authority Key Identifier: keyid:EF:A0:A8:0D:F7:1C:A3:77:A2:89:71:1E:A4:31:0F:31:17:35:8B:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/EFA0A80DF71CA377A289711EA4310F3117358BDA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFA0A80DF71CA377A289711EA4310F3117358BDA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/EFA0A80DF71CA377A289711EA4310F3117358BDA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:96:9f:67:99:53:5f:48:79:a3:a1:55:9a:d0:30:08:53:95: d9:83:67:47:d1:9e:9c:aa:1c:4d:39:7b:55:c7:fd:fc:a1:67: 69:08:da:2b:73:77:d6:30:8d:47:07:f2:da:23:38:b3:10:43: 0c:af:92:1a:05:f1:ef:61:93:9e:0c:3d:f6:2a:08:ea:5c:a4: 4c:ff:30:e9:98:23:67:95:16:46:02:ba:ff:44:ec:c0:86:14: e4:8f:99:d3:6e:1b:75:94:28:9f:16:dc:7a:be:c0:81:51:7e: 71:75:eb:6f:f8:d0:44:52:db:4c:15:d8:12:c6:de:94:1e:de: 31:bd:70:64:61:7f:84:5c:ac:d8:15:ae:fd:72:1f:99:fa:b8: e2:b6:a7:b9:c1:68:09:68:d8:52:fb:e4:6a:66:b6:bd:a3:e4: 3f:d9:f0:2a:46:85:4a:32:f3:7f:53:da:74:8e:00:da:cb:38: cf:f2:9f:66:8d:cc:61:41:a9:76:31:c3:eb:72:97:27:e4:6d: cb:fb:28:ea:7c:e1:7f:ca:9a:dc:a7:0b:43:9f:cc:84:7f:ee: 41:ee:94:51:fd:56:a8:3b:d3:b9:9d:e2:67:e0:34:46:ad:6b: 70:f4:e5:e9:a7:87:e7:38:ae:a3:8c:3d:3d:4e:2a:7f:90:9b: 74:8a:6f:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMHkNgBuKs6/Vn+pCJwjUvQYCc4IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZBMEE4MERGNzFDQTM3N0EyODk3MTFFQTQzMTBGMzEx NzM1OEJEQTAeFw0yNjA5MjQwNjU0MjdaFw0yNjA5MjUwOTM3MjdaMDMxMTAvBgNV BAMTKDM4MDg2NkFGQTJDQzk3MEExQjFCQzczNEQ4ODAwQTMzMTIwNDAxMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKQ+sRM5wknq7q+wqQj5rIn6Nu Q/ziV+8EagGETcPqn34ec8W0Tc9pJciqlkf2E4CrPQyCw1OyIzPzHxzLnkleZOyj 1PljFN/fc7qECMd16ee3io5RUBdGHLccKx5HD4kmk/lone8wMPCf43GCDNSBu1C8 2B6J6DZnl0R9vhFplAft2Fis8JfpAyP4dD8O9VheWeVE1Fe4YC54P3GA8oGu+pBI ZSFueeHQZx9NDcx814ShnoQ8eb6veTzbK9iuvqYisUNL706/i0PIHqYXgjm/jYKN Or41unuBt4a+KA6MwnOG7jhzC4VBG1j/9aJm5Q6fGcnSpqXFqCUxse98sasfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOAhmr6LMlwobG8c02IAKMxIEARgwHwYDVR0j BBgwFoAU76CoDfcco3eiiXEepDEPMRc1i9owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTQzZTJlNjctYTE3MS00ZDllLWE5MzUtNDA2OTAyYjFlMTNiLzAvRUZBMEE4MERG NzFDQTM3N0EyODk3MTFFQTQzMTBGMzExNzM1OEJEQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRkEwQTgwREY3MUNBMzc3QTI4OTcxMUVBNDMxMEYzMTE3MzU4 QkRBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTQzZTJlNjctYTE3MS00ZDllLWE5 MzUtNDA2OTAyYjFlMTNiLzAvRUZBMEE4MERGNzFDQTM3N0EyODk3MTFFQTQzMTBG MzExNzM1OEJEQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFSWn2eZU19IeaOhVZrQMAhTldmDZ0fRnpyq HE05e1XH/fyhZ2kI2itzd9YwjUcH8tojOLMQQwyvkhoF8e9hk54MPfYqCOpcpEz/ MOmYI2eVFkYCuv9E7MCGFOSPmdNuG3WUKJ8W3Hq+wIFRfnF162/40ERS20wV2BLG 3pQe3jG9cGRhf4RcrNgVrv1yH5n6uOK2p7nBaAlo2FL75Gpmtr2j5D/Z8CpGhUoy 839T2nSOANrLOM/yn2aNzGFBqXYxw+tylyfkbcv7KOp84X/KmtynC0OfzIR/7kHu lFH9Vqg707md4mfgNEata3D05emnh+c4rqOMPT1OKn+Qm3SKb98= -----END CERTIFICATE-----Generated at Thu Sep 24 20:53:58 2026 by rpki-client