$ rpki-client -vvf rpki-rsync.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/EFA0A80DF71CA377A289711EA4310F3117358BDA.mft File: EFA0A80DF71CA377A289711EA4310F3117358BDA.mft (raw, json) Hash identifier: I6kJJlNDh8+9rGhCgWMpW36lWSQZIwGFscMh0+ivXAM= Subject key identifier: 9D:92:28:4A:93:15:27:E4:17:7B:74:6E:4E:F6:47:44:AC:8B:2F:F6 Authority key identifier: EF:A0:A8:0D:F7:1C:A3:77:A2:89:71:1E:A4:31:0F:31:17:35:8B:DA Certificate issuer: /CN=EFA0A80DF71CA377A289711EA4310F3117358BDA Certificate serial: 731EDED35FA2A49660F2BF21BBEE1B541626ED93 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFA0A80DF71CA377A289711EA4310F3117358BDA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/EFA0A80DF71CA377A289711EA4310F3117358BDA.mft Manifest number: 0F Signing time: Tue 12 May 2026 18:49:26 +0000 Manifest this update: Tue 12 May 2026 18:44:26 +0000 Manifest next update: Wed 13 May 2026 18:51:26 +0000 Files and hashes: 1: 34332e3232392e3230342e302f32322d3234203d3e203234353332.roa (hash: BwtyTC6qI4XC3HBbimySaUxc14wJ6nXjYuM/+KpzQMU=) 2: 32372e3131312e33342e302f32342d3234203d3e203538343737.roa (hash: 1YWuY5HZqKiBZs805+vyXQB+d7lVGfJWx9YMEkEgtvQ=) 3: 3130332e3234352e3138302e302f32322d3234203d3e203234353332.roa (hash: HsO0FzJAWLg2u6DKU2yDy0xpq+6RbfKYVFKlBWZw79M=) 4: 323430333a326530303a3a2f33322d3438203d3e203234353332.roa (hash: 9DAVKa81esoccLZerAJimBEYho7HzR8tvV6sLPxdUYg=) 5: EFA0A80DF71CA377A289711EA4310F3117358BDA.crl (hash: stxsgrMqZAyqgZTGWZpIIhEos/DIiHTAgVQJCHFcx3A=) 6: 32372e3131312e33322e302f31392d3234203d3e203234353332.roa (hash: Fx9bLePWZd911ErojerGEpVTnf/DxfdXCAQiFRWGMk8=) 7: 3230322e3132392e3138342e302f32322d3234203d3e203234353332.roa (hash: CBM38ddIBA7ErC9KFszGB+2Go/rfydEsEM3u2nPHmFA=) 8: 3131392e3233352e31362e302f32302d3234203d3e203234353332.roa (hash: a1jLyYlI+XXOuvRXX5wEn6MAtEMedfGoxkqMvx1OXCk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/EFA0A80DF71CA377A289711EA4310F3117358BDA.crl rsync://rpki-rsync.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/EFA0A80DF71CA377A289711EA4310F3117358BDA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFA0A80DF71CA377A289711EA4310F3117358BDA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:1e:de:d3:5f:a2:a4:96:60:f2:bf:21:bb:ee:1b:54:16:26:ed:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFA0A80DF71CA377A289711EA4310F3117358BDA Validity Not Before: May 12 18:44:26 2026 GMT Not After : May 13 18:51:26 2026 GMT Subject: CN=9D92284A931527E4177B746E4EF64744AC8B2FF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:d5:1f:a8:13:a0:a0:f4:76:37:02:c7:66:8f: 9f:a2:54:87:3a:aa:c6:71:df:46:00:49:35:13:6a: 94:6a:68:32:29:f7:15:d2:d5:5b:fb:91:68:e3:a9: 8a:85:8b:3c:3e:8f:9d:a4:50:f2:89:62:29:b7:12: 8b:50:71:64:c4:0c:11:11:34:3a:8b:9d:db:a4:59: df:fd:a4:fa:6f:e6:c1:69:2b:79:e8:bd:44:d8:57: 3e:f1:af:7e:20:80:b8:c7:13:de:6e:47:b6:15:b7: 4d:91:70:2b:e9:6b:e7:c8:71:af:76:0c:d4:d4:b0: 5a:0f:d8:38:54:81:c7:ec:3e:db:90:f1:7d:11:d6: 22:21:b9:58:26:0c:2b:a2:4e:0e:c7:50:0c:17:14: 5d:bd:3f:a2:c6:1d:ea:b3:a0:62:1f:b9:ab:44:62: 6d:0f:44:e2:68:da:66:83:43:41:4c:10:7d:17:11: 0f:15:25:35:64:4d:29:cb:99:c4:15:07:04:f7:f7: c6:1a:5e:82:3c:bc:6d:70:30:e1:59:bc:fb:39:f9: 1a:66:43:45:4c:c9:00:aa:9c:ab:81:8a:17:23:8a: 05:4c:4b:3b:d0:0f:c1:b9:4b:9f:91:b1:0b:ac:e1: 85:6a:21:19:4e:ad:f8:f0:90:d1:b9:7c:9a:ed:cd: ca:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:92:28:4A:93:15:27:E4:17:7B:74:6E:4E:F6:47:44:AC:8B:2F:F6 X509v3 Authority Key Identifier: keyid:EF:A0:A8:0D:F7:1C:A3:77:A2:89:71:1E:A4:31:0F:31:17:35:8B:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/EFA0A80DF71CA377A289711EA4310F3117358BDA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFA0A80DF71CA377A289711EA4310F3117358BDA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/EFA0A80DF71CA377A289711EA4310F3117358BDA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:77:0c:a2:70:ba:b9:21:74:9f:e7:19:75:75:85:b6:24:80: b2:94:e6:a8:da:db:6b:46:3c:16:71:49:8f:67:99:f5:d2:fe: 03:48:14:e9:23:3a:3c:2e:c2:16:53:2b:56:f7:35:4e:d4:c5: 59:32:46:7f:ce:86:4f:09:f8:61:9b:1a:68:4f:a2:da:db:bf: 5d:db:2b:d5:f8:4c:2a:84:2e:90:19:1c:c4:d1:10:94:99:92: e5:03:8e:40:6f:ca:c4:aa:ea:f4:86:06:6f:c8:cd:3d:52:94: 39:12:50:a6:2c:63:c2:3d:44:04:c7:ad:46:4c:65:e9:57:d4: 85:9a:5c:8e:83:3a:7a:44:f9:7c:4d:01:00:6e:c9:c8:30:cd: 9f:85:a9:b7:95:d6:e8:96:fa:b9:2e:b7:ba:ee:b7:3e:5e:91: c3:0b:9f:25:ef:b0:db:4e:0d:52:3f:d5:e9:0e:76:a8:77:92: 11:94:49:8d:4d:91:19:0a:e0:20:54:2e:27:2c:4b:7b:74:d6: b0:6a:e4:2b:ce:bc:a5:ec:2f:26:67:e6:8b:6c:bc:f0:36:09: b0:a5:ca:5b:9a:63:7f:60:22:07:8a:2f:e9:fe:13:e5:b1:88: 22:99:3c:96:6f:64:1d:bb:63:78:0d:a2:a3:82:af:06:70:9b: e2:d3:8a:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcx7e01+ipJZg8r8hu+4bVBYm7ZMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZBMEE4MERGNzFDQTM3N0EyODk3MTFFQTQzMTBGMzEx NzM1OEJEQTAeFw0yNjA1MTIxODQ0MjZaFw0yNjA1MTMxODUxMjZaMDMxMTAvBgNV BAMTKDlEOTIyODRBOTMxNTI3RTQxNzdCNzQ2RTRFRjY0NzQ0QUM4QjJGRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCB1R+oE6Cg9HY3Asdmj5+iVIc6 qsZx30YASTUTapRqaDIp9xXS1Vv7kWjjqYqFizw+j52kUPKJYim3EotQcWTEDBER NDqLndukWd/9pPpv5sFpK3novUTYVz7xr34ggLjHE95uR7YVt02RcCvpa+fIca92 DNTUsFoP2DhUgcfsPtuQ8X0R1iIhuVgmDCuiTg7HUAwXFF29P6LGHeqzoGIfuatE Ym0PROJo2maDQ0FMEH0XEQ8VJTVkTSnLmcQVBwT398YaXoI8vG1wMOFZvPs5+Rpm Q0VMyQCqnKuBihcjigVMSzvQD8G5S5+RsQus4YVqIRlOrfjwkNG5fJrtzcqTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnZIoSpMVJ+QXe3RuTvZHRKyLL/YwHwYDVR0j BBgwFoAU76CoDfcco3eiiXEepDEPMRc1i9owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTQzZTJlNjctYTE3MS00ZDllLWE5MzUtNDA2OTAyYjFlMTNiLzAvRUZBMEE4MERG NzFDQTM3N0EyODk3MTFFQTQzMTBGMzExNzM1OEJEQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRkEwQTgwREY3MUNBMzc3QTI4OTcxMUVBNDMxMEYzMTE3MzU4 QkRBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTQzZTJlNjctYTE3MS00ZDllLWE5 MzUtNDA2OTAyYjFlMTNiLzAvRUZBMEE4MERGNzFDQTM3N0EyODk3MTFFQTQzMTBG MzExNzM1OEJEQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJl3DKJwurkhdJ/nGXV1hbYkgLKU5qja22tG PBZxSY9nmfXS/gNIFOkjOjwuwhZTK1b3NU7UxVkyRn/Ohk8J+GGbGmhPotrbv13b K9X4TCqELpAZHMTREJSZkuUDjkBvysSq6vSGBm/IzT1SlDkSUKYsY8I9RATHrUZM ZelX1IWaXI6DOnpE+XxNAQBuycgwzZ+FqbeV1uiW+rkut7rutz5ekcMLnyXvsNtO DVI/1ekOdqh3khGUSY1NkRkK4CBULicsS3t01rBq5CvOvKXsLyZn5otsvPA2CbCl yluaY39gIgeKL+n+E+WxiCKZPJZvZB27Y3gNoqOCrwZwm+LTitY= -----END CERTIFICATE-----Generated at Tue May 12 22:19:32 2026 by rpki-client