$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E.mft File: EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E.mft (raw, json) Hash identifier: 9bOoo9kGunFVGZ+NEu9S4G6mgKE0jHLkVThkBrT+kzg= Subject key identifier: 86:A1:33:AF:F6:53:D3:F9:D2:D9:98:2A:8A:DC:5D:03:16:5B:A9:CB Authority key identifier: EF:0D:C3:6F:FE:89:46:F1:04:92:74:EE:88:9B:B9:8C:5A:5A:7D:8E Certificate issuer: /CN=EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E Certificate serial: 3C0BEC0E71311E56DE78E26F01553FAE75BE43C7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E.mft Manifest number: C0 Signing time: Thu 24 Sep 2026 00:57:00 +0000 Manifest this update: Thu 24 Sep 2026 00:52:00 +0000 Manifest next update: Fri 25 Sep 2026 01:22:00 +0000 Files and hashes: 1: 3138302e3135302e3233322e302f32312d3234203d3e203234323130.roa (hash: ifJJcEjqzU7+xO+rrfiw7+N3sHyu5nZ4TiZzLx8FyiQ=) 2: EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E.crl (hash: x+qftiii4VS4cXc9/WsxAns0XE0kB+Zm/xALDg1KJ/Y=) 3: 3230322e3137332e31362e302f32312d3234203d3e203234323130.roa (hash: r4SZ6eUQ/WGNZXPblXSjXtHYlTpktiYzvV0LKCEpMuY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E.crl rsync://rpki-rsync.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 01:22:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:0b:ec:0e:71:31:1e:56:de:78:e2:6f:01:55:3f:ae:75:be:43:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E Validity Not Before: Sep 24 00:52:00 2026 GMT Not After : Sep 25 01:22:00 2026 GMT Subject: CN=86A133AFF653D3F9D2D9982A8ADC5D03165BA9CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:66:81:5c:4f:1e:80:fd:0e:bc:78:0d:5e:ee: 02:d7:d0:dc:ec:ad:5e:bb:b5:83:aa:09:fb:6a:e2: 6f:72:72:a9:a2:f4:28:e5:a8:85:3e:6b:52:86:ab: 61:aa:cc:c4:de:4c:57:1f:5d:28:aa:21:f3:d2:33: ec:91:58:88:24:32:fb:50:6b:d8:6f:1b:d6:46:03: 0b:1c:ca:69:2a:e2:4a:bd:1e:04:a2:99:86:24:bc: 8c:c0:de:87:83:8f:5c:d5:43:dd:50:32:58:37:a0: 03:ef:55:71:d1:2d:fa:02:d6:21:07:88:5b:7c:6f: 7a:2c:0a:99:10:7b:92:a9:70:3d:c6:a9:56:4e:8c: e6:40:75:05:cf:db:f0:ae:40:70:a6:cb:a9:7c:6c: 55:d8:1d:5b:cb:29:71:23:39:28:29:cb:d6:2f:5d: 3c:2a:0f:c6:cd:f6:28:28:4c:09:39:f1:31:06:7f: f5:b0:83:73:4f:34:17:27:ad:34:cc:10:de:55:a3: 12:ff:52:28:83:f9:c2:70:43:ec:96:f9:41:b5:b3: 92:90:48:43:4a:9d:99:66:cd:95:ad:f3:6d:36:94: 19:bb:6b:6c:08:15:c6:7f:83:b2:40:70:e0:87:2d: b5:a4:88:bd:8f:ad:b7:cb:d2:79:ed:78:50:04:51: b0:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:A1:33:AF:F6:53:D3:F9:D2:D9:98:2A:8A:DC:5D:03:16:5B:A9:CB X509v3 Authority Key Identifier: keyid:EF:0D:C3:6F:FE:89:46:F1:04:92:74:EE:88:9B:B9:8C:5A:5A:7D:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:7c:60:24:4b:c8:57:b1:e9:bd:da:9d:79:42:63:fb:9f:73: 98:27:1a:71:fc:33:bf:d6:7d:58:6e:42:0b:89:36:0c:f3:67: 3b:6b:a5:8a:06:1d:71:d9:4b:ca:03:7c:ce:50:77:80:8f:6a: 68:4f:c2:5c:09:57:58:23:f8:10:f9:eb:bc:29:60:14:91:1d: 08:1d:99:20:38:de:cc:84:d1:65:15:15:bf:b4:48:d0:f7:17: 77:4d:f1:b1:7b:63:05:52:20:4c:6b:c7:e5:79:23:21:b0:72: 45:2f:95:7e:96:79:7a:79:1a:9d:01:70:5f:93:a2:b2:b4:76: 7a:1a:00:f1:78:eb:b3:b4:ef:4e:2d:db:99:9c:7a:bb:58:1f: ca:76:71:66:f9:02:7f:1f:ac:f6:0f:6a:35:d8:2a:54:ef:7b: 94:4c:f2:9f:49:e5:55:9f:69:af:4f:e7:b9:59:60:b8:96:1c: 13:1c:1c:e9:48:fd:a7:d2:95:02:de:bb:a6:7a:50:38:31:e2: b7:6d:66:4d:7d:45:06:3b:f1:18:6f:63:56:3f:af:73:a9:2b: 12:61:99:cb:19:13:e2:d7:68:f7:60:df:ff:bd:7d:1e:b4:35: 7f:87:5c:66:79:67:15:ab:79:ca:22:9b:fe:08:6b:12:79:61: 55:7a:f6:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPAvsDnExHlbeeOJvAVU/rnW+Q8cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUYwREMzNkZGRTg5NDZGMTA0OTI3NEVFODg5QkI5OEM1 QTVBN0Q4RTAeFw0yNjA5MjQwMDUyMDBaFw0yNjA5MjUwMTIyMDBaMDMxMTAvBgNV BAMTKDg2QTEzM0FGRjY1M0QzRjlEMkQ5OTgyQThBREM1RDAzMTY1QkE5Q0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiZoFcTx6A/Q68eA1e7gLX0Nzs rV67tYOqCftq4m9ycqmi9CjlqIU+a1KGq2GqzMTeTFcfXSiqIfPSM+yRWIgkMvtQ a9hvG9ZGAwscymkq4kq9HgSimYYkvIzA3oeDj1zVQ91QMlg3oAPvVXHRLfoC1iEH iFt8b3osCpkQe5KpcD3GqVZOjOZAdQXP2/CuQHCmy6l8bFXYHVvLKXEjOSgpy9Yv XTwqD8bN9igoTAk58TEGf/Wwg3NPNBcnrTTMEN5VoxL/UiiD+cJwQ+yW+UG1s5KQ SENKnZlmzZWt8202lBm7a2wIFcZ/g7JAcOCHLbWkiL2PrbfL0nnteFAEUbAvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhqEzr/ZT0/nS2ZgqitxdAxZbqcswHwYDVR0j BBgwFoAU7w3Db/6JRvEEknTuiJu5jFpafY4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTAxN2I4MjgtMTdmYS00OGEyLWExMTMtMTQ5Zjk0NjdhMzI4LzAvRUYwREMzNkZG RTg5NDZGMTA0OTI3NEVFODg5QkI5OEM1QTVBN0Q4RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRjBEQzM2RkZFODk0NkYxMDQ5Mjc0RUU4ODlCQjk4QzVBNUE3 RDhFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTAxN2I4MjgtMTdmYS00OGEyLWEx MTMtMTQ5Zjk0NjdhMzI4LzAvRUYwREMzNkZGRTg5NDZGMTA0OTI3NEVFODg5QkI5 OEM1QTVBN0Q4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABZ8YCRLyFex6b3anXlCY/ufc5gnGnH8M7/W fVhuQguJNgzzZztrpYoGHXHZS8oDfM5Qd4CPamhPwlwJV1gj+BD567wpYBSRHQgd mSA43syE0WUVFb+0SND3F3dN8bF7YwVSIExrx+V5IyGwckUvlX6WeXp5Gp0BcF+T orK0dnoaAPF467O0704t25mcertYH8p2cWb5An8frPYPajXYKlTve5RM8p9J5VWf aa9P57lZYLiWHBMcHOlI/afSlQLeu6Z6UDgx4rdtZk19RQY78RhvY1Y/r3OpKxJh mcsZE+LXaPdg3/+9fR60NX+HXGZ5ZxWrecoim/4IaxJ5YVV69hw= -----END CERTIFICATE-----Generated at Thu Sep 24 11:06:35 2026 by rpki-client