$ rpki-client -vvf rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC.mft File: EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC.mft (raw, json) Hash identifier: ApPj4YGKS32frEcl7FqJ6n4MrOBrnH++9eEDcxByoQQ= Subject key identifier: 14:0F:3A:8C:2F:86:24:EA:04:88:18:36:01:CF:16:DA:D4:37:F0:4B Authority key identifier: EF:4A:2E:C5:53:79:CA:2F:E3:A7:D2:4D:D2:C2:85:E8:BF:3A:39:FC Certificate issuer: /CN=EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC Certificate serial: 4EB76429453D4602B5F583A29D17FB236FC319 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC.mft Manifest number: 0F Signing time: Tue 12 May 2026 21:08:33 +0000 Manifest this update: Tue 12 May 2026 21:03:33 +0000 Manifest next update: Wed 13 May 2026 23:12:33 +0000 Files and hashes: 1: 323030313a6466343a363463303a3a2f34382d3438203d3e20313533313430.roa (hash: WBFw33DVjLMzvjb9A+5nTenZ7QhkAKAHSXyABZyuBhE=) 2: EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC.crl (hash: wqSmQ4Y1fh9JVQny7IIZE1PUJCKMvMwTSt1GOV09vUQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC.crl rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:b7:64:29:45:3d:46:02:b5:f5:83:a2:9d:17:fb:23:6f:c3:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC Validity Not Before: May 12 21:03:33 2026 GMT Not After : May 13 23:12:33 2026 GMT Subject: CN=140F3A8C2F8624EA0488183601CF16DAD437F04B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:77:fb:e1:0c:3d:e1:87:8a:75:b4:b3:5f:f2: b4:25:33:09:4f:1b:83:41:b9:ee:cf:d3:72:b6:9a: e0:c1:a7:e0:a0:f1:93:a4:9f:9d:41:85:cc:2d:7b: b8:e5:d7:94:97:1c:23:14:a0:bc:63:cc:de:f7:85: 95:a8:9e:56:a9:f5:f5:95:14:9a:f2:ac:df:66:e9: 11:19:7b:98:59:e8:73:24:46:bc:e1:d5:0c:15:8e: 82:b8:d1:51:69:01:ca:fc:9d:cf:d1:b7:9f:63:62: 39:73:53:80:14:ce:4e:b8:26:50:e6:32:80:1a:26: 24:e6:1e:d9:e9:37:88:07:e9:6e:a0:46:53:53:59: d1:6c:b2:5d:7f:9c:f0:cb:4c:45:65:5b:fd:b8:84: 9f:75:a2:70:ae:5e:9a:ad:66:44:03:f6:50:50:75: e9:4c:79:23:24:5d:4d:7b:bc:29:2e:68:ad:b7:3f: d0:14:5f:80:dd:7d:da:11:be:f4:e7:7a:a3:ff:10: ff:16:b8:2f:18:18:64:db:08:df:bf:48:3d:b0:dd: 86:29:a9:fe:c0:47:41:9f:fe:b5:ed:3f:dd:1f:e2: bc:f5:78:7e:0c:c4:c1:48:5c:09:35:7b:3c:a8:62: b9:c3:4d:14:81:ed:7d:d2:ae:fc:41:e9:a5:4b:a1: 7e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:0F:3A:8C:2F:86:24:EA:04:88:18:36:01:CF:16:DA:D4:37:F0:4B X509v3 Authority Key Identifier: keyid:EF:4A:2E:C5:53:79:CA:2F:E3:A7:D2:4D:D2:C2:85:E8:BF:3A:39:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:ec:ae:30:ad:16:f5:a6:28:02:ee:84:61:49:9b:92:cb:dd: 54:79:37:f7:7c:3b:29:7a:65:0f:4e:69:7f:d1:f8:e5:75:c2: 9b:ff:7c:00:c0:99:36:8a:53:d8:ac:29:49:03:d1:f5:e2:d4: 80:ef:8d:4d:6a:8b:60:5a:fb:1f:e7:12:2d:d7:db:1d:65:9a: f3:da:d9:b3:fb:72:66:2c:d8:6f:88:b9:98:8c:49:62:75:b9: 10:c3:f5:00:4a:62:d7:89:85:4d:00:98:20:07:b1:d4:7b:5d: d4:64:b2:96:52:8f:07:c9:b0:b8:92:da:8d:da:7a:76:0f:3b: ea:2d:d9:75:a8:1d:cb:2c:77:37:37:f8:ea:ef:5a:a1:23:8f: 2c:5c:cf:e5:9a:15:db:6a:65:f1:f3:ed:ab:6c:ef:e7:f5:1b: fe:99:d4:93:04:3f:a7:a7:92:d2:db:8f:5d:ae:40:2d:43:46: 13:3c:55:5f:d9:4c:3a:46:fe:7a:17:3a:36:d7:63:95:30:94: 3a:cc:60:68:80:34:68:00:b4:31:ff:67:4c:27:92:f3:83:8c: 63:d6:b0:2e:65:4f:39:8e:1a:a0:a6:19:61:fb:a3:22:62:66: 4f:52:0f:b9:bd:7c:96:2e:09:19:c5:80:f6:4b:45:c4:1a:44: 99:a7:1b:9e -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITTrdkKUU9RgK19YOinRf7I2/DGTANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyhFRjRBMkVDNTUzNzlDQTJGRTNBN0QyNEREMkMyODVFOEJG M0EzOUZDMB4XDTI2MDUxMjIxMDMzM1oXDTI2MDUxMzIzMTIzM1owMzExMC8GA1UE AxMoMTQwRjNBOEMyRjg2MjRFQTA0ODgxODM2MDFDRjE2REFENDM3RjA0QjCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALZ3++EMPeGHinW0s1/ytCUzCU8b g0G57s/Tcraa4MGn4KDxk6SfnUGFzC17uOXXlJccIxSgvGPM3veFlaieVqn19ZUU mvKs32bpERl7mFnocyRGvOHVDBWOgrjRUWkByvydz9G3n2NiOXNTgBTOTrgmUOYy gBomJOYe2ek3iAfpbqBGU1NZ0WyyXX+c8MtMRWVb/biEn3WicK5emq1mRAP2UFB1 6Ux5IyRdTXu8KS5orbc/0BRfgN192hG+9Od6o/8Q/xa4LxgYZNsI379IPbDdhimp /sBHQZ/+te0/3R/ivPV4fgzEwUhcCTV7PKhiucNNFIHtfdKu/EHppUuhfhcCAwEA AaOCAjwwggI4MB0GA1UdDgQWBBQUDzqML4Yk6gSIGDYBzxba1DfwSzAfBgNVHSME GDAWgBTvSi7FU3nKL+On0k3SwoXovzo5/DAOBgNVHQ8BAf8EBAMCB4AwgYYGA1Ud HwR/MH0we6B5oHeGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9j YWZjYmZiYi1iYTNmLTRkNTMtYTA0Zi0xNGQ2ZjRiZTBjYjEvMS9FRjRBMkVDNTUz NzlDQTJGRTNBN0QyNEREMkMyODVFOEJGM0EzOUZDLmNybDByBggrBgEFBQcBAQRm MGQwYgYIKwYBBQUHMAKGVnJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVw by9JRE5JQy8xL0VGNEEyRUM1NTM3OUNBMkZFM0E3RDI0REQyQzI4NUU4QkYzQTM5 RkMuY2VyMIGUBggrBgEFBQcBCwSBhzCBhDCBgQYIKwYBBQUHMAuGdXJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9jYWZjYmZiYi1iYTNmLTRkNTMtYTA0 Zi0xNGQ2ZjRiZTBjYjEvMS9FRjRBMkVDNTUzNzlDQTJGRTNBN0QyNEREMkMyODVF OEJGM0EzOUZDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAQ+yuMK0W9aYoAu6EYUmbksvdVHk393w7KXpl D05pf9H45XXCm/98AMCZNopT2KwpSQPR9eLUgO+NTWqLYFr7H+cSLdfbHWWa89rZ s/tyZizYb4i5mIxJYnW5EMP1AEpi14mFTQCYIAex1Htd1GSyllKPB8mwuJLajdp6 dg876i3Zdagdyyx3Nzf46u9aoSOPLFzP5ZoV22pl8fPtq2zv5/Ub/pnUkwQ/p6eS 0tuPXa5ALUNGEzxVX9lMOkb+ehc6NtdjlTCUOsxgaIA0aAC0Mf9nTCeS84OMY9aw LmVPOY4aoKYZYfujImJmT1IPub18li4JGcWA9ktFxBpEmacbng== -----END CERTIFICATE-----Generated at Tue May 12 23:27:57 2026 by rpki-client