$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC.mft File: EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC.mft (raw, json) Hash identifier: oTigr5liu0svA9iqgFPkrz2GJu6z/mB0dK0F9jy2c84= Subject key identifier: D1:81:41:0B:AF:D9:BA:0B:23:C2:C2:5F:17:EC:FD:1E:05:9D:AE:77 Authority key identifier: EF:4A:2E:C5:53:79:CA:2F:E3:A7:D2:4D:D2:C2:85:E8:BF:3A:39:FC Certificate issuer: /CN=EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC Certificate serial: 3480BF2AB620F85504A732C34189BB72EB15FB06 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 18:18:41 +0000 Manifest this update: Wed 23 Sep 2026 18:13:41 +0000 Manifest next update: Thu 24 Sep 2026 19:57:41 +0000 Files and hashes: 1: 323030313a6466343a363463303a3a2f34382d3438203d3e20313533313430.roa (hash: WBFw33DVjLMzvjb9A+5nTenZ7QhkAKAHSXyABZyuBhE=) 2: EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC.crl (hash: RmqDFQF7sWUxQ9XaFHH0HbafvgfrNxGHlWuQXFvaMyY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC.crl rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 19:57:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:80:bf:2a:b6:20:f8:55:04:a7:32:c3:41:89:bb:72:eb:15:fb:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC Validity Not Before: Sep 23 18:13:41 2026 GMT Not After : Sep 24 19:57:41 2026 GMT Subject: CN=D181410BAFD9BA0B23C2C25F17ECFD1E059DAE77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3b:b8:d1:1f:30:26:c8:72:50:68:35:48:c6: f0:de:e2:bb:ec:a1:dc:ef:06:f9:2e:5e:7d:1a:98: 65:a9:4c:44:2c:a9:d4:66:38:b7:82:53:7e:48:dc: da:b7:32:21:b7:a4:86:5d:0f:23:fb:dd:a6:b5:b8: e2:99:2d:60:e0:18:75:49:60:0e:ed:dc:a3:25:51: 63:94:c6:b4:94:d6:3c:1b:fd:f4:29:6b:91:0f:40: 14:15:27:6a:a2:29:72:b8:26:7c:06:ce:87:c0:95: 01:fb:96:65:f1:41:da:8d:78:b2:bf:ab:53:39:a0: 38:55:84:41:cd:12:bb:ae:0c:9c:46:85:ce:53:c0: 2b:d2:39:20:df:3c:1c:af:12:fe:ea:dc:cf:20:23: 7d:01:9d:42:a1:32:38:5c:56:29:a6:43:43:04:e1: ad:b7:7e:f3:13:1e:85:e9:34:42:49:00:ac:9b:0c: 3f:ec:bd:9d:80:54:e3:dc:e6:11:72:84:87:f9:9e: c7:37:2f:75:39:56:b9:bf:b3:9a:f1:1f:58:95:17: c9:93:30:c6:6e:b1:81:95:bf:af:e4:fe:ad:d2:8b: 9a:1a:83:91:56:49:72:8c:86:c4:42:4b:47:18:25: 17:13:4f:d9:1e:8d:3f:a6:8c:11:5c:36:63:83:b6: f1:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:81:41:0B:AF:D9:BA:0B:23:C2:C2:5F:17:EC:FD:1E:05:9D:AE:77 X509v3 Authority Key Identifier: keyid:EF:4A:2E:C5:53:79:CA:2F:E3:A7:D2:4D:D2:C2:85:E8:BF:3A:39:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:69:de:8c:5d:07:db:17:77:55:b8:cc:65:59:d8:d8:95:f5: d1:4e:27:8d:3e:ed:e7:44:b0:78:19:26:75:a3:ac:9e:37:50: 82:ba:dc:36:92:7b:42:8a:a7:45:26:2c:21:1a:58:dc:73:42: a0:29:6b:2c:ab:11:f7:11:2e:e9:ff:cc:6f:e5:20:c4:f0:74: 14:17:46:1a:15:9b:90:32:2f:d1:5f:50:52:91:4e:49:e4:da: 3a:18:7a:ae:79:99:06:f1:a7:79:ad:c8:3b:40:52:54:e4:9b: b6:89:81:2a:14:fa:df:24:a4:7a:cc:08:e8:e5:31:5a:09:27: c9:04:cc:ff:9b:1d:44:f3:8a:17:36:8a:2b:f3:a5:d5:d2:a8: 98:11:d8:30:6c:9c:dc:12:fe:92:ce:06:e4:1a:77:5e:5c:d8: ae:4c:0c:30:81:34:27:21:fd:e2:a1:01:6a:8f:7e:5d:c7:95: b2:88:76:3b:45:cb:5c:63:0c:35:f2:a1:fc:68:8f:fe:86:5b: a6:ce:97:a1:d8:12:05:d8:11:b1:45:a6:6b:0a:b5:cf:f1:88: c0:3a:92:ff:d5:91:dc:6a:2a:23:e4:e8:d8:c3:52:40:ff:9d: 54:14:8d:74:4d:08:f0:ab:64:2d:50:34:f0:b9:06:6f:ed:f3: a4:b8:dd:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNIC/KrYg+FUEpzLDQYm7cusV+wYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUY0QTJFQzU1Mzc5Q0EyRkUzQTdEMjRERDJDMjg1RThC RjNBMzlGQzAeFw0yNjA5MjMxODEzNDFaFw0yNjA5MjQxOTU3NDFaMDMxMTAvBgNV BAMTKEQxODE0MTBCQUZEOUJBMEIyM0MyQzI1RjE3RUNGRDFFMDU5REFFNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjO7jRHzAmyHJQaDVIxvDe4rvs odzvBvkuXn0amGWpTEQsqdRmOLeCU35I3Nq3MiG3pIZdDyP73aa1uOKZLWDgGHVJ YA7t3KMlUWOUxrSU1jwb/fQpa5EPQBQVJ2qiKXK4JnwGzofAlQH7lmXxQdqNeLK/ q1M5oDhVhEHNEruuDJxGhc5TwCvSOSDfPByvEv7q3M8gI30BnUKhMjhcVimmQ0ME 4a23fvMTHoXpNEJJAKybDD/svZ2AVOPc5hFyhIf5nsc3L3U5Vrm/s5rxH1iVF8mT MMZusYGVv6/k/q3Si5oag5FWSXKMhsRCS0cYJRcTT9kejT+mjBFcNmODtvFlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0YFBC6/ZugsjwsJfF+z9HgWdrncwHwYDVR0j BBgwFoAU70ouxVN5yi/jp9JN0sKF6L86OfwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2FmY2JmYmItYmEzZi00ZDUzLWEwNGYtMTRkNmY0YmUwY2IxLzEvRUY0QTJFQzU1 Mzc5Q0EyRkUzQTdEMjRERDJDMjg1RThCRjNBMzlGQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRjRBMkVDNTUzNzlDQTJGRTNBN0QyNEREMkMyODVFOEJGM0Ez OUZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2FmY2JmYmItYmEzZi00ZDUzLWEw NGYtMTRkNmY0YmUwY2IxLzEvRUY0QTJFQzU1Mzc5Q0EyRkUzQTdEMjRERDJDMjg1 RThCRjNBMzlGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABBp3oxdB9sXd1W4zGVZ2NiV9dFOJ40+7edE sHgZJnWjrJ43UIK63DaSe0KKp0UmLCEaWNxzQqApayyrEfcRLun/zG/lIMTwdBQX RhoVm5AyL9FfUFKRTknk2joYeq55mQbxp3mtyDtAUlTkm7aJgSoU+t8kpHrMCOjl MVoJJ8kEzP+bHUTzihc2iivzpdXSqJgR2DBsnNwS/pLOBuQad15c2K5MDDCBNCch /eKhAWqPfl3HlbKIdjtFy1xjDDXyofxoj/6GW6bOl6HYEgXYEbFFpmsKtc/xiMA6 kv/VkdxqKiPk6NjDUkD/nVQUjXRNCPCrZC1QNPC5Bm/t86S43dg= -----END CERTIFICATE-----Generated at Thu Sep 24 08:36:40 2026 by rpki-client