$ rpki-client -vvf repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.mft File: EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.mft (raw, json) Hash identifier: 8RS6luezIqniAeG5k/givwZv4IpiSm+iCLHyDwHOZb4= Subject key identifier: 7F:BF:E5:18:FB:26:E2:90:93:13:B2:A1:0E:04:2E:BE:5C:B1:67:A2 Authority key identifier: EF:AF:3D:BC:84:57:8E:58:6E:A4:A0:4F:C3:5E:6A:46:FA:0E:28:EA Certificate issuer: /CN=EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA Certificate serial: 318082367FF9AC44ED7A5E803CC77DD4743576F1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.mft Manifest number: 0127 Signing time: Sat 28 Feb 2026 14:11:35 +0000 Manifest this update: Sat 28 Feb 2026 14:06:35 +0000 Manifest next update: Tue 03 Mar 2026 15:01:35 +0000 Files and hashes: 1: EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.crl (hash: 1NfydlOWiVvRayDIe2sQxjb7kTRgi06HWrZ9G//CgIE=) 2: 3135372e36362e33362e302f32342d3234203d3e20313430303136.roa (hash: zDfqmAp3VO5lL/pBx5N4cR8KEoRuNAmls9zWuktjlvE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.crl rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 15:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:80:82:36:7f:f9:ac:44:ed:7a:5e:80:3c:c7:7d:d4:74:35:76:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA Validity Not Before: Feb 28 14:06:35 2026 GMT Not After : Mar 3 15:01:35 2026 GMT Subject: CN=7FBFE518FB26E2909313B2A10E042EBE5CB167A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6f:86:7a:cb:be:87:9c:34:0e:36:fa:30:ea: a1:f8:79:3f:e0:84:bf:58:0a:19:4b:82:b0:d6:ab: 60:32:b5:18:6f:b2:37:99:39:39:c8:44:b9:f0:09: 16:54:fc:3d:72:2f:e2:47:bc:20:7b:59:db:02:c8: f9:67:95:e3:cd:95:05:69:e7:f4:2c:18:34:1b:2d: 47:29:a4:b1:5d:0a:32:92:24:4a:dd:e8:f7:34:ff: 68:e4:59:cf:88:d6:64:d3:74:16:2b:3d:75:c6:e2: ae:00:e7:82:d9:f2:0b:87:aa:51:bc:ae:94:cf:c3: 25:6e:47:8c:a3:49:ed:ce:2f:60:f6:ee:51:94:33: 1d:c8:22:dd:88:be:ef:3a:9a:01:c3:72:21:34:e6: 9a:f7:8f:0d:9d:57:4a:55:a4:e3:63:65:cb:1a:bf: 81:cc:8e:78:9f:32:43:6d:83:e0:a6:d9:e5:a6:d6: 3d:bf:e4:85:16:3a:71:cd:cd:e3:e2:48:f7:15:92: b5:7d:2a:40:a1:2b:30:5b:02:36:db:85:7c:c1:43: b9:61:0f:ea:91:a7:f6:03:b3:0a:5a:d6:33:c3:d8: c1:e5:e9:a1:65:26:ab:bb:72:eb:62:b1:26:84:1d: 16:da:e5:c4:4b:43:88:3b:15:42:d3:6d:0e:b0:96: 73:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:BF:E5:18:FB:26:E2:90:93:13:B2:A1:0E:04:2E:BE:5C:B1:67:A2 X509v3 Authority Key Identifier: keyid:EF:AF:3D:BC:84:57:8E:58:6E:A4:A0:4F:C3:5E:6A:46:FA:0E:28:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:9e:57:8f:56:29:aa:7e:4f:00:bd:8a:9a:a2:26:9d:4f:12: a4:f4:1a:cf:2d:30:55:57:bd:92:54:2e:05:6b:5a:e7:31:d5: b2:c1:b4:e5:5c:6a:b3:18:64:48:60:b5:66:25:ac:47:30:b2: 54:c2:0e:66:c2:98:88:9a:b2:26:7d:4b:20:f9:ec:cb:17:69: 07:ff:9b:86:b5:2e:ac:d5:34:64:07:0f:91:0d:0a:f6:21:ff: 00:37:35:93:85:48:51:bb:e4:3f:78:51:9b:2c:b9:54:ec:b5: 36:8b:bf:fd:0b:b8:7d:b3:c1:41:e0:f9:5b:c8:4a:2a:3a:9c: 43:cf:e9:3c:c0:c0:6d:ec:6d:6f:3f:96:16:de:23:24:98:fa: 16:8d:b4:40:d3:89:b1:90:7f:39:45:70:2a:d3:36:90:78:62: 6b:d3:43:e1:e6:03:8e:8f:f8:b7:c6:0a:2c:94:45:55:51:0f: a8:f1:2a:fe:a3:b2:33:54:e7:f2:2f:2f:3e:31:e3:a2:65:70: 68:84:6f:50:03:00:98:8f:58:28:08:11:36:e3:bd:fe:32:ef: 9b:b5:cb:8a:f2:75:9f:9c:ce:f6:a9:6d:02:f6:7b:f8:58:9a: d6:f4:48:af:11:4e:a3:dd:4a:c2:71:39:4a:69:96:34:ee:8d: 93:92:69:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMYCCNn/5rETtel6APMd91HQ1dvEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZBRjNEQkM4NDU3OEU1ODZFQTRBMDRGQzM1RTZBNDZG QTBFMjhFQTAeFw0yNjAyMjgxNDA2MzVaFw0yNjAzMDMxNTAxMzVaMDMxMTAvBgNV BAMTKDdGQkZFNTE4RkIyNkUyOTA5MzEzQjJBMTBFMDQyRUJFNUNCMTY3QTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpb4Z6y76HnDQONvow6qH4eT/g hL9YChlLgrDWq2AytRhvsjeZOTnIRLnwCRZU/D1yL+JHvCB7WdsCyPlnlePNlQVp 5/QsGDQbLUcppLFdCjKSJErd6Pc0/2jkWc+I1mTTdBYrPXXG4q4A54LZ8guHqlG8 rpTPwyVuR4yjSe3OL2D27lGUMx3IIt2Ivu86mgHDciE05pr3jw2dV0pVpONjZcsa v4HMjnifMkNtg+Cm2eWm1j2/5IUWOnHNzePiSPcVkrV9KkChKzBbAjbbhXzBQ7lh D+qRp/YDswpa1jPD2MHl6aFlJqu7cutisSaEHRba5cRLQ4g7FULTbQ6wlnMXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUf7/lGPsm4pCTE7KhDgQuvlyxZ6IwHwYDVR0j BBgwFoAU7689vIRXjlhupKBPw15qRvoOKOowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZjllMWE4YS0zOWYxLTRmZTItODMyYS1iYjJmMjA5MmZiZjYvMC9FRkFGM0RCQzg0 NTc4RTU4NkVBNEEwNEZDMzVFNkE0NkZBMEUyOEVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRUZBRjNEQkM4NDU3OEU1ODZFQTRBMDRGQzM1RTZBNDZGQTBF MjhFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWY5ZTFhOGEtMzlmMS00ZmUyLTgz MmEtYmIyZjIwOTJmYmY2LzAvRUZBRjNEQkM4NDU3OEU1ODZFQTRBMDRGQzM1RTZB NDZGQTBFMjhFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA+eV49WKap+TwC9ipqiJp1PEqT0Gs8tMFVX vZJULgVrWucx1bLBtOVcarMYZEhgtWYlrEcwslTCDmbCmIiasiZ9SyD57MsXaQf/ m4a1LqzVNGQHD5ENCvYh/wA3NZOFSFG75D94UZssuVTstTaLv/0LuH2zwUHg+VvI Sio6nEPP6TzAwG3sbW8/lhbeIySY+haNtEDTibGQfzlFcCrTNpB4YmvTQ+HmA46P +LfGCiyURVVRD6jxKv6jsjNU5/IvLz4x46JlcGiEb1ADAJiPWCgIETbjvf4y75u1 y4rydZ+czvapbQL2e/hYmtb0SK8RTqPdSsJxOUppljTujZOSaRw= -----END CERTIFICATE-----Generated at Mon Mar 2 15:09:19 2026 by rpki-client