$ rpki-client -vvf repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.mft File: EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.mft (raw, json) Hash identifier: xOPrS7JwagWQzUB/zkXfYzEKlEPUb7+hM3sCKSSxnlI= Subject key identifier: AE:62:58:80:58:24:59:1E:88:FD:61:2B:33:BD:1A:DB:00:FD:E7:65 Authority key identifier: EF:D2:09:19:B9:6F:4E:34:FA:9E:4A:0C:CC:23:47:A4:BC:D9:EA:26 Certificate issuer: /CN=EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26 Certificate serial: 5B3B079450B8E389D57D4A4DE27E60F6E8964F2E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.mft Manifest number: 022B Signing time: Fri 17 Apr 2026 03:51:29 +0000 Manifest this update: Fri 17 Apr 2026 03:46:29 +0000 Manifest next update: Mon 20 Apr 2026 13:51:29 +0000 Files and hashes: 1: 3130332e3231392e3131322e302f32342d3234203d3e20313337333432.roa (hash: bSd7lFuLXvK7t89PrxW8ofWlYEOIMss9c7qTJsvJO80=) 2: 323030313a6466323a336130303a3a2f34382d3438203d3e20313337333432.roa (hash: Sh/ySovraK/6CDGLCZn+KlD/GjLGpw2SU/yd9xmA9I4=) 3: EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.crl (hash: Q9AH7iGXfOS8Hyp0wK193F/apTnl0N9b+F9ETU/tpAE=) 4: 3130332e3131332e332e302f32342d3234203d3e20313337333432.roa (hash: a5r+evyHi4RcP5APmnZM1VFgptF4O6HvhFasr9olIfY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.crl rsync://repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 13:51:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:3b:07:94:50:b8:e3:89:d5:7d:4a:4d:e2:7e:60:f6:e8:96:4f:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26 Validity Not Before: Apr 17 03:46:29 2026 GMT Not After : Apr 20 13:51:29 2026 GMT Subject: CN=AE6258805824591E88FD612B33BD1ADB00FDE765 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:49:20:e4:be:82:61:0f:82:f3:55:e0:97:5b: 68:19:d1:81:12:24:8a:bc:b2:d4:f4:22:fe:39:cb: 91:73:82:e4:c1:33:b9:4e:c2:6a:83:1a:df:97:28: 7a:e2:7d:55:ad:4d:4d:d5:e3:0e:8c:8a:01:35:69: ac:04:da:30:b6:98:df:b3:a7:35:4d:a5:84:1c:58: 32:99:07:07:f6:c4:59:24:ff:6f:41:4d:40:bf:1a: 6e:5d:43:36:34:2f:71:ff:6e:d1:09:a3:28:a8:6b: 63:82:1e:db:75:74:52:64:41:7a:47:e1:27:81:37: c9:2b:d7:81:b1:8c:da:42:72:d1:a9:a5:76:8f:e3: 12:b8:73:69:09:17:10:f4:60:25:df:7c:45:48:81: 0d:22:ae:0c:d2:61:f9:29:f5:f5:01:0d:f1:27:9f: 20:28:53:1d:91:86:b0:38:8d:7b:75:8e:57:2b:ec: 31:50:ff:f4:f2:79:1d:93:66:59:8f:bd:b6:52:87: 46:a2:3d:f3:d4:55:bd:f8:cc:c9:bf:d3:7d:99:2f: c8:ae:57:0f:49:0e:cd:22:b7:97:5d:fe:b9:dc:a8: 0b:d2:af:33:35:a9:a6:17:c2:21:9b:17:bb:e7:38: 72:ec:45:f4:d3:92:8d:00:32:79:56:2e:e7:1e:ad: db:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:62:58:80:58:24:59:1E:88:FD:61:2B:33:BD:1A:DB:00:FD:E7:65 X509v3 Authority Key Identifier: keyid:EF:D2:09:19:B9:6F:4E:34:FA:9E:4A:0C:CC:23:47:A4:BC:D9:EA:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:13:d8:89:c1:f4:71:23:b0:63:5a:04:61:b0:c8:ae:3f:d7: c1:06:a8:7c:07:c2:db:f6:d0:fd:b6:17:a4:b7:f2:29:c0:2e: 72:2b:14:d1:ca:7c:ee:cd:87:8f:d2:02:14:c5:35:40:f6:97: 52:5d:f9:ee:8f:8d:3f:16:e5:20:e1:fa:51:16:fe:9f:e8:ff: 3a:13:ce:d1:ab:c6:f2:00:31:d2:cc:32:94:0b:5f:67:ae:67: 19:b3:02:da:cb:a2:89:3c:d9:b9:a9:d9:c8:91:4d:e0:b7:09: 4e:e0:4d:5c:93:ff:9a:f9:6b:1d:bf:b6:8d:9a:bf:81:49:9c: b9:ae:36:b8:50:cf:3f:3d:97:d2:59:52:0d:eb:10:9a:fc:6f: 4a:91:e6:6a:58:8e:c8:f3:b4:df:44:51:07:d6:c6:f9:0b:73: 49:fc:f2:08:ea:94:34:d3:ba:83:97:bc:97:32:cf:23:8a:4a: 64:4b:54:5f:5b:84:08:33:f6:a1:87:6d:1c:13:f0:a0:8d:80: 62:77:32:79:6c:16:30:4f:f5:6c:02:a0:d6:9d:99:d6:da:6a: 50:2a:2b:87:48:ed:b8:96:b0:25:80:57:7b:44:d3:d4:b9:a0: c7:03:72:15:15:02:d8:51:64:c6:60:4f:01:89:c7:2d:c3:62: dd:75:71:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWzsHlFC444nVfUpN4n5g9uiWTy4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZEMjA5MTlCOTZGNEUzNEZBOUU0QTBDQ0MyMzQ3QTRC Q0Q5RUEyNjAeFw0yNjA0MTcwMzQ2MjlaFw0yNjA0MjAxMzUxMjlaMDMxMTAvBgNV BAMTKEFFNjI1ODgwNTgyNDU5MUU4OEZENjEyQjMzQkQxQURCMDBGREU3NjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnSSDkvoJhD4LzVeCXW2gZ0YES JIq8stT0Iv45y5FzguTBM7lOwmqDGt+XKHrifVWtTU3V4w6MigE1aawE2jC2mN+z pzVNpYQcWDKZBwf2xFkk/29BTUC/Gm5dQzY0L3H/btEJoyioa2OCHtt1dFJkQXpH 4SeBN8kr14GxjNpCctGppXaP4xK4c2kJFxD0YCXffEVIgQ0irgzSYfkp9fUBDfEn nyAoUx2RhrA4jXt1jlcr7DFQ//TyeR2TZlmPvbZSh0aiPfPUVb34zMm/032ZL8iu Vw9JDs0it5dd/rncqAvSrzM1qaYXwiGbF7vnOHLsRfTTko0AMnlWLucerdtrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrmJYgFgkWR6I/WErM70a2wD952UwHwYDVR0j BBgwFoAU79IJGblvTjT6nkoMzCNHpLzZ6iYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MWM0ODc1Ni1iNjYyLTQ2OGEtOTA2ZC02Y2Q0NjFjYjZlNDIvMC9FRkQyMDkxOUI5 NkY0RTM0RkE5RTRBMENDQzIzNDdBNEJDRDlFQTI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUZEMjA5MTlCOTZGNEUzNEZBOUU0QTBDQ0MyMzQ3QTRCQ0Q5 RUEyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTFjNDg3NTYtYjY2Mi00NjhhLTkw NmQtNmNkNDYxY2I2ZTQyLzAvRUZEMjA5MTlCOTZGNEUzNEZBOUU0QTBDQ0MyMzQ3 QTRCQ0Q5RUEyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACYT2InB9HEjsGNaBGGwyK4/18EGqHwHwtv2 0P22F6S38inALnIrFNHKfO7Nh4/SAhTFNUD2l1Jd+e6PjT8W5SDh+lEW/p/o/zoT ztGrxvIAMdLMMpQLX2euZxmzAtrLook82bmp2ciRTeC3CU7gTVyT/5r5ax2/to2a v4FJnLmuNrhQzz89l9JZUg3rEJr8b0qR5mpYjsjztN9EUQfWxvkLc0n88gjqlDTT uoOXvJcyzyOKSmRLVF9bhAgz9qGHbRwT8KCNgGJ3MnlsFjBP9WwCoNadmdbaalAq K4dI7biWsCWAV3tE09S5oMcDchUVAthRZMZgTwGJxy3DYt11cZk= -----END CERTIFICATE-----Generated at Fri Apr 17 16:23:45 2026 by rpki-client