$ rpki-client -vvf repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.mft File: EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.mft (raw, json) Hash identifier: jBxFUoDuHm914My/MDWJLoBDOh/s59tkcza485toIP8= Subject key identifier: 9A:05:A9:62:30:A5:D0:2F:CD:B7:C7:3C:F8:56:51:3A:89:93:B7:27 Authority key identifier: EF:D2:09:19:B9:6F:4E:34:FA:9E:4A:0C:CC:23:47:A4:BC:D9:EA:26 Certificate issuer: /CN=EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26 Certificate serial: 5CD26900E52D462B9607F59FBEAACF495CD38164 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.mft Manifest number: 0216 Signing time: Sun 01 Mar 2026 20:31:29 +0000 Manifest this update: Sun 01 Mar 2026 20:26:29 +0000 Manifest next update: Thu 05 Mar 2026 06:39:29 +0000 Files and hashes: 1: 323030313a6466323a336130303a3a2f34382d3438203d3e20313337333432.roa (hash: ksIEFNaSzeLI+q7xZzyqipfYLMI/o1zxI631Se0BC2U=) 2: 3130332e3231392e3131322e302f32342d3234203d3e20313337333432.roa (hash: bSd7lFuLXvK7t89PrxW8ofWlYEOIMss9c7qTJsvJO80=) 3: EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.crl (hash: kqTy/QyM1SLN+iSWq8+SSpDjGbckfjlTJ2byRmnPysc=) 4: 3130332e3131332e332e302f32342d3234203d3e20313337333432.roa (hash: a5r+evyHi4RcP5APmnZM1VFgptF4O6HvhFasr9olIfY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.crl rsync://repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:d2:69:00:e5:2d:46:2b:96:07:f5:9f:be:aa:cf:49:5c:d3:81:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26 Validity Not Before: Mar 1 20:26:29 2026 GMT Not After : Mar 5 06:39:29 2026 GMT Subject: CN=9A05A96230A5D02FCDB7C73CF856513A8993B727 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:09:48:93:c9:c3:ab:51:dd:75:30:fe:89:d0: a1:b5:8a:93:4f:71:a1:97:b5:cc:b9:6a:bf:27:5b: 2e:30:82:2f:f2:92:3f:c4:95:26:f8:8e:2a:da:e6: 41:33:1d:0e:60:c3:86:f7:86:01:11:18:a4:0e:74: fb:33:b8:f9:73:ec:f6:21:78:d5:ef:5e:80:5a:af: e7:25:fa:e5:9f:5c:1f:71:ec:2c:69:45:ef:41:64: 5a:9c:ca:a7:42:ff:85:77:a7:91:b8:18:e6:bf:55: 6e:5e:f7:6d:91:0f:3e:c0:c0:35:5e:c2:48:c6:70: 7b:5d:61:f8:91:68:8b:54:89:08:a2:72:3a:ce:20: fe:da:1b:d2:df:34:08:fa:4d:00:81:c5:3e:44:42: 6a:fa:4f:f1:01:e2:7a:2c:bc:ce:4b:24:02:e4:ff: af:21:ec:d1:e0:66:36:94:73:a8:21:7a:5c:2b:3a: 87:21:fe:24:34:be:a6:51:8a:c2:cd:38:5f:40:bc: 0e:bd:90:9a:db:7a:23:02:fb:58:84:a3:10:60:b6: de:a0:84:39:d6:92:83:fc:48:cb:61:69:25:56:02: a1:57:99:b7:b5:d6:75:82:75:cf:f5:59:d1:82:56: a7:63:aa:f1:db:98:b5:fd:e8:6b:98:ff:a3:fd:83: e3:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:05:A9:62:30:A5:D0:2F:CD:B7:C7:3C:F8:56:51:3A:89:93:B7:27 X509v3 Authority Key Identifier: keyid:EF:D2:09:19:B9:6F:4E:34:FA:9E:4A:0C:CC:23:47:A4:BC:D9:EA:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:cf:5c:45:9e:d5:50:6d:3f:6e:27:3e:96:f0:90:bb:a1:e3: ad:10:0e:67:22:d5:09:57:3c:bd:96:36:b8:45:6b:41:08:39: 1c:42:52:fa:26:6f:97:8c:af:6e:09:6a:cd:cb:02:1b:45:b8: 3c:6d:09:47:dd:e8:5e:c7:06:d0:69:b8:eb:b3:5f:56:f7:f6: 3f:c7:ed:28:75:e7:1b:28:c9:ad:1f:93:76:8f:c2:ba:8a:0c: 6f:1c:f6:2d:07:12:c1:de:5c:61:6b:ee:0b:c5:95:30:4e:44: cc:7c:39:58:a0:22:52:fd:d7:9c:24:43:d7:42:95:b3:87:ee: 57:ab:81:98:f1:c9:21:75:38:7a:65:f9:82:74:72:57:36:c3: 1e:86:6b:f7:8b:9a:2a:a5:26:5f:e2:c5:d6:26:65:8b:ab:a8: dd:aa:c6:19:05:e0:ae:3e:b9:af:24:d9:8b:db:e2:6a:17:41: 31:1a:c2:fd:43:ea:73:4e:cd:0b:0e:a1:16:5b:d5:9d:7b:52: ca:a4:71:08:85:86:02:29:44:63:a2:95:7e:8d:2e:9d:aa:78: 16:9a:c7:2c:89:63:7b:bd:5d:2c:c3:07:ff:10:4a:a5:61:74: 61:3c:67:81:61:94:7b:8d:3e:bf:07:4c:b9:fc:63:58:ad:6b: 15:71:9b:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXNJpAOUtRiuWB/WfvqrPSVzTgWQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZEMjA5MTlCOTZGNEUzNEZBOUU0QTBDQ0MyMzQ3QTRC Q0Q5RUEyNjAeFw0yNjAzMDEyMDI2MjlaFw0yNjAzMDUwNjM5MjlaMDMxMTAvBgNV BAMTKDlBMDVBOTYyMzBBNUQwMkZDREI3QzczQ0Y4NTY1MTNBODk5M0I3MjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSCUiTycOrUd11MP6J0KG1ipNP caGXtcy5ar8nWy4wgi/ykj/ElSb4jira5kEzHQ5gw4b3hgERGKQOdPszuPlz7PYh eNXvXoBar+cl+uWfXB9x7CxpRe9BZFqcyqdC/4V3p5G4GOa/VW5e922RDz7AwDVe wkjGcHtdYfiRaItUiQiicjrOIP7aG9LfNAj6TQCBxT5EQmr6T/EB4nosvM5LJALk /68h7NHgZjaUc6ghelwrOoch/iQ0vqZRisLNOF9AvA69kJrbeiMC+1iEoxBgtt6g hDnWkoP8SMthaSVWAqFXmbe11nWCdc/1WdGCVqdjqvHbmLX96GuY/6P9g+N5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmgWpYjCl0C/Nt8c8+FZROomTtycwHwYDVR0j BBgwFoAU79IJGblvTjT6nkoMzCNHpLzZ6iYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MWM0ODc1Ni1iNjYyLTQ2OGEtOTA2ZC02Y2Q0NjFjYjZlNDIvMC9FRkQyMDkxOUI5 NkY0RTM0RkE5RTRBMENDQzIzNDdBNEJDRDlFQTI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUZEMjA5MTlCOTZGNEUzNEZBOUU0QTBDQ0MyMzQ3QTRCQ0Q5 RUEyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTFjNDg3NTYtYjY2Mi00NjhhLTkw NmQtNmNkNDYxY2I2ZTQyLzAvRUZEMjA5MTlCOTZGNEUzNEZBOUU0QTBDQ0MyMzQ3 QTRCQ0Q5RUEyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACDPXEWe1VBtP24nPpbwkLuh460QDmci1QlX PL2WNrhFa0EIORxCUvomb5eMr24Jas3LAhtFuDxtCUfd6F7HBtBpuOuzX1b39j/H 7Sh15xsoya0fk3aPwrqKDG8c9i0HEsHeXGFr7gvFlTBORMx8OVigIlL915wkQ9dC lbOH7lergZjxySF1OHpl+YJ0clc2wx6Ga/eLmiqlJl/ixdYmZYurqN2qxhkF4K4+ ua8k2Yvb4moXQTEawv1D6nNOzQsOoRZb1Z17UsqkcQiFhgIpRGOilX6NLp2qeBaa xyyJY3u9XSzDB/8QSqVhdGE8Z4FhlHuNPr8HTLn8Y1itaxVxm/8= -----END CERTIFICATE-----Generated at Mon Mar 2 11:39:35 2026 by rpki-client