$ rpki-client -vvvf rpki-rsync.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7.mft File: EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7.mft (raw, json) Hash identifier: UnX63rz1pvWxAR+6jZFBylPWxkX6i0H4Tt/wvjuYikg= Subject key identifier: BB:7A:75:0F:7D:A8:88:C8:F8:6C:20:79:0B:3A:20:FF:FC:C8:93:41 Authority key identifier: EF:FE:71:94:4C:D7:DF:CA:7F:BD:C6:EF:06:3C:9A:6D:28:BB:47:E7 Certificate issuer: /CN=EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7 Certificate serial: 5A421093644F8E9261953DC3A2A7EDCCB68B4984 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7.mft Manifest number: BC Signing time: Sun 20 Sep 2026 08:32:35 +0000 Manifest this update: Sun 20 Sep 2026 08:27:35 +0000 Manifest next update: Mon 21 Sep 2026 11:54:35 +0000 Files and hashes: 1: 323030313a6466323a313238303a3a2f34382d3438203d3e20313339343437.roa (hash: Z33O96f3Xi269FHR6g3ynqUeqpUoR3vjVRTvXK+PrwU=) 2: 3130332e3134352e3132352e302f32342d3234203d3e20313339343437.roa (hash: iAkXuDNDYQX7aJrJUqwReqIZ7fKNDXS9mw/520ZULDA=) 3: EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7.crl (hash: 0xCUsXZK8vCyPx4qBF6kE4KaQhtfkq0m3X42Kv5tf84=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7.crl rsync://rpki-rsync.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 11:54:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:42:10:93:64:4f:8e:92:61:95:3d:c3:a2:a7:ed:cc:b6:8b:49:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7 Validity Not Before: Sep 20 08:27:35 2026 GMT Not After : Sep 21 11:54:35 2026 GMT Subject: CN=BB7A750F7DA888C8F86C20790B3A20FFFCC89341 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1e:73:f0:13:9c:ab:f7:f9:2e:2f:40:be:5d: 74:6e:fb:7f:a8:4d:df:d9:fd:75:b6:20:0d:13:63: 47:54:2e:41:29:e4:93:b3:f9:f9:82:d9:c0:e6:64: 91:5b:1c:c6:89:51:aa:43:9f:59:b1:68:58:c9:bd: e6:b7:2a:a8:3b:ef:c7:3d:92:8d:7e:78:1a:17:16: 81:bc:c3:81:16:af:0e:6a:5e:ee:38:c3:73:f5:31: 90:da:9e:1f:89:67:8d:cb:f4:6e:8b:37:0a:c6:f0: 8c:d7:32:fe:00:6e:85:46:68:e1:35:52:d6:90:f0: 64:da:5d:8f:63:32:eb:35:df:5d:02:d0:c5:1d:83: bc:d3:eb:e5:ad:cf:6e:82:90:79:06:6d:df:a0:c3: 05:03:b6:a3:95:38:13:f1:84:a4:1b:e5:4b:08:a2: be:04:f7:e0:ed:45:ff:90:08:7d:bd:3c:1d:31:ef: e2:65:ad:40:3f:21:ed:e1:a9:f8:1a:b6:b7:ac:11: 79:39:54:c6:8b:94:5a:4a:30:a3:ba:7a:33:98:73: d0:3a:1e:93:c3:bb:fe:c1:63:34:97:dc:37:de:61: 2c:e8:e3:2f:cf:2f:fe:7f:a6:92:cc:dc:01:52:da: 12:e8:1b:8b:68:50:87:c3:f6:d3:52:00:f8:26:8c: 0f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:7A:75:0F:7D:A8:88:C8:F8:6C:20:79:0B:3A:20:FF:FC:C8:93:41 X509v3 Authority Key Identifier: keyid:EF:FE:71:94:4C:D7:DF:CA:7F:BD:C6:EF:06:3C:9A:6D:28:BB:47:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:aa:27:3d:aa:27:99:ca:c2:5a:22:3d:9a:de:ec:df:d6:de: 88:bb:0c:fc:cb:d5:a1:cf:8c:8b:6d:e6:82:35:7d:6a:e5:a8: f0:e9:82:03:6d:f0:b7:d2:64:08:59:53:d3:99:ee:a9:7c:2d: ac:13:67:e0:65:74:d4:08:08:e1:ff:ff:90:82:54:c1:ac:0f: 09:30:be:73:67:9d:cd:8d:3b:42:64:37:a2:b0:f0:32:f6:d2: 8c:ab:a7:15:2d:d2:89:37:93:0b:5a:b5:7b:ec:6f:33:55:91: 9c:2c:b5:12:6e:34:d4:4e:d7:16:66:51:bd:cb:77:f5:b2:9c: 54:78:43:fa:8b:26:b0:ba:1e:54:af:e2:3f:db:ed:ca:b6:bd: ce:f2:dd:9e:61:d9:53:e0:36:90:9e:f4:e6:41:ab:cb:9e:0b: b8:6a:d5:47:d9:e1:72:e6:59:c4:3c:3b:28:c6:f1:cf:09:45: b7:21:43:a8:66:4e:c7:29:03:42:b6:3e:b1:48:3a:75:89:e2: c4:08:d0:06:6a:6b:cb:d3:e6:ec:ca:4b:d3:36:fd:06:72:64: 3b:ed:4b:97:cd:1e:6c:c8:56:8b:a0:ff:5b:83:99:7b:3b:e0: 76:d3:70:7c:6c:24:ea:16:c4:20:6a:ea:1f:b6:4f:88:60:00: 70:2b:79:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWkIQk2RPjpJhlT3DoqftzLaLSYQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZGRTcxOTQ0Q0Q3REZDQTdGQkRDNkVGMDYzQzlBNkQy OEJCNDdFNzAeFw0yNjA5MjAwODI3MzVaFw0yNjA5MjExMTU0MzVaMDMxMTAvBgNV BAMTKEJCN0E3NTBGN0RBODg4QzhGODZDMjA3OTBCM0EyMEZGRkNDODkzNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCHnPwE5yr9/kuL0C+XXRu+3+o Td/Z/XW2IA0TY0dULkEp5JOz+fmC2cDmZJFbHMaJUapDn1mxaFjJvea3Kqg778c9 ko1+eBoXFoG8w4EWrw5qXu44w3P1MZDanh+JZ43L9G6LNwrG8IzXMv4AboVGaOE1 UtaQ8GTaXY9jMus1310C0MUdg7zT6+Wtz26CkHkGbd+gwwUDtqOVOBPxhKQb5UsI or4E9+DtRf+QCH29PB0x7+JlrUA/Ie3hqfgatresEXk5VMaLlFpKMKO6ejOYc9A6 HpPDu/7BYzSX3DfeYSzo4y/PL/5/ppLM3AFS2hLoG4toUIfD9tNSAPgmjA9bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUu3p1D32oiMj4bCB5Czog//zIk0EwHwYDVR0j BBgwFoAU7/5xlEzX38p/vcbvBjyabSi7R+cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDU3ZDRkODEtM2JlOC00MjMwLTg5NTktMmRjMmFmOWQwODVlLzAvRUZGRTcxOTQ0 Q0Q3REZDQTdGQkRDNkVGMDYzQzlBNkQyOEJCNDdFNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRkZFNzE5NDRDRDdERkNBN0ZCREM2RUYwNjNDOUE2RDI4QkI0 N0U3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDU3ZDRkODEtM2JlOC00MjMwLTg5 NTktMmRjMmFmOWQwODVlLzAvRUZGRTcxOTQ0Q0Q3REZDQTdGQkRDNkVGMDYzQzlB NkQyOEJCNDdFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ6qJz2qJ5nKwloiPZre7N/W3oi7DPzL1aHP jItt5oI1fWrlqPDpggNt8LfSZAhZU9OZ7ql8LawTZ+BldNQICOH//5CCVMGsDwkw vnNnnc2NO0JkN6Kw8DL20oyrpxUt0ok3kwtatXvsbzNVkZwstRJuNNRO1xZmUb3L d/WynFR4Q/qLJrC6HlSv4j/b7cq2vc7y3Z5h2VPgNpCe9OZBq8ueC7hq1UfZ4XLm WcQ8OyjG8c8JRbchQ6hmTscpA0K2PrFIOnWJ4sQI0AZqa8vT5uzKS9M2/QZyZDvt S5fNHmzIVoug/1uDmXs74HbTcHxsJOoWxCBq6h+2T4hgAHAreRg= -----END CERTIFICATE-----Generated at Sun Sep 20 19:12:06 2026 by rpki-client