$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6f6440f6-6f5a-4f4b-a597-e74b543e785b/0/EFDB094B3A4BDDFFAE7A31184633B6D14D8E5F5E.mft File: EFDB094B3A4BDDFFAE7A31184633B6D14D8E5F5E.mft (raw, json) Hash identifier: 62HPO4xaQYMGIoow6Qt9SP8Uey2bZrApBcUW5/4G+70= Subject key identifier: DB:6C:B2:C1:84:18:20:7B:10:C4:0E:E3:A5:A5:40:3A:A5:BB:D0:C8 Authority key identifier: EF:DB:09:4B:3A:4B:DD:FF:AE:7A:31:18:46:33:B6:D1:4D:8E:5F:5E Certificate issuer: /CN=EFDB094B3A4BDDFFAE7A31184633B6D14D8E5F5E Certificate serial: 40C0B794E5E35B845C56CC6B8E761E8C420F3589 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFDB094B3A4BDDFFAE7A31184633B6D14D8E5F5E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6f6440f6-6f5a-4f4b-a597-e74b543e785b/0/EFDB094B3A4BDDFFAE7A31184633B6D14D8E5F5E.mft Manifest number: BE Signing time: Mon 21 Sep 2026 00:06:41 +0000 Manifest this update: Mon 21 Sep 2026 00:01:41 +0000 Manifest next update: Tue 22 Sep 2026 00:32:41 +0000 Files and hashes: 1: 3130332e3135332e36322e302f32332d3234203d3e20313430343537.roa (hash: BZhn4U/UvZ5+wud72EXtfRQcfjbr1V+Ji6U8Qf15hk4=) 2: EFDB094B3A4BDDFFAE7A31184633B6D14D8E5F5E.crl (hash: cTmzkpOo6UEOigR5c7Cc11KDXc91nuZG24t3O1ULXhE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6f6440f6-6f5a-4f4b-a597-e74b543e785b/0/EFDB094B3A4BDDFFAE7A31184633B6D14D8E5F5E.crl rsync://rpki-rsync.idnic.net/repo/6f6440f6-6f5a-4f4b-a597-e74b543e785b/0/EFDB094B3A4BDDFFAE7A31184633B6D14D8E5F5E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFDB094B3A4BDDFFAE7A31184633B6D14D8E5F5E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 00:32:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:c0:b7:94:e5:e3:5b:84:5c:56:cc:6b:8e:76:1e:8c:42:0f:35:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFDB094B3A4BDDFFAE7A31184633B6D14D8E5F5E Validity Not Before: Sep 21 00:01:41 2026 GMT Not After : Sep 22 00:32:41 2026 GMT Subject: CN=DB6CB2C18418207B10C40EE3A5A5403AA5BBD0C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:10:65:ee:2b:d2:33:2a:d2:56:7b:9f:37:16: 62:32:d3:24:1b:a4:1a:3f:6c:e6:89:f0:9f:8d:5c: ea:5b:9e:b8:f3:ec:32:18:f4:ed:b9:0a:ce:8a:7a: a6:22:67:1e:d6:3f:2c:02:d3:ca:1c:5f:05:1e:93: fe:d1:62:ed:1a:61:2f:fd:9b:66:eb:df:9f:5d:6f: 9e:24:7f:7a:cb:61:8c:d6:4f:fc:09:2f:00:98:21: d5:d8:ad:cc:81:ec:9f:50:b7:e1:49:93:56:c4:7b: 52:38:44:aa:6e:e2:6c:cc:74:61:38:47:18:6e:77: 18:af:c5:d3:9b:d0:d5:ae:ad:ad:cb:46:5b:ea:b5: ab:90:11:47:d8:6d:d1:1c:9f:2d:98:b9:64:46:ed: 56:9b:65:b1:33:01:e3:06:cd:c5:6f:ab:a0:f3:5d: 5a:20:d3:b0:d7:6b:2f:24:6d:de:ea:a3:a2:67:c8: a9:e4:db:09:3f:a4:d2:25:94:73:de:8a:45:79:c7: 68:1a:df:38:6f:22:7e:a4:dd:34:c1:18:1f:5d:5b: 66:9d:ed:c4:72:fd:84:99:bc:c5:50:ed:a8:59:45: 7e:72:4e:05:84:e2:d4:05:a1:49:d7:e3:17:80:d8: 22:ac:56:05:42:7d:99:45:2d:33:4b:b0:0e:52:8b: b2:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:6C:B2:C1:84:18:20:7B:10:C4:0E:E3:A5:A5:40:3A:A5:BB:D0:C8 X509v3 Authority Key Identifier: keyid:EF:DB:09:4B:3A:4B:DD:FF:AE:7A:31:18:46:33:B6:D1:4D:8E:5F:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6f6440f6-6f5a-4f4b-a597-e74b543e785b/0/EFDB094B3A4BDDFFAE7A31184633B6D14D8E5F5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFDB094B3A4BDDFFAE7A31184633B6D14D8E5F5E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6f6440f6-6f5a-4f4b-a597-e74b543e785b/0/EFDB094B3A4BDDFFAE7A31184633B6D14D8E5F5E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:32:ff:0c:98:0b:6b:76:7d:d4:17:a7:80:ca:b3:2d:77:7d: 07:d0:d5:bc:60:cb:2f:84:9a:48:41:69:96:af:75:4c:a2:d8: 9e:ee:52:6d:da:4b:11:55:35:1f:fa:be:c5:98:ba:15:8d:8e: ee:14:c0:0f:86:11:81:f5:c2:1a:8d:32:1c:72:72:8b:1f:43: a6:00:94:e5:8a:58:ec:90:53:12:aa:f7:8a:ef:1c:01:d1:67: 81:31:ee:12:e9:b9:d0:97:7f:81:5f:6f:16:92:83:d2:96:e5: 92:54:17:64:62:20:5c:d7:07:94:7e:58:c3:0f:05:99:16:1e: 69:67:4a:2b:e8:d9:5d:d7:36:8d:9a:84:39:01:48:87:f9:08: 8e:eb:cc:e0:a3:6d:65:c8:d3:1b:86:16:a2:c7:b6:a3:e4:5f: 6b:e8:f0:b8:c5:5d:29:0b:97:c8:8c:01:bb:27:54:c0:1f:a5: f3:63:09:f7:23:b9:03:14:14:40:54:de:1b:d9:d3:ce:2a:47: 48:a5:1c:67:6f:69:d0:ce:ea:d9:81:ad:e0:ae:a8:8c:d4:7d: 73:4f:b9:6c:dd:c0:10:cc:86:d8:c3:cd:0e:45:a9:8e:3c:2f: 3c:3d:42:0f:b4:bf:2a:a8:92:18:c0:54:d8:a6:26:50:52:61: 07:ef:86:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQMC3lOXjW4RcVsxrjnYejEIPNYkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZEQjA5NEIzQTRCRERGRkFFN0EzMTE4NDYzM0I2RDE0 RDhFNUY1RTAeFw0yNjA5MjEwMDAxNDFaFw0yNjA5MjIwMDMyNDFaMDMxMTAvBgNV BAMTKERCNkNCMkMxODQxODIwN0IxMEM0MEVFM0E1QTU0MDNBQTVCQkQwQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuEGXuK9IzKtJWe583FmIy0yQb pBo/bOaJ8J+NXOpbnrjz7DIY9O25Cs6KeqYiZx7WPywC08ocXwUek/7RYu0aYS/9 m2br359db54kf3rLYYzWT/wJLwCYIdXYrcyB7J9Qt+FJk1bEe1I4RKpu4mzMdGE4 RxhudxivxdOb0NWura3LRlvqtauQEUfYbdEcny2YuWRG7VabZbEzAeMGzcVvq6Dz XVog07DXay8kbd7qo6JnyKnk2wk/pNIllHPeikV5x2ga3zhvIn6k3TTBGB9dW2ad 7cRy/YSZvMVQ7ahZRX5yTgWE4tQFoUnX4xeA2CKsVgVCfZlFLTNLsA5Si7LvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU22yywYQYIHsQxA7jpaVAOqW70MgwHwYDVR0j BBgwFoAU79sJSzpL3f+uejEYRjO20U2OX14wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmY2NDQwZjYtNmY1YS00ZjRiLWE1OTctZTc0YjU0M2U3ODViLzAvRUZEQjA5NEIz QTRCRERGRkFFN0EzMTE4NDYzM0I2RDE0RDhFNUY1RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRkRCMDk0QjNBNEJEREZGQUU3QTMxMTg0NjMzQjZEMTREOEU1 RjVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmY2NDQwZjYtNmY1YS00ZjRiLWE1 OTctZTc0YjU0M2U3ODViLzAvRUZEQjA5NEIzQTRCRERGRkFFN0EzMTE4NDYzM0I2 RDE0RDhFNUY1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEQy/wyYC2t2fdQXp4DKsy13fQfQ1bxgyy+E mkhBaZavdUyi2J7uUm3aSxFVNR/6vsWYuhWNju4UwA+GEYH1whqNMhxycosfQ6YA lOWKWOyQUxKq94rvHAHRZ4Ex7hLpudCXf4FfbxaSg9KW5ZJUF2RiIFzXB5R+WMMP BZkWHmlnSivo2V3XNo2ahDkBSIf5CI7rzOCjbWXI0xuGFqLHtqPkX2vo8LjFXSkL l8iMAbsnVMAfpfNjCfcjuQMUFEBU3hvZ084qR0ilHGdvadDO6tmBreCuqIzUfXNP uWzdwBDMhtjDzQ5FqY48Lzw9Qg+0vyqokhjAVNimJlBSYQfvhrs= -----END CERTIFICATE-----Generated at Mon Sep 21 16:43:18 2026 by rpki-client