$ rpki-client -vvvf rpki-rsync.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/EFA0A80DF71CA377A289711EA4310F3117358BDA.mft File: EFA0A80DF71CA377A289711EA4310F3117358BDA.mft (raw, json) Hash identifier: sCUtkVWICv1+SQ7kJHwdAoP86Fqz8TmGNy99YKOJIgo= Subject key identifier: 91:65:08:56:A2:AD:99:AF:A8:37:05:11:D2:53:D2:BC:EA:69:10:18 Authority key identifier: EF:A0:A8:0D:F7:1C:A3:77:A2:89:71:1E:A4:31:0F:31:17:35:8B:DA Certificate issuer: /CN=EFA0A80DF71CA377A289711EA4310F3117358BDA Certificate serial: 27049163F925910FC1B9C2AF9F4DD4D5547D8ECA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFA0A80DF71CA377A289711EA4310F3117358BDA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/EFA0A80DF71CA377A289711EA4310F3117358BDA.mft Manifest number: BF Signing time: Sun 20 Sep 2026 13:38:52 +0000 Manifest this update: Sun 20 Sep 2026 13:33:52 +0000 Manifest next update: Mon 21 Sep 2026 15:49:52 +0000 Files and hashes: 1: 3131392e3233352e31362e302f32302d3234203d3e203234353332.roa (hash: a1jLyYlI+XXOuvRXX5wEn6MAtEMedfGoxkqMvx1OXCk=) 2: EFA0A80DF71CA377A289711EA4310F3117358BDA.crl (hash: TpRWT6CLnYSdVlOVpiZAfD6WXo+1fCgIbk/2S14sq8E=) 3: 32372e3131312e33322e302f31392d3234203d3e203234353332.roa (hash: Fx9bLePWZd911ErojerGEpVTnf/DxfdXCAQiFRWGMk8=) 4: 32372e3131312e33342e302f32342d3234203d3e203538343737.roa (hash: 1YWuY5HZqKiBZs805+vyXQB+d7lVGfJWx9YMEkEgtvQ=) 5: 323430333a326530303a3a2f33322d3438203d3e203234353332.roa (hash: 9DAVKa81esoccLZerAJimBEYho7HzR8tvV6sLPxdUYg=) 6: 3230322e3132392e3138342e302f32322d3234203d3e203234353332.roa (hash: CBM38ddIBA7ErC9KFszGB+2Go/rfydEsEM3u2nPHmFA=) 7: 3130332e3234352e3138302e302f32322d3234203d3e203234353332.roa (hash: HsO0FzJAWLg2u6DKU2yDy0xpq+6RbfKYVFKlBWZw79M=) 8: 34332e3232392e3230342e302f32322d3234203d3e203234353332.roa (hash: BwtyTC6qI4XC3HBbimySaUxc14wJ6nXjYuM/+KpzQMU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/EFA0A80DF71CA377A289711EA4310F3117358BDA.crl rsync://rpki-rsync.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/EFA0A80DF71CA377A289711EA4310F3117358BDA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFA0A80DF71CA377A289711EA4310F3117358BDA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 15:49:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:04:91:63:f9:25:91:0f:c1:b9:c2:af:9f:4d:d4:d5:54:7d:8e:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFA0A80DF71CA377A289711EA4310F3117358BDA Validity Not Before: Sep 20 13:33:52 2026 GMT Not After : Sep 21 15:49:52 2026 GMT Subject: CN=91650856A2AD99AFA8370511D253D2BCEA691018 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:03:8a:42:6c:cc:2a:28:f0:a6:1d:e5:25:7a: f9:6e:b1:5b:fe:4b:e6:a7:be:65:d3:04:42:e2:52: c7:ca:69:5f:2e:7a:2c:23:23:63:fe:59:ca:bd:33: a8:3e:05:01:af:c2:f2:43:6f:6c:0f:1f:ee:30:ee: a7:17:82:c1:29:0c:c8:f8:3a:42:eb:57:27:a0:de: e4:0d:1c:a3:1d:7f:57:f4:73:e0:d1:d6:d9:d9:f8: 0c:9e:03:ff:54:62:ab:f2:2b:ad:d5:ff:8d:0f:e0: 26:a3:ff:a6:cb:34:e8:fe:07:17:ff:15:79:ca:97: 4c:3c:58:44:fa:7f:ed:2b:17:3d:77:36:98:70:5d: c0:f7:c8:71:fb:df:3f:b5:6a:f4:6a:88:ee:9f:bc: ce:e3:c4:66:0a:e6:97:0c:7e:9e:eb:e8:43:7c:8c: 7c:58:5d:f9:26:a3:1e:c0:a7:2b:5b:03:17:0b:4d: 5a:7d:5f:c5:11:9d:17:37:67:b1:24:e6:a0:6d:07: f8:d4:0d:41:cf:3b:c5:ab:dd:15:04:cf:11:54:6c: 37:1e:8d:b7:10:7b:08:54:1a:34:62:7b:95:b8:fc: 03:a9:b5:c5:d1:a1:6a:e5:17:8d:1e:e9:69:8a:cb: 8e:d9:37:42:c8:8c:6d:cc:d2:39:26:88:93:9d:4d: f9:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:65:08:56:A2:AD:99:AF:A8:37:05:11:D2:53:D2:BC:EA:69:10:18 X509v3 Authority Key Identifier: keyid:EF:A0:A8:0D:F7:1C:A3:77:A2:89:71:1E:A4:31:0F:31:17:35:8B:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/EFA0A80DF71CA377A289711EA4310F3117358BDA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFA0A80DF71CA377A289711EA4310F3117358BDA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/EFA0A80DF71CA377A289711EA4310F3117358BDA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:ac:82:af:e3:e2:09:61:30:c0:5b:2d:3a:56:b7:ce:51:77: df:10:f6:1d:ff:60:68:e3:3e:92:3f:7b:72:7e:85:8f:99:77: 25:10:a7:be:b3:0a:a0:93:ef:5e:54:5d:83:ee:cf:5b:5b:e4: ed:b5:e8:4a:b8:37:a0:a3:35:df:b7:50:66:37:a9:53:cb:d9: 7b:12:bc:75:20:46:5e:88:54:40:6a:f3:45:d1:89:cd:5d:a9: 0d:1d:d5:d4:90:0c:9e:6c:a4:c3:13:d8:22:fa:9f:9c:8f:d2: 3a:16:29:85:82:2b:ad:b0:1e:3b:cf:b7:35:d7:42:04:8e:5d: 25:98:ec:44:4d:98:36:88:67:18:c4:22:5e:f8:cb:a3:ed:a0: 6b:4a:18:2a:d8:48:3e:d3:a2:c2:00:f9:70:d1:91:c3:ce:8c: d9:5d:9d:cb:b7:70:12:9e:ff:ad:34:64:b4:5b:79:f6:86:65: 19:be:c2:b0:4b:b3:82:ee:e9:37:e1:b5:46:8d:7b:a9:d6:7d: 25:42:0e:ee:ec:0e:7b:0c:fb:8d:d7:03:2b:cb:37:89:53:7e: 14:74:f1:ad:2f:48:fb:75:dc:bb:23:e0:e5:fa:17:d0:4f:24: e0:72:a8:31:1f:81:03:30:0b:7b:d8:fb:67:fd:e7:9e:25:1f: ac:26:c3:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJwSRY/klkQ/BucKvn03U1VR9jsowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZBMEE4MERGNzFDQTM3N0EyODk3MTFFQTQzMTBGMzEx NzM1OEJEQTAeFw0yNjA5MjAxMzMzNTJaFw0yNjA5MjExNTQ5NTJaMDMxMTAvBgNV BAMTKDkxNjUwODU2QTJBRDk5QUZBODM3MDUxMUQyNTNEMkJDRUE2OTEwMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVA4pCbMwqKPCmHeUlevlusVv+ S+anvmXTBELiUsfKaV8ueiwjI2P+Wcq9M6g+BQGvwvJDb2wPH+4w7qcXgsEpDMj4 OkLrVyeg3uQNHKMdf1f0c+DR1tnZ+AyeA/9UYqvyK63V/40P4Caj/6bLNOj+Bxf/ FXnKl0w8WET6f+0rFz13NphwXcD3yHH73z+1avRqiO6fvM7jxGYK5pcMfp7r6EN8 jHxYXfkmox7ApytbAxcLTVp9X8URnRc3Z7Ek5qBtB/jUDUHPO8Wr3RUEzxFUbDce jbcQewhUGjRie5W4/AOptcXRoWrlF40e6WmKy47ZN0LIjG3M0jkmiJOdTfk7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkWUIVqKtma+oNwUR0lPSvOppEBgwHwYDVR0j BBgwFoAU76CoDfcco3eiiXEepDEPMRc1i9owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTQzZTJlNjctYTE3MS00ZDllLWE5MzUtNDA2OTAyYjFlMTNiLzAvRUZBMEE4MERG NzFDQTM3N0EyODk3MTFFQTQzMTBGMzExNzM1OEJEQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRkEwQTgwREY3MUNBMzc3QTI4OTcxMUVBNDMxMEYzMTE3MzU4 QkRBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTQzZTJlNjctYTE3MS00ZDllLWE5 MzUtNDA2OTAyYjFlMTNiLzAvRUZBMEE4MERGNzFDQTM3N0EyODk3MTFFQTQzMTBG MzExNzM1OEJEQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHesgq/j4glhMMBbLTpWt85Rd98Q9h3/YGjj PpI/e3J+hY+ZdyUQp76zCqCT715UXYPuz1tb5O216Eq4N6CjNd+3UGY3qVPL2XsS vHUgRl6IVEBq80XRic1dqQ0d1dSQDJ5spMMT2CL6n5yP0joWKYWCK62wHjvPtzXX QgSOXSWY7ERNmDaIZxjEIl74y6PtoGtKGCrYSD7TosIA+XDRkcPOjNldncu3cBKe /600ZLRbefaGZRm+wrBLs4Lu6TfhtUaNe6nWfSVCDu7sDnsM+43XAyvLN4lTfhR0 8a0vSPt13Lsj4OX6F9BPJOByqDEfgQMwC3vY+2f9554lH6wmw3Y= -----END CERTIFICATE-----Generated at Sun Sep 20 23:29:45 2026 by rpki-client