$ rpki-client -vvvf rpki-rsync.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/EFA0A80DF71CA377A289711EA4310F3117358BDA.mft File: EFA0A80DF71CA377A289711EA4310F3117358BDA.mft (raw, json) Hash identifier: K9cgeblnQw3XT2YU8l7gbE2ugUh8Nep0StZKaV0Yjoo= Subject key identifier: 6F:57:25:46:9D:A0:56:BE:1A:94:29:82:06:46:C5:C1:4E:03:61:27 Authority key identifier: EF:A0:A8:0D:F7:1C:A3:77:A2:89:71:1E:A4:31:0F:31:17:35:8B:DA Certificate issuer: /CN=EFA0A80DF71CA377A289711EA4310F3117358BDA Certificate serial: 5C58A08F86DE457799F10A0A8A0E68AE29DC29EF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFA0A80DF71CA377A289711EA4310F3117358BDA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/EFA0A80DF71CA377A289711EA4310F3117358BDA.mft Manifest number: 0109 Signing time: Sun 15 Nov 2026 11:33:30 +0000 Manifest this update: Sun 15 Nov 2026 11:28:30 +0000 Manifest next update: Mon 16 Nov 2026 11:41:30 +0000 Files and hashes: 1: 3130332e3234352e3138302e302f32322d3234203d3e203234353332.roa (hash: HsO0FzJAWLg2u6DKU2yDy0xpq+6RbfKYVFKlBWZw79M=) 2: 323430333a326530303a3a2f33322d3438203d3e203234353332.roa (hash: 9DAVKa81esoccLZerAJimBEYho7HzR8tvV6sLPxdUYg=) 3: 3131392e3233352e31362e302f32302d3234203d3e203234353332.roa (hash: a1jLyYlI+XXOuvRXX5wEn6MAtEMedfGoxkqMvx1OXCk=) 4: EFA0A80DF71CA377A289711EA4310F3117358BDA.crl (hash: 5zrN62cZiYYqH3N1eDBG0+ge9D94k3ZaY5FBAt0UiEg=) 5: 32372e3131312e33342e302f32342d3234203d3e203538343737.roa (hash: 1YWuY5HZqKiBZs805+vyXQB+d7lVGfJWx9YMEkEgtvQ=) 6: 34332e3232392e3230342e302f32322d3234203d3e203234353332.roa (hash: BwtyTC6qI4XC3HBbimySaUxc14wJ6nXjYuM/+KpzQMU=) 7: 3230322e3132392e3138342e302f32322d3234203d3e203234353332.roa (hash: CBM38ddIBA7ErC9KFszGB+2Go/rfydEsEM3u2nPHmFA=) 8: 32372e3131312e33322e302f31392d3234203d3e203234353332.roa (hash: Fx9bLePWZd911ErojerGEpVTnf/DxfdXCAQiFRWGMk8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/EFA0A80DF71CA377A289711EA4310F3117358BDA.crl rsync://rpki-rsync.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/EFA0A80DF71CA377A289711EA4310F3117358BDA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFA0A80DF71CA377A289711EA4310F3117358BDA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 10:45:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:58:a0:8f:86:de:45:77:99:f1:0a:0a:8a:0e:68:ae:29:dc:29:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFA0A80DF71CA377A289711EA4310F3117358BDA Validity Not Before: Nov 15 11:28:30 2026 GMT Not After : Nov 16 11:41:30 2026 GMT Subject: CN=6F5725469DA056BE1A9429820646C5C14E036127 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:9e:99:66:dc:99:2d:2c:5d:98:ac:3f:65:bc: 5d:94:a3:58:ca:98:16:10:d4:fd:ef:6d:d9:eb:b4: e4:a8:21:ca:84:f3:ee:89:13:06:28:21:41:d3:0f: 46:e3:22:25:51:bc:ff:3d:36:24:67:73:b3:51:0b: f9:ba:55:13:c6:5b:0e:d8:5d:ec:57:bc:1f:07:2d: fb:5b:5b:8b:87:77:60:6d:82:93:99:e5:f5:b2:d2: d5:f1:97:c3:a7:81:9f:bc:7d:27:fb:5c:20:38:ad: e7:3e:3c:c2:20:9b:c8:af:0e:ed:fa:fc:96:ef:29: a6:f4:0b:b2:23:e3:62:90:d7:a3:0c:32:84:86:05: 70:c0:34:54:f3:00:ef:6d:fc:90:e7:56:ff:5a:05: ab:42:29:d6:23:cd:84:d3:72:07:d2:aa:ca:f4:6d: 40:cb:b8:59:8d:a2:f4:95:22:72:93:c7:18:16:5c: 63:2e:80:69:59:fd:2c:d2:2a:25:77:05:5b:a7:1b: fb:13:6d:ea:42:92:24:8b:cd:3b:5a:f2:93:17:69: 4e:ab:96:2c:b7:8c:76:30:2d:f2:d4:93:92:05:5c: 7e:a9:d3:e8:32:5c:74:36:6a:bf:66:b8:71:17:d9: e0:1c:ca:11:96:ec:6a:1e:b7:73:36:33:82:c7:bf: d7:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:57:25:46:9D:A0:56:BE:1A:94:29:82:06:46:C5:C1:4E:03:61:27 X509v3 Authority Key Identifier: keyid:EF:A0:A8:0D:F7:1C:A3:77:A2:89:71:1E:A4:31:0F:31:17:35:8B:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/EFA0A80DF71CA377A289711EA4310F3117358BDA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFA0A80DF71CA377A289711EA4310F3117358BDA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/EFA0A80DF71CA377A289711EA4310F3117358BDA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:c6:92:97:a8:4f:6e:19:73:5a:be:59:ce:f5:ac:17:86:ea: 79:37:23:e6:73:ab:2a:61:1a:03:34:19:82:42:4b:32:2f:d6: 52:67:db:ab:da:98:32:07:3a:01:ef:56:e9:1c:0a:cd:d2:1b: 4f:9b:91:b1:7b:ae:15:69:0a:2f:62:66:5e:f2:64:b1:1c:17: 3e:8d:dd:96:14:eb:bb:87:b8:6b:6b:27:e7:da:18:11:e4:16: 5b:f3:27:63:4d:d4:b9:47:6f:81:35:45:6a:fe:f7:42:d4:8e: 86:fb:0b:c1:8e:b4:c9:74:79:f8:bb:2a:f3:51:bc:a2:d3:f9: 74:1e:34:49:cd:61:58:1c:14:c8:dc:8c:a3:ce:c6:ab:ea:b0: c6:d1:17:1f:5d:e5:bd:01:d7:c2:af:fb:fc:9b:2f:11:fa:86: 8f:f2:50:6b:e4:11:12:44:7b:b9:5d:b6:3e:95:46:ce:02:c4: 53:f6:eb:41:51:2b:09:6f:bb:41:f8:51:f4:9e:c0:9c:74:ac: 5b:a8:e0:83:a9:44:d5:71:0c:3b:05:35:78:7c:c4:4a:f8:8b: f8:d3:79:fe:67:5a:2f:aa:f6:6f:b1:ba:17:82:45:cd:d8:42: b1:8f:9b:0d:c2:3b:a0:6b:63:cc:04:bf:bf:9f:50:62:56:f6: a3:0a:49:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXFigj4beRXeZ8QoKig5orincKe8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZBMEE4MERGNzFDQTM3N0EyODk3MTFFQTQzMTBGMzEx NzM1OEJEQTAeFw0yNjExMTUxMTI4MzBaFw0yNjExMTYxMTQxMzBaMDMxMTAvBgNV BAMTKDZGNTcyNTQ2OURBMDU2QkUxQTk0Mjk4MjA2NDZDNUMxNEUwMzYxMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLnplm3JktLF2YrD9lvF2Uo1jK mBYQ1P3vbdnrtOSoIcqE8+6JEwYoIUHTD0bjIiVRvP89NiRnc7NRC/m6VRPGWw7Y XexXvB8HLftbW4uHd2BtgpOZ5fWy0tXxl8OngZ+8fSf7XCA4rec+PMIgm8ivDu36 /JbvKab0C7Ij42KQ16MMMoSGBXDANFTzAO9t/JDnVv9aBatCKdYjzYTTcgfSqsr0 bUDLuFmNovSVInKTxxgWXGMugGlZ/SzSKiV3BVunG/sTbepCkiSLzTta8pMXaU6r liy3jHYwLfLUk5IFXH6p0+gyXHQ2ar9muHEX2eAcyhGW7Goet3M2M4LHv9e5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUb1clRp2gVr4alCmCBkbFwU4DYScwHwYDVR0j BBgwFoAU76CoDfcco3eiiXEepDEPMRc1i9owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTQzZTJlNjctYTE3MS00ZDllLWE5MzUtNDA2OTAyYjFlMTNiLzAvRUZBMEE4MERG NzFDQTM3N0EyODk3MTFFQTQzMTBGMzExNzM1OEJEQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRkEwQTgwREY3MUNBMzc3QTI4OTcxMUVBNDMxMEYzMTE3MzU4 QkRBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTQzZTJlNjctYTE3MS00ZDllLWE5 MzUtNDA2OTAyYjFlMTNiLzAvRUZBMEE4MERGNzFDQTM3N0EyODk3MTFFQTQzMTBG MzExNzM1OEJEQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAjGkpeoT24Zc1q+Wc71rBeG6nk3I+Zzqyph GgM0GYJCSzIv1lJn26vamDIHOgHvVukcCs3SG0+bkbF7rhVpCi9iZl7yZLEcFz6N 3ZYU67uHuGtrJ+faGBHkFlvzJ2NN1LlHb4E1RWr+90LUjob7C8GOtMl0efi7KvNR vKLT+XQeNEnNYVgcFMjcjKPOxqvqsMbRFx9d5b0B18Kv+/ybLxH6ho/yUGvkERJE e7ldtj6VRs4CxFP260FRKwlvu0H4UfSewJx0rFuo4IOpRNVxDDsFNXh8xEr4i/jT ef5nWi+q9m+xuheCRc3YQrGPmw3CO6BrY8wEv7+fUGJW9qMKSSM= -----END CERTIFICATE-----Generated at Sun Nov 15 21:04:36 2026 by rpki-client