$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E.mft File: EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E.mft (raw, json) Hash identifier: TSFxrPlt42+o60GRAkRU5129+6kshYvzl4gHULTJtiE= Subject key identifier: 32:07:10:37:D4:5C:33:B9:FD:3F:08:2F:9D:FB:34:FE:86:72:44:DC Authority key identifier: EF:0D:C3:6F:FE:89:46:F1:04:92:74:EE:88:9B:B9:8C:5A:5A:7D:8E Certificate issuer: /CN=EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E Certificate serial: 374E6DD34382C3BF018B115286D01697A5D3DB5F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E.mft Manifest number: C6 Signing time: Mon 28 Sep 2026 08:05:09 +0000 Manifest this update: Mon 28 Sep 2026 08:00:09 +0000 Manifest next update: Tue 29 Sep 2026 11:07:09 +0000 Files and hashes: 1: EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E.crl (hash: SKIRW+PyQihXZOtABURmInMLmaQIcSqTtLnKmZFnRhk=) 2: 3230322e3137332e31362e302f32312d3234203d3e203234323130.roa (hash: r4SZ6eUQ/WGNZXPblXSjXtHYlTpktiYzvV0LKCEpMuY=) 3: 3138302e3135302e3233322e302f32312d3234203d3e203234323130.roa (hash: ifJJcEjqzU7+xO+rrfiw7+N3sHyu5nZ4TiZzLx8FyiQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E.crl rsync://rpki-rsync.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 10:44:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:4e:6d:d3:43:82:c3:bf:01:8b:11:52:86:d0:16:97:a5:d3:db:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E Validity Not Before: Sep 28 08:00:09 2026 GMT Not After : Sep 29 11:07:09 2026 GMT Subject: CN=32071037D45C33B9FD3F082F9DFB34FE867244DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b4:cc:e1:a4:ca:ce:01:44:85:c6:57:36:36: c3:77:3a:eb:ec:77:08:fe:0f:1d:d3:59:b3:0e:f6: 55:37:7c:79:9a:c2:e3:b5:58:25:df:9d:1c:1c:0f: 3a:a3:85:61:97:34:28:1e:08:99:b4:7a:45:ea:37: dd:34:1f:f3:42:b5:d9:d6:4b:e9:56:dc:0f:29:83: a0:1f:db:2f:5b:36:cd:17:49:7c:48:4d:92:1d:d1: d1:e0:f3:3e:48:44:7d:14:9f:f6:8e:b5:8e:76:1d: 79:1b:e2:24:10:cf:ef:a6:34:3e:da:17:69:0a:e6: 7b:f7:e6:7c:67:c5:a0:2c:71:d7:1c:02:59:28:a5: 05:4c:bb:9f:4b:3b:ed:3d:88:f5:04:2d:e8:bf:8c: 59:6b:d8:e9:c1:58:49:97:9f:11:d3:fd:3f:00:95: 09:77:78:de:7a:49:a3:b8:65:8d:23:98:76:07:15: e0:e1:0e:f4:d0:fe:46:94:54:6a:86:c8:8f:7f:77: 4b:d4:bf:ce:a2:0e:bd:66:24:10:0c:78:8d:6f:dc: 99:c4:b3:75:9e:d1:1c:48:7c:19:46:2d:a4:3d:d4: 5f:4f:f9:fc:bf:3f:f3:22:81:97:54:d4:f1:96:d6: 86:65:6b:08:07:a7:ae:90:9e:10:d7:57:b3:d1:d5: 70:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:07:10:37:D4:5C:33:B9:FD:3F:08:2F:9D:FB:34:FE:86:72:44:DC X509v3 Authority Key Identifier: keyid:EF:0D:C3:6F:FE:89:46:F1:04:92:74:EE:88:9B:B9:8C:5A:5A:7D:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:02:cb:4e:b3:53:71:54:0e:6d:d1:5e:f8:a6:82:04:d4:12: e9:6b:65:a0:bd:ab:a2:7c:50:03:8f:4a:f9:f7:31:c0:08:c3: 0c:ee:55:76:32:b5:26:4e:4f:79:a3:12:81:fe:5c:a7:f7:6d: 98:70:1b:26:d0:71:01:7e:66:7b:db:26:68:74:d3:54:54:93: af:14:95:6b:13:f1:86:1d:0a:59:69:50:19:5a:1b:33:c1:5e: 1a:99:be:aa:06:13:36:a7:8f:45:a4:64:0f:c9:6d:f2:c1:59: 5d:58:7c:2f:09:6f:e5:1e:70:d3:d2:0e:24:09:0d:ef:05:19: a2:18:f1:12:8d:48:0a:24:d9:35:18:07:34:85:d0:a3:9a:a5: 26:ac:38:14:15:01:a7:b4:ec:81:e0:53:95:24:0d:e6:1b:b0: b4:26:e7:ee:f0:55:5c:43:e0:c4:c2:64:0f:41:c3:f3:ec:af: 7e:f7:57:15:02:ad:90:7e:f8:20:50:3a:18:bc:8f:67:45:46: 20:50:23:f7:9d:ae:de:37:93:e9:3c:ce:f2:aa:b5:6a:e6:f6: a1:25:4e:cd:31:80:ce:20:a3:77:ae:c5:3e:e6:58:96:78:93: a9:55:f2:4f:14:34:52:47:c1:74:81:60:a8:f1:61:ef:fc:fa: 2b:68:4d:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN05t00OCw78BixFShtAWl6XT218wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUYwREMzNkZGRTg5NDZGMTA0OTI3NEVFODg5QkI5OEM1 QTVBN0Q4RTAeFw0yNjA5MjgwODAwMDlaFw0yNjA5MjkxMTA3MDlaMDMxMTAvBgNV BAMTKDMyMDcxMDM3RDQ1QzMzQjlGRDNGMDgyRjlERkIzNEZFODY3MjQ0REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4tMzhpMrOAUSFxlc2NsN3Ouvs dwj+Dx3TWbMO9lU3fHmawuO1WCXfnRwcDzqjhWGXNCgeCJm0ekXqN900H/NCtdnW S+lW3A8pg6Af2y9bNs0XSXxITZId0dHg8z5IRH0Un/aOtY52HXkb4iQQz++mND7a F2kK5nv35nxnxaAscdccAlkopQVMu59LO+09iPUELei/jFlr2OnBWEmXnxHT/T8A lQl3eN56SaO4ZY0jmHYHFeDhDvTQ/kaUVGqGyI9/d0vUv86iDr1mJBAMeI1v3JnE s3We0RxIfBlGLaQ91F9P+fy/P/MigZdU1PGW1oZlawgHp66QnhDXV7PR1XDjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMgcQN9RcM7n9Pwgvnfs0/oZyRNwwHwYDVR0j BBgwFoAU7w3Db/6JRvEEknTuiJu5jFpafY4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTAxN2I4MjgtMTdmYS00OGEyLWExMTMtMTQ5Zjk0NjdhMzI4LzAvRUYwREMzNkZG RTg5NDZGMTA0OTI3NEVFODg5QkI5OEM1QTVBN0Q4RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRjBEQzM2RkZFODk0NkYxMDQ5Mjc0RUU4ODlCQjk4QzVBNUE3 RDhFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTAxN2I4MjgtMTdmYS00OGEyLWEx MTMtMTQ5Zjk0NjdhMzI4LzAvRUYwREMzNkZGRTg5NDZGMTA0OTI3NEVFODg5QkI5 OEM1QTVBN0Q4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADQCy06zU3FUDm3RXvimggTUEulrZaC9q6J8 UAOPSvn3McAIwwzuVXYytSZOT3mjEoH+XKf3bZhwGybQcQF+ZnvbJmh001RUk68U lWsT8YYdCllpUBlaGzPBXhqZvqoGEzanj0WkZA/JbfLBWV1YfC8Jb+UecNPSDiQJ De8FGaIY8RKNSAok2TUYBzSF0KOapSasOBQVAae07IHgU5UkDeYbsLQm5+7wVVxD 4MTCZA9Bw/Psr373VxUCrZB++CBQOhi8j2dFRiBQI/edrt43k+k8zvKqtWrm9qEl Ts0xgM4go3euxT7mWJZ4k6lV8k8UNFJHwXSBYKjxYe/8+itoTaM= -----END CERTIFICATE-----Generated at Mon Sep 28 14:53:41 2026 by rpki-client