$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/EF4CD1AC581004419A7468D03FF81EAA25D9E33F.mft File: EF4CD1AC581004419A7468D03FF81EAA25D9E33F.mft (raw, json) Hash identifier: oRNKQwBa70lYDD9Ie9gFNJDT1PU+hMk9fu0rf8/jEvo= Subject key identifier: 55:D7:1B:58:27:02:41:06:77:67:04:9A:79:C7:2B:7E:77:46:BF:62 Authority key identifier: EF:4C:D1:AC:58:10:04:41:9A:74:68:D0:3F:F8:1E:AA:25:D9:E3:3F Certificate issuer: /CN=EF4CD1AC581004419A7468D03FF81EAA25D9E33F Certificate serial: 663033A2816C953CA8EE1DAF02EA0BDEAC210B7B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF4CD1AC581004419A7468D03FF81EAA25D9E33F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/EF4CD1AC581004419A7468D03FF81EAA25D9E33F.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 12:11:05 +0000 Manifest this update: Wed 23 Sep 2026 12:06:05 +0000 Manifest next update: Thu 24 Sep 2026 14:40:05 +0000 Files and hashes: 1: EF4CD1AC581004419A7468D03FF81EAA25D9E33F.crl (hash: j8HNbchwjmog2DOF0pFncOCNytJXql3MYv6UVHjvIRY=) 2: 3130332e39352e31302e302f32342d3234203d3e20313335343838.roa (hash: 1LTG4MgFRMZ7zoAbplTKMa6nhkiFff/vlGz+LTJuyUg=) 3: 3130332e39352e31312e302f32342d3234203d3e20313335343838.roa (hash: HZ438Kbp42EzorB5guWDSUbAmdr1EsWvtnLwdrcr+sI=) 4: 3130332e39352e382e302f32322d3232203d3e20313335343838.roa (hash: Z1qBcC8HhREP/iS2ZW6nzTxnpSKKD3Oek2Lz09Kit8U=) 5: 3130332e39352e392e302f32342d3234203d3e20313335343838.roa (hash: cCW7eYSWOx2HeGcwXRHzekDYmrW8hp1mJ3VwAjVNaok=) 6: 3130332e39352e382e302f32342d3234203d3e20313335343838.roa (hash: 6xX5hpFI3vfAbJBKIH+olFnqZn+fECnqjvCv45mqV+0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/EF4CD1AC581004419A7468D03FF81EAA25D9E33F.crl rsync://rpki-rsync.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/EF4CD1AC581004419A7468D03FF81EAA25D9E33F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF4CD1AC581004419A7468D03FF81EAA25D9E33F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 14:40:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:30:33:a2:81:6c:95:3c:a8:ee:1d:af:02:ea:0b:de:ac:21:0b:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EF4CD1AC581004419A7468D03FF81EAA25D9E33F Validity Not Before: Sep 23 12:06:05 2026 GMT Not After : Sep 24 14:40:05 2026 GMT Subject: CN=55D71B58270241067767049A79C72B7E7746BF62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ef:7b:e0:80:dd:a2:3e:26:7e:23:39:0b:77: 2d:48:af:a3:3f:30:c7:d5:1d:51:96:26:e5:49:28: 90:d9:fb:6d:fb:bc:73:93:c3:49:cd:54:31:2f:b4: d2:c4:e3:f2:d8:08:5c:e3:f9:63:5d:56:81:86:14: b6:2f:5d:5f:a8:9d:c6:56:cf:08:23:fa:38:3d:94: be:d9:80:b0:77:e6:c4:a6:1b:ce:d1:ea:7c:e0:9d: 81:25:ce:1b:9f:87:08:bf:1a:ef:31:7b:97:9b:5a: eb:2f:68:e4:31:80:b1:5d:b0:89:20:81:4f:ce:84: cb:af:d9:f9:c8:f6:0c:0e:ca:cd:12:9f:a3:76:5d: b5:df:cd:dd:b5:65:a3:12:78:9d:b8:bd:d0:53:81: d8:4d:fe:75:81:7a:43:a2:e8:88:71:fa:06:2b:0c: 9d:63:c4:b4:3e:c8:63:0a:f5:a0:fe:7d:2a:56:16: c2:79:d5:c8:49:12:7d:b6:20:c6:b3:b1:bc:5e:05: 26:e7:9a:3c:26:d1:f0:5b:e0:42:26:ed:0d:e6:af: 3b:fc:de:50:cf:83:70:4d:3f:1f:eb:a7:de:68:c9: 6f:ca:28:57:b0:05:d8:2a:67:c4:c6:05:ba:d6:a5: d0:ec:ed:16:9a:ef:07:79:7c:79:9b:56:17:3f:4e: 9e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:D7:1B:58:27:02:41:06:77:67:04:9A:79:C7:2B:7E:77:46:BF:62 X509v3 Authority Key Identifier: keyid:EF:4C:D1:AC:58:10:04:41:9A:74:68:D0:3F:F8:1E:AA:25:D9:E3:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/EF4CD1AC581004419A7468D03FF81EAA25D9E33F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF4CD1AC581004419A7468D03FF81EAA25D9E33F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/EF4CD1AC581004419A7468D03FF81EAA25D9E33F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:b3:43:25:99:a8:ff:79:5d:27:9f:d3:c8:76:f6:4a:07:21: a0:ee:cf:33:59:af:51:a0:59:60:a3:2a:4a:ef:0f:69:15:82: 3e:41:77:31:e7:b7:88:e2:42:7e:1c:f4:77:0e:27:9f:44:1e: bc:08:46:ff:82:91:e7:e2:0e:78:3c:17:e4:bd:44:cc:da:e5: 17:29:d7:d2:46:51:6f:da:d9:3c:93:64:25:f9:78:30:11:c7: 02:c9:a8:40:fe:a9:85:c2:96:ef:9f:a2:ce:f7:e2:37:45:83: 81:8f:57:a7:4c:ac:6b:45:4e:bf:53:f9:25:00:da:cc:4f:68: af:69:63:f3:89:db:6f:ca:ed:ee:d6:61:3f:86:b3:ae:67:5a: fc:87:d8:85:39:7b:b1:24:4e:c7:93:94:3b:41:4e:92:c4:ba: 1f:c9:86:bc:98:b7:24:45:fc:6a:cb:81:d2:cf:e3:d1:f4:b8: c4:0a:ba:cf:9b:76:00:3c:b1:c0:d1:9b:04:cd:be:1e:db:21: 01:f1:7a:54:63:d6:0d:a6:11:60:8d:97:cb:34:79:5e:d0:9a: 2c:19:90:5e:48:29:29:b1:21:1d:48:7d:fd:14:31:67:95:4d: 50:d6:95:03:91:44:d0:1f:2d:8f:b1:5d:4d:89:02:36:bb:a0: ec:f8:24:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZjAzooFslTyo7h2vAuoL3qwhC3swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUY0Q0QxQUM1ODEwMDQ0MTlBNzQ2OEQwM0ZGODFFQUEy NUQ5RTMzRjAeFw0yNjA5MjMxMjA2MDVaFw0yNjA5MjQxNDQwMDVaMDMxMTAvBgNV BAMTKDU1RDcxQjU4MjcwMjQxMDY3NzY3MDQ5QTc5QzcyQjdFNzc0NkJGNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/73vggN2iPiZ+IzkLdy1Ir6M/ MMfVHVGWJuVJKJDZ+237vHOTw0nNVDEvtNLE4/LYCFzj+WNdVoGGFLYvXV+oncZW zwgj+jg9lL7ZgLB35sSmG87R6nzgnYElzhufhwi/Gu8xe5ebWusvaOQxgLFdsIkg gU/OhMuv2fnI9gwOys0Sn6N2XbXfzd21ZaMSeJ24vdBTgdhN/nWBekOi6Ihx+gYr DJ1jxLQ+yGMK9aD+fSpWFsJ51chJEn22IMazsbxeBSbnmjwm0fBb4EIm7Q3mrzv8 3lDPg3BNPx/rp95oyW/KKFewBdgqZ8TGBbrWpdDs7Raa7wd5fHmbVhc/Tp47AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVdcbWCcCQQZ3ZwSaeccrfndGv2IwHwYDVR0j BBgwFoAU70zRrFgQBEGadGjQP/geqiXZ4z8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTM2NDY1ZWMtOTE2MC00NTliLThkMTEtOTQ4ZmMyNmRhMWMwLzAvRUY0Q0QxQUM1 ODEwMDQ0MTlBNzQ2OEQwM0ZGODFFQUEyNUQ5RTMzRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRjRDRDFBQzU4MTAwNDQxOUE3NDY4RDAzRkY4MUVBQTI1RDlF MzNGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTM2NDY1ZWMtOTE2MC00NTliLThk MTEtOTQ4ZmMyNmRhMWMwLzAvRUY0Q0QxQUM1ODEwMDQ0MTlBNzQ2OEQwM0ZGODFF QUEyNUQ5RTMzRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEezQyWZqP95XSef08h29koHIaDuzzNZr1Gg WWCjKkrvD2kVgj5BdzHnt4jiQn4c9HcOJ59EHrwIRv+CkefiDng8F+S9RMza5Rcp 19JGUW/a2TyTZCX5eDARxwLJqED+qYXClu+fos734jdFg4GPV6dMrGtFTr9T+SUA 2sxPaK9pY/OJ22/K7e7WYT+Gs65nWvyH2IU5e7EkTseTlDtBTpLEuh/JhryYtyRF /GrLgdLP49H0uMQKus+bdgA8scDRmwTNvh7bIQHxelRj1g2mEWCNl8s0eV7QmiwZ kF5IKSmxIR1Iff0UMWeVTVDWlQORRNAfLY+xXU2JAja7oOz4JCE= -----END CERTIFICATE-----Generated at Thu Sep 24 03:17:51 2026 by rpki-client