$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC.mft File: EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC.mft (raw, json) Hash identifier: u03S4RFN6qzkjFrY7UwyDTp99WDPRT50gYwjZIBmVzg= Subject key identifier: 7C:6F:0A:45:16:35:3F:A5:05:7C:29:7A:FB:27:7B:F4:C0:3C:E9:5E Authority key identifier: EF:4A:2E:C5:53:79:CA:2F:E3:A7:D2:4D:D2:C2:85:E8:BF:3A:39:FC Certificate issuer: /CN=EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC Certificate serial: 5E529BEC0B89549BE7AFB35F9E08359B9DBF881D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC.mft Manifest number: BE Signing time: Mon 21 Sep 2026 07:20:46 +0000 Manifest this update: Mon 21 Sep 2026 07:15:46 +0000 Manifest next update: Tue 22 Sep 2026 10:55:46 +0000 Files and hashes: 1: EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC.crl (hash: OIUpGsR5NbXWI8oVazoKbUVgc11Ve8E79jU3KmJonf0=) 2: 323030313a6466343a363463303a3a2f34382d3438203d3e20313533313430.roa (hash: WBFw33DVjLMzvjb9A+5nTenZ7QhkAKAHSXyABZyuBhE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC.crl rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:52:9b:ec:0b:89:54:9b:e7:af:b3:5f:9e:08:35:9b:9d:bf:88:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC Validity Not Before: Sep 21 07:15:46 2026 GMT Not After : Sep 22 10:55:46 2026 GMT Subject: CN=7C6F0A4516353FA5057C297AFB277BF4C03CE95E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:de:ab:1b:47:66:61:4c:82:85:b7:1b:53:d2: 41:78:0f:7b:2d:a1:3f:88:81:bf:22:42:80:77:ba: 45:3c:e7:41:b1:2a:c8:ce:4a:87:2e:cf:f0:4e:ab: 6f:09:eb:c7:d2:7b:85:57:1c:b2:c1:c3:a0:17:53: ef:70:2a:2e:e5:f2:c7:4a:f5:e1:11:d6:b8:5a:44: bf:23:cb:02:5c:8d:50:f3:34:ab:9c:09:99:f5:37: ee:02:5d:60:9d:04:05:7b:a3:c1:c6:04:4a:7a:fb: 65:96:5e:19:85:3f:2d:04:66:e1:d9:93:59:ed:02: 97:aa:4e:69:94:da:b8:4f:36:7f:07:e0:48:57:60: f5:67:4f:45:83:58:cc:46:0a:44:38:1e:69:56:ec: 9d:6b:c4:be:cf:f4:3f:13:ee:cc:34:52:c3:72:29: 6d:15:a3:cd:2b:76:d1:d0:b1:ed:fb:de:7c:4d:58: d9:0f:ab:2a:ce:a2:f2:d5:09:17:5c:7b:79:dc:c2: 67:62:e1:dd:89:f3:42:82:5b:41:cf:6c:32:d1:85: 1d:cd:0c:24:de:0d:c8:f4:20:16:5d:b5:8b:da:f0: 84:17:e8:80:a5:8f:c0:19:d1:1a:aa:f5:34:aa:a6: 47:e2:75:f9:b6:71:69:ca:15:cf:5a:54:c6:73:2b: df:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:6F:0A:45:16:35:3F:A5:05:7C:29:7A:FB:27:7B:F4:C0:3C:E9:5E X509v3 Authority Key Identifier: keyid:EF:4A:2E:C5:53:79:CA:2F:E3:A7:D2:4D:D2:C2:85:E8:BF:3A:39:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:96:cc:d5:9d:9e:a8:1f:2f:ec:56:b8:1e:71:f1:54:ed:6b: 7b:b6:72:70:e0:06:74:5b:66:06:27:bc:39:9d:73:67:2f:36: e8:76:f2:b9:dd:60:57:c2:09:04:b5:f0:84:a0:c3:f9:9e:fa: aa:2f:8f:c4:e0:2d:78:a8:bd:3c:54:68:d4:74:62:c1:42:f4: f4:7f:ef:77:ee:55:ab:f9:f9:38:4f:b7:00:13:c5:8d:17:46: 7c:1d:fd:19:ce:bd:92:be:15:7c:c1:81:a0:8c:81:ba:79:79: cd:74:d8:b4:79:3a:85:8e:5d:f0:9d:49:39:38:90:3f:56:95: a4:0d:fb:b0:9a:d0:92:6f:5b:c4:39:b1:4c:d6:e5:dc:02:43: fa:d4:8d:66:e6:75:3b:49:f8:25:90:9e:7a:a3:77:b1:fe:2f: c9:0f:2e:c3:22:36:c0:1a:22:39:1d:cd:3e:40:e3:86:33:f4: 65:cd:06:63:35:45:4f:61:ca:0c:0c:25:b9:41:04:8d:5f:63: c5:98:34:7c:4d:27:a2:6b:2e:f5:a6:7a:82:d2:0c:54:fb:2a: 55:be:8e:87:42:8f:64:b3:ee:12:20:74:b9:21:24:fe:27:c4: 51:62:f1:78:19:0c:98:13:ef:87:d8:94:cb:3a:ca:9e:6f:14: a8:fe:f7:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXlKb7AuJVJvnr7Nfngg1m52/iB0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUY0QTJFQzU1Mzc5Q0EyRkUzQTdEMjRERDJDMjg1RThC RjNBMzlGQzAeFw0yNjA5MjEwNzE1NDZaFw0yNjA5MjIxMDU1NDZaMDMxMTAvBgNV BAMTKDdDNkYwQTQ1MTYzNTNGQTUwNTdDMjk3QUZCMjc3QkY0QzAzQ0U5NUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC33qsbR2ZhTIKFtxtT0kF4D3st oT+Igb8iQoB3ukU850GxKsjOSocuz/BOq28J68fSe4VXHLLBw6AXU+9wKi7l8sdK 9eER1rhaRL8jywJcjVDzNKucCZn1N+4CXWCdBAV7o8HGBEp6+2WWXhmFPy0EZuHZ k1ntApeqTmmU2rhPNn8H4EhXYPVnT0WDWMxGCkQ4HmlW7J1rxL7P9D8T7sw0UsNy KW0Vo80rdtHQse373nxNWNkPqyrOovLVCRdce3ncwmdi4d2J80KCW0HPbDLRhR3N DCTeDcj0IBZdtYva8IQX6IClj8AZ0Rqq9TSqpkfidfm2cWnKFc9aVMZzK99XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfG8KRRY1P6UFfCl6+yd79MA86V4wHwYDVR0j BBgwFoAU70ouxVN5yi/jp9JN0sKF6L86OfwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2FmY2JmYmItYmEzZi00ZDUzLWEwNGYtMTRkNmY0YmUwY2IxLzEvRUY0QTJFQzU1 Mzc5Q0EyRkUzQTdEMjRERDJDMjg1RThCRjNBMzlGQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRjRBMkVDNTUzNzlDQTJGRTNBN0QyNEREMkMyODVFOEJGM0Ez OUZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2FmY2JmYmItYmEzZi00ZDUzLWEw NGYtMTRkNmY0YmUwY2IxLzEvRUY0QTJFQzU1Mzc5Q0EyRkUzQTdEMjRERDJDMjg1 RThCRjNBMzlGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAOWzNWdnqgfL+xWuB5x8VTta3u2cnDgBnRb ZgYnvDmdc2cvNuh28rndYFfCCQS18ISgw/me+qovj8TgLXiovTxUaNR0YsFC9PR/ 73fuVav5+ThPtwATxY0XRnwd/RnOvZK+FXzBgaCMgbp5ec102LR5OoWOXfCdSTk4 kD9WlaQN+7Ca0JJvW8Q5sUzW5dwCQ/rUjWbmdTtJ+CWQnnqjd7H+L8kPLsMiNsAa IjkdzT5A44Yz9GXNBmM1RU9hygwMJblBBI1fY8WYNHxNJ6JrLvWmeoLSDFT7KlW+ jodCj2Sz7hIgdLkhJP4nxFFi8XgZDJgT74fYlMs6yp5vFKj+95Y= -----END CERTIFICATE-----Generated at Mon Sep 21 18:51:20 2026 by rpki-client