$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC.mft File: EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC.mft (raw, json) Hash identifier: jV/jCqMgZjtQzm/U9ECcRFETIJJwsgnuHlNPm4urTyo= Subject key identifier: D8:CA:B0:7F:E4:97:6F:C7:5D:5F:0E:33:76:DC:79:24:5D:F9:25:52 Authority key identifier: EF:4A:2E:C5:53:79:CA:2F:E3:A7:D2:4D:D2:C2:85:E8:BF:3A:39:FC Certificate issuer: /CN=EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC Certificate serial: 57582A463BC61FC721ECC9D3D4C402A0B57F0EE5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC.mft Manifest number: FF Signing time: Mon 09 Nov 2026 11:45:27 +0000 Manifest this update: Mon 09 Nov 2026 11:40:27 +0000 Manifest next update: Tue 10 Nov 2026 13:57:27 +0000 Files and hashes: 1: 323030313a6466343a363463303a3a2f34382d3438203d3e20313533313430.roa (hash: WBFw33DVjLMzvjb9A+5nTenZ7QhkAKAHSXyABZyuBhE=) 2: EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC.crl (hash: 85X1ayeV57QpsZRhez3J7rGhBY6wXprePBDSI/Hbg4A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC.crl rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 08:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:58:2a:46:3b:c6:1f:c7:21:ec:c9:d3:d4:c4:02:a0:b5:7f:0e:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC Validity Not Before: Nov 9 11:40:27 2026 GMT Not After : Nov 10 13:57:27 2026 GMT Subject: CN=D8CAB07FE4976FC75D5F0E3376DC79245DF92552 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:77:39:e2:d1:dd:ac:02:a5:43:f0:6c:0b:f2: 89:23:38:6c:57:9a:82:70:25:e6:c2:97:10:55:fe: 94:09:64:a6:4c:6c:6e:20:0d:66:98:f5:09:93:2f: 8b:1d:a0:aa:8d:0d:de:a4:a2:bb:3a:90:2f:2f:1c: ab:4d:5f:8a:eb:a2:e1:1d:2a:45:92:9b:1e:f2:4e: cd:c4:a8:cc:3e:0a:6c:65:d5:54:7f:8c:3c:e2:e5: d7:8e:f8:43:f5:d3:42:85:d2:36:33:c2:3d:fe:66: 4d:b8:dd:49:10:6c:f4:11:44:b5:eb:e5:ab:18:5b: 9b:71:25:ef:5c:31:e9:94:b4:90:15:f6:09:7f:eb: b0:f5:08:d0:78:1b:a6:aa:5f:e8:ad:ae:e5:91:60: a8:0c:99:0a:d0:c9:61:6b:bf:83:28:f6:88:bd:3f: 79:c4:1f:db:cc:48:28:cb:d1:02:79:2b:d5:86:a1: d8:38:6c:5e:0e:aa:0e:17:60:8a:77:4c:54:d7:21: 89:e2:e0:40:e4:88:6d:6f:8c:07:cd:24:63:74:91: b3:ca:78:f0:41:91:3e:de:bc:a2:b2:68:bd:00:40: fb:7b:59:5c:b7:5f:01:ba:a2:8a:9a:34:10:a8:3b: 30:4f:1e:9f:58:17:2a:78:12:94:29:0f:cd:d5:f5: 5b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:CA:B0:7F:E4:97:6F:C7:5D:5F:0E:33:76:DC:79:24:5D:F9:25:52 X509v3 Authority Key Identifier: keyid:EF:4A:2E:C5:53:79:CA:2F:E3:A7:D2:4D:D2:C2:85:E8:BF:3A:39:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:6b:dd:4d:9f:11:76:a9:36:30:04:b7:e6:7d:2b:db:e1:f6: ca:ca:c1:1b:48:90:50:9f:f8:a8:a9:89:7e:fe:d9:49:9a:9f: af:c8:90:8c:ad:18:7a:cb:70:63:62:f3:41:0e:04:71:34:8b: 54:b2:98:36:9c:36:e4:84:f2:fa:1f:87:11:0e:77:e0:59:66: 04:a2:a2:13:fc:24:fb:44:f7:d7:5c:2d:2c:6c:4e:7e:1a:fb: b7:4c:17:69:79:39:b7:66:8f:6f:da:4c:b1:5d:12:a0:55:08: 44:75:9d:33:60:d1:5a:81:7c:46:50:3f:03:06:02:9f:3d:49: e9:a7:22:15:c5:b1:59:24:5a:71:79:33:77:22:0b:c6:13:47: 66:e5:07:37:e5:d7:91:89:8c:57:cd:36:be:ea:6f:58:bc:b3: 37:48:1a:d2:2a:3e:36:37:b0:cf:32:3e:87:4e:a8:25:27:9f: e0:b1:d7:c3:e7:49:a9:d5:9b:b4:6a:5c:d2:a6:ce:fe:bc:a9: f3:60:2a:99:19:58:c5:8d:26:1e:03:59:01:ed:05:47:14:96: 49:a4:d3:68:b6:ac:ad:51:25:ee:6c:fc:74:42:59:46:ae:4a: aa:e7:05:20:d0:70:f2:8e:9c:39:a7:70:67:08:cd:fb:70:eb: 79:3a:1d:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV1gqRjvGH8ch7MnT1MQCoLV/DuUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUY0QTJFQzU1Mzc5Q0EyRkUzQTdEMjRERDJDMjg1RThC RjNBMzlGQzAeFw0yNjExMDkxMTQwMjdaFw0yNjExMTAxMzU3MjdaMDMxMTAvBgNV BAMTKEQ4Q0FCMDdGRTQ5NzZGQzc1RDVGMEUzMzc2REM3OTI0NURGOTI1NTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYdzni0d2sAqVD8GwL8okjOGxX moJwJebClxBV/pQJZKZMbG4gDWaY9QmTL4sdoKqNDd6kors6kC8vHKtNX4rrouEd KkWSmx7yTs3EqMw+Cmxl1VR/jDzi5deO+EP100KF0jYzwj3+Zk243UkQbPQRRLXr 5asYW5txJe9cMemUtJAV9gl/67D1CNB4G6aqX+itruWRYKgMmQrQyWFrv4Mo9oi9 P3nEH9vMSCjL0QJ5K9WGodg4bF4Oqg4XYIp3TFTXIYni4EDkiG1vjAfNJGN0kbPK ePBBkT7evKKyaL0AQPt7WVy3XwG6ooqaNBCoOzBPHp9YFyp4EpQpD83V9VsFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2Mqwf+SXb8ddXw4zdtx5JF35JVIwHwYDVR0j BBgwFoAU70ouxVN5yi/jp9JN0sKF6L86OfwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2FmY2JmYmItYmEzZi00ZDUzLWEwNGYtMTRkNmY0YmUwY2IxLzEvRUY0QTJFQzU1 Mzc5Q0EyRkUzQTdEMjRERDJDMjg1RThCRjNBMzlGQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRjRBMkVDNTUzNzlDQTJGRTNBN0QyNEREMkMyODVFOEJGM0Ez OUZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2FmY2JmYmItYmEzZi00ZDUzLWEw NGYtMTRkNmY0YmUwY2IxLzEvRUY0QTJFQzU1Mzc5Q0EyRkUzQTdEMjRERDJDMjg1 RThCRjNBMzlGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACdr3U2fEXapNjAEt+Z9K9vh9srKwRtIkFCf +KipiX7+2Uman6/IkIytGHrLcGNi80EOBHE0i1SymDacNuSE8vofhxEOd+BZZgSi ohP8JPtE99dcLSxsTn4a+7dMF2l5Obdmj2/aTLFdEqBVCER1nTNg0VqBfEZQPwMG Ap89SemnIhXFsVkkWnF5M3ciC8YTR2blBzfl15GJjFfNNr7qb1i8szdIGtIqPjY3 sM8yPodOqCUnn+Cx18PnSanVm7RqXNKmzv68qfNgKpkZWMWNJh4DWQHtBUcUlkmk 02i2rK1RJe5s/HRCWUauSqrnBSDQcPKOnDmncGcIzftw63k6HY4= -----END CERTIFICATE-----Generated at Tue Nov 10 00:45:56 2026 by rpki-client