$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/EF52E239F082CFB1C35BB8D60B4615A60D4926E9.mft File: EF52E239F082CFB1C35BB8D60B4615A60D4926E9.mft (raw, json) Hash identifier: YOeNMOfqNRd2L7Fu+A4s04uIdADatooZLMcs0Y8rnmY= Subject key identifier: 32:39:67:03:92:15:3B:46:A5:91:33:9C:EE:88:B4:F5:E5:B9:EF:94 Authority key identifier: EF:52:E2:39:F0:82:CF:B1:C3:5B:B8:D6:0B:46:15:A6:0D:49:26:E9 Certificate issuer: /CN=EF52E239F082CFB1C35BB8D60B4615A60D4926E9 Certificate serial: 64EC27302A4FC05D5C97CC9808EA7080440A7F2B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF52E239F082CFB1C35BB8D60B4615A60D4926E9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/EF52E239F082CFB1C35BB8D60B4615A60D4926E9.mft Manifest number: BF Signing time: Wed 23 Sep 2026 13:58:21 +0000 Manifest this update: Wed 23 Sep 2026 13:53:21 +0000 Manifest next update: Thu 24 Sep 2026 17:22:21 +0000 Files and hashes: 1: 3130332e3133312e35312e302f32342d3234203d3e20313331373735.roa (hash: gKWl4c7FQdp4tPgMGVABYRuitakyfACS20kjMIxhrq4=) 2: EF52E239F082CFB1C35BB8D60B4615A60D4926E9.crl (hash: EhT6SLCjve6U/fG5IlWTKlxp+uWHVBsdlFip4yv+bZ8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/EF52E239F082CFB1C35BB8D60B4615A60D4926E9.crl rsync://rpki-rsync.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/EF52E239F082CFB1C35BB8D60B4615A60D4926E9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF52E239F082CFB1C35BB8D60B4615A60D4926E9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 17:22:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:ec:27:30:2a:4f:c0:5d:5c:97:cc:98:08:ea:70:80:44:0a:7f:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EF52E239F082CFB1C35BB8D60B4615A60D4926E9 Validity Not Before: Sep 23 13:53:21 2026 GMT Not After : Sep 24 17:22:21 2026 GMT Subject: CN=3239670392153B46A591339CEE88B4F5E5B9EF94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b2:af:3f:1d:41:40:30:11:12:81:62:05:7d: 85:7b:3e:1a:2b:ba:48:68:d9:30:96:7e:87:8e:9d: 22:5f:3e:52:14:84:3c:eb:7a:e3:2c:a2:3b:85:ae: 4d:95:a4:81:15:1c:84:48:10:39:b0:c0:28:4d:e9: 42:32:90:30:57:fe:a1:2a:9c:d4:4b:69:aa:c1:e5: b0:50:2a:02:61:a7:ef:50:55:8e:99:87:a5:c3:7f: 6c:d9:8d:a7:e3:6f:aa:a1:1c:cc:00:01:72:51:8b: 51:fb:d2:08:8a:76:c4:97:a3:0b:e8:98:43:1a:d0: 03:39:2e:2e:45:8b:07:af:2d:0f:0c:34:3a:13:32: de:f3:e8:ec:ac:c4:3f:19:8a:b4:99:f8:11:f6:39: 93:ca:dc:9b:3a:c9:4a:e5:d9:c1:17:2a:ec:05:e4: c0:3e:52:fc:9f:1c:3b:57:c3:d3:a1:2c:c3:54:1e: 4f:9c:19:6d:db:9e:9b:1b:1c:67:c6:00:aa:c3:6e: 8a:c2:96:74:ff:0d:a7:78:d1:bb:32:76:9e:7b:da: 2a:e8:6e:c5:15:ea:db:6e:d4:dc:5c:67:f9:2a:20: 2b:b7:2a:ec:84:e4:40:31:e8:a0:30:64:39:ae:65: ff:a2:8f:bf:28:60:4f:fa:7a:1e:8f:e3:ec:ee:78: 7b:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:39:67:03:92:15:3B:46:A5:91:33:9C:EE:88:B4:F5:E5:B9:EF:94 X509v3 Authority Key Identifier: keyid:EF:52:E2:39:F0:82:CF:B1:C3:5B:B8:D6:0B:46:15:A6:0D:49:26:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/EF52E239F082CFB1C35BB8D60B4615A60D4926E9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF52E239F082CFB1C35BB8D60B4615A60D4926E9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/EF52E239F082CFB1C35BB8D60B4615A60D4926E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:bb:a0:95:9f:cf:22:c4:50:6e:e7:4b:cd:27:2b:6d:56:2b: a8:eb:cb:3b:51:5e:9a:24:99:5e:8c:4e:20:85:a3:cd:3c:e1: 5f:a9:e7:3a:68:d8:42:5f:91:93:3f:51:6f:d9:da:c8:af:58: 67:b3:5a:36:d9:55:17:c2:d2:32:83:6d:0a:f1:7a:46:66:ef: 12:dd:5e:82:a7:35:9b:30:14:a8:69:b6:ed:30:d8:0a:fc:b9: 7e:5e:ea:e5:50:aa:c0:e0:d3:ef:ca:0e:81:e4:6a:b0:4e:75: 28:a6:f3:f1:1a:25:ff:3a:b6:b2:ba:54:58:ea:6b:94:e1:85: 59:1b:ee:b9:35:14:b6:c0:f8:3e:fb:02:04:93:cd:d4:2a:0a: a9:3c:f7:2d:7b:11:bd:09:d2:f6:34:05:14:e1:f1:da:12:65: 5a:e5:12:78:a0:9d:dd:d1:3d:b2:cd:31:9c:3e:1b:61:f0:1e: 6c:e3:d7:ec:c6:5a:60:b0:3a:6b:2d:02:e5:72:7d:fe:8d:58: e3:99:01:8b:45:72:f5:91:3d:44:6c:a5:29:8f:74:b1:de:c9: fb:47:00:a0:f7:5f:ee:bf:c7:12:ee:be:75:9f:fe:7a:37:62: 09:29:f7:71:06:5c:fb:f7:da:9a:ce:8d:d2:21:2e:64:76:ff: 6b:09:02:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZOwnMCpPwF1cl8yYCOpwgEQKfyswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUY1MkUyMzlGMDgyQ0ZCMUMzNUJCOEQ2MEI0NjE1QTYw RDQ5MjZFOTAeFw0yNjA5MjMxMzUzMjFaFw0yNjA5MjQxNzIyMjFaMDMxMTAvBgNV BAMTKDMyMzk2NzAzOTIxNTNCNDZBNTkxMzM5Q0VFODhCNEY1RTVCOUVGOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxsq8/HUFAMBESgWIFfYV7Phor ukho2TCWfoeOnSJfPlIUhDzreuMsojuFrk2VpIEVHIRIEDmwwChN6UIykDBX/qEq nNRLaarB5bBQKgJhp+9QVY6Zh6XDf2zZjafjb6qhHMwAAXJRi1H70giKdsSXowvo mEMa0AM5Li5FiwevLQ8MNDoTMt7z6OysxD8ZirSZ+BH2OZPK3Js6yUrl2cEXKuwF 5MA+UvyfHDtXw9OhLMNUHk+cGW3bnpsbHGfGAKrDborClnT/Dad40bsydp572iro bsUV6ttu1NxcZ/kqICu3KuyE5EAx6KAwZDmuZf+ij78oYE/6eh6P4+zueHspAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMjlnA5IVO0alkTOc7oi09eW575QwHwYDVR0j BBgwFoAU71LiOfCCz7HDW7jWC0YVpg1JJukwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjRiNGVjOTgtNGQxZi00ZTZmLWE3NjgtMDI2ODk0MjAyMjIzLzAvRUY1MkUyMzlG MDgyQ0ZCMUMzNUJCOEQ2MEI0NjE1QTYwRDQ5MjZFOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRjUyRTIzOUYwODJDRkIxQzM1QkI4RDYwQjQ2MTVBNjBENDky NkU5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjRiNGVjOTgtNGQxZi00ZTZmLWE3 NjgtMDI2ODk0MjAyMjIzLzAvRUY1MkUyMzlGMDgyQ0ZCMUMzNUJCOEQ2MEI0NjE1 QTYwRDQ5MjZFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACS7oJWfzyLEUG7nS80nK21WK6jryztRXpok mV6MTiCFo8084V+p5zpo2EJfkZM/UW/Z2sivWGezWjbZVRfC0jKDbQrxekZm7xLd XoKnNZswFKhptu0w2Ar8uX5e6uVQqsDg0+/KDoHkarBOdSim8/EaJf86trK6VFjq a5ThhVkb7rk1FLbA+D77AgSTzdQqCqk89y17Eb0J0vY0BRTh8doSZVrlEnignd3R PbLNMZw+G2HwHmzj1+zGWmCwOmstAuVyff6NWOOZAYtFcvWRPURspSmPdLHeyftH AKD3X+6/xxLuvnWf/no3Ygkp93EGXPv32prOjdIhLmR2/2sJArs= -----END CERTIFICATE-----Generated at Wed Sep 23 22:44:54 2026 by rpki-client