$ rpki-client -vvvf rpki-rsync.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7.mft File: EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7.mft (raw, json) Hash identifier: ZmHwJU/E1Gd40RgXka6gyQuA0eDOxbObsynAi4NluHg= Subject key identifier: 78:F1:36:CB:82:77:4E:07:3E:FC:D3:D5:B5:49:0F:09:CA:4F:5C:58 Authority key identifier: EF:FE:71:94:4C:D7:DF:CA:7F:BD:C6:EF:06:3C:9A:6D:28:BB:47:E7 Certificate issuer: /CN=EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7 Certificate serial: 46343560714FFC0DBA9A0715FD5861BE9E2E36A9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7.mft Manifest number: F8 Signing time: Wed 04 Nov 2026 18:47:17 +0000 Manifest this update: Wed 04 Nov 2026 18:42:17 +0000 Manifest next update: Thu 05 Nov 2026 19:30:17 +0000 Files and hashes: 1: 3130332e3134352e3132352e302f32342d3234203d3e20313339343437.roa (hash: iAkXuDNDYQX7aJrJUqwReqIZ7fKNDXS9mw/520ZULDA=) 2: 323030313a6466323a313238303a3a2f34382d3438203d3e20313339343437.roa (hash: Z33O96f3Xi269FHR6g3ynqUeqpUoR3vjVRTvXK+PrwU=) 3: EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7.crl (hash: qlJNFjm6hARabtVwgMiKpPCSZDY8tdaCAVrVlRa6LwE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7.crl rsync://rpki-rsync.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 11:48:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:34:35:60:71:4f:fc:0d:ba:9a:07:15:fd:58:61:be:9e:2e:36:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7 Validity Not Before: Nov 4 18:42:17 2026 GMT Not After : Nov 5 19:30:17 2026 GMT Subject: CN=78F136CB82774E073EFCD3D5B5490F09CA4F5C58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ee:79:22:ce:4d:9d:45:20:18:ad:b3:ef:d4: 0f:da:aa:e0:d3:12:8b:7c:24:e2:a6:50:32:e0:c4: d0:e5:49:89:4f:b6:c6:ac:00:18:bb:af:59:b3:fd: 52:71:ef:91:68:c4:01:da:82:6c:70:87:b5:5e:db: bd:d6:6d:96:12:82:57:71:01:d7:f6:30:62:ab:0e: 68:f9:ec:67:91:94:67:db:e8:56:d4:5c:43:47:d0: 8f:5f:e0:47:eb:fb:74:be:7c:51:77:40:33:26:93: 75:a7:25:b4:68:65:9e:a9:2a:ba:46:cf:01:3a:dc: f4:d2:d9:6b:de:92:77:07:4d:f1:2c:51:f2:e4:09: 3a:15:ab:f5:fd:18:a3:45:84:1a:db:9f:1c:a0:62: a4:3f:ad:84:8e:9d:33:01:65:b5:91:5d:97:13:64: 85:7b:a5:67:49:93:f0:5d:51:2f:8e:0e:9f:6f:41: cb:59:11:1e:62:c3:8d:a0:f8:d2:bb:53:7c:4b:40: 72:64:73:0e:2c:54:ef:c2:41:ff:1d:ef:fe:81:66: 92:a1:8d:24:56:4e:d7:09:ac:6b:a8:85:e0:d2:0b: c0:fc:83:f4:57:4b:0a:43:6c:86:aa:55:34:79:10: dd:3b:af:a9:47:68:da:c8:20:cf:f7:d0:15:df:fe: c8:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:F1:36:CB:82:77:4E:07:3E:FC:D3:D5:B5:49:0F:09:CA:4F:5C:58 X509v3 Authority Key Identifier: keyid:EF:FE:71:94:4C:D7:DF:CA:7F:BD:C6:EF:06:3C:9A:6D:28:BB:47:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:77:27:91:66:39:66:45:73:e9:14:1f:20:cb:f9:28:6c:69: 59:98:be:2c:7a:d4:70:79:80:ca:ee:6c:96:b9:9f:73:f4:15: 0b:fa:6d:2b:0e:a1:b7:a3:69:ff:0d:79:62:5f:05:ba:88:43: 5f:9e:e4:bf:09:3f:cc:fd:2f:e8:9f:43:0a:8f:e1:bf:a2:27: 9b:10:1b:b7:9a:87:3d:c5:c9:db:c4:4c:e3:f1:8c:a4:59:d1: d4:b7:4a:8a:6a:22:17:b2:2e:21:9b:8c:89:82:44:74:9e:cf: cf:46:e4:73:db:4f:6b:c9:23:4f:f7:a0:95:86:fc:fb:67:1c: ef:2f:62:b6:d8:45:de:cb:ef:e2:49:40:41:5c:b0:e3:22:80: 8e:1d:83:b9:7e:dc:5b:da:20:e2:74:2e:d0:93:ed:ce:ad:59: 2a:37:ad:1d:cd:bc:d8:85:43:db:bc:fd:92:f4:b6:3c:24:ad: 42:12:4b:96:22:fe:a7:12:71:d0:37:c3:3b:58:bb:45:90:e3: 59:66:18:2f:e1:29:35:a8:0b:a4:c5:1f:70:a9:6e:61:ae:21: 51:6b:7e:42:fe:5b:7f:14:37:f4:be:21:66:d2:6d:1a:91:c3: 0c:e0:ac:99:4b:21:95:3a:29:25:39:3f:73:b4:80:19:21:1e: fa:a6:d2:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURjQ1YHFP/A26mgcV/Vhhvp4uNqkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZGRTcxOTQ0Q0Q3REZDQTdGQkRDNkVGMDYzQzlBNkQy OEJCNDdFNzAeFw0yNjExMDQxODQyMTdaFw0yNjExMDUxOTMwMTdaMDMxMTAvBgNV BAMTKDc4RjEzNkNCODI3NzRFMDczRUZDRDNENUI1NDkwRjA5Q0E0RjVDNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC37nkizk2dRSAYrbPv1A/aquDT Eot8JOKmUDLgxNDlSYlPtsasABi7r1mz/VJx75FoxAHagmxwh7Ve273WbZYSgldx Adf2MGKrDmj57GeRlGfb6FbUXENH0I9f4Efr+3S+fFF3QDMmk3WnJbRoZZ6pKrpG zwE63PTS2WvekncHTfEsUfLkCToVq/X9GKNFhBrbnxygYqQ/rYSOnTMBZbWRXZcT ZIV7pWdJk/BdUS+ODp9vQctZER5iw42g+NK7U3xLQHJkcw4sVO/CQf8d7/6BZpKh jSRWTtcJrGuoheDSC8D8g/RXSwpDbIaqVTR5EN07r6lHaNrIIM/30BXf/shDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUePE2y4J3Tgc+/NPVtUkPCcpPXFgwHwYDVR0j BBgwFoAU7/5xlEzX38p/vcbvBjyabSi7R+cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDU3ZDRkODEtM2JlOC00MjMwLTg5NTktMmRjMmFmOWQwODVlLzAvRUZGRTcxOTQ0 Q0Q3REZDQTdGQkRDNkVGMDYzQzlBNkQyOEJCNDdFNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRkZFNzE5NDRDRDdERkNBN0ZCREM2RUYwNjNDOUE2RDI4QkI0 N0U3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDU3ZDRkODEtM2JlOC00MjMwLTg5 NTktMmRjMmFmOWQwODVlLzAvRUZGRTcxOTQ0Q0Q3REZDQTdGQkRDNkVGMDYzQzlB NkQyOEJCNDdFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKN3J5FmOWZFc+kUHyDL+ShsaVmYvix61HB5 gMrubJa5n3P0FQv6bSsOobejaf8NeWJfBbqIQ1+e5L8JP8z9L+ifQwqP4b+iJ5sQ G7eahz3FydvETOPxjKRZ0dS3SopqIheyLiGbjImCRHSez89G5HPbT2vJI0/3oJWG /PtnHO8vYrbYRd7L7+JJQEFcsOMigI4dg7l+3FvaIOJ0LtCT7c6tWSo3rR3NvNiF Q9u8/ZL0tjwkrUISS5Yi/qcScdA3wztYu0WQ41lmGC/hKTWoC6TFH3CpbmGuIVFr fkL+W38UN/S+IWbSbRqRwwzgrJlLIZU6KSU5P3O0gBkhHvqm0k4= -----END CERTIFICATE-----Generated at Thu Nov 5 01:03:21 2026 by rpki-client