$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/EF44D1A95206A20CB3AB52607DC981EEC1AA8744.mft File: EF44D1A95206A20CB3AB52607DC981EEC1AA8744.mft (raw, json) Hash identifier: hhhAjCjSf0sW8O0y71wfUGEvCRyJnhq89e9dUFPu8T4= Subject key identifier: 60:70:E7:DE:2E:FE:A3:72:90:8B:FC:3B:EC:8C:E7:C4:1C:13:85:70 Authority key identifier: EF:44:D1:A9:52:06:A2:0C:B3:AB:52:60:7D:C9:81:EE:C1:AA:87:44 Certificate issuer: /CN=EF44D1A95206A20CB3AB52607DC981EEC1AA8744 Certificate serial: 5532353D708BA76231408F0F8FAB8D3E6BB3D85F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF44D1A95206A20CB3AB52607DC981EEC1AA8744.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/EF44D1A95206A20CB3AB52607DC981EEC1AA8744.mft Manifest number: A5 Signing time: Wed 02 Sep 2026 19:52:06 +0000 Manifest this update: Wed 02 Sep 2026 19:47:06 +0000 Manifest next update: Thu 03 Sep 2026 23:37:06 +0000 Files and hashes: 1: 3130332e33392e37342e302f32332d3234203d3e20313530323732.roa (hash: BnM/pd6T0nNd5d7QI+jI59NRWk0b0EsbuiWKkA+Hh+0=) 2: EF44D1A95206A20CB3AB52607DC981EEC1AA8744.crl (hash: PkC1rnhsgvdLM665ryRqtniR7LoU0Roah1IInl3RwOY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/EF44D1A95206A20CB3AB52607DC981EEC1AA8744.crl rsync://rpki-rsync.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/EF44D1A95206A20CB3AB52607DC981EEC1AA8744.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF44D1A95206A20CB3AB52607DC981EEC1AA8744.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 23:37:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:32:35:3d:70:8b:a7:62:31:40:8f:0f:8f:ab:8d:3e:6b:b3:d8:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EF44D1A95206A20CB3AB52607DC981EEC1AA8744 Validity Not Before: Sep 2 19:47:06 2026 GMT Not After : Sep 3 23:37:06 2026 GMT Subject: CN=6070E7DE2EFEA372908BFC3BEC8CE7C41C138570 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:04:66:c7:93:05:4d:75:bb:e9:22:f0:54:dd: a4:fd:6c:f8:a9:af:fd:e2:38:35:8d:58:41:0a:5e: ed:6e:43:b2:1e:30:a0:27:e2:4e:ab:6d:54:58:2f: e8:3d:c7:df:22:46:9a:5c:4e:3d:fe:a3:a4:5f:9f: 24:89:b4:17:a6:69:96:eb:57:40:89:e0:77:ce:20: a7:cc:1f:26:27:df:e0:58:57:52:2c:bd:f8:d3:42: 83:e3:46:a1:b5:6d:01:ce:d2:e6:85:b9:84:9c:39: fd:6b:bf:f5:99:ce:38:77:6e:19:17:59:39:02:b6: ae:6e:19:a3:6e:57:84:67:cd:66:db:aa:9c:3e:62: df:72:63:ee:88:88:ca:25:89:1a:cf:df:1a:95:2a: ab:5c:4b:20:7f:9a:5d:20:bd:06:f6:ab:62:09:e8: df:05:f9:f9:50:b1:50:57:51:43:fe:e4:67:27:83: ce:a8:40:70:a0:23:58:24:ac:79:0f:33:fb:29:02: 61:29:92:57:2b:d3:39:98:1f:f1:0b:33:8e:b7:3d: bc:bd:44:92:86:d5:a7:10:a2:34:df:4a:d4:ef:1c: 82:a3:4b:8c:54:31:55:e7:6e:18:1c:4a:ea:12:ec: f3:b7:24:6a:6c:99:e6:23:96:40:52:fa:b3:e2:99: c7:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:70:E7:DE:2E:FE:A3:72:90:8B:FC:3B:EC:8C:E7:C4:1C:13:85:70 X509v3 Authority Key Identifier: keyid:EF:44:D1:A9:52:06:A2:0C:B3:AB:52:60:7D:C9:81:EE:C1:AA:87:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/EF44D1A95206A20CB3AB52607DC981EEC1AA8744.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF44D1A95206A20CB3AB52607DC981EEC1AA8744.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/EF44D1A95206A20CB3AB52607DC981EEC1AA8744.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:05:f4:e5:9e:21:99:6b:13:12:03:f5:67:bc:1b:ac:ff:f5: 45:b6:25:58:c6:44:f2:30:98:ed:a9:9b:5f:09:fc:25:78:9e: ee:61:8e:fa:36:b3:36:59:e8:6d:18:12:c5:22:dd:75:d5:b4: 2d:98:5f:91:b6:1c:54:e1:d4:e8:ec:26:1d:53:71:99:45:79: ea:62:0a:a2:f2:71:20:09:3f:7c:31:7d:7e:31:fb:69:0f:f6: 1b:9d:1e:d5:aa:4b:bf:be:a3:d9:81:4a:79:07:b9:25:ae:30: ab:3a:c0:25:2d:f5:83:c5:41:d3:78:ac:1c:b8:aa:0f:c5:52: b0:6b:a4:a0:85:47:b8:8e:71:58:59:67:0a:c0:e0:67:d8:67: dd:fb:4d:3f:ae:06:4d:4a:dc:04:29:22:f8:bf:ad:1c:09:33: 83:f9:a0:a5:68:9e:e9:7f:45:33:e8:10:2b:43:1f:5a:a1:72: 4b:4e:93:c5:08:5c:55:9a:31:52:86:df:3a:eb:47:43:33:5b: 06:b1:24:23:37:14:5e:3f:bf:fb:84:82:b8:7b:62:09:57:c3: d2:83:b2:94:ec:1f:55:f5:a2:52:ac:54:c5:48:b7:12:08:7a: 35:9a:33:95:8f:2a:30:78:dd:8b:04:e1:da:35:5b:07:b1:b7: 20:29:62:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVTI1PXCLp2IxQI8Pj6uNPmuz2F8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUY0NEQxQTk1MjA2QTIwQ0IzQUI1MjYwN0RDOTgxRUVD MUFBODc0NDAeFw0yNjA5MDIxOTQ3MDZaFw0yNjA5MDMyMzM3MDZaMDMxMTAvBgNV BAMTKDYwNzBFN0RFMkVGRUEzNzI5MDhCRkMzQkVDOENFN0M0MUMxMzg1NzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2BGbHkwVNdbvpIvBU3aT9bPip r/3iODWNWEEKXu1uQ7IeMKAn4k6rbVRYL+g9x98iRppcTj3+o6RfnySJtBemaZbr V0CJ4HfOIKfMHyYn3+BYV1IsvfjTQoPjRqG1bQHO0uaFuYScOf1rv/WZzjh3bhkX WTkCtq5uGaNuV4RnzWbbqpw+Yt9yY+6IiMoliRrP3xqVKqtcSyB/ml0gvQb2q2IJ 6N8F+flQsVBXUUP+5Gcng86oQHCgI1gkrHkPM/spAmEpklcr0zmYH/ELM463Pby9 RJKG1acQojTfStTvHIKjS4xUMVXnbhgcSuoS7PO3JGpsmeYjlkBS+rPimce1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYHDn3i7+o3KQi/w77IznxBwThXAwHwYDVR0j BBgwFoAU70TRqVIGogyzq1JgfcmB7sGqh0QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2UxOWFiYzgtODUwNy00MWVkLTgyODktN2UzYWM3YjI0OTM1LzAvRUY0NEQxQTk1 MjA2QTIwQ0IzQUI1MjYwN0RDOTgxRUVDMUFBODc0NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRjQ0RDFBOTUyMDZBMjBDQjNBQjUyNjA3REM5ODFFRUMxQUE4 NzQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2UxOWFiYzgtODUwNy00MWVkLTgy ODktN2UzYWM3YjI0OTM1LzAvRUY0NEQxQTk1MjA2QTIwQ0IzQUI1MjYwN0RDOTgx RUVDMUFBODc0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADUF9OWeIZlrExID9We8G6z/9UW2JVjGRPIw mO2pm18J/CV4nu5hjvo2szZZ6G0YEsUi3XXVtC2YX5G2HFTh1OjsJh1TcZlFeepi CqLycSAJP3wxfX4x+2kP9hudHtWqS7++o9mBSnkHuSWuMKs6wCUt9YPFQdN4rBy4 qg/FUrBrpKCFR7iOcVhZZwrA4GfYZ937TT+uBk1K3AQpIvi/rRwJM4P5oKVonul/ RTPoECtDH1qhcktOk8UIXFWaMVKG3zrrR0MzWwaxJCM3FF4/v/uEgrh7YglXw9KD spTsH1X1olKsVMVItxIIejWaM5WPKjB43YsE4do1WwextyApYsk= -----END CERTIFICATE-----Generated at Thu Sep 3 13:00:56 2026 by rpki-client